ALBA-2026:39332 Copyright 2026 AlmaLinux OS 0 1 None

kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fix(es) and Enhancement(s): * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-extra-5.14.0-687.26.1.el9_8.x86_64.rpm 081444ef0e5d1fdfe277d826a38ae29d37e552ecd8b4ab229d8d1c007ec128ec kernel-debug-modules-5.14.0-687.26.1.el9_8.x86_64.rpm 0bcab4e9a57fbfa018488632bc5370d27c4e186dca15312205f8673831b5b440 kernel-debug-uki-virt-5.14.0-687.26.1.el9_8.x86_64.rpm 27a75c34ac97e3f1ea24cc143fb8e922985cc72c39d162e2806f99145405b9f5 kernel-modules-extra-5.14.0-687.26.1.el9_8.x86_64.rpm 2a38572516140d97430480dcf2df3f72fa44a7f49cba7beb0c76e8e38a150359 kernel-uki-virt-addons-5.14.0-687.26.1.el9_8.x86_64.rpm 3ddaa2aa383ce7534c09a2027a953a88c3251d4d404be437fe627b480a3d9d46 kernel-core-5.14.0-687.26.1.el9_8.x86_64.rpm 53880828c60fb8f1f9a5e384c039ee689fdc8775af530f7b14d4ee542e2966d0 kernel-uki-virt-5.14.0-687.26.1.el9_8.x86_64.rpm 5ec6526fdc327028bb3752799e538b850b75d2578bc066bd501bca2b663b0440 kernel-5.14.0-687.26.1.el9_8.x86_64.rpm 7e0fa5c147818b795c2cb53e68deedcb164b61f4552b3738786d8be733b95a74 kernel-tools-libs-5.14.0-687.26.1.el9_8.x86_64.rpm 88a7a478bdac9f2f641ab268c42a8e60c6264deb64c5a62c358c46a67c24d7eb kernel-modules-core-5.14.0-687.26.1.el9_8.x86_64.rpm 88e06450c0185bd18d45546f8c1376ff1b81994d2539387a464b4ad102eb2a97 kernel-debug-modules-core-5.14.0-687.26.1.el9_8.x86_64.rpm 95f2e5ae73ccc7a20627b8939c08748961bc9bf89bf8ac8c9e1206fca3721a55 kernel-modules-5.14.0-687.26.1.el9_8.x86_64.rpm 9d3f36b81c9687f30ee8685135d8b2bcd67372099e37e8bbbc1c69d54605c2d6 kernel-abi-stablelists-5.14.0-687.26.1.el9_8.noarch.rpm c8ab1a1b744d203ebd5178d3d20b8d3529d37c462f00c9cad93314195f7dfd28 kernel-debug-core-5.14.0-687.26.1.el9_8.x86_64.rpm cdf582d6f8620949e7f018ef34c3144c42811ad1d709e2aaf64abf8b1bd87d24 kernel-tools-5.14.0-687.26.1.el9_8.x86_64.rpm f058e6c0f2d9e2ae7d155838405ae696daf659094bfc0e535a90d71e36ae0cad kernel-debug-5.14.0-687.26.1.el9_8.x86_64.rpm fef780bbdf6a73346feeb2825386aa50b1f938de1c678304d0d23fe8a0b111bd ALSA-2022:4940 Copyright 2022 AlmaLinux OS 0 1 Important

xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default xz-libs-5.2.5-8.el9_0.i686.rpm 316697e0c37f058a385ab75b0d643fb6a458d37c35231b489cbb9940143b82b4 xz-5.2.5-8.el9_0.x86_64.rpm 4567587f72bb7fdcc4f2e5b6c731d83b0e14e841680c557d4ca2e19775a364c2 xz-libs-5.2.5-8.el9_0.x86_64.rpm b75e6d24dd17688b0047572858f1e0bd5d3edcc9bba31075235e307eeb6195d3 ALSA-2022:5099 Copyright 2022 AlmaLinux OS 0 1 Important

grub2, mokutil, shim, and shim-unsigned-x64 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments. Security Fix(es): * grub2: Integer underflow in grub_net_recv_ip4_packets (CVE-2022-28733) * grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap (CVE-2021-3695) * grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling (CVE-2021-3696) * grub2: Crafted JPEG image can lead to buffer underflow write in the heap (CVE-2021-3697) * grub2: Out-of-bound write when handling split HTTP headers (CVE-2022-28734) * grub2: shim_lock verifier allows non-kernel files to be loaded (CVE-2022-28735) * grub2: use-after-free in grub_cmd_chainloader() (CVE-2022-28736) * shim: Buffer overflow when loading crafted EFI images (CVE-2022-28737) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default shim-unsigned-x64-15.6-1.el9.alma.x86_64.rpm 13839385d82978bf25d4073b5d66f5c99376795605e37bff69d97726ee095d70 grub2-tools-minimal-2.06-27.el9_0.7.alma.x86_64.rpm 31e6d5091153ade52a4fb7679f3e66015e06230ddffe4e9d44be2be43e661b04 grub2-efi-x64-2.06-27.el9_0.7.alma.x86_64.rpm 3bf5652571ac5dafd7bd7e3220a2943fa4fd6a7e2fbdfd7524a7312b51577de4 grub2-efi-x64-cdboot-2.06-27.el9_0.7.alma.x86_64.rpm 4a0c34f66a589fb6e36e023fb18adab58d4785e1f73306583f303da0cec56502 grub2-tools-efi-2.06-27.el9_0.7.alma.x86_64.rpm 5b00e7ed258bedbfcd25c731d58ce8d2a18699982b929828e83763d7ab34148a grub2-tools-2.06-27.el9_0.7.alma.x86_64.rpm 6c2c0baad753ebee0ac9221386bd4904c9a25883d825294cb358980632ed0ba9 grub2-efi-x64-modules-2.06-27.el9_0.7.alma.noarch.rpm 7c1a39435cb145b6331f3d84a54a2b8bb29606f0240fcdd51c7ef7e400db63d5 grub2-efi-aa64-modules-2.06-27.el9_0.7.alma.noarch.rpm 8741776e12b0fd0ce6b1682017da1f8873880b51e05189756550de434d50a722 grub2-ppc64le-modules-2.06-27.el9_0.7.alma.noarch.rpm ac01bf19abdade8860177a8e290b70d806375c8a2d9ed3ff47b54d1256005f16 grub2-tools-extra-2.06-27.el9_0.7.alma.x86_64.rpm bfdba0600c7a22194f551feb4b4180ffb3c3606d1bd284e35af6c16592944d5a grub2-pc-2.06-27.el9_0.7.alma.x86_64.rpm d5dce45b75bf04e717a88a8e9d17b4ed01f3cb2617730f015a7895ed384ca77c grub2-pc-modules-2.06-27.el9_0.7.alma.noarch.rpm e2370f5a48d28813f385af92662f53c7c47d593d5c735809aaa6b7d8bc329c07 shim-x64-15.6-1.el9.alma.x86_64.rpm eb23ed7b73eef84cdc6988d633a466c94dbcfe74e1ccce14075ce68b2b2ad5e1 grub2-common-2.06-27.el9_0.7.alma.noarch.rpm ec2931fabadf7f9962946fbe110f6ac90a76e684339698e6685369054ebb6cb7 ALSA-2022:5242 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for vim-filesystem is now available for AlmaLinux 9.

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554) * vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943) * vim: Out-of-range Pointer Offset (CVE-2022-1420) * vim: heap buffer overflow (CVE-2022-1621) * vim: buffer over-read (CVE-2022-1629) * vim: use after free in utf_ptr2char (CVE-2022-1154) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default vim-X11-8.2.2637-16.el9_0.2.x86_64.rpm 1523a20539229e06e50fb1871a09e816d92f09d7e00914f95af37a044dd1258c vim-common-8.2.2637-16.el9_0.2.x86_64.rpm 2a086ee10901df9f11f2b2274bfe5fcd9ce05b38bbb5b9c14c5c68842456f0c5 vim-enhanced-8.2.2637-16.el9_0.2.x86_64.rpm 4c973612f727b499dff9c8127d8f1c4d1c8db6a00fad138b8aaf7847979e3710 vim-minimal-8.2.2637-16.el9_0.2.x86_64.rpm 595351a6129a778917bd09d7114f07262b31ca6a1c32480f35bccba3b00c5f43 vim-filesystem-8.2.2637-16.el9_0.2.noarch.rpm c913d7a2e965f86e79605147e53d90808d00155ca9c626a98ae01fd32cced94b ALSA-2022:5244 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for expat is now available for AlmaLinux 9.

Expat is a C library for parsing XML documents. Security Fix(es): * expat: stack exhaustion in doctype parsing (CVE-2022-25313) * expat: integer overflow in copyString() (CVE-2022-25314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default expat-devel-2.2.10-12.el9_0.2.x86_64.rpm 95937f9587edacf6f55004b6784329e43a62e5b3daaebd0103aa7b1540174d4d expat-2.2.10-12.el9_0.2.i686.rpm d55c59b0c26f06481a7dae0ab87203cadfca0af6ec3c44126d83285898172b2f expat-2.2.10-12.el9_0.2.x86_64.rpm dbd74a9af798bb28a849bbf0ce4efbcc72505c7800bb2baf82cdd325b7b364c5 ALSA-2022:5249 Copyright 2022 AlmaLinux OS 0 1 Important

An update for bpftool is now available for AlmaLinux 9.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) * kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729) * kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966) * kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643) * SR-IOV performance > 50% degradation (BZ#2074830) * fix data corruption caused by dm-integrity (BZ#2082187) * SCTP client-side peeloff issues [almalinux-9] (BZ#2084044) * TCP connection fails in a asymmetric routing situation (BZ#2085480) * Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963) * spec: Fix separate tools build (BZ#2090852) * call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255) * Mark ThunderX NIC driver as unmaintained (BZ#2092638) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default kernel-debug-modules-extra-5.14.0-70.17.1.el9_0.x86_64.rpm 1d0523e5748372ee56447a080eb6c2e8800e60b578ae85a9c462c1c0fb258e26 kernel-headers-5.14.0-70.17.1.el9_0.x86_64.rpm 27fbc6c1aa3f2d1566045ba48e2cd5fc7d151017ca9ca95be7d3bc6f29ae3ab4 kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm 6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103 kernel-tools-libs-5.14.0-70.17.1.el9_0.x86_64.rpm 6c643afc3c35f76c13556a13ffde3a23a0495c569dec28c11708b8f3ac0a167c kernel-debug-5.14.0-70.17.1.el9_0.x86_64.rpm 703cc481d0834409999e329b254650d2fd5e430a2cf46dbc2c704a0ae4810abb kernel-debug-devel-5.14.0-70.17.1.el9_0.x86_64.rpm 7a82cd38ca17dddb85ec3177f597c07ea38c4ac603f895691d66994749ccd7ac kernel-cross-headers-5.14.0-70.17.1.el9_0.x86_64.rpm 7b15545c222e80ac4e1957211f5d6f7f5c5125b342868f8abc8bf27bd69579db kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm 809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca kernel-tools-libs-devel-5.14.0-70.17.1.el9_0.x86_64.rpm 9223c2135eee664d9e6dc47f33e1c9f4aeb8dd5c2287b8c33fa8cc3b23e86187 kernel-devel-5.14.0-70.17.1.el9_0.x86_64.rpm 9514d88db80739811d5f6a3b49752fa2a8378064a2bedd76ab754b9a7c8da5c6 kernel-devel-matched-5.14.0-70.17.1.el9_0.x86_64.rpm 9a00ccaf1e5dc1ce882a360232cc0a6bd52310f1296c4aff5c179f0e5a7c388a bpftool-5.14.0-70.17.1.el9_0.x86_64.rpm ab64e0cd950170da3d2302a6e3975b849ddc5202e3196c73f53f00b09e8ba842 kernel-debug-devel-matched-5.14.0-70.17.1.el9_0.x86_64.rpm adc8071377693720da9822f5577b72cf559db1d81c4d394d9cf5fc6843ca6198 kernel-debug-modules-5.14.0-70.17.1.el9_0.x86_64.rpm af0eddad0fe1df463a92d7353c40d79b0ab394802f28fede8aa114cfce4b2141 kernel-5.14.0-70.17.1.el9_0.x86_64.rpm b4ef1468eebca594833b8b80812485e7b32445b7e23bf6a01bb4e981cd9b4970 kernel-modules-5.14.0-70.17.1.el9_0.x86_64.rpm c44a2bc75845bc5140eecc3e7b62a493f68e35f65084c948f9c767d58c0167a4 perf-5.14.0-70.17.1.el9_0.x86_64.rpm c8463b6384dadbbc65295d295a9898c1e49f69d6f68504d926f53ce2e0ba0fc9 kernel-tools-5.14.0-70.17.1.el9_0.x86_64.rpm d81db30c061a644b1e860f8933e1b108ce7602b3e50cec935a4eaef9f54f3c17 kernel-modules-extra-5.14.0-70.17.1.el9_0.x86_64.rpm de03e4dbe3a865a310109649a2e475b54b00fc6ee3eec2b7ffef78bc4f2c5870 python3-perf-5.14.0-70.17.1.el9_0.x86_64.rpm e7c340de8f300966048a604e4c74b55d3652f9e6cbc5af747c3864fc35bfbf3f kernel-core-5.14.0-70.17.1.el9_0.x86_64.rpm e8273ab41ea0984bd7bda47a9f80193467ab968db9016db7aed91a39e542b22f kernel-debug-core-5.14.0-70.17.1.el9_0.x86_64.rpm fb653bec1defacebf556298589a18dcb899b74639443c621f9b054a480fc7ee3 ALSA-2022:5252 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for libarchive is now available for AlmaLinux 9.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: an out-of-bounds read via the component zipx_lzma_alone_init (CVE-2022-26280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default libarchive-3.5.3-2.el9_0.x86_64.rpm 035f3b90a81b61d846914a6953804d32e09f0c6c3b2978f783c964c0cfe2c164 bsdtar-3.5.3-2.el9_0.x86_64.rpm 042bd93df93412ecaf7c6b59137e7ab45db3f03987046b74f8da2b5375015a9b libarchive-3.5.3-2.el9_0.i686.rpm 0e092bde47271bc548721c5f6ee2ac7626ba4c29c460d7281b29b32e4c8b4797 libarchive-devel-3.5.3-2.el9_0.x86_64.rpm 62d30b0fc078e27e530e051a08cf75a297905e7c495d733de96192fd15dbfb63 ALSA-2022:5942 Copyright 2022 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Out-of-bounds Write (CVE-2022-1785) * vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897) * vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default vim-common-8.2.2637-16.el9_0.3.x86_64.rpm 4060d5f17b11d2fb77086b017a36eea436513f40855ff127d1391bd2ed60b3d1 vim-enhanced-8.2.2637-16.el9_0.3.x86_64.rpm 5ab969d2e75c5cb78a483b2aefcbf21a9ef2b59b8187b1822d3f7146856c8687 vim-minimal-8.2.2637-16.el9_0.3.x86_64.rpm 5d005dd2b9a6ff888fc684c79404e081eb684713c3eb64e5bcb61f04863c78e6 vim-filesystem-8.2.2637-16.el9_0.3.noarch.rpm 85377e40c2d0d6abc50777ec8eb90ec6a20cc2cc106fcb471585ad16ed4f920f vim-X11-8.2.2637-16.el9_0.3.x86_64.rpm a56628904235766bca585d1b3438fb71987feca4d7336be1407b1e281cb5f554 ALSA-2022:6003 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * information leak in scsi_ioctl() (CVE-2022-0494) * use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248) * Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253) * FIPS module identification via name and version (BZ#2093384) * gfs2: File corruption with large writes when memory is tight (BZ#2097306) * i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251) * AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740) * Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903) * Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854) * Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858) * lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085) * OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974) Enhancement(s): * iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default kernel-tools-5.14.0-70.22.1.el9_0.x86_64.rpm 058da6c60d99668ca9527e389ca31f3e5a0b6807572ca6879bbad1bfcc001dc8 kernel-debug-modules-extra-5.14.0-70.22.1.el9_0.x86_64.rpm 0a6bb3033994c42eccd2caaf2c1a0f9fa12978dfa654d09eb1b23c166b35fe87 kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm 232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa kernel-headers-5.14.0-70.22.1.el9_0.x86_64.rpm 269d4b5744b79c31b7840d2662d69a65a07a3daf267d9e0f1d78127bb1ce5e94 kernel-modules-5.14.0-70.22.1.el9_0.x86_64.rpm 356fb4b60399817af9c27541a786c894d72b63a4820600a5d0d5e2625dd19f57 kernel-core-5.14.0-70.22.1.el9_0.x86_64.rpm 44567301c8fcf8e9ff544612b55189e40b93e92ef0344e1ff007ca480ae93864 perf-5.14.0-70.22.1.el9_0.x86_64.rpm 4bee781763a63ad8fbf0177146fed24798d1be7ddc07664f383b203a7992104d kernel-5.14.0-70.22.1.el9_0.x86_64.rpm 4de9ce495488ecba67d20954cdf93a280b38cf90a70f2135dbdaa74f9c43bcd0 kernel-debug-5.14.0-70.22.1.el9_0.x86_64.rpm 4e7323439496dadf60ad2e6ecb8c9169550d549a6423e9be52462c2b6c05c288 kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.x86_64.rpm 5af007256bad23fe247a27a40f5b3d1824837394ac911433ada995c34085278b kernel-cross-headers-5.14.0-70.22.1.el9_0.x86_64.rpm 73b9566ab8a940449df3028f7b07810ef23869261984f0958abfa24241956c27 kernel-tools-libs-devel-5.14.0-70.22.1.el9_0.x86_64.rpm a1cd31b9b9d2e80b48a123147a5474ad6c37d35e4c07406760de2018d831a5b0 kernel-modules-extra-5.14.0-70.22.1.el9_0.x86_64.rpm a33fd0e3f5e8642b1cddea8a2b17203e095b0cede69e7907d8fba3cb59b13857 kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e kernel-devel-matched-5.14.0-70.22.1.el9_0.x86_64.rpm af922ec743dc3cc02cdb496b8c79ac7f28b3c2f52beb5fe85db20b1108c05d81 bpftool-5.14.0-70.22.1.el9_0.x86_64.rpm c7076c508dd6569376b95d3329534c443790fdc930bc18cf57d4cf53de0dfc42 kernel-debug-modules-5.14.0-70.22.1.el9_0.x86_64.rpm dcc4d30f300c4a37153afbe9329e3fece612a9905c9bb08f2fe3f6dfe4fb1e06 kernel-devel-5.14.0-70.22.1.el9_0.x86_64.rpm e44c1505fffc7a260189e267d52aad51e93662b9de13219fb9e0f48222789c2a kernel-tools-libs-5.14.0-70.22.1.el9_0.x86_64.rpm e741c79fd6389fc2c5197dd515fb3eb3c70b80ba46b6e80914c1e28753b97869 python3-perf-5.14.0-70.22.1.el9_0.x86_64.rpm e93ddf4c67372f75be67711e4c71ebe3fd48ccf112d3b35301d712d76fbe4c19 kernel-debug-devel-5.14.0-70.22.1.el9_0.x86_64.rpm ec6b30715ddebf429655aefd6f4d8254e11babda8aeb89f1eb2786a266b94f73 kernel-debug-core-5.14.0-70.22.1.el9_0.x86_64.rpm f7b5b4cf5bae143246da2725de4892ee360ede281d2c94b38490d64a26b6f054 ALSA-2022:6157 Copyright 2022 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP compression denial of service (CVE-2022-32206) * curl: Unpreserved file permissions (CVE-2022-32207) * curl: FTP-KRB bad message verification (CVE-2022-32208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default libcurl-minimal-7.76.1-14.el9_0.5.i686.rpm 09b13614d1581e90fdd443a1a9015c34131b57d870ede16ec7bb82e94d92be79 libcurl-7.76.1-14.el9_0.5.i686.rpm 1aa1835ebebba0e81d55ccc34cdb2e59e415487bf64f4657a4341cd3a6633de0 libcurl-7.76.1-14.el9_0.5.x86_64.rpm 2d96426c0d69d091b03c65014ab2485c9b580599744618ea5d8d6f808544a010 libcurl-minimal-7.76.1-14.el9_0.5.x86_64.rpm 8952a283d1864149f73c6dd9688e33278c64667f0a0eaa96cbe4cd00453a4f22 libcurl-devel-7.76.1-14.el9_0.5.x86_64.rpm b975f675c45821d7de9b30c6d358bcf3253fc3644fd4edd813f03f197c32195b curl-minimal-7.76.1-14.el9_0.5.x86_64.rpm ed1875b39b0182f49828fa857fdf88dcd4eabdb29098fdfd46627a548356fb52 curl-7.76.1-14.el9_0.5.x86_64.rpm fb907e7b85d74622be95d44354df9081ba6897c7bc54306828da4f848fe8967d ALSA-2022:6224 Copyright 2022 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: c_rehash script allows command injection (CVE-2022-1292) * openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343) * openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473) * openssl: the c_rehash script allows command injection (CVE-2022-2068) * openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323) * openssl req defaults to 3DES (BZ#2085499) * OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508) * OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521) * openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554) * Converting FIPS power-on self test to KAT (BZ#2086866) * Small RSA keys work for some operations in FIPS mode (BZ#2091938) * FIPS provider doesn't block RSA encryption for key transport (BZ#2091977) * OpenSSL testsuite certificates expired (BZ#2095696) * [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044) * [FIPS lab review] self-test (BZ#2112978) * [FIPS lab review] DH tuning (BZ#2115856) * [FIPS lab review] EC tuning (BZ#2115857) * [FIPS lab review] RSA tuning (BZ#2115858) * [FIPS lab review] RAND tuning (BZ#2115859) * [FIPS lab review] zeroization (BZ#2115861) * [FIPS lab review] HKDF limitations (BZ#2118388) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default openssl-libs-3.0.1-41.el9_0.x86_64.rpm 1a830ad3a6dfcd671de775264a521c516bd5913837fd1a9318bddcffdeaf3ea5 openssl-perl-3.0.1-41.el9_0.x86_64.rpm 9d835a284fd7f3d7793aae5d2d30d1720587a56280c7bc567274d8dfeae3d3a5 openssl-libs-3.0.1-41.el9_0.i686.rpm a914bd989b8730edba072e45655036878cefb901a151d1dd3d283281eb6a8b84 openssl-devel-3.0.1-41.el9_0.x86_64.rpm ae7a5ee958bbe423a43289b7f4c09c9ad551ba87e4e7439d231bd1ff243536bd openssl-3.0.1-41.el9_0.x86_64.rpm e5be7dc899ff25a0e7cfaf753e434ce1fe7c0d2882667027ed0df2ec79f66273 ALSA-2022:6602 Copyright 2022 AlmaLinux OS 0 1 Moderate

gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fix(es): * gpg: Signature spoofing via status line injection (CVE-2022-34903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default gnupg2-2.3.3-2.el9_0.x86_64.rpm 5a639754e7001029b0a35ab7cb853a7b86246bd75af9100bd6a37b80a80dd371 ALSA-2022:6608 Copyright 2022 AlmaLinux OS 0 1 Moderate

dbus-broker security update

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases. Security Fix(es): * dbus-broker: a stack buffer over-read if a malicious Exec line is supplied (CVE-2022-31212) * dbus-broker: null pointer reference when supplying a malformed XML config file (CVE-2022-31213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default dbus-broker-28-5.1.el9_0.x86_64.rpm e2a45a2f1e5d5562896ebb6fffa084fb9dcbd11515e52974bc1c05936263cd90 ALSA-2022:6610 Copyright 2022 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918) * kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * RDMA/mlx5: Fix number of allocated XLT entries (BZ#2092270) * mlx5, Setup hanged when run test-route-nexthop-object.sh (BZ#2092535) * many call traces from unchecked MSR access error: WRMSR to 0x199 in amazon i4.32xlarge instance (BZ#2099417) * X86/platform/UV: Kernel Support Fixes for UV5 platform (BZ#2107732) * block layer: fixes for md sync slow and softlockup at blk_mq_sched_dispatch_requests [9.0.0.z] (BZ#2111395) * Fixes for NVMe/TCP dereferences an invalid, non-canonical pointer, kernel panic (BZ#2117755) * Adding missing nvme fix to AlmaLinux-9.1 (BZ#2117756) * nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue) (BZ#2118698) * Important ice bug fixes (BZ#2119290) * Power 9/ppc64le Incorrect Socket(s) & "Core(s) per socket" reported by lscpu command. (BZ#2121719) Enhancement(s): * lscpu does not show all of the support AMX flags (amx_int8, amx_bf16) (BZ#2108203) * ice: Driver Update (BZ#2108204) * iavf: Driver Update (BZ#2119477) * i40e: Driver Update (BZ#2119479) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default kernel-core-5.14.0-70.26.1.el9_0.x86_64.rpm 27964cde8fd1112a49be19808593a68b5935c33b1c837223642fd743ff361091 python3-perf-5.14.0-70.26.1.el9_0.x86_64.rpm 2b4347f0376b4ce41d29fb2fe980e5e072e78186ba752a14817e5d092394c29e kernel-debug-modules-extra-5.14.0-70.26.1.el9_0.x86_64.rpm 4e0dbf060f4a368fe15b1f4ab5496600931e807ad10dcb6d07250b845fcbefa1 kernel-tools-libs-5.14.0-70.26.1.el9_0.x86_64.rpm 4f5d800cd7639b96b556e86fee7c7f21054bb8a118c52634bb9af4d0baaa6058 kernel-abi-stablelists-5.14.0-70.26.1.el9_0.noarch.rpm 740ed60623908e1cbe57d744aeae2a5cca362613181af7ff13b355d3cb9adf6b kernel-modules-extra-5.14.0-70.26.1.el9_0.x86_64.rpm 74830c4c1e1cb17cf82e196e4b02d786283de4abfcacd076c7882982f4b65ea7 kernel-debug-modules-5.14.0-70.26.1.el9_0.x86_64.rpm 7735948a45761e13636841a6b7e648c768ee9ce774a23c732024d7871415473e kernel-modules-5.14.0-70.26.1.el9_0.x86_64.rpm 79259c21141969b5740abf0129551a08648c040ee9645629b4e449904a5d29b6 kernel-tools-5.14.0-70.26.1.el9_0.x86_64.rpm 815121a1e898e3efb1dcdc1721552a7718bb14ac059c825309ffffa1010523e2 kernel-5.14.0-70.26.1.el9_0.x86_64.rpm 84b6a3938c949287f9e065e44446c1192ff39c99b308480c40079a740461f79f kernel-debug-core-5.14.0-70.26.1.el9_0.x86_64.rpm d28ce9f30c27984f38f49bae34e12d075c8e6ec20a347da5b376cc039e23f5fd bpftool-5.14.0-70.26.1.el9_0.x86_64.rpm e0bc1b5e12e3c77caef96f3d6c65430b0b9cd3de511b574bbf2a79ea4792b355 kernel-debug-5.14.0-70.26.1.el9_0.x86_64.rpm eae2ac9d378df6bbc33dedf0f1b440904f23f9a805b88f0b3bf32b3404df4184 ALSA-2022:6838 Copyright 2022 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default expat-2.2.10-12.el9_0.3.x86_64.rpm 7ef7bea7beb83a4aba7416d125cccadeafca2b6e83610a8c8cdf8175d00d5442 ALSA-2022:6854 Copyright 2022 AlmaLinux OS 0 1 Moderate

gnutls and nettle security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space. The following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8). Security Fix(es): * gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589) * Allow enabling KTLS in AlmaLinux 9.1 (BZ#2108532) * DES-CBC bag is decryptable under FIPS (BZ#2115314) * allow signature verification using RSA keys <2k in FIPS mode (BZ#2119770) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default gnutls-3.7.6-12.el9_0.i686.rpm 4b041c89d39b27edb5b64e50a446e38ef25bcd4d8b9f8ba97f930098f46780c3 gnutls-3.7.6-12.el9_0.x86_64.rpm e549e08518f6f5653027ff8be769ae3db7168f2449c4cc5b893419b9a8ab7136 ALSA-2022:7090 Copyright 2022 AlmaLinux OS 0 1 Important

libksba security update

KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS. Security Fix(es): * libksba: integer overflow may lead to remote code execution (CVE-2022-3515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default libksba-1.5.1-5.el9_0.x86_64.rpm 298853c3f54619827fd927e2d4c17c25bae579c5ffff4b70d60157eda1716219 libksba-1.5.1-5.el9_0.i686.rpm fcb9a502ecd923f101b7a909a5d5d55f36974c16e861620f11c73d1ad2f0782c ALSA-2022:7185 Copyright 2022 AlmaLinux OS 0 1 Important

device-mapper-multipath security update

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fix(es): * device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default device-mapper-multipath-libs-0.8.7-7.el9_0.1.i686.rpm 203b64779691f39f5547fe841c66dd9bb7ec5f104376aa96fac893a399288996 kpartx-0.8.7-7.el9_0.1.x86_64.rpm 4232baca11f1109f34f587640f9512eaafac8e4a82a2aa5f3c56eba274f7c5bf device-mapper-multipath-libs-0.8.7-7.el9_0.1.x86_64.rpm 8555d596a52d3cc2d9b826c2f6cec975681ac59b28703960cefddc9486011910 device-mapper-multipath-0.8.7-7.el9_0.1.x86_64.rpm f22ee5e8443dbc48d5089b37b4739465fdcef46cdb7ab6b98e1b2b6a8fa745f6 ALSA-2022:7288 Copyright 2022 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library. Security Fix(es): * OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602) * OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default openssl-3.0.1-43.el9_0.x86_64.rpm 1f2725433bacad30e4b6a3770d4264589fc78af12254a7044350651b1405f654 openssl-libs-3.0.1-43.el9_0.x86_64.rpm 26576d0b34ae457ebdf83324886190f9160b76ce676a16ab90f0ff26ab351264 openssl-libs-3.0.1-43.el9_0.i686.rpm cebd58c692ce94f0a163cb1a8a584d7e341d6b2a071991e5ed40c78e76187738 ALSA-2022:7314 Copyright 2022 AlmaLinux OS 0 1 Moderate

zlib security update

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default zlib-1.2.11-32.el9_0.x86_64.rpm bd4009fbe4ced90f997b79ebb8733bb6ebfbba530ea731e56a0dccd6b8c33346 ALSA-2022:7318 Copyright 2022 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585) * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653) * execve exit tracepoint not called (BZ#2106661) * Matrox black screen on VGA output on some systems. (BZ#2112017) * The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129) * watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857) * Update cifs to 5.16 (BZ#2127858) * Bad page state in process qemu-kvm pfn:68a74600 (BZ#2127859) * vfio zero page mappings fail after 2M instances (BZ#2128791) * The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970) Enhancement(s): * Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default kernel-modules-extra-5.14.0-70.30.1.el9_0.x86_64.rpm 04bc54736be561666d8bd50d9511f80154a504be6c5da49aed64e7a8a6323c49 kernel-tools-5.14.0-70.30.1.el9_0.x86_64.rpm 110d7306e3473dab714eb57f80a5b8e2f5e65be1a3a87c24ccb5ae7029acadc4 kernel-core-5.14.0-70.30.1.el9_0.x86_64.rpm 1687cf6d66dc48ffd81a77081551c3a5a415baee3002f0a66ea2a6fd3647c254 python3-perf-5.14.0-70.30.1.el9_0.x86_64.rpm 1a2376539d1709b54141d24488c1a706d9d2123113ae9d508cb7153f05a981cd kernel-debug-modules-5.14.0-70.30.1.el9_0.x86_64.rpm 501a3f0cc86cc07d106bf39ca409cd7cbf5ed756a817d645c8592b258e2cca65 kernel-tools-libs-5.14.0-70.30.1.el9_0.x86_64.rpm 6737292d8548af32756750ea594451eec2a6848074d83d18ea6319eaaecbd66c kernel-debug-modules-extra-5.14.0-70.30.1.el9_0.x86_64.rpm 7a148f327783290705349d8d85526af1eb31b4d8ab4ce83eabb07efdefb8c396 kernel-debug-core-5.14.0-70.30.1.el9_0.x86_64.rpm 7dea7796719d5b59c8a1f6aa6b2849706f1258432fbd9ac4def06c25bca64e7b kernel-debug-5.14.0-70.30.1.el9_0.x86_64.rpm c559ce56b454f8a5c01ae6b002014136dfe2638ef680efa3ece6fa4b4925bde8 bpftool-5.14.0-70.30.1.el9_0.x86_64.rpm d4e35fa587c2abcbc0180208533f85d60b22fbc71a388f55d78e8a96aea859d0 kernel-5.14.0-70.30.1.el9_0.x86_64.rpm e40aa50bbe6e31f8d29e7ddf869ec1b391a7d832ef3a7a6d944dbc7639eca16d kernel-abi-stablelists-5.14.0-70.30.1.el9_0.noarch.rpm f2ff62061331f013ccee9dd21c0c2ce64986db1d8c182f456575f60ebc1d83a6 kernel-modules-5.14.0-70.30.1.el9_0.x86_64.rpm f6bc1a72eae96fdd40072b385db96972dcc49ec067f6158c26c30bbf0d46a97f ALSA-2022:7323 Copyright 2022 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default python3-libs-3.9.10-3.el9_0.x86_64.rpm b3cb3afd112522dadbd1f5bcad23639e02425b79dc9ddb386949db0b5066dd68 python3-3.9.10-3.el9_0.x86_64.rpm c87fc3410311843b0d6619c8a4c6158636377d90e945892985330500b4937e6b ALSA-2022:7329 Copyright 2022 AlmaLinux OS 0 1 Moderate

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_default lua-libs-5.4.2-4.el9_0.3.i686.rpm 54b08f98c8952872e3d6486cfae08a6159cc64869be9b28a5c994681f51a86ab lua-libs-5.4.2-4.el9_0.3.x86_64.rpm f51f5631bc9131b93934308f4ddd10d962c77982053799316bd5a823023afdb2 ALSA-2022:8267 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516) * use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640) * smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168) * NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617) * swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854) * uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016) * race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048) * use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184) * concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280) * kernel info leak issue in pfkey_register (CVE-2022-1353) * use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679) * NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852) * fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998) * nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586) * integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639) * slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368) * incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123) * incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125) * incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166) * possible to use the debugger to write zero into a location of choice (CVE-2022-21499) * AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900) * AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825) * Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373) * double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390) * use after free in SUNRPC subsystem (CVE-2022-28893) * use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581) * Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901) * DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946) * nf_tables disallow binding to already bound chain (CVE-2022-39190) * nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default kernel-debug-modules-5.14.0-162.6.1.el9_1.x86_64.rpm 03b2a17f5dc810f0d489c799e49f8af7b8fa6de473fa6a2dc6fdfea4a3589ed9 kernel-5.14.0-162.6.1.el9_1.x86_64.rpm 0c430392750837e7db6d2a5430284ffcd63776fee4ea711187970bc956998497 bpftool-5.14.0-162.6.1.el9_1.x86_64.rpm 22d30c97cbd16b4c3becebc8d744a62ff30962630fef0319975335e702c36a9f python3-perf-5.14.0-162.6.1.el9_1.x86_64.rpm 24da9fa60e3305f1d03c59583061615c9294e3c0fee942425b2d962d9e2fe272 kernel-modules-5.14.0-162.6.1.el9_1.x86_64.rpm 3f396b0821ea04602e39fee14adb546d022ecf305537831eaa930843c0bc67d6 kernel-abi-stablelists-5.14.0-162.6.1.el9_1.noarch.rpm 53483578c5bad0ba69290dbd463dc1f934392167f9280fa179530e1aa14b6472 kernel-debug-5.14.0-162.6.1.el9_1.x86_64.rpm 609a5dcb61cb5aef87c14f6b41a751a873982f312b05f6f08ea47d0f601b9cc0 kernel-debug-core-5.14.0-162.6.1.el9_1.x86_64.rpm 6227975a9a158db7e93e82c37441914f63f94540e0bb24863dfdea77b945065d kernel-modules-extra-5.14.0-162.6.1.el9_1.x86_64.rpm 7af21698fbeff57a06c15f0b1ac3bcfdc029869f5aa1b797fd0330dd5c8dfb43 kernel-debug-modules-extra-5.14.0-162.6.1.el9_1.x86_64.rpm a6130e3e294601e5ba3582538e9fc24fb019d4f3f879a55f4ee34559344eaca6 kernel-core-5.14.0-162.6.1.el9_1.x86_64.rpm b363e692293d29ed5a14ed1d2b54074dc7421fcabe2b1fc5bbf20234c07a7ece kernel-tools-5.14.0-162.6.1.el9_1.x86_64.rpm e4a1845935e36bc4fb3b7c5d8943ba376004bb45ddfb0a933d34c5feea98e673 kernel-tools-libs-5.14.0-162.6.1.el9_1.x86_64.rpm f0ca52393f45410b57ef5e60f54995d1899aec2b60eb096cfd1990499a5021a4 ALSA-2022:8291 Copyright 2022 AlmaLinux OS 0 1 Moderate

rsync security and bug fix update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default rsync-3.2.3-18.el9.x86_64.rpm e2d83f9e45848b39bd69a8d19f84a0c92912c70fcfd88801954a43de23218328 ALSA-2022:8299 Copyright 2022 AlmaLinux OS 0 1 Low

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: bad local IPv6 connection reuse (CVE-2022-27775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default libcurl-minimal-7.76.1-19.el9.x86_64.rpm 67ddee33785053a5170bb66db7ca0bbd5fe86349470b849c4502a4f10b7a2d37 libcurl-7.76.1-19.el9.x86_64.rpm 9e3d8c484ba12c58f2d1bb7903d211599f35194ee554fdfe84e53aa2fad792c1 libcurl-7.76.1-19.el9.i686.rpm 9ff8c5b18ed2fc48c09f75ac3940af26631f8819ecc7d30e1f33acc3ae1f844a libcurl-minimal-7.76.1-19.el9.i686.rpm a9a8d457d1570bc3e61b74acef49648eb221a17a782a08024dac5ca88082219e curl-7.76.1-19.el9.x86_64.rpm abcf7401971f921492af5462efad05062283cafdafc615bf8e2c424c2a21601b curl-minimal-7.76.1-19.el9.x86_64.rpm d3a58cc95db7c456b70ac027f51ac59e58e5c37dbf461bfec3d2a7cb0f509cbf ALSA-2022:8317 Copyright 2022 AlmaLinux OS 0 1 Moderate

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487) Security Fix(es): * samba: server memory information leak via SMB1 (CVE-2022-32742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default samba-winbind-4.16.4-101.el9.x86_64.rpm 008e0b846928736fddbe0aa2dac9ab32d3bcb38366979840566310bba1d648ba samba-common-tools-4.16.4-101.el9.x86_64.rpm 00ab91b51a3b27692bdcf53da7c3fccdb30e7d1ba0b5a5357cda8f093ac2f0c5 libsmbclient-4.16.4-101.el9.x86_64.rpm 0b8daa835de399a62915f987810baad68859dcd0e5900912e2fd9592eabff1cd samba-common-4.16.4-101.el9.noarch.rpm 286b1c1bd591ecb254cc2592b59637aacf6477973e9baf964d65e858589fde24 samba-winbind-modules-4.16.4-101.el9.x86_64.rpm 3f390fb96da1ca69b20fdb14da31f888d3c46b2d78578505fd4c0b795e4281f9 samba-libs-4.16.4-101.el9.x86_64.rpm 50ec4917f485604671f0b6b2b8518d4386a9947c1b980e005ac117e674411559 samba-client-libs-4.16.4-101.el9.i686.rpm 606824fc708a0e42b35970244c7105ae62219de0fab01bba993df5e42c9c6db9 libwbclient-4.16.4-101.el9.x86_64.rpm 6bd96d65eb79cf452e7c8bd28862f9982484e1fa2166646520b2c2c4ee4f5096 libwbclient-4.16.4-101.el9.i686.rpm 6cc4836b2917d62cbfc0fc30289d0080be01e8dbe3f04d2f2ca57e64f84eea2c samba-libs-4.16.4-101.el9.i686.rpm 7101281d4c9553d68ea5f28954c85fe00387ff0a9cce7e645e744f3cb50856c2 samba-common-libs-4.16.4-101.el9.i686.rpm 7c1af12744197115f76466cad547a599862aad8f5060df055b65f8045d00974d samba-client-libs-4.16.4-101.el9.x86_64.rpm 857d80720c32a567c179b51bdf2d554f02244b7f4cb276452fb7f0788c468fdc libsmbclient-4.16.4-101.el9.i686.rpm 9f49e4fd6ac7b73c7c1425640588588f5f4f1badef22f960eeeeb96de13b6b48 python3-samba-4.16.4-101.el9.i686.rpm c369fcc3e3d8ec9c667cdf7f5d35bcb6e3d889811662a150f81edc7414ec44cd samba-4.16.4-101.el9.x86_64.rpm cfafa9757c2d2e507e8f4c93412692a78009990e222aa8d4fb02b45a6d9f7b8f samba-winbind-modules-4.16.4-101.el9.i686.rpm daab6496369e5857bdb3119825433a3b2ef13005eb959a8c09cf3a0ea6477354 python3-samba-4.16.4-101.el9.x86_64.rpm f423a488f59f4249f7b967b62cc87f2f1d4294953bbb2bb47bfd77832e6d825b samba-common-libs-4.16.4-101.el9.x86_64.rpm f7a72d8eac1e5408da30a6df040f9e3d2a13b40e2ebcd64d226f4c5704a5f57f ALSA-2022:8318 Copyright 2022 AlmaLinux OS 0 1 Moderate

libldb security, bug fix, and enhancement update

The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490) Security Fix(es): * samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default python3-ldb-2.5.2-1.el9.i686.rpm 27e6e2c7090e6aabafdd71a88dc87c981b6bad094371afe6e5b110e751eb0271 libldb-2.5.2-1.el9.i686.rpm 2fd167303f52307062b2f7830a753991b62b7bb9bec3b47065bd45d2f88f0885 ldb-tools-2.5.2-1.el9.x86_64.rpm 96bf1d8708a6a7f01f3cb3123bccf39226bc1b5680b4fb2d16fb51307940c6b7 libldb-2.5.2-1.el9.x86_64.rpm a50ec324caf307e91b0d9cc0dc06a28c370db0b3e3573be4b7967d58c1376fa2 python3-ldb-2.5.2-1.el9.x86_64.rpm e9be6abe3070dbcc34b65a134990ebd4101e81a86cf74ade9c925235729ac8b2 ALSA-2022:8340 Copyright 2022 AlmaLinux OS 0 1 Moderate

freetype security update

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fix(es): * FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404) * FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405) * Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default freetype-2.10.4-9.el9.i686.rpm 0be85a34eaff6ae7640c58d0f0148e010bfb7e69081ffd214bc74bf1fbedd50d freetype-2.10.4-9.el9.x86_64.rpm d0056833fffca8ed432cfe719e8877e2776ebfe2d072f178a14bb5b57e328f49 ALSA-2022:8353 Copyright 2022 AlmaLinux OS 0 1 Moderate

python3.9 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249) Security Fix(es): * python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107) * python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default python3-3.9.14-1.el9.x86_64.rpm 5f6a33a58a6bb868efc9d5c1a4154c2b3d9f19e17ee29653f9c1e66e9ba2cac5 python3-libs-3.9.14-1.el9.i686.rpm a758e13c72b80e4a5c037428324f8cc9133fb28c3d1c6576c62626569fd6d74a python3-libs-3.9.14-1.el9.x86_64.rpm f866d58904b86c6785932209a17197f8571e81f5f453facce3d2dea860007e81 ALSA-2022:8361 Copyright 2022 AlmaLinux OS 0 1 Moderate

e2fsprogs security update

The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems. Security Fix(es): * e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default e2fsprogs-libs-1.46.5-3.el9.x86_64.rpm 32dc812d50fb4a016d6d876e9cc436c3732a20d2a5da3d7dead7bd2f4f585bc7 libss-1.46.5-3.el9.x86_64.rpm 39590263d4abab71dcb9ccb6698bb2f14bb9559126d3337391259476a73bb404 e2fsprogs-libs-1.46.5-3.el9.i686.rpm 82beb32e861f64c0ef54d4c788686f1e24f6644de3052cd387b3abae1fb47219 libcom_err-1.46.5-3.el9.i686.rpm 932645424cafcb91fce7b3958fd1b7d353e87267175784e6f356b61ed501a845 libcom_err-1.46.5-3.el9.x86_64.rpm be0cbed8b02ba6de98c1b58298e629202bce86f29743fbf3ab501d58ec06c9f0 libss-1.46.5-3.el9.i686.rpm c9ac9c74a4353f91dafb67a6ee1686cc5e23d53996ea792163358432f221e854 e2fsprogs-1.46.5-3.el9.x86_64.rpm ebed1efdb101f497581c2f9a56d3d71e14c1add481357c7116d6afc1a385637d ALSA-2022:8384 Copyright 2022 AlmaLinux OS 0 1 Moderate

harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default harfbuzz-2.7.4-8.el9.x86_64.rpm 1372f297f7a2caf9ffcb40a3c7fbcdf2dfe77c44412daa7f9c9eb0ea28e8eb9b harfbuzz-2.7.4-8.el9.i686.rpm bd54f886097dd7fc0828bf5c2ef4edef50fb20a04f31c5ef967368b397dedbf2 ALSA-2022:8385 Copyright 2022 AlmaLinux OS 0 1 Moderate

dhcp security and enhancement update

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Security Fix(es): * bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default dhcp-common-4.4.2-17.b1.el9.noarch.rpm 011ae50ac1857d9d985906a0a13ab1698507292e737b4050e79d069f1d404422 dhcp-server-4.4.2-17.b1.el9.x86_64.rpm 5d4858e844e9f78c2b12b05b4f84b0938f459ac1a973ba2006b92fa9d12dbc90 dhcp-client-4.4.2-17.b1.el9.x86_64.rpm 973948bc95ec65670427f57f18ef79a705ddf2c544e54ebc159600efe8d5f30e dhcp-relay-4.4.2-17.b1.el9.x86_64.rpm d7879be4e5c5fc59e6cdc019af2fccfc3254ab0718324656101c8996db38feac ALSA-2022:8393 Copyright 2022 AlmaLinux OS 0 1 Moderate

logrotate security update

The logrotate utility simplifies the administration of multiple log files by allowing their automatic rotation, compression, removal, and mailing. Security Fix(es): * logrotate: potential DoS from unprivileged users via the state file (CVE-2022-1348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default logrotate-3.18.0-7.el9.x86_64.rpm 8ebd6f5156388d02caa96e1a3b03136d41d047bcc159e3736e4e18edb4acdc18 ALSA-2022:8400 Copyright 2022 AlmaLinux OS 0 1 Moderate

libtirpc security update

The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. Security Fix(es): * libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default libtirpc-1.3.3-0.el9.i686.rpm 80753e3df23f1e1b2c53244378e793ca2ffd4b5bcdaec7ededa3d959c088d889 libtirpc-1.3.3-0.el9.x86_64.rpm a588c2830aa4a31199fdf336996eae5fcc816450f93105994b3a3fa153229eae ALSA-2022:8453 Copyright 2022 AlmaLinux OS 0 1 Important

device-mapper-multipath security update

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fix(es): * device-mapper-multipath: Regression of CVE-2022-41974 fix in AlmaLinux (CVE-2022-3787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default device-mapper-multipath-0.8.7-12.el9_1.1.x86_64.rpm 74bacab237380646a9438788f8d72e793e2c948195bff4915d209d57c0ef2b3c ALSA-2022:8493 Copyright 2022 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default python3-libs-3.9.14-1.el9_1.1.i686.rpm 131d866baff2fbcac297d73133147cfd3d369df9a9f61a0706c22db47143f35f python3-3.9.14-1.el9_1.1.x86_64.rpm 439fe4fe66cc27aa6a0fd7a985f5d14cd9fbdedd151b2fff38eafa147ff8754b python3-libs-3.9.14-1.el9_1.1.x86_64.rpm b2bb62a37f5426839d698d035c305679eddf852224482299e9dacde7b264ace3 ALSA-2022:8637 Copyright 2022 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default krb5-pkinit-1.19.1-24.el9_1.i686.rpm 01c282b8dd43f4997596bc5c0d0531f8091a8f0c68805c847bf776ac40ecebe4 krb5-server-ldap-1.19.1-24.el9_1.i686.rpm 1074e481cea7b6e17f2554efdc6151692d954e96d6040ae39415c0f744d562b9 krb5-libs-1.19.1-24.el9_1.x86_64.rpm 27603ddcb75198ce43b60d10bf1d6d89bb7e1cba285614c1e81cf843a0979b39 krb5-server-1.19.1-24.el9_1.x86_64.rpm 2aa64a47ffb18afbe4261bf361b29d96764359336b9fa994bdb40af38f6f64fc krb5-server-ldap-1.19.1-24.el9_1.x86_64.rpm 364ab7d7f59c4215ff3b512399d380a4472b81bbe485f043108569b4b4fdad41 libkadm5-1.19.1-24.el9_1.x86_64.rpm 55e8f02a08320f70649a5999f004b850169e65490dce05c165bf97e8414e7621 krb5-libs-1.19.1-24.el9_1.i686.rpm 5ae846dfed2af5b0b497553dcbacf613b06eb1e3ba194617eebfd55c90add43c krb5-workstation-1.19.1-24.el9_1.x86_64.rpm 8745f4c52443e8e9e0d555169aa9eb2d794407b75ad2327081390f5ca2d9e4ad krb5-server-1.19.1-24.el9_1.i686.rpm a4345ad967cd254837f2600f2b0270d0f005229b20b5eb91aea83b84087db492 libkadm5-1.19.1-24.el9_1.i686.rpm d25d078e3818044796f2f1c1b32c55d4390920dd3b5911475c920af10b9377a8 krb5-pkinit-1.19.1-24.el9_1.x86_64.rpm d6a2334a27a97f090472b3ea827f2c63c558e05330faddf1872822c4d90264e5 ALSA-2023:0282 Copyright 2023 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default sudo-1.9.5p2-7.el9_1.1.x86_64.rpm b117cf6867fc850d85553e380f6a6c36c95c0ea566824d5699f50c6bd36e73c7 ALSA-2023:0333 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: POST following PUT confusion (CVE-2022-32221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default curl-7.76.1-19.el9_1.1.x86_64.rpm 306f831f94bdeb4795e76c45d06b74c65f4c4bf075f6eeef9c17d7c1750300fb libcurl-minimal-7.76.1-19.el9_1.1.x86_64.rpm 6fdf02473607f757558c29b06131e40e4b251568667459e9ea225d0160d67276 libcurl-7.76.1-19.el9_1.1.x86_64.rpm 99101c1468ba1b2b0ffe238c645e073edb2392a2d7596f712649a2603ba8eb47 libcurl-7.76.1-19.el9_1.1.i686.rpm b2026954d9ad9d980ccfa2bc5c407d959e920cdf7766f109218f49ad3ad89ca9 libcurl-minimal-7.76.1-19.el9_1.1.i686.rpm b73adfd153a7424a440c675e4535c1988b018673116caa4ad27d1bc92d7f3ab2 curl-minimal-7.76.1-19.el9_1.1.x86_64.rpm c24bcb50331f4e2161c38dc12b1879d77254b9825fe1ea335a44be6576cc4b29 ALSA-2023:0334 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959) * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139) * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) * kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077) * kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel 9.2: Important iavf bug fixes (BZ#2127884) * vfio zero page mappings fail after 2M instances (BZ#2128514) * nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359) * ice: Driver Update to 5.19 (BZ#2132070) * WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588) * drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619) * updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914) * DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213) * No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153) * Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168) * ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976) * fatal error: error in backend: Branch target out of insn range (BZ#2144902) * AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217) * Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910) * Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605) * DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default kernel-debug-modules-extra-5.14.0-162.12.1.el9_1.x86_64.rpm 3ce090c446f77d09f9ee7fdfd1f73c67b9db696a0c34a092f576f4b6aceb3668 kernel-modules-extra-5.14.0-162.12.1.el9_1.x86_64.rpm 3fcb58cb58460da9ca31ed7eb87225730a36379926c0d26b1fd110709e1c2fe0 kernel-5.14.0-162.12.1.el9_1.x86_64.rpm 449253dc6197374682b579374b9ff3afda6d3fda38107a6187c00564cae20354 kernel-debug-modules-5.14.0-162.12.1.el9_1.x86_64.rpm 5c943ef0965da7f0ee9ab2b4286367b201a6eebc6fabea6ab7dd9066a13f24c7 kernel-tools-5.14.0-162.12.1.el9_1.x86_64.rpm 6bf8d5519aceac0405e3cbf5270d048933bf9916175c552516bf0391087a4807 python3-perf-5.14.0-162.12.1.el9_1.x86_64.rpm 76128711a0555626a6f7a9b71687b67a38c5f1e7d754607505ade3032a200356 bpftool-5.14.0-162.12.1.el9_1.x86_64.rpm 97a07b4367a8f5a3018df492e3d348b41710dc27b0f5d4dbc8f7aaa4bd53bbfd kernel-debug-5.14.0-162.12.1.el9_1.x86_64.rpm adadefe14a24db679dd51a0cd234b88f3853dc8f734bcdc120ec8bbf42a0f5b1 kernel-abi-stablelists-5.14.0-162.12.1.el9_1.noarch.rpm adb4b616c2a57bd065fdea79a5b0b064c887d2f752177890d0f5b107d7f88594 kernel-core-5.14.0-162.12.1.el9_1.x86_64.rpm b9c77814c2432a65a07f288e6ab361a9dd9ef643c2c617920821e6111cef84e3 kernel-debug-core-5.14.0-162.12.1.el9_1.x86_64.rpm d7e4e6187ce22b07c3173825b090678c6934f87751ae58ff28e63af25b2d1dcb kernel-modules-5.14.0-162.12.1.el9_1.x86_64.rpm e17ad8b9fdf68db12b29346f359289839baf43c54f7ddd7713ebcfc2b9bb4da0 kernel-tools-libs-5.14.0-162.12.1.el9_1.x86_64.rpm e5f61afdfde6adf7e46d2fc8fd7deecafda755cd5bc25881a0c34475ad19b0c2 ALSA-2023:0335 Copyright 2023 AlmaLinux OS 0 1 Moderate

dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010) * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011) * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default dbus-1.12.20-7.el9_1.x86_64.rpm 25f533f01964ef3c86c74f18d23d15d7c45179b25cdf56415618f47690138e68 dbus-libs-1.12.20-7.el9_1.x86_64.rpm 423cf72ce1aa5d424d7137710f97dae6eda3fa3301381d1edd1eade8d108b108 dbus-common-1.12.20-7.el9_1.noarch.rpm 75c6f87a0f4bac8661f16fa322d5c14cc0f4438403a80262b68dab4d4055d1b2 dbus-tools-1.12.20-7.el9_1.x86_64.rpm b0624e4aae4529b79579274a8438a8b4e573219830c738cc8efd20a38da6b14e dbus-libs-1.12.20-7.el9_1.i686.rpm b40375a3eb52369ad3b9194ecae180cf27a7bb3630e8d0211a34700cf7375ac3 ALSA-2023:0336 Copyright 2023 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: buffer overrun in format_timespan() function (CVE-2022-3821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default systemd-container-250-12.el9_1.1.x86_64.rpm 061024631a24e513f2c86d16122528d6693d8d9ef8db70d9f0e4fe5c52eed10e systemd-libs-250-12.el9_1.1.i686.rpm 36f530c5f794276afea8102c339f4c8463b48840ed38ab546985d2d1a057e211 systemd-libs-250-12.el9_1.1.x86_64.rpm 458c7c138febaafe0124e2e431a389eebb81c720aa0ac793edfb6991608d5c6a systemd-rpm-macros-250-12.el9_1.1.noarch.rpm 5b5fcb95686b10b0292a4fc72817b28f04b841f80d603f2a97f16f6eb2ce14bc systemd-oomd-250-12.el9_1.1.x86_64.rpm 696afda94f208a868b8b5845b0b37c5ea3d341366da65e4b1efdea933cfd5149 systemd-resolved-250-12.el9_1.1.x86_64.rpm 771d1c0e3c6d21b45b843aeaad39f0747c31ebd6131199285b2c3fa0977ad060 systemd-container-250-12.el9_1.1.i686.rpm 814957bf50f3ac44c46faff4940107dd33f2b1b85bf3d627ceef824f560cb00c systemd-250-12.el9_1.1.i686.rpm 9cf913819a08571d6f247489dde7de73ce29a32e849fda7d84453331d49aa9aa systemd-udev-250-12.el9_1.1.x86_64.rpm b128993a7507200716571309bd4d85636a658939e3d40761c6599959f51d4302 systemd-pam-250-12.el9_1.1.x86_64.rpm cd9fb87b42b5b25539fd3c075e8c3c196fb795f77c80d86cb72f283c0dcbc86a systemd-250-12.el9_1.1.x86_64.rpm ea3d0ec3773dc4dcc0bc510f984fe2dad511e538548cd5a152ac7e839af6bbf8 ALSA-2023:0337 Copyright 2023 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (CVE-2022-43680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default expat-2.4.9-1.el9_1.1.i686.rpm a9b52a96a7c5e8a01a722f116ed9defe3f674176ed802b5446292cc242a2bf1e expat-2.4.9-1.el9_1.1.x86_64.rpm bdf37a7f7196180fad4dda36e2c7e2c21c6e78ccc1dbc994e6a1d8411a1b41e8 ALSA-2023:0338 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303) * libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default libxml2-2.9.13-3.el9_1.i686.rpm 268c401ca2f21e6fdbe735f57fbf9fb6ba1870df87c63aa6c5b24fc267afc091 libxml2-2.9.13-3.el9_1.x86_64.rpm 4166a0752bc3882e75e495dbc826ea064ec09bad8e8bbdd61afa09b4886ae0a4 python3-libxml2-2.9.13-3.el9_1.x86_64.rpm 4a4f0ceb3c86c0dd1fde67f5ab8b308bf0ec0a0e508921d47ffd6b690331a770 ALSA-2023:0339 Copyright 2023 AlmaLinux OS 0 1 Moderate

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default sqlite-libs-3.34.1-6.el9_1.i686.rpm 00328fb91c673003f2e8012a1f4f625eaa4fc744a8a595b70c3275b6a8ee7ce5 sqlite-libs-3.34.1-6.el9_1.x86_64.rpm c827efde7374ef0e3dc181bac5197f7f9ecfbba0d2db792e3b1d850279fd01ee ALSA-2023:0340 Copyright 2023 AlmaLinux OS 0 1 Moderate

bash security update

The bash packages provide Bash (Bourne-again shell), which is the default shell for AlmaLinux. Security Fix(es): * bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default bash-5.1.8-6.el9_1.x86_64.rpm 1bfcf5bf3187ff21db8109d48a0198b92341a9124f63db82cf501d1968ba1374 ALSA-2023:0343 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default libtasn1-4.16.0-8.el9_1.x86_64.rpm 2dd3a1ad2785df642cb03dfed6dfbeec929ff8b14e52e61272ca7e89f86ba3cd libtasn1-4.16.0-8.el9_1.i686.rpm 9cbd11277e89bd0d4a80900bee01ca71b0c582c9cb5744f5035135b2ed907c85 ALSA-2023:0626 Copyright 2023 AlmaLinux OS 0 1 Important

libksba security update

KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS. Security Fix(es): * libksba: integer overflow to code executiona (CVE-2022-47629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default libksba-1.5.1-6.el9_1.x86_64.rpm 95b84e9a29325368df9ac97533c9fad91120c7dbc5c7274858e4f894aa7846af libksba-1.5.1-6.el9_1.i686.rpm bab03b2be16b504f1aadf2af62dacbe0f66a8120baf70c4354f2fdb431173e85 ALSA-2023:0752 Copyright 2023 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass (CVE-2022-2601) * grub2: Heap based out-of-bounds write when redering certain unicode sequences (CVE-2022-3775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default grub2-tools-efi-2.06-46.el9_1.3.alma.x86_64.rpm 2e5da8f931b6f9ec894ac08bf68693874938b05c8a217367b1fa9e7fe77ea3ca grub2-tools-2.06-46.el9_1.3.alma.x86_64.rpm 3bbd1d52cbc1c64402c47c2017c39b709a7d1dd937cd96664ba99efba63fb125 grub2-common-2.06-46.el9_1.3.alma.noarch.rpm 3d7943591c3cb72c5c1c2d0b121c33aa63616191a20b0ac166476e682a726637 grub2-tools-extra-2.06-46.el9_1.3.alma.x86_64.rpm 46cea3ddec9c1e513181e5c8d866d2645aede1d0f9b85ea53a20069943232dc4 grub2-tools-minimal-2.06-46.el9_1.3.alma.x86_64.rpm 4d8960b9edfbeb45a2dae63fc037c493ddd2685c87e8a201ebc8668b7ae10d8f grub2-efi-aa64-modules-2.06-46.el9_1.3.alma.noarch.rpm 5b6f1faa4ae5339ce884ee06acee48e704732f35490d956b6bd8ef40f54bd2d1 grub2-ppc64le-modules-2.06-46.el9_1.3.alma.noarch.rpm 82ba3017d2f07ad9ca07ec640bf5bc5278ec56021f17199e8d3e98f0951b3d7b grub2-pc-2.06-46.el9_1.3.alma.x86_64.rpm 944150ad9c1799da77e5ab4af885d8c69601f74e6244b6b4644b428d9c7fa830 grub2-pc-modules-2.06-46.el9_1.3.alma.noarch.rpm 98b06fac39d220136e99deec52b95840c38240bf9b56210a5010600b6f57faa1 grub2-efi-x64-modules-2.06-46.el9_1.3.alma.noarch.rpm bb7dbf92409f9a739e2f7009a330c2c8fd7827db40118327f4ab18639a16c82d grub2-efi-x64-cdboot-2.06-46.el9_1.3.alma.x86_64.rpm eaa03b0aea35e19bace6922e8752b4feb1b876c9899a41c70464a1633cfeaa00 grub2-efi-x64-2.06-46.el9_1.3.alma.x86_64.rpm f4951da92d66494085be97e331703b68ca460a2c935fff1e3587767fc5256ec6 ALSA-2023:0946 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: read buffer overflow in X.509 certificate verification (CVE-2022-4203) * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304) * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450) * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215) * openssl: invalid pointer dereference in d2i_PKCS7 functions (CVE-2023-0216) * openssl: NULL dereference validating DSA public key (CVE-2023-0217) * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * openssl: NULL dereference during PKCS7 data verification (CVE-2023-0401) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * HMAC generation should reject key lengths < 112 bits or provide an indicator in FIPS mode (BZ#2144000) * In FIPS mode, openssl should set a minimum length for passwords in PBKDF2 (BZ#2144003) * stunnel consumes high amount of memory when pestered with TCP connections without a TLS handshake (BZ#2144008) * In FIPS mode, openssl should reject SHAKE as digest for RSA-OAEP or provide an indicator (BZ#2144010) * In FIPS mode, openssl should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144012) * In FIPS mode, openssl should reject RSA signatures with X9.31 padding, or provide an indicator (BZ#2144015) * In FIPS mode, openssl should reject SHA-224, SHA-384, SHA-512-224, and SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after 2023-05-16 (BZ#2144017) * In FIPS mode, openssl should reject KDF input and output key lengths < 112 bits or provide an indicator (BZ#2144019) * In FIPS mode, openssl should reject RSA keys < 2048 bits when using EVP_PKEY_decapsulate, or provide an indicator (BZ#2145170) * AlmaLinux9.1 Nightly[0912] - error:03000093:digital envelope routines::command not supported when git clone is run with configured ibmca engine backed by libica.so.4 (OpenSSL 3.0) (BZ#2149010) * OpenSSL FIPS checksum code needs update (BZ#2158412) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default openssl-libs-3.0.1-47.el9_1.i686.rpm 57df9f5e63ab39844acc175505d7d88ca13920970831afbc756883ac4596b2ee openssl-3.0.1-47.el9_1.x86_64.rpm 795d238c60f586e278db2d8517de751894776924d8f48bf089e144ae3f7c7570 openssl-libs-3.0.1-47.el9_1.x86_64.rpm 93750e9503edf54c0a59ad307dab00f8579cdad2503d70c1310649ed652aa7f3 ALSA-2023:0951 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564) * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378) * kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379) * kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179) * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083) * AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085) * AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274) * qla2xxx NVMe-FC: WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178) * Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277) * Scheduler Update (almalinux9.2) (BZ#2153792) * AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305) * MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145) * Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459) * Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930) * The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815) * AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344) * CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418) * block layer: update with upstream v6.0 (BZ#2162535) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default kernel-abi-stablelists-5.14.0-162.18.1.el9_1.noarch.rpm 11a481a9ca1eb69dcd65b0876fb8bd21cb73e80e2efb913bd33c2f9d814a677f kernel-tools-libs-5.14.0-162.18.1.el9_1.x86_64.rpm 338edf0ccf3666a670a1184c1d8690e3155a6a0fead71d4f5a4b100d4eb57243 kernel-5.14.0-162.18.1.el9_1.x86_64.rpm 579fff26042b5162b4f795a7589e5680a581348b811874efd03c27e48522bb6d kernel-tools-5.14.0-162.18.1.el9_1.x86_64.rpm 60854a4e66dc23d7afdface7052942df8e93b1fe72464385308bd0fd3f3199c3 kernel-debug-modules-extra-5.14.0-162.18.1.el9_1.x86_64.rpm 6545984a41bd0ca133a0219957871b7de513833d1e5887ab3e086667550e8312 kernel-debug-core-5.14.0-162.18.1.el9_1.x86_64.rpm 70b0bf07cbdaf00eb592c90b570126613011ad836c957e00875896d502a4d6ea kernel-modules-5.14.0-162.18.1.el9_1.x86_64.rpm 73b4f5dad544a72de1c45ef9b6e4a06ab86303060dba0734a1362d44afbfc8c2 bpftool-5.14.0-162.18.1.el9_1.x86_64.rpm 864711896a38218d403e0f7c8489469910eadd4b7a464f505f51c5c7a0baf0bb python3-perf-5.14.0-162.18.1.el9_1.x86_64.rpm 899e9d4f70494b9b7ac701722c9b2f91176ae79c364b1616b72b837a3562d441 kernel-core-5.14.0-162.18.1.el9_1.x86_64.rpm 953b9c032a34d8ad3b938a7601ced3e1fd31b9773f47d98de2ad3c4418d5a955 kernel-debug-5.14.0-162.18.1.el9_1.x86_64.rpm 9c8c937c37b6a0cb424dc18d815d180537eb4372206ea8776f372f035b996f19 kernel-modules-extra-5.14.0-162.18.1.el9_1.x86_64.rpm aa0b70ac50c00f0f686f89501d7f9ca65dd1270e975c4b909e9837a72edd01a4 kernel-debug-modules-5.14.0-162.18.1.el9_1.x86_64.rpm fcdb230c6fb771b5c3fa51b5cbfcc22a2e7f1944f66dca33ab67321e92bcedd2 ALSA-2023:0952 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-setuptools security update

The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages. Security Fix(es): * pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default python3-setuptools-wheel-53.0.0-10.el9_1.1.noarch.rpm 99bd05d0b078d46b51d11d727c21305e93d7d9a52a43b622d926b9b10658a756 python3-setuptools-53.0.0-10.el9_1.1.noarch.rpm bef4e0eb356f420b754a5d0983a2339389d354a2d0c5c04d548fe97dba555337 ALSA-2023:0953 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default python3-3.9.14-1.el9_1.2.x86_64.rpm 79ed6d4ab0d52cdbe4937c64d9a7123852a865d4fd1e5f5e8c37002808b60457 python3-libs-3.9.14-1.el9_1.2.i686.rpm 9af26315d45bb8d251c316326b139bccef8d848aa04baa86bbc6f5b7c1e2f71d python3-libs-3.9.14-1.el9_1.2.x86_64.rpm e14a2bbf48f68f6410a0898ae4efd6b1a16303c67c36eab1cfc88ffbf47de209 ALSA-2023:0954 Copyright 2023 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415) * systemd: deadlock in systemd-coredump via a crash with a long backtrace (CVE-2022-45873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default systemd-libs-250-12.el9_1.3.x86_64.rpm 06eaffbb0ee32090df61ffd9a88de84efdb58791a58c5e6d0fe9d2020ac29abe systemd-resolved-250-12.el9_1.3.x86_64.rpm 071546d4dd7b6440bdece43872af47a243cd12cdd51510eac5437fb4c304637f systemd-udev-250-12.el9_1.3.x86_64.rpm 0c9d2245a6d1ffae968a577a78e1f9127efff861d0af32898b24658ba812a96d systemd-250-12.el9_1.3.i686.rpm 4c06fd5f20819dab2266107b7a379ec4c8eaa34c3557dae00b332c201caa4f04 systemd-oomd-250-12.el9_1.3.x86_64.rpm 4fb42b7204ce0da21b4ca3efe0d15539953a1aa897f7dda327aee9265fef27d2 systemd-container-250-12.el9_1.3.x86_64.rpm 707dea870fe12c70542943b6c36df104ee4d6583ef7616573fd8604bec37fe51 systemd-250-12.el9_1.3.x86_64.rpm 7ccf1487a56361161febfc4fffdd85846305ea221bdfec8d8616f4dad284ed61 systemd-libs-250-12.el9_1.3.i686.rpm aa27f236e83a6d5c416cc0929021ffcfba94edd84db9aa83c366ebdadd04615a systemd-container-250-12.el9_1.3.i686.rpm b405f3a1768d29e774001f4fffed0a1ebcce22a0841fa40ef1283b94efd9871f systemd-rpm-macros-250-12.el9_1.3.noarch.rpm d2023ff61a09883c61c8d282420cba9a773f1e546c7bbf51b6e2eb7135a78832 systemd-pam-250-12.el9_1.3.x86_64.rpm d5234d18fb3da17bacc7d9ee2c5b2eb81597116e8d4852000feb898b8f789d10 ALSA-2023:0957 Copyright 2023 AlmaLinux OS 0 1 Moderate

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: use after free allows Sandbox Escape (CVE-2021-44964) * lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default lua-libs-5.4.4-2.el9_1.x86_64.rpm 8ebeb663600a8ec6f8cd9dd4418844377c1e611eb4db6278c58f245806a2e5b7 lua-libs-5.4.4-2.el9_1.i686.rpm 9383e10ccde5ee9c72d2603155524e3543d8560a66cf4971e164c8eea83a6dba ALSA-2023:0958 Copyright 2023 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default vim-minimal-8.2.2637-20.el9_1.x86_64.rpm 36046fba11d5a5b088d03661bdcf7e4b36344d9e9a3368985a432d59d7a591ac vim-filesystem-8.2.2637-20.el9_1.noarch.rpm 99d5d7915850f5486a61fc21fd3a3963350896a289c8af304ba331b0c5577def ALSA-2023:0959 Copyright 2023 AlmaLinux OS 0 1 Moderate

tar security update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: heap buffer overflow at from_header() in list.c via specially crafted checksum (CVE-2022-48303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default tar-1.34-6.el9_1.x86_64.rpm c3da94e4ff327e244f225a30653e6a9988d470e161cb114e0d58ac7b0fc14d04 ALSA-2023:1141 Copyright 2023 AlmaLinux OS 0 1 Moderate

gnutls security and bug fix update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * CCM tag length should be limited to known values (BZ#2144535) * In FIPS mode, gnutls should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144537) * dracut-cmdline[554]: Error in GnuTLS initialization: Error while performing self checks i FIPS mode (BZ#2149640) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default gnutls-3.7.6-18.el9_1.x86_64.rpm 192f2a8dbab3fa698003beb958405fe66237f49600699b73727304bfe3b7b091 gnutls-3.7.6-18.el9_1.i686.rpm dbd1f68977f56a24910bd76529454cb864978bf299fef3932c675b7f178614ef ALSA-2023:1470 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880) * Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766) * AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528) * kernel-rt-debug: WARNING: possible circular locking dependency detected (&n->list_lock->&p->pi_lock->&lock->wait_lock) (BZ#2160614) * Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105) * AlmaLinux9.0 - s390/kexec: fix ipl report address for kdump (BZ#2166903) * libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956) * Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227) Enhancement(s): * IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304) * Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default kernel-5.14.0-162.22.2.el9_1.x86_64.rpm 2c3f834a5a87bbee067c53a467902624cd841aab0b4089e9397fb6daa3835b37 bpftool-5.14.0-162.22.2.el9_1.x86_64.rpm 35628862bc15c0cee306ada9246a03f925bea82e59c0d113401d7840bf165915 kernel-core-5.14.0-162.22.2.el9_1.x86_64.rpm 42abdc14db790b35dc1949dd4dbe79874fd7458b80163718848faf3bec4e7860 kernel-modules-extra-5.14.0-162.22.2.el9_1.x86_64.rpm 561db7171df98b52d1af9c1ee20aa2b660320d9e829b3ab5c72bce8df147662d kernel-modules-5.14.0-162.22.2.el9_1.x86_64.rpm 5ded71e1e23f60c12abc74cb2f9ce0d1057371ed8c2a4a2771addaa25f6219f9 python3-perf-5.14.0-162.22.2.el9_1.x86_64.rpm 678194b25df258e908f701fe70e2d492619c5fb1dec4252c1091b2385bcae827 kernel-abi-stablelists-5.14.0-162.22.2.el9_1.noarch.rpm 80fdc72f3a0ffe03cdbdd1fd409d9cd801d01ec1b1d8eecca7adda8905776494 kernel-debug-5.14.0-162.22.2.el9_1.x86_64.rpm 952c78d613d7a66b2b79b927b9fcada4dd335a7aa55fb2aa3f1287f83750bf5f kernel-tools-5.14.0-162.22.2.el9_1.x86_64.rpm a62f177eadefb5e870a5937176a89ea7c70b05c7d57d86be882c30a0fff4b366 kernel-debug-modules-5.14.0-162.22.2.el9_1.x86_64.rpm bb000873d18603d63870002e203293e36bab3ec981c8723d0f026e49757f25bb kernel-debug-core-5.14.0-162.22.2.el9_1.x86_64.rpm e68aa2d27886426c739f6b9bbd9e17f6af7b35b3b14cb744ea5e37bd7dab80fc kernel-tools-libs-5.14.0-162.22.2.el9_1.x86_64.rpm ead2445e639e35cfc70ffce4878bd30ef403a95377a0dc05b050f7451fba63d0 kernel-debug-modules-extra-5.14.0-162.22.2.el9_1.x86_64.rpm f016026da37d24aacb8b28c1c34575fd2a82018fc6cb5ee0979aa2d08fa0cfc9 ALSA-2023:1701 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP multi-header compression denial of service (CVE-2023-23916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default libcurl-7.76.1-19.el9_1.2.x86_64.rpm 213f6d0e6f6a6cfeb32e79695d89f46bf2bc97f3993e3bf95ecdb272023015e9 libcurl-7.76.1-19.el9_1.2.i686.rpm 3600dec0ee5207b9a5bc67b00b4b3d49ad4fdcee2a887fe891d71c5924d2510a libcurl-minimal-7.76.1-19.el9_1.2.i686.rpm 60d6a1adab3976b5a3f8f83167abf8022c441c4f87bbd3db6b7052ca7d8f2a71 curl-7.76.1-19.el9_1.2.x86_64.rpm 638d19de486cc246fd0071202f734e10e7ca65a7cbb0a9f3b03e952dc79407e9 libcurl-minimal-7.76.1-19.el9_1.2.x86_64.rpm d4baad9e47da814763bf14f16c414ea9328439fb9a14f86d54d086c80c52b0c9 curl-minimal-7.76.1-19.el9_1.2.x86_64.rpm fb230c4260adadb5f2cc2cbe70295588dc77d776de5414a45cc03d1e3d60e3fc ALSA-2023:1703 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361) * AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default bpftool-5.14.0-162.23.1.el9_1.x86_64.rpm 0e28ff257a1be2e58b737b4578ba667aa78b1a3b96c1ab94d2161f46b399a491 kernel-debug-core-5.14.0-162.23.1.el9_1.x86_64.rpm 109937e1a2383c8823b9d8bf6538bbdbee643ae901bd2db4509e09fc50cf5efd kernel-modules-extra-5.14.0-162.23.1.el9_1.x86_64.rpm 4005cbf2a6f2dd027e543662d48a32121df6ebe38f3b538dc9f3d3de72812efb kernel-debug-modules-extra-5.14.0-162.23.1.el9_1.x86_64.rpm 46f06221b178e979a262c875a4c97c76afe79fa31892abcc6773ed7987a1b0a1 kernel-core-5.14.0-162.23.1.el9_1.x86_64.rpm 4fa8e6d24028a9f75ba2a3bb7d55c2b8bfc97e36ff776ee2f45adfa61ba7e7c4 kernel-debug-modules-5.14.0-162.23.1.el9_1.x86_64.rpm 670abf94f0cd86f37b170d2eb0aa22a6495b40ef2ac1e8feca25811b179ff4b1 python3-perf-5.14.0-162.23.1.el9_1.x86_64.rpm 713e5ece83cac867d2b75b7a9c48f81aa0246edd16760dc1492ad53926c1fb2a kernel-modules-5.14.0-162.23.1.el9_1.x86_64.rpm 8cabff74ea78fd75b3ab34bec592f84298dbdf0dc87d65836a2b3cdeea13e249 kernel-debug-5.14.0-162.23.1.el9_1.x86_64.rpm 9debb3fbd98d42d330c31ef482ac0f7319f703361fc249fee5ee6bc7a3e4cb0c kernel-tools-5.14.0-162.23.1.el9_1.x86_64.rpm acea9a4c9e0185990a9e11361352badfa8ddd4a25655ac453ad1aad3bb1d049a kernel-abi-stablelists-5.14.0-162.23.1.el9_1.noarch.rpm b135c414b00bd0e1996b535e19247e464b2e8a688b699a363c0215ae00b05ad1 kernel-5.14.0-162.23.1.el9_1.x86_64.rpm d9b3c2f37517ed807bd1882e1e57ff6998df22c3b69bbf4f17df7c72b14160fd kernel-tools-libs-5.14.0-162.23.1.el9_1.x86_64.rpm e7927f7d0a74f70a8dbbd474aeef48807b658741ef01d17daea5d7ae66550b20 ALSA-2023:2127 Copyright 2023 AlmaLinux OS 0 1 Important

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_1_default samba-winbind-modules-4.16.4-103.el9_1.i686.rpm 044d5b90a3636e1c4338231c61bbacadd48cbc341ec3cbe0e1956a27eece82de samba-client-libs-4.16.4-103.el9_1.x86_64.rpm 37dcea2a27527aed1d6b77d0a5cbcdbe707f28267734ff713576418c15c33bbf libwbclient-4.16.4-103.el9_1.x86_64.rpm 436a71f7bce74b89c5f69aa8828d66b87b2b66138e51e997fc5ee01841de7cc9 samba-common-tools-4.16.4-103.el9_1.x86_64.rpm 7f71659abe67b1adfc67372f68cba1e2a5b7e937be5b55b8f10bb60cab842457 samba-winbind-modules-4.16.4-103.el9_1.x86_64.rpm 972c1ad5174a33fa7631f7fba120b5f13f29bf0e98a6d71966877ed29aff4b83 samba-libs-4.16.4-103.el9_1.i686.rpm 97e822576c5c403e5d4c725e6de3429638b5a47ce78c055a837dc10af7173de3 libsmbclient-4.16.4-103.el9_1.x86_64.rpm 9ab261447c74ad8eff93caf080563f96babfabcfb0ed7246ced042dfe9698cd1 samba-client-libs-4.16.4-103.el9_1.i686.rpm 9c47dcf146ed04f2fc9f128aab6d5a4b787822bc1edec9e26c3b9f297dd3a94e python3-samba-4.16.4-103.el9_1.i686.rpm a689d4529356aae314cf655b8efc2256dd3c943895e733eb8d88528283f0ecba samba-common-libs-4.16.4-103.el9_1.i686.rpm ab5350195e2197777d7224ab2cb9333f0b086da85b397e532f3347e6b45f7f58 samba-4.16.4-103.el9_1.x86_64.rpm aed049c357492400cbd8ff7de02792e0010d73a2d3e37b005f27b7d1a536162d python3-samba-4.16.4-103.el9_1.x86_64.rpm b18d6fdff681253e2df43f227fdeea560fc471fbe5fd0dc4eaf4051baa297eca samba-libs-4.16.4-103.el9_1.x86_64.rpm c428ccf6f979be92094fd2abf9b683f16b41857ffad05ce135fc11486eb409b2 samba-common-libs-4.16.4-103.el9_1.x86_64.rpm c6ff7bab36d948c2fcbf7b94da7f37a99a0280c4571de172242a434ed28c610d libwbclient-4.16.4-103.el9_1.i686.rpm d3854d24643396807c5080eea0ea8ab69c51b807f85dbf8d4bcd731ee551ff3a samba-common-4.16.4-103.el9_1.noarch.rpm dd6dfd9947cdd7677fbe43d5934de0182ba8462ebe6bb4abbe60cd884f86dbe4 libsmbclient-4.16.4-103.el9_1.i686.rpm f742ae8cbff4e23c8bb29d2c40fc3caa3bed813e8f068b0cacb4b716f519b224 samba-winbind-4.16.4-103.el9_1.x86_64.rpm fcb581ef2b8883385e1b1d3f5ae9d89f428bf9ec9643070ad6cb2216460bfc62 ALSA-2023:2458 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896) * net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461) * cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341) * malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655) * possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462) * KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789) * use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882) * KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196) * netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663) * race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028) * out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435) * race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522) * memory leak in ipv6_renew_options() (CVE-2022-3524) * data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566) * data races around sk->sk_prot (CVE-2022-3567) * memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619) * denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623) * use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625) * USB-accessible buffer overflow in brcmfmac (CVE-2022-3628) * use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640) * Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707) * mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128) * l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129) * igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141) * lockdown bypass using IMA (CVE-2022-21505) * double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388) * network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743) * unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188) * TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189) * u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674) * use-after-free related to leaf anon_vma double reuse (CVE-2022-42703) * use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720) * BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721) * Denial of service in beacon protection for P2P-device (CVE-2022-42722) * memory corruption in usbmon driver (CVE-2022-43750) * NULL pointer dereference in traffic control subsystem (CVE-2022-47929) * NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394) * use-after-free due to race condition in qdisc_graft() (CVE-2023-0590) * use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195) * denial of service in tipc_conn_close (CVE-2023-1382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default kernel-debug-modules-extra-5.14.0-284.11.1.el9_2.x86_64.rpm 11ff83c27529fb50f7ac8e8418ae83abbbd3f812d9c52636b39864ed677cc977 kernel-tools-libs-5.14.0-284.11.1.el9_2.x86_64.rpm 219650b7827edac22a896dddffb25d9e4279b0e266796bf58d9e65d26691e669 kernel-tools-5.14.0-284.11.1.el9_2.x86_64.rpm 23bf2add90360a8cc8c008c98bc33ba889ea771004d4ff7002ff2595b5917b1a kernel-core-5.14.0-284.11.1.el9_2.x86_64.rpm 4560e75420f93896b9dc651ededd71ff9075ec33633694b96df61e9385181da3 kernel-uki-virt-5.14.0-284.11.1.el9_2.x86_64.rpm 4604e869ae25f006d1eb01b717f3947077f13d54fcb07a339f77ae129ddc6c96 kernel-debug-modules-5.14.0-284.11.1.el9_2.x86_64.rpm 46623c4e34c56e12c09a6ca03e8e3c14888637c7ff0b4e430095795a8e04ab6d kernel-abi-stablelists-5.14.0-284.11.1.el9_2.noarch.rpm 6be8411731ede08f9c4ab2586f894d960bb594d0b7b61059fb91ceb3c02f5c1d kernel-modules-5.14.0-284.11.1.el9_2.x86_64.rpm 70e9fc920c2dedeec5cd003c3aad5479559cf8c0967de2b65e72d4977006757a kernel-modules-core-5.14.0-284.11.1.el9_2.x86_64.rpm 7f6e586089c3b6fefa36421b1615ca1a4cff0a3ae0e3092a488e6b6e74a3d5a1 kernel-modules-extra-5.14.0-284.11.1.el9_2.x86_64.rpm 86eb7fa9613318e7e2f561ac8758fe3e55ca0d362bc0eca23bfc65b911ac798e bpftool-7.0.0-284.11.1.el9_2.x86_64.rpm 90b36b056308f035caddb5b48b121e89ea4b679181018dda350e71fa2b6f047e python3-perf-5.14.0-284.11.1.el9_2.x86_64.rpm b7fb3193824317ef0c8ac58edca2169cb8ad322ce39c34d19d1ed37707879737 kernel-debug-5.14.0-284.11.1.el9_2.x86_64.rpm d41a6f8483215d180011bde82ff38410a8105d8de36b0c2ce748b9273463e129 kernel-debug-core-5.14.0-284.11.1.el9_2.x86_64.rpm dd9a746557506c37d8acb57ffaaf63cdc197329789d84fb24f1343b98451f2d5 kernel-debug-modules-core-5.14.0-284.11.1.el9_2.x86_64.rpm eca6fd63733d0a70cebaf0300f70e84db8a24d4d6d63564c028fd947c9534230 kernel-debug-uki-virt-5.14.0-284.11.1.el9_2.x86_64.rpm f03b8c38d806d595e31cd69de79b388cab5805bbf847707e343ff17f0d3d8152 kernel-5.14.0-284.11.1.el9_2.x86_64.rpm fba2e6513328f036958a3c5d08572e719e1485ca9470458576928d63bd65e64a ALSA-2023:2459 Copyright 2023 AlmaLinux OS 0 1 Moderate

device-mapper-multipath security and bug fix update

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fix(es): * device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default kpartx-0.8.7-20.el9.x86_64.rpm 898235e1c73541fc538e7027c49b43469d6e8304c1d9538b092ba540c3c3d674 device-mapper-multipath-0.8.7-20.el9.x86_64.rpm c5ebfd572718ebf5a7b4e5a2e17bb032e69e5fe29a107ae452f94a0971f5634f device-mapper-multipath-libs-0.8.7-20.el9.i686.rpm d54577de025b30eafef80740830d88cb70174ade9eb884ea1b21a0a3b6156469 device-mapper-multipath-libs-0.8.7-20.el9.x86_64.rpm d78f3e0cf4157387bf02276215732a0dbc60796d32d0a408ff28f8ac3594a0d1 ALSA-2023:2478 Copyright 2023 AlmaLinux OS 0 1 Low

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: Incorrect handling of control code characters in cookies (CVE-2022-35252) * curl: Use-after-free triggered by an HTTP proxy deny response (CVE-2022-43552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libcurl-7.76.1-23.el9.i686.rpm 13ae11f2747287adf73507995209c6d5cc013f05211af88c97f3a4917bbde881 curl-7.76.1-23.el9.x86_64.rpm 795967b90ad96ac170f6da99bd586e09dffa035020cb6119a5844064ca39eea0 libcurl-minimal-7.76.1-23.el9.i686.rpm 855fbf53ccab397188f46a904e4886801b81f8a0788c9e3dbb4f0cdceca5da4e libcurl-7.76.1-23.el9.x86_64.rpm af34ea6b05cd4f03a4c912c70a7ae071e9a895164fdd193e92b4f4e20eec4cb3 libcurl-minimal-7.76.1-23.el9.x86_64.rpm b0613c91baf2244aa4ea55a7be11807f437b7da176d4285d030f6232e9a2358a curl-minimal-7.76.1-23.el9.x86_64.rpm da891e4118edfdcc3a2a927003d6b55698654cc24bb12ea82488f4f6f759e5f5 ALSA-2023:2487 Copyright 2023 AlmaLinux OS 0 1 Moderate

fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware. Security Fix(es): * fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default fwupd-1.8.10-2.el9.alma.x86_64.rpm b644f155d657248ddb00c3fe180c7acc14bf6c131860b53d03b0fdd87c145064 ALSA-2023:2502 Copyright 2023 AlmaLinux OS 0 1 Moderate

dhcp security and enhancement update

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Security Fix(es): * dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort (CVE-2022-2928) * dhcp: DHCP memory leak (CVE-2022-2929) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default dhcp-common-4.4.2-18.b1.el9.noarch.rpm 6183ab9530f3f44ffe2cbf3f36a7c77ece97ade19ab10ee0f38237e64876f729 dhcp-client-4.4.2-18.b1.el9.x86_64.rpm 6e78c705fa3325ae44c435b8a02585c6544861ef1febd2d5b391c5588a0e75f2 dhcp-relay-4.4.2-18.b1.el9.x86_64.rpm b19b5f010e1e849499222fcba10c4883f5b002974cb38acd51bafadf02b4cd9a dhcp-server-4.4.2-18.b1.el9.x86_64.rpm c50fb7826bcebb70237d1928c1de995b8b83b630b7f2376fea9d71692045b419 ALSA-2023:2519 Copyright 2023 AlmaLinux OS 0 1 Low

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993) Security Fix(es): * samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default samba-dc-libs-4.17.5-102.el9.i686.rpm 2173d50554d21d88c29897fb0a9234a5cf13379d848f08be04ff00725ff3f015 samba-tools-4.17.5-102.el9.x86_64.rpm 2b92131773240f2340ffa0fcd9194365a59daef3b93e58a6020360747869a67d samba-common-4.17.5-102.el9.noarch.rpm 30026c9e6d9599fbc0fbcbed5e9c147c1d58f0ea2938d8dcdb2f9db98e278768 samba-usershares-4.17.5-102.el9.x86_64.rpm 3db536980b564cdb466eef75f225f9d7cccb943c9eae6537084f5805417f5570 libwbclient-4.17.5-102.el9.x86_64.rpm 3fb4c9390d85a9bb6e32e112fb8089ebb69fe60af7cbe43bbd818df17bd9b1b5 libsmbclient-4.17.5-102.el9.i686.rpm 4e7324df558b52a21171e6600c838392e0feefcec40aced82496ecae4f020aee samba-common-tools-4.17.5-102.el9.x86_64.rpm 54134096344b97153a7d1594486c489e0210a03c3cea6d0e8c0e23638a2deaee samba-client-libs-4.17.5-102.el9.x86_64.rpm 582268b480c24cd6385d0c71de23c33ca266bfe9b4faa8d7d1ee56beaf07b713 samba-libs-4.17.5-102.el9.i686.rpm 5869e0275e1a1a1b335748709fc7842f1cae7683a2197a88add80464eb70ead1 samba-dcerpc-4.17.5-102.el9.x86_64.rpm 5cb50da207bf0f01ecae5dbf447dd4f7d8cf9ad6ef8a3fa486bb1d3c71708e59 samba-winbind-modules-4.17.5-102.el9.x86_64.rpm 6854b75603eb0af1caf26ba1f890da1ec788b79c24c89a549add4ed6ddcc47b8 libnetapi-4.17.5-102.el9.x86_64.rpm 6d2b00ed8fcebc15bd30e11b3f5afad5b15a06507ac5385fa69fbf6a87b75e3b python3-samba-dc-4.17.5-102.el9.x86_64.rpm 75f0e23a0d1dae4fb1e34ebff61cb434022e211533a900db1b3c02ebce2738fc samba-ldb-ldap-modules-4.17.5-102.el9.x86_64.rpm 8fa59b12379f512cbe268238373ae10e146a46a4f23fbd0b631bbf69e1d78128 libsmbclient-4.17.5-102.el9.x86_64.rpm 917431730ecf14e67487adb828297e48723605ff3e63c8b894d56f1585f0f8d7 samba-common-libs-4.17.5-102.el9.x86_64.rpm 92372003434e06f2092d17945168e0db5abf6793dd285d555e37d71a0fbb1bea libwbclient-4.17.5-102.el9.i686.rpm 96a76a8030e3fb821249fb3f28790b36dcbad3106beb6cb27038eeae12afd467 samba-client-libs-4.17.5-102.el9.i686.rpm 9a894aebb45d3876680bc8b9dbcd35c71f48f8a654d2d950a2bced65d96e1040 libnetapi-4.17.5-102.el9.i686.rpm b35c295756123e6f2c9c704918cf4181fead503d9be832a95a5659b6257d1c2c samba-winbind-modules-4.17.5-102.el9.i686.rpm b7775da6b97a7883e055b32bcc1635385df321f4699d62aeaf64fabd196700dd samba-libs-4.17.5-102.el9.x86_64.rpm c6fbe9fffd2ba16c7bc679de8e219e85d2f4e8ef1d76c1120143ebdf3dc2dec6 python3-samba-4.17.5-102.el9.i686.rpm d0b7f25ca705be6bb9bfd2df142e95b563ebd06f190503c87239085b30b74c64 samba-winbind-4.17.5-102.el9.x86_64.rpm d620e7bddb505784a81dd6bab471866911b3d814517f27b2a9ec09596e8e6a3b samba-dc-libs-4.17.5-102.el9.x86_64.rpm dc87cfa6da9039c432e3527bcdb07c47c7f4228ea9d712a6a3b879bb2a8a2b53 samba-4.17.5-102.el9.x86_64.rpm dedf37e48c8f80bf7123f86513209ec7cf08b6dbf5f75c432043e878e48ac1f4 python3-samba-4.17.5-102.el9.x86_64.rpm e9babfec65ef29f2650af95157c7fbf37703cc289d0a9b4dc1dd38f0d46d7813 samba-common-libs-4.17.5-102.el9.i686.rpm fa1b610b346fed1105bc06bbf3a814804679fac632879f0f6926bb636697894c ALSA-2023:2523 Copyright 2023 AlmaLinux OS 0 1 Low

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default openssl-libs-3.0.7-6.el9_2.x86_64.rpm 26c713a421bfdbf3b6ea3670ced38703e9cb9430cedfd88386a0a3956a7d3eb4 openssl-libs-3.0.7-6.el9_2.i686.rpm 8eac085be15c4a76d3186a244c408f5e4d42f989f3efda10bae9233efe4bc857 openssl-3.0.7-6.el9_2.x86_64.rpm e88cc290a8062c5702b04ca1b270c12f18bb442df9ca7840ad0c4b8fbe66f844 ALSA-2023:2532 Copyright 2023 AlmaLinux OS 0 1 Low

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libarchive-3.5.3-4.el9.i686.rpm aac77eecbe6eeaacfb047c7afa1cebfdba346e9f62ac2c3c8750fca18a9f6e91 libarchive-3.5.3-4.el9.x86_64.rpm fe0bfa5fb09f8d090f8bf8de322141f9a664c400bda521678dffcded5da40036 ALSA-2023:2570 Copyright 2023 AlmaLinux OS 0 1 Moderate

krb5 security, bug fix, and enhancement update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). The following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312) Security Fix(es): * Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default krb5-server-ldap-1.20.1-8.el9.x86_64.rpm 35757978d39079f0a9b848955efcb8558b2666d8cc2c2128562603350d2089dc krb5-libs-1.20.1-8.el9.x86_64.rpm 4b77ffdc152727fd1ec01e06b84075947bd3e12cf95d71db63f4792bf3306949 krb5-libs-1.20.1-8.el9.i686.rpm 50b56334189408a8c495f39df375ccbfd569c25c3a4fceabcd17aeb793d5eab7 krb5-server-1.20.1-8.el9.x86_64.rpm 6d050eb8ade1540399bf0d66a32ed18d4dbda626ab050fb03603338254996b89 krb5-workstation-1.20.1-8.el9.x86_64.rpm b87ae67029b5bd07cd9dcd92501849a7a385ca1317339883097aa19147f51995 libkadm5-1.20.1-8.el9.i686.rpm c736f4307fe3a40180044a475ff811a4b09f2773b610636c62f45f59aa5bb402 krb5-pkinit-1.20.1-8.el9.x86_64.rpm c87db19b1ea7921b0dad7752857faad82be330111856b14b4ee3f8dcee46f669 krb5-server-1.20.1-8.el9.i686.rpm ca71b2a8396a47653231e5ed64edb5606cf34c554628a1494148a3cb6b39bd70 libkadm5-1.20.1-8.el9.x86_64.rpm db9b1043e0a4205718f6f080cf070115af8dd80740d78e5b634c54794458ed63 krb5-pkinit-1.20.1-8.el9.i686.rpm e41dce27746799191b01cbd03d3e5bb920323a7f724ed4dc8bbc47296e0c61ce krb5-server-ldap-1.20.1-8.el9.i686.rpm e768a5c87623a40197b57607825e6da16772acff5a6f24e503ae2d81b7904282 ALSA-2023:2582 Copyright 2023 AlmaLinux OS 0 1 Low

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overread (CVE-2022-28805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default lua-libs-5.4.4-3.el9.x86_64.rpm 1bc8c0d13664caaf66c6fdf26579f89796b874797ba0b859eddcb3cbe27971bc lua-libs-5.4.4-3.el9.i686.rpm e6d1cbb5f862fd2fe497dd28a3e6f409967ed33f90c7ca6d5f776519e292c2fd ALSA-2023:2645 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: the functions order_hostkeyalgs() and list_hostkey_types() leads to double-free vulnerability (CVE-2023-25136) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default openssh-keycat-8.7p1-29.el9_2.x86_64.rpm 0bce5b0452e904f8ffd06bf3efede63bebbacf900047fe8dfb375ebd35845b97 openssh-8.7p1-29.el9_2.x86_64.rpm 38098e17d4f19556dad5beabe1a7e4f2c2b369235be4601a347ba0e6f58dbe0a openssh-clients-8.7p1-29.el9_2.x86_64.rpm 4ce0d9a948600e73166abbdf9e2f4bb39f58914ccf9ac3745c01757933c56533 openssh-server-8.7p1-29.el9_2.x86_64.rpm c8ec20467a3d9a8c48a0a99b46667d8ce9be2fead5415eacb2bed43ca8676bb6 ALSA-2023:2650 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: FTP too eager connection reuse (CVE-2023-27535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default curl-7.76.1-23.el9_2.1.x86_64.rpm 18d2b445d4fa98dc06b2da68f10faaee6f18f9bf9cd165dfc4fafe597fea2eb3 libcurl-7.76.1-23.el9_2.1.x86_64.rpm 4020f69544b8cdddde6a2c2d6d7c0d0659a5ff437496c49a94406ff03dae2a5a curl-minimal-7.76.1-23.el9_2.1.x86_64.rpm 730e721f671f15f1f263d0bdf8f43ad26e1eeac9ac9f965f480e5b58b2abf5ea libcurl-minimal-7.76.1-23.el9_2.1.x86_64.rpm 941dc2f4deb338925d2ac2be83388d0cfcd6b4ea8421fd7795952c4f314a3578 libcurl-7.76.1-23.el9_2.1.i686.rpm 9ee72068dc49fe1cca008d37fb720312e00b340029ad82d93d403fc0d57c6ceb libcurl-minimal-7.76.1-23.el9_2.1.i686.rpm f3224b29225bc3187b56bcfb063d718428a7b8a535fac18d38672c354faae2c8 ALSA-2023:3559 Copyright 2023 AlmaLinux OS 0 1 Important

c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default c-ares-1.17.1-5.el9_2.1.x86_64.rpm 294cd0f4812f3e16430b2180b4c0622439b2f529cc0b993fbfa8a28a0e025e62 c-ares-1.17.1-5.el9_2.1.i686.rpm dd2a5ed88241107de98a15831193ee5aeb4a5ccaf7238898dc1b1bba9de88a30 ALSA-2023:3595 Copyright 2023 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-libs-3.9.16-1.el9_2.1.x86_64.rpm 6742f9fb1ffa0d7aa389a7101b4c8d711dbdf0ad8495e6a0654d1564c069d9ce python3-libs-3.9.16-1.el9_2.1.i686.rpm 75b6ef4c9c2b3a28a7f168c6410d8c56380cef59c841d36759546a531522322d python3-3.9.16-1.el9_2.1.x86_64.rpm e073a795aec3f30778bea3da703f7fce409a81dbfded65064b1fe9746d9ae0d0 ALSA-2023:3722 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650) * openssl: Denial of service by excessive resource usage in verifying X509 policy constraints (CVE-2023-0464) * openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465) * openssl: Certificate policy check not enabled (CVE-2023-0466) * openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860) * In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864) * In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally (BZ#2175868) * openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c (BZ#2175873) * In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator (BZ#2178029) * In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator (BZ#2178030) * In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034) * In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039) * In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 (BZ#2178137) * Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046) * OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052) * AlmaLinux9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL (openssl) (BZ#2211396) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default openssl-libs-3.0.7-16.el9_2.i686.rpm 6ca7be4faa5d4ad6a6addb7d5b96aa1e1aee03fc0ee0af32e48dcc8c2e08ecbb openssl-libs-3.0.7-16.el9_2.x86_64.rpm a31dd9fab03dae495bd935c233e1e9e62132459fdae3805aba98ccbd4959bb7e openssl-3.0.7-16.el9_2.x86_64.rpm d6f1c2c078ddd1f09ee4a0691e47d57041a3d2cda3b49a820a399e96cb80ab22 ALSA-2023:3723 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235) * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233) * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002) * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124) * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194) * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel QAT Update - (kernel changes) (BZ#2176846) * RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857) * In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727) * Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723) * Azure AlmaLinux 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186822) * AlmaLinux 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536) * Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709) * kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655) * fix page end in filemap_get_read_batch (BZ#2189349) * AlmaLinux 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348) * wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585) * ice: high CPU usage with GNSS or ptp4l (BZ#2203154) * AlmaLinux 9 "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2203178) * Dying percpu kworkers cause issues on isolated CPUs [almalinux-9] (BZ#2203229) * FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335) * perf errors - "event syntax error: 'unc_p_delayed_c_state_abort_core5'" b'_ value too big for format, maximum is 255' (BZ#2207471) * AlmaLinux 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208242) * cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong unlock before return from cifs_tree_connect (BZ#2209045) * AlmaLinux 9 x86_64, kdump 2nd kernel will randomly panic on "kvm-08-guest25.hv2" (BZ#2210614) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default kernel-modules-extra-5.14.0-284.18.1.el9_2.x86_64.rpm 083132db524ca95b7efa7d9545dd501fa494479f77e05d78318b5dbd3e82f857 kernel-5.14.0-284.18.1.el9_2.x86_64.rpm 0dec9ddcd047eb9004b299185f4e6f8e3e2a0a50d4f2ca68ff3ad8a2934155b1 kernel-core-5.14.0-284.18.1.el9_2.x86_64.rpm 0edf44068d633bdf66c3203a08ebe64cf78641bd7b65b73d877494b98f4f9f45 kernel-debug-modules-5.14.0-284.18.1.el9_2.x86_64.rpm 1b04eea353886d0ec5fc85a003fff4760435871f2ba8bf59f05ce9232df962fb kernel-debug-5.14.0-284.18.1.el9_2.x86_64.rpm 2176c3c9e343eda44f5b91715b8adffc6d05f57c21aed1778aba5316ba96a5d0 kernel-modules-5.14.0-284.18.1.el9_2.x86_64.rpm 591db618f5c5764a5a004a229036f9c1226325f96a2b4c17a9a2e019f6cfa698 kernel-tools-5.14.0-284.18.1.el9_2.x86_64.rpm 65885f1cec12b5c7d3336a49442892244cc4422d9bf530f1498263853b4036f6 kernel-modules-core-5.14.0-284.18.1.el9_2.x86_64.rpm 6d10b2c54f9ddb85c679de119529f9fd5897fa2bd76068f68e32706f9b679193 kernel-debug-modules-core-5.14.0-284.18.1.el9_2.x86_64.rpm 6dca7604cf55c917a471c2e807a6324b6d73d306b1d7fc6ccc6cfb1dbf94a3fe python3-perf-5.14.0-284.18.1.el9_2.x86_64.rpm 707cfe08813366467340b1373dbde9d5ae023d0ce63add7ad3bed079673a9cef kernel-debug-uki-virt-5.14.0-284.18.1.el9_2.x86_64.rpm 813d862c6dbe164107e0403563a2c86a7f71375665d276a913ab9120b89fb8e0 bpftool-7.0.0-284.18.1.el9_2.x86_64.rpm 8d05d0e9f1ebdbab8f041f900fff179ed70f980cd99ac675cc800986d71f34e4 kernel-debug-modules-extra-5.14.0-284.18.1.el9_2.x86_64.rpm 9e6d18d767b93e8df5c2274b3fded9ce92718f347969eb6f5e18c2aae5a7d326 kernel-debug-core-5.14.0-284.18.1.el9_2.x86_64.rpm a867176632bb41ad4879bf2d49906b7b510f1bad5a1e2dbbd836aeeedff2e09b kernel-abi-stablelists-5.14.0-284.18.1.el9_2.noarch.rpm ad3bb578c39d312aca97379fd8a77c0c72fb9b889307f546a28ba78dd8270711 kernel-tools-libs-5.14.0-284.18.1.el9_2.x86_64.rpm ddd6dd470ff996a57074f7496cb7440e9e688ae87bd75c96e6ee6a39436b57d3 kernel-uki-virt-5.14.0-284.18.1.el9_2.x86_64.rpm e80fbc98eab1d8f1abe56819496667e14a7d078066c673b918762a5f33d707a8 ALSA-2023:3725 Copyright 2023 AlmaLinux OS 0 1 Moderate

less security update

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fix(es): * less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal (CVE-2022-46663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default less-590-2.el9_2.x86_64.rpm 3b697b320f448cde42bf384762e2045266c0375057b1a5a9506974064ddc1b44 ALSA-2023:4325 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security and bug fix update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * The trust relationship between this workstation and the primary domain failed (BZ#2223600) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-samba-dc-4.17.5-103.el9_2.alma.x86_64.rpm 344bd951bdadee700513e229b4e73254cf1ec0daff70c7ba9bc777c8c68b0afc samba-common-tools-4.17.5-103.el9_2.alma.x86_64.rpm 3fe38718cf5ef30f9353374825dc918a72296f208d98011222dfb73c650b12a3 libnetapi-4.17.5-103.el9_2.alma.i686.rpm 4b0e9fc333661fe8dcd5114cd668e8cc56994a8adbb42c19fb8641cce93035b5 samba-dc-libs-4.17.5-103.el9_2.alma.i686.rpm 5eef04bfaa03c912654c1dcb68293182ce1518b4638b710ed56fa89d1ec317cc samba-winbind-modules-4.17.5-103.el9_2.alma.x86_64.rpm 5f13ab3a7404b315e87e53c329b67ba09a11f12a49cd2844b1e309582fc98f61 samba-dcerpc-4.17.5-103.el9_2.alma.x86_64.rpm 5fe1d7c125ba72798e83262bbde0c602f1c9f5a8a827d2fdd5c845b7694250ed samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.x86_64.rpm 714c561b85c8979932bfbae4801154a6b5ff0fd38ccbd834ae0eead469c7f88f samba-client-libs-4.17.5-103.el9_2.alma.x86_64.rpm 78bff486c415289a3641b842a5a0d716f161d09c63f2f2684a968a0d2c25d126 libsmbclient-4.17.5-103.el9_2.alma.i686.rpm 7ec32bd0535431b24d7915a8544f818a73f296d555725021a9bcd5090cecc41f libwbclient-4.17.5-103.el9_2.alma.x86_64.rpm 8e60a9fcea69dd842c52e44117348270aade4fa1a471690a315bcc0c8ded4898 libnetapi-4.17.5-103.el9_2.alma.x86_64.rpm 90d0f223d30e9c5fc9f16546ce7ddd67d25c9e81e07bbacf604098b1cad578c1 samba-client-libs-4.17.5-103.el9_2.alma.i686.rpm b32274defeff6ab89002d0d1461088433d06d101575cb9a207b878a481325ecc samba-4.17.5-103.el9_2.alma.x86_64.rpm b446390a9d21944ef0177eff1eb8e09600a647ddd317dcfa8051fd269ebdc96e python3-samba-4.17.5-103.el9_2.alma.x86_64.rpm b4a945b8e7272557240bed439a12d320ff36b5fe8f70ebfda40fba0e481fca76 samba-tools-4.17.5-103.el9_2.alma.x86_64.rpm c832cc31f21c3fbbd405e79039f1f361a263d993df25de50e4d51ca8b9f35c6d samba-common-libs-4.17.5-103.el9_2.alma.i686.rpm c837b28110181f9f3a5bef72b1d4f322e0cba9c6fdc71ad3c195edc3f6e38476 samba-usershares-4.17.5-103.el9_2.alma.x86_64.rpm cb457e45a2c279792c7c42f53583aeb8e7383e948f6e3e755669691a4aacba12 samba-libs-4.17.5-103.el9_2.alma.i686.rpm d0eedf6f2e8e6c582fd6cc04f35bf3d37c6ef9463b6dac87e2db983b04b677bc libsmbclient-4.17.5-103.el9_2.alma.x86_64.rpm d39793e6ebac1fb4b640ac740f1f646af0852b9a00caa92c4f2dd164ed60bc67 samba-libs-4.17.5-103.el9_2.alma.x86_64.rpm d44bdd01f60c2c6c6e0e5ba3e646fe6c6c1c44182aa8e621a28193dcace260a0 libwbclient-4.17.5-103.el9_2.alma.i686.rpm d6e1658fbcffeab5bc27a2c27672784ce854a2a9b79b638a8f970247f6d0202a samba-winbind-4.17.5-103.el9_2.alma.x86_64.rpm de78985b72b197760b6ab33a1543284f610db115ea946ab7d7fc1a9b0bc9afcd samba-common-4.17.5-103.el9_2.alma.noarch.rpm e9ee2360b0d4f946ea0a99d00263d6796074b321cc3dbaf1e9b0a1c49589a67c samba-winbind-modules-4.17.5-103.el9_2.alma.i686.rpm ebc2698e52c50d273afa1acfd05bd54f659e1996a20b32eee8c7d212c1eda60e python3-samba-4.17.5-103.el9_2.alma.i686.rpm eccc260cc66ffda1da22a7eacc24dfed40838d1d5024ce5b4c1c2fa7cdc3c97f samba-dc-libs-4.17.5-103.el9_2.alma.x86_64.rpm f30272213a5e6b9e9822679fedd9e42d98a4e8ec869b95326ee362d2deb5cfdb samba-common-libs-4.17.5-103.el9_2.alma.x86_64.rpm f4b1414fa521e6ce8cd1dc5c706264b648d13eb22bd298f6fbb479858e778fe6 ALSA-2023:4347 Copyright 2023 AlmaLinux OS 0 1 Moderate

libeconf security update

Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it. Security Fix(es): * libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libeconf-0.4.1-3.el9_2.x86_64.rpm 6bbcc385bdb8a50abf7aced5a4e54f469df0332012b66c8ce8e9fed5c1ac18a4 libeconf-0.4.1-3.el9_2.i686.rpm af528816c244d69e06d8dbab8a611e4ff1e79e8fca0c1edfc86e99d7cc2c789f ALSA-2023:4349 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484) * libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libxml2-2.9.13-3.el9_2.1.i686.rpm 21a82d021575c08bbaf9d7df5bb2a703b45e68f889976219c39db082ca3347ea python3-libxml2-2.9.13-3.el9_2.1.x86_64.rpm b905eee714e3036e827300495ececd9560778f5a5e6bee7f5142bea3770b3f6d libxml2-2.9.13-3.el9_2.1.x86_64.rpm bf48fa40c58bde1f98f6084dedb76ca2c58fbceffd0d83e29e73764507800e46 ALSA-2023:4350 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-requests security update

The python-requests package contains a library designed to make HTTP requests easy for developers. Security Fix(es): * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-requests-2.25.1-7.el9_2.noarch.rpm 7d4abc1a22686841b611f98116226e9a6904ab6e532f56bdff9783aac8e88444 ALSA-2023:4354 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321) * curl: more POST-after-PUT confusion (CVE-2023-28322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default curl-7.76.1-23.el9_2.2.x86_64.rpm 15f1ebb24b45e4566f1ede52ad9748d4cce8136a803dd33f286cc69e846281c9 libcurl-minimal-7.76.1-23.el9_2.2.i686.rpm 4d1956602a4dffbcbb148497580ce3bcbc4432e21c374d32197945fe29eba48d libcurl-minimal-7.76.1-23.el9_2.2.x86_64.rpm 57b67f05982b4b7ea10243db3094976f662659be5e4744fa9ac326ca942d2d2a libcurl-7.76.1-23.el9_2.2.i686.rpm 6ba6b0a65d3f4eb634ea6aa9948e7e39edee1db68dbada3c99ebfe6e6f9ac794 curl-minimal-7.76.1-23.el9_2.2.x86_64.rpm a7159d9f0959351c1b0224b5117e407af1db229c51197b9f873ebd4670c8b760 libcurl-7.76.1-23.el9_2.2.x86_64.rpm edb82065f515dc3ea8d298722bc2e3178e43809381cabf036524e70545909f02 ALSA-2023:4377 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090) * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869) * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458) * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-perf-5.14.0-284.25.1.el9_2.x86_64.rpm 0072f4ef1f79438650a5ff44f95f0f5425f9735ece5032170626bd5f2441248d kernel-debug-modules-extra-5.14.0-284.25.1.el9_2.x86_64.rpm 62d362aaa40aa7481eb40ddce2aa775e947700d0e52d542f5751aa88e8b8807a kernel-modules-5.14.0-284.25.1.el9_2.x86_64.rpm 6986e7c0a6bd76f12a4eed1634ba742b9569260eb8fd7d09f5c8da9ae8c9e8e4 kernel-debug-modules-5.14.0-284.25.1.el9_2.x86_64.rpm 6bd49641178eea905daf2d53d4ea0eeb5fc0474c14cf046429eced8123d6c8a0 kernel-debug-5.14.0-284.25.1.el9_2.x86_64.rpm 72b815e57009aa6d4632942e6b4442739c83ff531ce281b283411f70ee957c36 kernel-tools-5.14.0-284.25.1.el9_2.x86_64.rpm 748ac709c0043d59a25a44c0faa1774b4e5bdcf7e6bdd66392478235d5415587 kernel-modules-extra-5.14.0-284.25.1.el9_2.x86_64.rpm 7810b4fab0696a5c99a147862f38ad99de957663e8abbcef48e9b080e8f77d69 kernel-5.14.0-284.25.1.el9_2.x86_64.rpm 788afcb1d3fac9cbac473de2c7da6a9d644ab4700ecd8045dedef5ff14c77830 kernel-debug-modules-core-5.14.0-284.25.1.el9_2.x86_64.rpm 79416df83684cd80b72692d5c753846ffbb88e33bcd80b90c72d25b2bfa4c138 kernel-debug-core-5.14.0-284.25.1.el9_2.x86_64.rpm 8eda85c3539bef905eb09676bf2d1025b1c99120d7e73514c2a812b0a6703e17 kernel-debug-uki-virt-5.14.0-284.25.1.el9_2.x86_64.rpm 8f6453acef260d03726dbba730ee4b3dcd1e5a8489541b38a67c03ee11d13adb kernel-modules-core-5.14.0-284.25.1.el9_2.x86_64.rpm a64c0cca447937658fb6b4012895898692798719e7dba45217a8bd9c8aebe5ec bpftool-7.0.0-284.25.1.el9_2.x86_64.rpm b4b37906983bc18a165a51d6ea6865bf4bb6fb8ad61732fab2435adbc85f175a kernel-tools-libs-5.14.0-284.25.1.el9_2.x86_64.rpm bad7813e11a32f5112d2d7fffffafcf500bae4036494e662c42f5d2f5a41e803 kernel-core-5.14.0-284.25.1.el9_2.x86_64.rpm bbf246081e8d8a3f564faa06428ca388f481e040b6f592dc0ed96916faffcd86 kernel-uki-virt-5.14.0-284.25.1.el9_2.x86_64.rpm d873d8ff67e8d334f3d2916e61fd60e35745f521f8ddaa363474c26a013491da kernel-abi-stablelists-5.14.0-284.25.1.el9_2.noarch.rpm fcde8c45e5c41f8df04235365e5aca7299433288e2829727fd0ab02349a65738 ALSA-2023:4412 Copyright 2023 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default openssh-keycat-8.7p1-30.el9_2.x86_64.rpm 26a529580548cd1947eb1f9ebd3f0f75ee608625d054f7648ea2c3dad380c76e openssh-8.7p1-30.el9_2.x86_64.rpm 5f1fe2e23a4f3b15e3614908b6220d727c896f9767cd165522d2735fb62963a5 openssh-clients-8.7p1-30.el9_2.x86_64.rpm 9b654d2cb81eaf99c94236c2f6863883898f016343a6f78d21588120d397bba0 openssh-server-8.7p1-30.el9_2.x86_64.rpm da90844d55f0d08635a5354370642c4d4e3ad28d5205980d5088c022bd215d5e ALSA-2023:4569 Copyright 2023 AlmaLinux OS 0 1 Moderate

dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default dbus-tools-1.12.20-7.el9_2.1.x86_64.rpm 2afc3c1fd0210adcffad66df5e860f3cddbd036981f5ac61595e170286433ec5 dbus-libs-1.12.20-7.el9_2.1.x86_64.rpm 487f05bef7f307eda61454af9d602eb21f7c252eedeb4677bf2327ffb9339dfe dbus-common-1.12.20-7.el9_2.1.noarch.rpm 9082c08d39a40f15d618e0132eb7bd406e9f53e6e9cb4933607563e1479e5115 dbus-1.12.20-7.el9_2.1.x86_64.rpm 9a0b64bbab2e8975b9a9e7814461be7b0c46c14e1951a88eb84f0c3c841ff8ec dbus-libs-1.12.20-7.el9_2.1.i686.rpm ff5b64cb5b62406b1cb5e2c1e7abeedce972368c0182aaef12e9833a3437cdef ALSA-2023:4708 Copyright 2023 AlmaLinux OS 0 1 Important

subscription-manager security update

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform. Security Fix(es): * subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default subscription-manager-1.29.33.1-2.el9_2.alma.1.x86_64.rpm 5c71091e4a944375061e17e94c895678fb7e71fe53e7774b09336a7c3f0e4c69 libdnf-plugin-subscription-manager-1.29.33.1-2.el9_2.alma.1.x86_64.rpm a1ce4a072d133cff114dc673307879d7d5a5ed3fb1532c43df346034e8e4a787 python3-cloud-what-1.29.33.1-2.el9_2.alma.1.x86_64.rpm d603b63a2d759228a2f5e39693644d2795fa4ab7dd6903d80559ed1329c2c279 subscription-manager-plugin-ostree-1.29.33.1-2.el9_2.alma.1.x86_64.rpm e7ce9fa4da40c0411796a347c20e38da0c5d9cc9bb2486a9b3c2433a7223afc8 python3-subscription-manager-rhsm-1.29.33.1-2.el9_2.alma.1.x86_64.rpm eb755625abd1b99b73117bd39e6df1f525f756f71eb860b8eabb325d7405c5e7 ALSA-2023:4838 Copyright 2023 AlmaLinux OS 0 1 Important

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Information leak through Cups-Get-Document operation (CVE-2023-32360) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default cups-libs-2.3.3op2-16.el9_2.1.i686.rpm 9e115b840dceebb8c9ade4b362e3119896fd2c0216082398838b990e1116b970 cups-libs-2.3.3op2-16.el9_2.1.x86_64.rpm e8d40c9c6c586c3530979f1d56ab7028aee08b78e190a3cd174b4bc94f81b073 ALSA-2023:5061 Copyright 2023 AlmaLinux OS 0 1 Moderate

dmidecode security update

The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer. Security Fix(es): * dmidecode: dump-bin to overwrite a local file (CVE-2023-30630) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default dmidecode-3.3-7.el9_2.1.x86_64.rpm fc207411c57502a28e056a11ea87d8e611426ff4ecb0b3a6405c89c430757be5 ALSA-2023:5068 Copyright 2023 AlmaLinux OS 0 1 Moderate

linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * hw: amd: Cross-Process Information Leak (CVE-2023-20593) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.noarch.rpm 065b80746e02fbd5f83c9ade43bf0e9cb5b156a933a0a40b5e1f4ed6e521884f iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm 11b41ae5d262edece0f81293f6ab29694003ed65736e26fc25c3dce642065977 iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.noarch.rpm 12fb1763990595c75c84f9910393fcc7631e7e0161f7e1bde78098ebeb56e22c iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.noarch.rpm 2b37867a52ee959abc12f23c144cb22a55be6dfa768ba14554f21ebb1698bfdd iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm 2bde52e663ec2d78624b0cc54f4220b7feb851432949d92a992246be782c8a3a netronome-firmware-20230310-135.el9_2.alma.1.noarch.rpm 2cb2d628f0a04f75b13333a0487067550ebfa555fa95b0e998f7359f02ac0daa iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm 370e2ad54b4e1c063027947a1b37582f506b8e0a404fb0131de1c1ddd1bcdaad iwl105-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm 3ae897077f984eb18dc3f6a2d6168f371d3dd71276c76569109e585a369a3dbd iwl135-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm 3e8ccea6ac010106d0aa07f7bd5dfd8fdd961b4f3c725621f99fddeb1c53b70a iwl100-firmware-39.31.5.1-135.el9_2.alma.1.noarch.rpm 844cd1f8389ae7c9453f5fab38b7b2728410389fa4ad1a149aaa815c579853cd iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm 8d885fcccb043a27c4d955583c0114b3ea57e54f49e38ab17a39f8f3787eb1f8 linux-firmware-whence-20230310-135.el9_2.alma.1.noarch.rpm a21c9a82aa74a2ffbaf9e370806681c04fa835e459795fd4459da55fcfef1085 iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.noarch.rpm c80c088c212c2d35c5dcabfc1d77f73828626861a70de3fb48103f28b0b961f3 iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.noarch.rpm dcd7a0d844fc87c8ca7f14e21ce3b74431d8451cb3b8d61649c042619f5357e0 libertas-sd8787-firmware-20230310-135.el9_2.alma.1.noarch.rpm e2b4b492eee27c5a9475444104d91cc83206414d76505ae345f1b0a31e4ce9b3 linux-firmware-20230310-135.el9_2.alma.1.noarch.rpm e59f5edb474769099bac7e3269645ada3e6e82d75760834b98eae95c8166bd51 iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.noarch.rpm f024df7f26ab8d33236ac0720771b24242a94ebc6ba53387a92b1d0d7bfa5bab ALSA-2023:5069 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel (5.14.0). Security Fix(es): * kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390) * kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610) * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776) * kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004) * kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147) * kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248) * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001) * kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) * kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026) * [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463) * rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121) * AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310) * AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587) * Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623) * bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945) * libceph: harden msgr2.1 frame segment length checks (BZ#2227070) * Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768) * Important iavf bug fixes July 2023 (BZ#2228156) * [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158) * lvconvert --splitcache, --uncache operations getting hung (BZ#2228481) * perf: EMR core and uncore PMU support (BZ#2230175) * NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483) * NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488) * [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747) * Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850) * [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status SRB_STATUS_INTERNAL_ERROR (0x30) (BZ#2231990) * AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213) * NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302) * [Lenovo 9.1 bug] AlmaLinux 9 will hang when "echo c > /proc/sysrq-trigger". (BZ#2232700) * [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64 (/proc/[pid]/wchan broken) (BZ#2233928) Enhancement(s): * [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270) * [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960) * [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170) * [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-perf-5.14.0-284.30.1.el9_2.x86_64.rpm 046db42f829e699f8d7cbcdd9d117e7c4af180f4c63ee6d5f8f75f01ef3a488c kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.x86_64.rpm 130554a3522df3b7c27369513e8411bd24a5794b0d7781fb480f92daa9688faf kernel-5.14.0-284.30.1.el9_2.x86_64.rpm 361d4deffca8328798f948e5e71636deb5372250244eeb46df437cabf73093fa kernel-debug-5.14.0-284.30.1.el9_2.x86_64.rpm 3930541c5eb2158927f1dc67dcab94ab1533a21926816ec8e2c7d20164badd94 kernel-debug-modules-5.14.0-284.30.1.el9_2.x86_64.rpm 3ad0092d00c2be4726896359d63cb18dfb69218d21999da8fdd6026d56adb661 kernel-uki-virt-5.14.0-284.30.1.el9_2.x86_64.rpm 465ee749b56b48b4d36bc8d2a3ec2ffd497d888aa970f550508fc058638f677f kernel-modules-5.14.0-284.30.1.el9_2.x86_64.rpm 50b76613536785f5dcb0254c43703cd1142544d25ca91b092c505aac73b9b4df kernel-tools-5.14.0-284.30.1.el9_2.x86_64.rpm 5cb90d63ef27ba1e1729aedc556f3dc0a4c760083ff73ac183674b80fdc4ce4c kernel-debug-modules-core-5.14.0-284.30.1.el9_2.x86_64.rpm 63338bcbf4c17a285d06cb23546b1218bfdfa5a44081e179be3cd7d26a3584f9 bpftool-7.0.0-284.30.1.el9_2.x86_64.rpm 6f4d8c0fc803e705fd81d6013389865702c466e80542f7e649c36d68fd4f8508 kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.x86_64.rpm 7f43aa18a2d67c010366a81baa739c02729285b77da5ce23d76c6ea4980e663b kernel-debug-core-5.14.0-284.30.1.el9_2.x86_64.rpm 93bfd6abb632c8d9d843a8f70ecb2b4f135e254a179525e541dc441c1221e342 kernel-modules-core-5.14.0-284.30.1.el9_2.x86_64.rpm a9b516dd6630bf3f6b1ef11b9b4080315e13c508aa8ff694b089b12bde207b94 kernel-tools-libs-5.14.0-284.30.1.el9_2.x86_64.rpm d91ce9e8946c5f024382a4e1e7e75c0b0fd67c4ad1e884835fee750da55ee823 kernel-abi-stablelists-5.14.0-284.30.1.el9_2.noarch.rpm da143ed2fa92a56dad1027486191beea0d5d73f937d96894a024ad2a7e24c175 kernel-modules-extra-5.14.0-284.30.1.el9_2.x86_64.rpm dc7d845d9c8e8cd9d57ba9925cdddbdc2de88ca6aa1d3f81755b0c8d79b490a3 kernel-core-5.14.0-284.30.1.el9_2.x86_64.rpm fc4b785da7d18053c5d18998b8f01ebe8d57714f786cff2afeca780c794897d9 ALSA-2023:5071 Copyright 2023 AlmaLinux OS 0 1 Moderate

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603) * libcap: Memory Leak on pthread_create() Error (CVE-2023-2602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libcap-2.48-9.el9_2.i686.rpm 0352b4ff0054c15d5c575cce5fcb5838379f25565f346224e7c664b1e2fbed16 libcap-2.48-9.el9_2.x86_64.rpm 0ac0a6e3a85d73c7f9a6d11cb701bba345b9b355e25a8656ad4f3a635668c7af ALSA-2023:5453 Copyright 2023 AlmaLinux OS 0 1 Important

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911) * glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527) * glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806) * glibc: potential use-after-free in gaih_inet() (CVE-2023-4813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default glibc-langpack-ku-2.34-60.el9_2.7.x86_64.rpm 0152f8752d6eabebd27390c02f10a8dda8a1f1e8f839cd778a5d279a47d6d0d3 glibc-langpack-es-2.34-60.el9_2.7.x86_64.rpm 020dcdfe8cc1a57a5eef61897fd73b1dc549082c19ba77edc176b1452b119533 glibc-langpack-af-2.34-60.el9_2.7.x86_64.rpm 03472dd2f5c96a4b5461746c859e18a8e214ff9fc9730a58722df666f71ed222 glibc-langpack-se-2.34-60.el9_2.7.x86_64.rpm 04ac3ef29d41a909480a1844320342526675c0c8b776251562e53cb0cda7512e glibc-langpack-bo-2.34-60.el9_2.7.x86_64.rpm 064d7d80b2f2f7200e488b27785a5b1cd102c98ec6b3744f004fadc1a1ff1d47 glibc-langpack-is-2.34-60.el9_2.7.x86_64.rpm 076f1ee5638aafae7b54dcdf14a94d7af493ea359188e23ea882b05781addb5d glibc-langpack-bn-2.34-60.el9_2.7.x86_64.rpm 0b19e6ac243bd51dd86bc32dde021d1000a81dd4439c9333848fe5a902eb0d01 glibc-minimal-langpack-2.34-60.el9_2.7.x86_64.rpm 0bb65bf9b17c9f1834c34bd1f9970939df0e88b86121ed41ad91f5aa12379b67 glibc-langpack-tt-2.34-60.el9_2.7.x86_64.rpm 0c1dbada43f8a46478a247d2e69aef9aa06ad592178d640393d1ff709771184b glibc-langpack-tr-2.34-60.el9_2.7.x86_64.rpm 0cab969faac6c8840b1ab7c095f754dd9df3faa2e18359dc0b819feb0c9ce771 glibc-langpack-ve-2.34-60.el9_2.7.x86_64.rpm 0d15c3ff295a659968f9747bd76e2c281e5cad3b0a12cc26d8221c839258be81 libnsl-2.34-60.el9_2.7.x86_64.rpm 0e68600efd4765e60f0dc91c9aac473acdb6292adddb513a11a6752b6fa5a3aa glibc-langpack-crh-2.34-60.el9_2.7.x86_64.rpm 0f240e1b269dc820fdf8e7179d2a4d119f69a3908483e89f908f350d74bc4772 glibc-langpack-ia-2.34-60.el9_2.7.x86_64.rpm 0f298c3752ef5515e16eb0452e30b1b813d8200f5276b69f2f837cc2dd7fdbe8 glibc-langpack-mni-2.34-60.el9_2.7.x86_64.rpm 10e637641203433c5b63ca9372ca5d4b1b421159dfb9b82f5696fc9943b0b755 glibc-langpack-the-2.34-60.el9_2.7.x86_64.rpm 10f62bca1a2e9dc7ed01580106d0ea0bdb0275f4e061a0a640237696b4f9dd0c glibc-langpack-sm-2.34-60.el9_2.7.x86_64.rpm 11f4687a8ab964af677610ebe0694d24ece69aa0e26a5caa192106441babd659 glibc-langpack-nan-2.34-60.el9_2.7.x86_64.rpm 136b0f9407c0858272ee1c3800001cbf780e525c841e9b937aaef7aab6039f74 glibc-langpack-tig-2.34-60.el9_2.7.x86_64.rpm 14eb7328011754f858605df889a809bbd1b69937149502fe628d1458ddceaa35 glibc-langpack-agr-2.34-60.el9_2.7.x86_64.rpm 1540a2cd80e02df7500d5f070b0b9cead8fcbb7fb45f623e0750bf13ebf4dbe4 glibc-langpack-mn-2.34-60.el9_2.7.x86_64.rpm 15c62a23ea601c12dfae01366140d72ceab72006cdf4236e2cbb4a1b7b3c51de glibc-langpack-sk-2.34-60.el9_2.7.x86_64.rpm 1730500dc6e551e602eaece296aa871dc3c2f2fc684d1f258cb3fb7f353c1a10 glibc-langpack-doi-2.34-60.el9_2.7.x86_64.rpm 173bb8d69a7924f0a5fdac19e12ed4ccf67e2af7c0ced49192e08eed5f8c6c59 glibc-langpack-nso-2.34-60.el9_2.7.x86_64.rpm 1af5285f0904ffc2b8dede0ef8775703715c94305e7e89764575ded6a7152e4d glibc-langpack-ka-2.34-60.el9_2.7.x86_64.rpm 1d0c2509fe26319bedf002a6956bdf0f96364e25162a0f3bf17768cf66a53690 nscd-2.34-60.el9_2.7.x86_64.rpm 1d7b0970963fb070ab846137d01ace5986b60b6c4a48bd8f3f3248b24a1307c3 glibc-langpack-et-2.34-60.el9_2.7.x86_64.rpm 1dcf41fbcaa2c35ed339a9f2d6ef45bf7591e87efa8fa4a83d44ae93b73677a0 glibc-langpack-so-2.34-60.el9_2.7.x86_64.rpm 1f962e812b27b37465c492f7c0646d5a4aa6d33a49d9aa0f5779ee5c4a6974b2 glibc-langpack-ky-2.34-60.el9_2.7.x86_64.rpm 209c1fef1a37e75be0b8e4f72ed4f8cf179de2961ed22f72764aec875ee293dd glibc-langpack-ks-2.34-60.el9_2.7.x86_64.rpm 20d4bce5e48a18e27cf447ffdc6cbb21af289699926d349ab68894a6b3c28674 glibc-langpack-az-2.34-60.el9_2.7.x86_64.rpm 21a77dbada6cf986b69b0716c364e22912af7a716d30740c191f60346bec1fb1 glibc-langpack-mt-2.34-60.el9_2.7.x86_64.rpm 2306a58fbe53b949a63c0a4e0f11680f569c4b39432bb612cc5b793228dffbb5 glibc-langpack-wo-2.34-60.el9_2.7.x86_64.rpm 23ae11b9c6905b16f0a8f3054a1c574547ff9c596a4a6b85639a10dcbec38b85 glibc-langpack-quz-2.34-60.el9_2.7.x86_64.rpm 24ca7f3062649c4fe520513d7e78d3277af7c6657eda7701eb140fe7f217dfd9 glibc-gconv-extra-2.34-60.el9_2.7.i686.rpm 258fa4203fe760b91740f8dcdd9b3f96daad502feced85914b4d8e85ab052399 glibc-langpack-gl-2.34-60.el9_2.7.x86_64.rpm 26ecf756f4d8aa255e079f60f978f6cc4ce0137fe4f5e9371ca9d947b5928d82 glibc-langpack-ga-2.34-60.el9_2.7.x86_64.rpm 2748cccd4df5042d5a0f03b733a80011f8477af0fe79aebf1abed319fd044d2d glibc-langpack-an-2.34-60.el9_2.7.x86_64.rpm 28738edac63a4cf9ec4447e48a3a623644f38ab43755d8ed1bc18b34b2d96a77 glibc-langpack-ar-2.34-60.el9_2.7.x86_64.rpm 2b5b193c99159ced209a6ed7ebbce3ca85c5ec2b2e433772297feaf706987d13 glibc-langpack-th-2.34-60.el9_2.7.x86_64.rpm 2d26412f753d1191431e08e278b4ebbbd74b0625d7877f621d92de33cbe4f048 glibc-langpack-dz-2.34-60.el9_2.7.x86_64.rpm 2d4a477df04df7c41a688296a158c2c8a0da65830e249a0bc2fd29c0a9f1c847 glibc-langpack-my-2.34-60.el9_2.7.x86_64.rpm 2da319d24cab8411e0020aa2e8b866ec2fdb8d1e206a07baf2e0b8b75a8e4e3e glibc-langpack-shs-2.34-60.el9_2.7.x86_64.rpm 2e0674cc9147b5c692931224d224d7127eebba5db61f67bc9afd8d8e92e149f4 glibc-langpack-wae-2.34-60.el9_2.7.x86_64.rpm 2eb80b8feea607ba5f0f4140aba5701700768a1b031e8f0b71dc2bd5ba5ebf47 glibc-langpack-szl-2.34-60.el9_2.7.x86_64.rpm 304b2fbaa9a19dca0997e5c8946e7965f581baa794e292ab9553b69bc3404bf1 glibc-langpack-gez-2.34-60.el9_2.7.x86_64.rpm 313fb0ba2ed4a641de21966450f2ab8b5ca6f22c04a1a4414b181c73c547be2d glibc-langpack-mfe-2.34-60.el9_2.7.x86_64.rpm 31a55c18575c332042b48d7dbfc5acfc23f0bd9512748e0799963d3757e0386e glibc-langpack-da-2.34-60.el9_2.7.x86_64.rpm 336802424df033f9eff37447398ec742018d57deedc8e0bea2753f79f1b0af85 glibc-langpack-tpi-2.34-60.el9_2.7.x86_64.rpm 33aef859ea207bb7132d85ba1d3493910734afd7e440de47c91bf86dc6cff63c glibc-langpack-tcy-2.34-60.el9_2.7.x86_64.rpm 35045e1852362338786cd47a94afc67c5126c732fb0b53d03a0eb4cf66ceb4bc glibc-langpack-li-2.34-60.el9_2.7.x86_64.rpm 372713903fbba1f8a0e69ac7774b7909f4aa92559f5b26132838c45a388848ab glibc-langpack-ca-2.34-60.el9_2.7.x86_64.rpm 3c3d09fd591f0b63b8618910b0fda43202676b67da5ae7bc865c5d4398295d97 glibc-langpack-kk-2.34-60.el9_2.7.x86_64.rpm 3cfec694002a54e27d3f7db388efa04462599beb92d385b4947f5a51f3b1f721 glibc-langpack-eu-2.34-60.el9_2.7.x86_64.rpm 3da30666fc8ba05f50cc9cb9c74b6dba719f2533971f8906280deb73a84e2435 glibc-langpack-ig-2.34-60.el9_2.7.x86_64.rpm 3f9f3d40a5eac370fd47c99342ef1da5d72a91d9d65775f856b3a59f46516d0f glibc-langpack-oc-2.34-60.el9_2.7.x86_64.rpm 45caba6eb471dc11661a675e58a36c0885b607ef78e4d8e3869f517f7c69f63e glibc-langpack-tn-2.34-60.el9_2.7.x86_64.rpm 4659de7ece0c40aa4f441ae089c5af1a819a915cd055aad50e4bbd5cf22e547e glibc-langpack-sr-2.34-60.el9_2.7.x86_64.rpm 47933e7d1b18650195c95e6f5a8b1a47a1d14a5bfaea42c5f95800bbc445cbab glibc-langpack-sv-2.34-60.el9_2.7.x86_64.rpm 4816e345dcc53d61a0fb84f125e5534252d695a4de7081d8e5c57941c51830b3 glibc-langpack-be-2.34-60.el9_2.7.x86_64.rpm 489d9f57ec4361dfc4f9f3a13b30204428173edc0a2fa954ffe0fb3f17d0eef5 glibc-langpack-tk-2.34-60.el9_2.7.x86_64.rpm 4992a0519f81d905e065fc6feb3ba51227337babc7ae53ce20109c59c5cefd5c glibc-langpack-gv-2.34-60.el9_2.7.x86_64.rpm 4a59061e1c456e27358f35a9cf7a2d1a82cc014d6b400253c51075aab1b8e033 glibc-langpack-km-2.34-60.el9_2.7.x86_64.rpm 4b103e13449556bdf2bd3dc9d913353d823b0df3deeaeffb29b8230625c35202 glibc-langpack-ayc-2.34-60.el9_2.7.x86_64.rpm 4b9cc409c670dcf03c3108bb22115a21834ad88c21f1e03e95dab4546984f4bb glibc-langpack-tl-2.34-60.el9_2.7.x86_64.rpm 4c8e769265fc864a8ce08dfab58d5b8b04b0b3a8bb2eac7b5f1933bce8cf4994 glibc-langpack-yi-2.34-60.el9_2.7.x86_64.rpm 4ce1baf72e8113b7c4efb4ce3a278bdc44bdcd87f3ca2f00de4d79a1111d031e glibc-2.34-60.el9_2.7.x86_64.rpm 4dba8b120cc437c963e8b5863568507cd62e77f0b7e243e1cc9e81bae8c701c2 glibc-langpack-sid-2.34-60.el9_2.7.x86_64.rpm 4dff275dacd95d311c663eeaff8db887e01b1d9328a06906bd9cc7e0308f2af8 glibc-langpack-ja-2.34-60.el9_2.7.x86_64.rpm 51c05c819133d96cc721f011f6eef8cce81f7c31d34884d6fc60081843899f2b glibc-langpack-st-2.34-60.el9_2.7.x86_64.rpm 51f02fc35701c1aa1ef33ef7bb892c91829b30bfd119f40a32d4fb5e2eb68fc8 glibc-langpack-dsb-2.34-60.el9_2.7.x86_64.rpm 54607da3f67d910e65054e20aece9953c90591beeb33b9ee13e53b190437665e glibc-langpack-sa-2.34-60.el9_2.7.x86_64.rpm 5472483afbeea06aabad926c19e3dbe26e0626f1f430b72b5837b4c8651a587a glibc-langpack-nr-2.34-60.el9_2.7.x86_64.rpm 54c62af10c7d42b76f03b8ef9147bf697ae77bcc9955a6b2c74c23fe1a06af4a glibc-langpack-mnw-2.34-60.el9_2.7.x86_64.rpm 580ea352bac9aca89b0ebb18450ae2bde184ab72e6a3077fb6716967d63dea91 glibc-langpack-pt-2.34-60.el9_2.7.x86_64.rpm 585f61a435b738d56e85d2032ca4ad347cb39c3cae92233751accb857dc09fb5 glibc-langpack-iu-2.34-60.el9_2.7.x86_64.rpm 58e6528d86bc79112977a862c5c698cb9066894a8ed80e6b09a2fa56e55a9a9f glibc-langpack-kl-2.34-60.el9_2.7.x86_64.rpm 5921c5ab4d4313e71fed722cb80bfc1b461d34bb29d2995e1a2f92e7e02e7410 glibc-langpack-bg-2.34-60.el9_2.7.x86_64.rpm 5a562a14d8fca27bbfcaf191237bc44f7ad803ec5028a3cafb990046c455021d glibc-langpack-sah-2.34-60.el9_2.7.x86_64.rpm 5a7ee5025e3df995f729df32892a58ba9b2ddabd9f27a5ea6e4567962b9c7ec5 glibc-langpack-hy-2.34-60.el9_2.7.x86_64.rpm 5ab82211c5aec5eb42d600957ee7ed7cfb9b3b10a6a42ca861732251ab293287 glibc-langpack-unm-2.34-60.el9_2.7.x86_64.rpm 5abb1d5c200963219838c6fff5d280736c247ccb0ff87bf2cc1f38c48f4ea120 glibc-langpack-lzh-2.34-60.el9_2.7.x86_64.rpm 5e8f71a58142797e20a238d780fd13d7ea2fa13fb81ba4252be1e2a496ea3154 glibc-langpack-tg-2.34-60.el9_2.7.x86_64.rpm 609f4e9eebf45ccd694fcb9e3a5eb077e3f355985701095654517b061ed4e32e glibc-langpack-fo-2.34-60.el9_2.7.x86_64.rpm 613cf3044c72bed2f2d231da81e10b14fb059c5eef8427a9824ef715daaf2dd4 glibc-langpack-vi-2.34-60.el9_2.7.x86_64.rpm 64a02ce64edf312f1c6024ed679da7b7d07bb6208dbf25e6a829de7655d645d8 glibc-langpack-am-2.34-60.el9_2.7.x86_64.rpm 664f36a6731828d1efe49255398616281a538eb25960e047e96b8ad65ec1d373 glibc-langpack-yuw-2.34-60.el9_2.7.x86_64.rpm 67a42753ba4fa0852462182896dad090c4e07b12654c65c92e7b6bb8b28ed88c glibc-langpack-mjw-2.34-60.el9_2.7.x86_64.rpm 67ae92ae16bd56b656bc612d4a8b0ba1710311616426f054a204bc97dc7a3ae9 glibc-langpack-ce-2.34-60.el9_2.7.x86_64.rpm 68a1d99991ddb2151cfcaa64ed631cc544eaff9543464d4f72ba043be1ebe59b glibc-langpack-om-2.34-60.el9_2.7.x86_64.rpm 6a341e3d99ad6583ec7d095bbef2889b1258cdeeabfbd3784ca52ef43de4f976 glibc-langpack-ik-2.34-60.el9_2.7.x86_64.rpm 6d5a68783e641a188ca50d5807992b6590e7b3ec6446b758bccbc9bc10525bd7 glibc-langpack-mag-2.34-60.el9_2.7.x86_64.rpm 6e5f0c1e7b45dc389f6ab7d4a378308a9a6d6cb5ec7a62d3aa6bc28cfe036d46 glibc-langpack-dv-2.34-60.el9_2.7.x86_64.rpm 6eaa792ca5209cdb1b9b59430b41917eee60dc68533de3d4217f855fa0aa5c2c glibc-langpack-zh-2.34-60.el9_2.7.x86_64.rpm 6f55a05611513f1a98dc442d6cf3787c39cb9724572179d9c14b5f42fba1fecb glibc-langpack-cy-2.34-60.el9_2.7.x86_64.rpm 71d616832a32d8ccb9e7bb29d4a351a74fb78485c4279483bb411acd54814c21 glibc-langpack-si-2.34-60.el9_2.7.x86_64.rpm 756652db06e846691f9f147670b828bbe45c33fb5e25d74c7659e427bcb4043c glibc-langpack-bho-2.34-60.el9_2.7.x86_64.rpm 757a82d51dd866d569cc7c383e23e6480bbd7a3428a1bb7b3d547f187b652443 glibc-langpack-bhb-2.34-60.el9_2.7.x86_64.rpm 76b4ec3ace2daf3c36726f50e1319a8093995272fc3d6247d015288307401cfa glibc-langpack-ast-2.34-60.el9_2.7.x86_64.rpm 76bbb7e3068baa468b2c81e01c68e2386e383e1aa0fad39609130869da099b15 glibc-langpack-or-2.34-60.el9_2.7.x86_64.rpm 76f0fde2d4c6dd5f6056ad321d0e5213b6830cf7c3301ccc4b59a6c30506c903 glibc-langpack-mr-2.34-60.el9_2.7.x86_64.rpm 779fb9b22d89b6cd2f8e21143724d3d06bb03083a2c7f0ea3b496b0a742ced80 glibc-langpack-ln-2.34-60.el9_2.7.x86_64.rpm 77b4b5f88d16bdabee24ffea853050e4dd64f0016fbfd5b6f80d4bdaa00a2a10 glibc-langpack-br-2.34-60.el9_2.7.x86_64.rpm 792af440cd3a03435db42e6e5a5b67ff337ced7d095c02b3cec6829fee3b8e7b glibc-langpack-cv-2.34-60.el9_2.7.x86_64.rpm 79c4c78c56de0dece418276372824b3e760d360dbdaa0a7e61e9dce89328f052 glibc-langpack-lb-2.34-60.el9_2.7.x86_64.rpm 79ce04242ede4a25da7271f84437f301d1e93f34194577b7cfe9601870b6956c glibc-langpack-wal-2.34-60.el9_2.7.x86_64.rpm 7ab9edc0609cf05979d060d2103f7ed5488eb40256ce3a0e1b2b46d76f442385 glibc-langpack-ak-2.34-60.el9_2.7.x86_64.rpm 7b1b8fb98cb492cd5068032fb466d4f47153e1e6aa9a531f4ef04b5e056b8e0e glibc-langpack-kok-2.34-60.el9_2.7.x86_64.rpm 7b5cdf6b21f359e516bc5e0d5e77b817dc2e5007f3cb728c030f873c55424583 glibc-langpack-os-2.34-60.el9_2.7.x86_64.rpm 7b9e3c2cabc58558f7826714327b98d7dcb46979f1afe5d2e059c96ada45cd69 glibc-langpack-uk-2.34-60.el9_2.7.x86_64.rpm 7d739947fca9883ac12f641b57e3c5bd900c513e560f0629cb09ab8efbb213f2 glibc-langpack-en-2.34-60.el9_2.7.x86_64.rpm 7e66448c429e6e841f503bf0dbed0cecba01120fdc69575f8c28893f1a634cf3 glibc-langpack-pap-2.34-60.el9_2.7.x86_64.rpm 7ea8bfd5ecf0a4285d11230ad725a070dd026e5405d090b533ea52263a388253 glibc-langpack-sc-2.34-60.el9_2.7.x86_64.rpm 81ce337404b6dab094bd2e0858cd4fa2c294873502f2c7e674789837c185b444 glibc-langpack-kw-2.34-60.el9_2.7.x86_64.rpm 81dc465d88b2c932eec02ab408e48a34ac970e57f7c7366858023ced53a4e27f glibc-langpack-ru-2.34-60.el9_2.7.x86_64.rpm 82391370373e8f8879fb380ff1a9913a1bb69de5c7baf289ec1d57e0ef997820 glibc-langpack-nb-2.34-60.el9_2.7.x86_64.rpm 82fb6837fed1b248af3d5e34988c48ef6776609fd390a27be0b6466b82736d0a glibc-langpack-ht-2.34-60.el9_2.7.x86_64.rpm 83fc3b5f2a6511dbf4948953def5ff41b024f00c67903cf49464b97216dd9f24 glibc-langpack-mg-2.34-60.el9_2.7.x86_64.rpm 8588e42f1ef5faf1750203fa16666cf68eef212cf8ce18cec9030865c2c8337c glibc-langpack-bem-2.34-60.el9_2.7.x86_64.rpm 8684bc435ba83c01e87698a2827a4805aadda3db8544861756795c4ab6dae35e glibc-common-2.34-60.el9_2.7.x86_64.rpm 87a6a9bbf3a3d707ff7b81832ac8d2dbe4dc6099106d15873b900a423fc49ebc glibc-langpack-wa-2.34-60.el9_2.7.x86_64.rpm 88dbcfae647603b8e40e2e6329dbe005eea34c9c465ff8976a0dd731cb85657f glibc-langpack-lt-2.34-60.el9_2.7.x86_64.rpm 8e0edcd83ed16efd4039844b8a1d8c8fbedfa2c5dd490a8244b94dc98a582861 glibc-langpack-ms-2.34-60.el9_2.7.x86_64.rpm 8e8261b329402a72f134cea380d33979c5f33b6f53474a28a39fbde84fe85c92 glibc-langpack-id-2.34-60.el9_2.7.x86_64.rpm 8f0f318e10296197b06abb07a1bf8a47585b9c2645b527773a20a5d29cd18108 glibc-all-langpacks-2.34-60.el9_2.7.x86_64.rpm 8fb9f3140fdc65b8bd9e4a5527ecd155cb4b87c340736195e7f45328b869208c glibc-langpack-lg-2.34-60.el9_2.7.x86_64.rpm 8febf940e0e7502f2cba30cb11192fe7229d2a65e60ff4ba8d5e84e1080a07d9 glibc-langpack-ml-2.34-60.el9_2.7.x86_64.rpm 9085ab7a8ef56b8b49e673e0713b4e604a1bba9524bcfb151348ccd70cfc54d0 glibc-langpack-ko-2.34-60.el9_2.7.x86_64.rpm 94421cec66b94c38cc6526301e17c9c9a36f9b1a62f9d022efc0922e40a4e121 glibc-langpack-pa-2.34-60.el9_2.7.x86_64.rpm 95350d7da47a396c7cf4c8a65040fe47790c91a72695f2a83ffde032f787b622 glibc-langpack-as-2.34-60.el9_2.7.x86_64.rpm 9683e12ffc004a445b4c934da687f89ed4ef0bdf43ec8119ae0bd677a0baa095 glibc-langpack-fa-2.34-60.el9_2.7.x86_64.rpm 968918007be6773ca34554d6959c11552ceeea1c14481bd5efeca93a97806380 glibc-langpack-te-2.34-60.el9_2.7.x86_64.rpm 96c8c53c2a4aa5752c45f99e899fd3a04da3ab3c101af8172b8aef35f3d460f6 glibc-langpack-brx-2.34-60.el9_2.7.x86_64.rpm 97b32d91f5de123a2a09f99dfca805ffceabc72557a9c3888de32684d6487513 glibc-langpack-ne-2.34-60.el9_2.7.x86_64.rpm 9aa5807fd0a01284edfa658770a07f19621ef10bd7dcc6795c31ca1c9cf0cd60 glibc-langpack-gd-2.34-60.el9_2.7.x86_64.rpm 9aa83269fce82b1796eff5bb74ef27b383e5fec897f86072257dac273699f7fb glibc-langpack-miq-2.34-60.el9_2.7.x86_64.rpm 9ae9b914078332f73a8bd4fde07bf45f26d289bd78bc7de6e43efbc8cd675a61 glibc-langpack-fy-2.34-60.el9_2.7.x86_64.rpm 9c949ff4e97a5f4aea1e421fc1b3732a6563c010811f1fd84a3e234427afa46c glibc-langpack-raj-2.34-60.el9_2.7.x86_64.rpm 9dc49b9b4b6a2786de856ca4da792f56bded0595529c5a48c8a8af4ebd24d988 glibc-langpack-fr-2.34-60.el9_2.7.x86_64.rpm 9f57bb96374afce33ade257c5c5ef59c90111fd2d6914a3eac905020224d980b glibc-langpack-bi-2.34-60.el9_2.7.x86_64.rpm a90dc2340631c4e876d38e90bdade56704c0eb9949408ce5a25c980ed8c00fd1 glibc-langpack-hif-2.34-60.el9_2.7.x86_64.rpm aaf61670b51499ce5a3e8b4cdd466ecf0b96f7cd33082e7c8d57d86b35da5454 glibc-langpack-pl-2.34-60.el9_2.7.x86_64.rpm ab64590ae696f9b14d7cd55484a9dedc8a8d4a2585d0e432f4faf4244ff9d875 glibc-langpack-el-2.34-60.el9_2.7.x86_64.rpm abab71c5694439db0e9d5879617d25e840981cff4bc073c998cd0ba18aa5084e libnsl-2.34-60.el9_2.7.i686.rpm acc6793b44e483e8e0c431c62d40f564e9bf637120c6f0885b33c7c0f2ded0ec glibc-gconv-extra-2.34-60.el9_2.7.x86_64.rpm ad667006d6760b1f8bb1fe3ea7cb5f96711d114443d737756ee3fb9598a09e3f glibc-langpack-zu-2.34-60.el9_2.7.x86_64.rpm adca0ec7e066cadce7c51fe1136d5e76dcb1e209e95a8fda7c65bf38d15964fc glibc-langpack-ro-2.34-60.el9_2.7.x86_64.rpm afa3632e299891d21315612268123e5b655b0ccd2905a5f8de48affb00061a74 glibc-langpack-rw-2.34-60.el9_2.7.x86_64.rpm b16d856e264a3ddd4ea2af20bc85edbe5f94a22fda78d6bde5eaafdd548f2708 glibc-langpack-de-2.34-60.el9_2.7.x86_64.rpm b2cf3defa0ceeeba0b5a3febfc1841b0a79a22b9c0a5f4d21b4e8e1d5aeccb5b glibc-langpack-ckb-2.34-60.el9_2.7.x86_64.rpm b416919d027a1727525b5935dace371407d9e9ad7e542ec913019c0f5c10f6b1 glibc-langpack-hr-2.34-60.el9_2.7.x86_64.rpm b71ed6804137f887357376ac2c0297d6af568f5ad25baf78638b207faf9f15d2 glibc-langpack-hne-2.34-60.el9_2.7.x86_64.rpm b8141e6bfca55f62d85c51c20b69ab472b2adacf83101040b8354238fdba264d glibc-langpack-it-2.34-60.el9_2.7.x86_64.rpm b884bac0811c7ee50fc1f9065e51ac93d6afe1acea7b3b2b04cfc6f669bccab2 glibc-langpack-fil-2.34-60.el9_2.7.x86_64.rpm b9564b9ea1de5cd8dc8c94987e9f669557b6f0176076997b596a4b3cf899d39e glibc-langpack-xh-2.34-60.el9_2.7.x86_64.rpm bb0b4a14393229ee18304e24e69200c55525dac7b56d86fba0a516edaba2bcfc glibc-langpack-sat-2.34-60.el9_2.7.x86_64.rpm bb89aaf14a170abdac9ceac5059009a20a4f433d1adbb859e50a42727e3e3312 glibc-langpack-sq-2.34-60.el9_2.7.x86_64.rpm bce35b7ee0858e50997ebb9716a54da0b4994f445e02c9db7994ed4bfa84cfde glibc-langpack-ug-2.34-60.el9_2.7.x86_64.rpm bdf6beb62f840fbebd1d46469a7e46c759857e46da0d4d08a91d51a0d088c2d8 glibc-langpack-ff-2.34-60.el9_2.7.x86_64.rpm be91afceae4982f1835a416112d4d590755f836b45993e61f9efc45f50716506 glibc-langpack-ur-2.34-60.el9_2.7.x86_64.rpm bf01a23455a6000949333bfc4d5bef7072973ca82d399b48a3ac7b9017d1934d glibc-langpack-fi-2.34-60.el9_2.7.x86_64.rpm bf0a75339445c3829d48b53d8f881dfef4b8c18c74b17dbe81d63e943978e787 glibc-langpack-ha-2.34-60.el9_2.7.x86_64.rpm c13efa6afa1eb42affbed4abebddf98c5c0d10f8236f813a54e5db6a7d875888 glibc-langpack-mi-2.34-60.el9_2.7.x86_64.rpm c1866483153936c104c061cfac20894d6a3fd2ebed1842ab793353cec9ae853e glibc-langpack-byn-2.34-60.el9_2.7.x86_64.rpm c213c625039f43387a843766a354c167af0f1eb0636d313680aa2d5a7eafa008 glibc-langpack-niu-2.34-60.el9_2.7.x86_64.rpm c27deb2cfa6686822dc3e4cfc0b9643f3f0bff8c3a3e71a883bbfa043f9bcfc4 glibc-langpack-uz-2.34-60.el9_2.7.x86_64.rpm c2b161185d831b61982c5b0fb58d97d2df50252e36a19c59b0b845ee648efaca glibc-langpack-mk-2.34-60.el9_2.7.x86_64.rpm c59006811d0d2791669007f870ac74da638e57f429cbea560db71bace1a9a2ee glibc-langpack-ts-2.34-60.el9_2.7.x86_64.rpm c6238801d8dbe74f8fc9040670325446934f65c0c849bec16ee5260156e96e69 glibc-2.34-60.el9_2.7.i686.rpm c695e5a17e63504ce152eec4f4fc5da1e9794f0891fca15b2a7766648b260a78 glibc-langpack-nn-2.34-60.el9_2.7.x86_64.rpm c7c0331bf5acf62cdaf52a9e9b4a390c041b3569b071622cd577810b7119146b glibc-langpack-bs-2.34-60.el9_2.7.x86_64.rpm ccb49630d4c98ab759d41724d261dd19252280e28b0a72afc5059e7045968ca9 glibc-langpack-sd-2.34-60.el9_2.7.x86_64.rpm ce8ad0330062e39e71414a01d0f54cf8926bf20a87044438d11db3919be80d13 glibc-langpack-ti-2.34-60.el9_2.7.x86_64.rpm d0012618daecc47562b0057e9483ee35c6415e052d98c23c375f44639bda23fa glibc-langpack-ta-2.34-60.el9_2.7.x86_64.rpm d3721d4ae8cf4bc599c7d62f9ba757522e94beb0228290d877c78127a4595a20 glibc-langpack-yo-2.34-60.el9_2.7.x86_64.rpm d5fa1a990b19cff118d29f1c46ccb6b05ca62ac05cebbd49ee290cdc2c7e7ded glibc-langpack-hu-2.34-60.el9_2.7.x86_64.rpm d790f44d26ed46ca6301957dd7d68de8bbd7c2b25d7a064caef08fe2314b6a98 glibc-langpack-anp-2.34-60.el9_2.7.x86_64.rpm d838af82dd169a50c7d60319e7633c55f48f4721c869259eb37c724dfef82fef glibc-langpack-nds-2.34-60.el9_2.7.x86_64.rpm dd722b93583943982aa3c6153dbb5680b30300e857ccf1eb364e801b9c135956 glibc-langpack-ber-2.34-60.el9_2.7.x86_64.rpm def4b0ffe66a97a541a7e99035961f747ec31af222408aa0bf5e2b904b5f3723 glibc-langpack-mhr-2.34-60.el9_2.7.x86_64.rpm e198e0b1e6c4016d09191c00c615092f0f8aa95d63e2d529d613139f42f9707d glibc-langpack-lo-2.34-60.el9_2.7.x86_64.rpm e247099e89a26c30fb6a586400f3e2b0d4b732257a898bb316708883b2f7bd96 glibc-langpack-lij-2.34-60.el9_2.7.x86_64.rpm e418f2759652a3e2e325d8d7f9a3aaaf4e4b63b247e362a5743bf0b338e53059 glibc-langpack-sl-2.34-60.el9_2.7.x86_64.rpm e480f3801182672b41b15a64242a96bdb0364a15744fbc840a22c9d4878c4378 glibc-langpack-he-2.34-60.el9_2.7.x86_64.rpm e4c3955b6f8c30f496ca1982788a00d4985934a3699453b28000710e1eca5ab4 glibc-langpack-sgs-2.34-60.el9_2.7.x86_64.rpm e51c4ac99e694557dadb465bc432d26bc7a92da998a167b9a59f452a586cfbd6 glibc-langpack-chr-2.34-60.el9_2.7.x86_64.rpm e6a3b916ac7e2db43a850816fb2b21178c15c4402a5522cd746fe55cf83d7eba glibc-langpack-ps-2.34-60.el9_2.7.x86_64.rpm e7ed24bb0407b6bb3752e63c960f1fa1510a5dd3facd0dfd602e1bb3c5997b06 glibc-langpack-kab-2.34-60.el9_2.7.x86_64.rpm e89a9fb04d4429d380cd7746138aee683507460c82ad8fb083a3744183e5c08e glibc-langpack-hak-2.34-60.el9_2.7.x86_64.rpm e9b0037336e08419b1fc271909bff449669ed94eb687a3ec3160585172a29038 glibc-langpack-mai-2.34-60.el9_2.7.x86_64.rpm eaea81f3689dc39a5979abcc4e969c3893a6de2ae4da010738ed9fc63847a23d glibc-langpack-hsb-2.34-60.el9_2.7.x86_64.rpm ed0f6fdb8c3572f260bd15661e280c97d5faa2c7c2c7f250d92ad7a769990c8e glibc-langpack-csb-2.34-60.el9_2.7.x86_64.rpm ed68ed30280b34bd50246bc4db3ab9b1b10ef7dcf7846d5d69fb789fb72d53c3 glibc-langpack-shn-2.34-60.el9_2.7.x86_64.rpm eddda9f0ff99cad6b0cabcd192dec6d649335e7fbe8beef9a6beefadf3f9b497 glibc-langpack-ss-2.34-60.el9_2.7.x86_64.rpm ede3372991b6dd9a4bd855ce9a37d04f4000a253bf3ab64d3dbac7b622999929 glibc-langpack-gu-2.34-60.el9_2.7.x86_64.rpm efcd3f3fb5a9712e4588f4a2d277d903aab71b2439ba6f570fe3ef1b6d9fb10b glibc-langpack-eo-2.34-60.el9_2.7.x86_64.rpm f18a0b63e362acc9e0823b1504cd035fd41026a3358e6e102b31fa47560770dc glibc-langpack-aa-2.34-60.el9_2.7.x86_64.rpm f24488eee511c9104d46d2911868f61ae9cfc49796cbbea232f53f40dd8b8a8d glibc-langpack-kn-2.34-60.el9_2.7.x86_64.rpm f4ceb9ee112f6b208b96165bf365e3841950a2bd2e67965366472fa1da475a9e glibc-langpack-yue-2.34-60.el9_2.7.x86_64.rpm f59e8869ea237d9621fd13150318d72b57e85d87be8530332e886dc5a20792dc glibc-langpack-nl-2.34-60.el9_2.7.x86_64.rpm f697ae66a56b16a98d144c1fd6c677b669d1f92da7f9473310c94908eb420183 glibc-langpack-cs-2.34-60.el9_2.7.x86_64.rpm f9ef2e90d275d024cc8504fbe8400bb447f04fe57faab5637e81df7fb576c3eb glibc-langpack-cmn-2.34-60.el9_2.7.x86_64.rpm f9f15d6131dde60a62d614bfeb3914138b15ba8eccb8405c45e06dbd8446770a glibc-langpack-fur-2.34-60.el9_2.7.x86_64.rpm fa412cb86deb553f50c69e7fb1c2c8b0ac111586bc475e283a0c00be92957df5 glibc-langpack-sw-2.34-60.el9_2.7.x86_64.rpm fb690a5fb8440e65473300c40fd670456d46546d98a4636289673c70417a5148 glibc-langpack-lv-2.34-60.el9_2.7.x86_64.rpm fb9609ac28e00586e8012ce88258b5a470cc1dedc155e13e2d80bea86f1a0a95 glibc-langpack-nhn-2.34-60.el9_2.7.x86_64.rpm fd97e65c4822bd70cea3088eb7eb8f66050753c705ddeaba3bfc9311466e88fb glibc-langpack-to-2.34-60.el9_2.7.x86_64.rpm fe0ad7f05a4311aeb3edc1e5293410fda1edc9d04184cb148903b7f1d24845c2 glibc-langpack-hi-2.34-60.el9_2.7.x86_64.rpm fea272e7485f9727f8ccd97a95dc6d105055e3a9fe4696e2ec96f194ee1dc879 ALSA-2023:5462 Copyright 2023 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-libs-3.9.16-1.el9_2.2.x86_64.rpm db05bc5fb53765192e7710ca81b01420c6e822a6c1de88217f9c6fc9c86ca519 python3-libs-3.9.16-1.el9_2.2.i686.rpm f4bfe81326c777e4929f68ffc896b5d33256e5aece10dc44863ffb6c8402b5bd python3-3.9.16-1.el9_2.2.x86_64.rpm fa99d893a272624d87fda4479397abb7c8380fcdb8dd389a9f77408b1ba70140 ALSA-2023:5763 Copyright 2023 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) * curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default curl-minimal-7.76.1-23.el9_2.4.x86_64.rpm 47f20b6ea580e44131495555e35f25855ff009eae90cbfeed8ca4acab358cf4f libcurl-minimal-7.76.1-23.el9_2.4.i686.rpm 53434c015ec64662f83ec351d7022d0ea5fdd13631daa37915574a11e132e90d libcurl-minimal-7.76.1-23.el9_2.4.x86_64.rpm 5b112187b9e101a0950f1d6ff19e13e24f7d49e64c3b2e996415b43e82f99ca7 libcurl-7.76.1-23.el9_2.4.x86_64.rpm 6cc38779159ce652cb49cb2266257a6164ebedef31568de33a38e2b61074b840 curl-7.76.1-23.el9_2.4.x86_64.rpm a49e846376fe4af08b6046e58ecd83715b034454f5b0891260130c0432f43ef1 libcurl-7.76.1-23.el9_2.4.i686.rpm eabec071b8be81998f1747f138ee3be637c8482eb202367d9a36cd6cf1b470ed ALSA-2023:5838 Copyright 2023 AlmaLinux OS 0 1 Important

nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libnghttp2-1.43.0-5.el9_2.1.x86_64.rpm 3a60580cb909cf653450cafb61154092a0effedaffb15877703eea203c40724b libnghttp2-1.43.0-5.el9_2.1.i686.rpm a8f829041cfe9ff31216adb614b2a67edb759fbc9139b8d3c779669622957d2f ALSA-2023:6587 Copyright 2023 AlmaLinux OS 0 1 Low

opensc security update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fix(es): * opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package (CVE-2023-2977) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default opensc-0.23.0-2.el9.i686.rpm 2b82b1bf2fb1dba862c846540f12c61d28706e4d58731178ef9890eda2136c72 opensc-0.23.0-2.el9.x86_64.rpm 4bb5a0ab1de0f95719bb2dbbd99727bfa378c2932522e79f794514310b329bbc ALSA-2023:6593 Copyright 2023 AlmaLinux OS 0 1 Moderate

binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default binutils-2.35.2-42.el9.x86_64.rpm 2d80943897692f8a6545ec74a4eefd5e63ae705dd92daa2147cd7a85efffd2bc binutils-2.35.2-42.el9.i686.rpm 7dc267a4c33ec06824101b19410985640f78db39a55fe5e2433a1670f210759f binutils-gold-2.35.2-42.el9.x86_64.rpm 9c78305b73da8cca6d3c29635cdedaec371c705c7617edbee292d4bc5dc4897c ALSA-2023:6595 Copyright 2023 AlmaLinux OS 0 1 Important

linux-firmware security, bug fix, and enhancement update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635) * hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964) * hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329) * hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351) * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569) * hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default iwl135-firmware-18.168.6.1-140.el9_3.noarch.rpm 090fbfb06a6bae7df71552e010a9f03acba8ef2926862c3d4d3a59a6b62d1f6e linux-firmware-20230814-140.el9_3.noarch.rpm 0e3c052d81f6d8795ff3d7cbaf21cfaf66ab4dc49d412367d0cc3b9a4dafa3b6 netronome-firmware-20230814-140.el9_3.noarch.rpm 1667428769e83438b914f3cca91e9ebad99afe060921a2dcd80b51e290fdc147 iwl1000-firmware-39.31.5.1-140.el9_3.noarch.rpm 235076ae6fb17b7d3b7b7000a6bc0105791e592b7629c30d5f5ad8818ccd2c2b linux-firmware-whence-20230814-140.el9_3.noarch.rpm 2b61b347e30c54a9bab26212dbc5aaa34ad17daa87ecd4822334a2e3aa3a9ba9 iwl2030-firmware-18.168.6.1-140.el9_3.noarch.rpm 3ea9328906f85f1a88af51c2f7dde195404783ea66264325170e53505750d10f iwl5000-firmware-8.83.5.1_1-140.el9_3.noarch.rpm 5c7d4ab3c8a592937a406db3d3bb8f50ef4d0be09548cb9e0c598155fcc4fa25 iwl105-firmware-18.168.6.1-140.el9_3.noarch.rpm 846626141a456736e140a25937b9ec97973909e9c06e87cb109ed3282271c25a iwl100-firmware-39.31.5.1-140.el9_3.noarch.rpm 8babc2e0da5c22b48ebd93adcf775d132d8a8c2ba12b81655dcda5f36b40a9ae iwl3160-firmware-25.30.13.0-140.el9_3.noarch.rpm 8bfa807e92ca51ac96da651c3a99582bd15a5530069d9e53be86f1c7b5fcd674 iwl6000g2a-firmware-18.168.6.1-140.el9_3.noarch.rpm 985b9782667f24bda9bdbae837ab4a213884b02deda6592fb70f73b6237ebbdc iwl6000g2b-firmware-18.168.6.1-140.el9_3.noarch.rpm 98f1a0e271ca9b9c0f14aaea911fcc37d9acb03b5db0fccab43a2f29ce5c3ca1 iwl2000-firmware-18.168.6.1-140.el9_3.noarch.rpm af3fde35d92d71b65e7d08803a1cae114e1d0de3886cef65d77652576676046c libertas-sd8787-firmware-20230814-140.el9_3.noarch.rpm dc60cdb5f3aef20b29dbb71873a1992d7c3dd09bd5bc7d517054e7f2834cde2b iwl6050-firmware-41.28.5.1-140.el9_3.noarch.rpm e67b5942d4c7c3b2d97d8d475f1155eb0f162cb7ddc50b65c545ed81b325c9d8 iwl7260-firmware-25.30.13.0-140.el9_3.noarch.rpm ed99d40ec0dd22f2c576f97cadc183638b8081ec7932e782d814e640bc1a328f iwl5150-firmware-8.24.2.2-140.el9_3.noarch.rpm f594b76cfd0d286a7f16d386c4d2e2013653ccc49ec637fa2b96b2dc560547b3 ALSA-2023:6596 Copyright 2023 AlmaLinux OS 0 1 Moderate

cups security and bug fix update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: heap buffer overflow may lead to DoS (CVE-2023-32324) * cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default cups-libs-2.3.3op2-21.el9.x86_64.rpm 5efa331bb085c559ce656ded751160f70224eac965f1f124f97a23b1b375977b cups-libs-2.3.3op2-21.el9.i686.rpm da9da56803b5350afbd911e7f6664c73ebecb3a84753904b2158c0a7d42b8aad ALSA-2023:6615 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-cryptography security update

The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fix(es): * python-cryptography: memory corruption via immutable objects (CVE-2023-23931) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-cryptography-36.0.1-4.el9.x86_64.rpm 6eb20a25eb4a2b3af19f489fab8afe89fdd3724cacdb88bff2cc340a5cdc16ff ALSA-2023:6621 Copyright 2023 AlmaLinux OS 0 1 Moderate

protobuf-c security update

The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fix(es): * protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default protobuf-c-1.3.3-13.el9.x86_64.rpm 3650a3e5c9c5c37b107f5d950ca1c97f516aac5f452e7ddf7a294264b770e05e protobuf-c-1.3.3-13.el9.i686.rpm c020ed014211395b5771d6e1d5209ede9de2147aa4a209f644b16fab0dec5cea ALSA-2023:6631 Copyright 2023 AlmaLinux OS 0 1 Low

glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499) * glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611) * glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default glib2-2.68.4-11.el9.x86_64.rpm 5a39f7df12d5f1ebbff68746d179dc1e4c06ae12ae941b8f0bfd5afe8db0bb26 glib2-2.68.4-11.el9.i686.rpm 8febaf749452cfae551010e44d7e6bac1246c70f2d8cc4e90f38998c85766fa9 ALSA-2023:6632 Copyright 2023 AlmaLinux OS 0 1 Low

shadow-utils security and bug fix update

The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. Security Fix(es): * shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default shadow-utils-4.9-8.el9.x86_64.rpm 23bf5c43a25b335103bedae89618438976bab5d2b3d36330bbde4b96cd30e9cb shadow-utils-subid-4.9-8.el9.i686.rpm 78870bbcb3a17f520415889ed2e2874f9ec4e479b2a87b957ce7d672d3c07b49 shadow-utils-subid-4.9-8.el9.x86_64.rpm 945a4b17d3ce881fd829ba5b0d9387f1b9426e00d8376caca08f95d133e1ac06 ALSA-2023:6635 Copyright 2023 AlmaLinux OS 0 1 Moderate

c-ares security, bug fix, and enhancement update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370) Security Fix(es): * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default c-ares-1.19.1-1.el9.i686.rpm 785f7387bddb895ee64e093f8beb579f6cc99440ac9f8e1eaa7ab2a273ce9d51 c-ares-1.19.1-1.el9.x86_64.rpm 7de0a522fbed2a3cb769b0fe88341111cffee80ee8a2faae43b86fae7ad6a0d9 ALSA-2023:6643 Copyright 2023 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667) * libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libssh-0.10.4-11.el9.i686.rpm 33c24793c18f0d437952f18203d1288e73775a8122ef8aa29aade08fd9cd2720 libssh-config-0.10.4-11.el9.noarch.rpm af58c892b03758b07d0fa31a25a95e98bfb76307b8130808fb14f239c2da9891 libssh-0.10.4-11.el9.x86_64.rpm c4458c8de488b445cc50872daca5250d405209db95fd03a2651af30e04186fb5 ALSA-2023:6659 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783) Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-libs-3.9.18-1.el9_3.i686.rpm 54fc8c48bd9c81931a8e73bd00ea3603c0c8b1ab5dc4e9d27f4f3da9ad99e2cb python3-3.9.18-1.el9_3.x86_64.rpm d6dafb0be2601bda917a2a3d974055e44985bcfa6ed657a6ad9d0c59c37ea1fc python3-libs-3.9.18-1.el9_3.x86_64.rpm f2f7c9e63ce3afbf6a31ade85b91ad07f4ff7703982a3f714e8463d39af792fe ALSA-2023:6661 Copyright 2023 AlmaLinux OS 0 1 Low

gmp security and enhancement update

The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. Security Fix(es): * gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default gmp-6.2.0-13.el9.x86_64.rpm babe0b1385e723476a216d5f4b72453e031c3d683b19344786c2bddf7203cb04 gmp-6.2.0-13.el9.i686.rpm fe352f7d197ebdf2c92bbd6e548f9f6b7ac9e69e7a9d6c9861a6274482e79d73 ALSA-2023:6667 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415) Security Fix(es): * samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127) * samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966) * samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967) * samba: spotlight server-side share path disclosure (CVE-2023-34968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default samba-4.18.6-100.el9.x86_64.rpm 0150e857dafb25e370d2c3cbbd61e99f06779681ae4303db20814420e3788196 samba-common-tools-4.18.6-100.el9.x86_64.rpm 19ff8ac3488a7246fcf016f3cdba8a6124af3d3b403910efa4ff3762fe6b8341 samba-winbind-modules-4.18.6-100.el9.i686.rpm 1d891fc5586c8b386d8cd6ddb4e77d828b0ae5a0f479b1b6c551a8242cfec073 samba-client-libs-4.18.6-100.el9.x86_64.rpm 44a8735a5a4eb3ac638ab938e0c859af5d448839c9396b6cc2513e71c19634ce samba-client-libs-4.18.6-100.el9.i686.rpm 4980450be5a23f4f0b2327c6cd644bb17486cd6962e35ac3b00d46243e2873e7 samba-winbind-4.18.6-100.el9.x86_64.rpm 5944450dd63bdb9f58ac5ee4867d9fe2f6836fef03b3c4cbfe6c431dcd9d712d samba-common-libs-4.18.6-100.el9.i686.rpm 6245e7b8bdda4b6c999e08762e5cd078e1b5b9edec040b225bb23c690ac9ef24 libsmbclient-4.18.6-100.el9.i686.rpm 628c4c05e013d481df6ca651de8aa4f474b3d7c46b32ff1bfa627838dca74f11 libnetapi-4.18.6-100.el9.x86_64.rpm 78a6600328f11a68598e22ce936ece847bfb5cc465101deea59d74102663b501 libsmbclient-4.18.6-100.el9.x86_64.rpm 7ea7607b97368175f4f4c54717c3bbf98e0814e078cfc286fb2b774d0a042ca7 python3-samba-dc-4.18.6-100.el9.x86_64.rpm 8e8a9f5a82736ea255e08e4f105b5ed6e85d29d20177be6790f3cf16b6f83612 samba-libs-4.18.6-100.el9.x86_64.rpm 99f8092e7678e9172edbd8373863badd7fd498c713fdc5326dfa5d04e8d236a8 samba-ldb-ldap-modules-4.18.6-100.el9.x86_64.rpm a05c10257e8a2ca99763b948d941a6c0d0383112297db58fc3d46b535cdfa652 python3-samba-4.18.6-100.el9.x86_64.rpm a28427df91c2d3e93818124d3158f2d7c3f1c8bd9930fdda155d16f2d18a5d57 libwbclient-4.18.6-100.el9.i686.rpm b847844a80a1651b879fd018600cc3748472ac2ab93afe61ea1db7f7de50d0ae samba-dcerpc-4.18.6-100.el9.x86_64.rpm b8d3a84717f13f77850edf96152cf363872939c45cce4dc3e23d3b0a70341320 libwbclient-4.18.6-100.el9.x86_64.rpm b9dae69be95e15215094b0cdb2a454373ac00ca9dfb0c8beeacd3717028ab0ab samba-libs-4.18.6-100.el9.i686.rpm bbce5580ad3198972866c841e379bc4c722e38390358eda39f828a6420a10dba samba-usershares-4.18.6-100.el9.x86_64.rpm c78d8797b7cdd6e3f3b32b24ce3c25492a074b2bed4c219ae6e7a9f6451cd779 samba-winbind-modules-4.18.6-100.el9.x86_64.rpm c9a2b189885b5add651896497ca1128ac5a8180d4598f3ed668c2efe6ac6b287 python3-samba-4.18.6-100.el9.i686.rpm d5ecfcbe2c77742e971f3f17e74c272b8965dea0e6d27e094f1f6b90b8aac54a samba-dc-libs-4.18.6-100.el9.x86_64.rpm dab8b122caedd51dab92f646481749a1e50621280ef5d84ffd736147b6804053 samba-tools-4.18.6-100.el9.x86_64.rpm e00096ca3b9998ae0007bbe867c68e1f427c22b45672385bc6eadca0572afe3c samba-dc-libs-4.18.6-100.el9.i686.rpm e252ea311f391100c10524bf0840a21cbd208699a1b66f0cbe7afe2c87c74476 samba-common-libs-4.18.6-100.el9.x86_64.rpm f6608b165c443cf99e51e76edc81a8ca868a29511e21932b0b0699dc0651ab46 libnetapi-4.18.6-100.el9.i686.rpm ff1d43632bc46b7b26bd83f31b6504081086f4a8a890351c848bcd990d270637 samba-common-4.18.6-100.el9.noarch.rpm ffe0bbf00230482c50e61dcdd26708dc88ad3622551978d02c1a5564b5a48729 ALSA-2023:6679 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: GSS delegation too eager connection re-use (CVE-2023-27536) * curl: TELNET option IAC injection (CVE-2023-27533) * curl: SFTP path ~ resolving discrepancy (CVE-2023-27534) * curl: SSH connection too eager reuse still (CVE-2023-27538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default libcurl-7.76.1-26.el9.x86_64.rpm 3c88dce5cede2c28f9edfc16a1825a4949b78e23afa6074c88baed366eb915d6 libcurl-minimal-7.76.1-26.el9.i686.rpm 41b8634872da908a32d789035df80b7559b614464eb449935a521d284b299e63 curl-minimal-7.76.1-26.el9.x86_64.rpm 7fff6492eb9d1442da8f67f957a510864da404a895b629e391d47a2497dc3c61 libcurl-7.76.1-26.el9.i686.rpm 89406a938fcc36719c8d4f2657211b1ecc9cd4d1d96061c0bd35450a4c3d62d5 curl-7.76.1-26.el9.x86_64.rpm 8f990e2a41cd1dbd8d5a938baa8363f2bf0afdb46340afd2491beece82179253 libcurl-minimal-7.76.1-26.el9.x86_64.rpm c832a23f62facd1c8105dcc77ca3c6b7cba3052a61d89b21a322d1eb1e6d8a6f ALSA-2023:6685 Copyright 2023 AlmaLinux OS 0 1 Low

tpm2-tss security and enhancement update

The tpm2-tss packages provide the Intel implementation of the Trusted Platform Module (TPM) 2.0 System API library. This library enables programs to interact with TPM 2.0 devices Security Fix(es): * tpm2-tss: Buffer Overlow in TSS2_RC_Decode (CVE-2023-22745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default tpm2-tss-3.2.2-2.el9.i686.rpm 4b04fdcb4ab03742ba6c76d88e767e2616042d30eed4a33a154a6070775347fe tpm2-tss-3.2.2-2.el9.x86_64.rpm 5cabaeb0d59caa0034b1a9b2fdecd38a29646ff0db4d10cd9f8e0ac90e3f4bfe ALSA-2023:6694 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default python3-pip-wheel-21.2.3-7.el9.noarch.rpm eb7518ce9a78bc7edbdf1a744aef9e9558fa53ce63a6e20dbe13bde27ff4792a ALSA-2023:6698 Copyright 2023 AlmaLinux OS 0 1 Moderate

ncurses security and bug fix update

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo. Security Fix(es): * ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default ncurses-6.2-10.20210508.el9.x86_64.rpm 155276c65c4b61656c9c4dfeee0557652b5501ac26026cb91ac8c8b48333daca ncurses-libs-6.2-10.20210508.el9.i686.rpm 285db6dc6f610f75ef6863dcb0a383eae394c2b33bff283189cb49ac7fae4c58 ncurses-libs-6.2-10.20210508.el9.x86_64.rpm d06b0e491481a345faf21a69666cbdc302d19b54fb29ae1aa78fa6b205f9e604 ncurses-base-6.2-10.20210508.el9.noarch.rpm d8307bfbd2428c8d08deffaff1ec61f7bc016ef03c77798b32ce021965e1bc65 ALSA-2023:6699 Copyright 2023 AlmaLinux OS 0 1 Moderate

krb5 security and bug fix update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054) * krb5: double-free in KDC TGS processing (CVE-2023-39975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default krb5-libs-1.21.1-1.el9.i686.rpm 3812203930cd6ddb7edb21be0f36be6354692f3af6b7bc3e0d3285d6d820dc14 libkadm5-1.21.1-1.el9.i686.rpm 5602b7f4abd3060ab4eaaf6c57482c82e04aea2656ad667fc4f414f3dd3d174d krb5-pkinit-1.21.1-1.el9.i686.rpm 620ab9edac7a7f016a981ee88cb5b497d720b10535c1d1426f28be730381fe03 krb5-server-ldap-1.21.1-1.el9.i686.rpm 647647017c5dd40ead7619da05536ba8cdce43f9a4fde1e158b11a45217d9b23 libkadm5-1.21.1-1.el9.x86_64.rpm 6725b2f50727ca8f859bf7f50f85ed54eebf45f17dda7c58a47452c231c770ac krb5-server-1.21.1-1.el9.x86_64.rpm 7dcd81ef7f5269a54c6f9915387e212e27e7875ddbf3dce3faf8382b227c7f01 krb5-server-1.21.1-1.el9.i686.rpm 923be019d24045a6f84fdef126a085a0bc7aef4970708dc236407677d48cd9e7 krb5-libs-1.21.1-1.el9.x86_64.rpm a1555ecee5147dacf2aa5abf6004f57eb9ec2d2d3c5a26426550722e508ced88 krb5-workstation-1.21.1-1.el9.x86_64.rpm a35c9c879fd217fc62df60afa0445387f56a72fb75eeaf0596f6a27094ccc5f4 krb5-server-ldap-1.21.1-1.el9.x86_64.rpm ab9956684fede193da5777f25680f06fa873c14b0795bd55d5cd75d0ad5c2f76 krb5-pkinit-1.21.1-1.el9.x86_64.rpm c8d0d818298c0b02677cedeb565ddd51794f870094cd6add539cd3f25c992cae ALSA-2023:6705 Copyright 2023 AlmaLinux OS 0 1 Low

procps-ng security and bug fix update

The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx. Security Fix(es): * procps: ps buffer overflow (CVE-2023-4016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default procps-ng-3.3.17-13.el9.x86_64.rpm 57cfad19dce5c48dea33949eae17c2bb645475522d02061e4abbd80df98f43aa procps-ng-i18n-3.3.17-13.el9.noarch.rpm 592e2cdb77f70527fad67f55c9d6ffa97d95c28e78af0afe278c7245becfdb73 procps-ng-3.3.17-13.el9.i686.rpm b11512eccdee7bdc00ac38e6375734b37f6000ee42e1689e021772e8314507f1 ALSA-2023:6707 Copyright 2023 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502) * avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default avahi-libs-0.8-15.el9.i686.rpm 0e190c72eb5afc2ac6e82b755db0ab7cae3b2a81598ae5ab5c947b3f0021f07a avahi-0.8-15.el9.i686.rpm 19b5a92775fe1f0bac4b1c2623a0d96cfccadd68ad30e38afca1588f81ade536 avahi-0.8-15.el9.x86_64.rpm 21a589e034103881252968204427ac437080a7168651b32fe478d06d8697b8d2 avahi-libs-0.8-15.el9.x86_64.rpm 9aeda71d1a3930ebfbd7d82b541933e19ddb37ca7e1404b8caedb4fd5c3aa7c3 ALSA-2023:6744 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961) * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091) * samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default samba-dcerpc-4.18.6-101.el9_3.alma.1.x86_64.rpm 050812bd69fb98dd2d6940783d4193b03eb0ea89120bf8e32a5a7e2fdd8faa34 samba-client-libs-4.18.6-101.el9_3.alma.1.x86_64.rpm 179619703c938deae17b4cc499f2b37053942676dfda9b5c9616af4ddc9fec1e libwbclient-4.18.6-101.el9_3.alma.1.i686.rpm 1ac537c06dcf25b631a04548088fbafe279e4bcc48c90d6f62494e9365ae066d samba-dc-libs-4.18.6-101.el9_3.alma.1.x86_64.rpm 1b9b86b92c26a4e634855824c848ad2d43f6c6d25df34c7f332d74d3d713b563 libsmbclient-4.18.6-101.el9_3.alma.1.i686.rpm 1e3705856d133c5849ef99438921aff0eba844c99f09ffd401d0236b4e6c05e3 libnetapi-4.18.6-101.el9_3.alma.1.i686.rpm 3fe458daa4e1d6fd208fd9928f7a030b48aa26939ff4d3b877bf1a0bd2e07f2e samba-usershares-4.18.6-101.el9_3.alma.1.x86_64.rpm 40c2a62eda19a42cb6e857019dbe6ccaa4aaee34f77ac88fc89b3062523c36e6 samba-winbind-modules-4.18.6-101.el9_3.alma.1.x86_64.rpm 43ea1d94f3c8d3c21992c1f9bad6ce18206bb94cb7c07e2de24c4157e2c8f32e libwbclient-4.18.6-101.el9_3.alma.1.x86_64.rpm 43f4c466837b4c562988c0a9ae44317646a93f0e17a31a08ba74a84967a24400 samba-client-libs-4.18.6-101.el9_3.alma.1.i686.rpm 499c80d6884d8eecad4ff7301dd136b10a9a528844f2fcf73cc397a340a6dad4 samba-libs-4.18.6-101.el9_3.alma.1.i686.rpm 4dce98e384e1c3fc3a2189d45057923fe8f935b7acb4d0ff49724b1b4f9e7d28 samba-common-libs-4.18.6-101.el9_3.alma.1.x86_64.rpm 547b0f6f16065660454926a6ab215a752edbc0ddc39f37181aba9c7c283265d9 samba-ldb-ldap-modules-4.18.6-101.el9_3.alma.1.x86_64.rpm 561d54933780fc9a6c0e6cb3963269d722a3df2cac136601fd4fe5079ceda5e9 samba-libs-4.18.6-101.el9_3.alma.1.x86_64.rpm 5c2b3b2623d307efa0081a171a594e16521f8267c95758f9f4b0f4c18930ec10 python3-samba-4.18.6-101.el9_3.alma.1.i686.rpm 5f4cb831762cba60360bcbfb7ebfdd05c890d6db9034ed8b571e0c08a426a8a6 libsmbclient-4.18.6-101.el9_3.alma.1.x86_64.rpm 608cfda90dbd3b71651a94e06832669f33b2314af353c856dbbbcbb160853e1e samba-tools-4.18.6-101.el9_3.alma.1.x86_64.rpm 6a9674ae0c611b6071e14373e90a5567d7778ea9e25d120efba4a9b4fbb09c40 python3-samba-dc-4.18.6-101.el9_3.alma.1.x86_64.rpm 885e770b3baff33847d832dfdfe846b5b56d554d4078ae0f4cdeca17d2ede902 samba-winbind-4.18.6-101.el9_3.alma.1.x86_64.rpm 96d1653991b27ab2c59b8e634728626b6247ad3b19d2c66562ebd8f4a060d447 samba-dc-libs-4.18.6-101.el9_3.alma.1.i686.rpm 9c99c84eeabd9432c1212ede143367d0b1b6d9a26e143db47c7a839f9bae159f libnetapi-4.18.6-101.el9_3.alma.1.x86_64.rpm a3d2e57cafc23824a90054fb6cfc9dc8ce9116d13cb06f6450d6c44cb7a4a4a0 samba-common-tools-4.18.6-101.el9_3.alma.1.x86_64.rpm a3d90423a61458251d0dc59d74b4efcef8337187f2df4150aed86e77d3f5e6b3 samba-common-4.18.6-101.el9_3.alma.1.noarch.rpm b707261cea20c2825f6afd14541833e2726a126b938ceb58f2dc1011a77f5380 samba-4.18.6-101.el9_3.alma.1.x86_64.rpm bcd196ce54305b57217ffba83eabcb1a7357f9f68c1974157c84ad25806793e7 samba-winbind-modules-4.18.6-101.el9_3.alma.1.i686.rpm e04166ef574565b4285a21cabc9200b350288dc96724e099a6cfa6d120565299 python3-samba-4.18.6-101.el9_3.alma.1.x86_64.rpm e585e830806294b5587e72f9cc4c0b1ae46669bc02a20f736096a2ebb05c873d samba-common-libs-4.18.6-101.el9_3.alma.1.i686.rpm ff7c39ceb7e135a5f774ae27d58cc26b5356e296e27cfa6cabcf3605b3f1ec5a ALSA-2023:6745 Copyright 2023 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) * curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default curl-minimal-7.76.1-26.el9_3.2.x86_64.rpm 295a2a453b2d00ad78902e49944d7fa5b5fddab46d0e08331c4f44b5690ea935 libcurl-7.76.1-26.el9_3.2.x86_64.rpm 457c5ce364e08073856ce55846d66dd81b6e560aa3ba68927116af09ec9a54e4 curl-7.76.1-26.el9_3.2.x86_64.rpm 4eb35ab37f7a846688db71d86959afab9e175a95614b6bb98c1db6eee6431011 libcurl-minimal-7.76.1-26.el9_3.2.i686.rpm 9abf40a9c978bd87624a0dad792d1f6eee67d4b3baa93112849d5be950c764ba libcurl-7.76.1-26.el9_3.2.i686.rpm 9cbf8115f0901a41b0e129d801395867be99ee164cc8a1cf8040f852f3ff1c06 libcurl-minimal-7.76.1-26.el9_3.2.x86_64.rpm dca71a10affef9e2b5ef7790551df59ee3743b8a22adf454836b2923b50af355 ALSA-2023:6746 Copyright 2023 AlmaLinux OS 0 1 Important

nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_2_default libnghttp2-1.43.0-5.el9_3.1.x86_64.rpm a203db9a111bf805f65760f32cd24c346783e74fbbfc52ad484b3c208f2f2595 libnghttp2-1.43.0-5.el9_3.1.i686.rpm ed7f0cddf6403bef1570fba9a55c61a29faf92aa95c488056b350d21642b5cbd ALSA-2023:7747 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default python3-libxml2-2.9.13-5.el9_3.x86_64.rpm 6fbe1946759a8332bed8e59a13a405a6caf6ceac28e6fa0a05454d17fa4b89c3 libxml2-2.9.13-5.el9_3.i686.rpm a9a2093eb5e71a9e4f39901b0819c2f84abed7647e5218dae9fa5fe5830ee0f4 libxml2-2.9.13-5.el9_3.x86_64.rpm afe8a73549306d8611bdaf653bc6b2edbc57985e2de4495ad872f1d046e708f9 ALSA-2023:7879 Copyright 2023 AlmaLinux OS 0 1 Moderate

opensc security update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fix(es): * OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660) * OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661) * OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys (CVE-2023-4535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default opensc-0.23.0-3.el9_3.x86_64.rpm 2a17984ebf7e5b270ef9081f24426b643d3de6c2e8d6b3b6e379d91fb886e771 opensc-0.23.0-3.el9_3.i686.rpm 77b97cacf5d620b43bd95de1db9debf377115a6c736fadebb1e9b8387c388e19 ALSA-2024:0310 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Incorrect cipher key and IV length processing (CVE-2023-5363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default openssl-3.0.7-25.el9_3.x86_64.rpm 5adde5cb71ad4f9dc2d22f8f1580791ed69b3707c839685535ea38e874846bb0 openssl-libs-3.0.7-25.el9_3.i686.rpm 6b0c98b8382b4718b07524d307487da343e7d6e9143029d17488c0068aeb55e4 openssl-libs-3.0.7-25.el9_3.x86_64.rpm c025e28bfb12e93d188bd64b9e4147706eddec2f2448d1de9a1b0f82983db296 ALSA-2024:0463 Copyright 2024 AlmaLinux OS 0 1 Moderate

rpm security update

The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Security Fix(es): * rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937) * rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938) * rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default rpm-sign-4.16.1.3-27.el9_3.x86_64.rpm 00badc1aeb2edb3ef2d137da456ac07de5418cb951ee326fa2626decbfc30a9f rpm-sign-libs-4.16.1.3-27.el9_3.x86_64.rpm 039b3909ea538d24638ebf50c4dbeee5ec6f6de716c88a4d617d859a003961fe rpm-plugin-audit-4.16.1.3-27.el9_3.x86_64.rpm 07606dfdaeacdbd2c7ddc512d3b768276da9ae33c88b0a98fc5ce3f4155cd69b python3-rpm-4.16.1.3-27.el9_3.x86_64.rpm 66dc3ad85d4a53db12ea94285757d9c69199ae0392a3743348e4a304335e60c7 rpm-plugin-selinux-4.16.1.3-27.el9_3.x86_64.rpm 8317e9a79e1ee6f78a23584566309bf8e434bc0eb3effa0dda362d114c24cd08 rpm-libs-4.16.1.3-27.el9_3.i686.rpm a0507869ad62c90ff29af2b076c13ecd12dd7ddc094e2907845c0f864ddfd87d rpm-build-libs-4.16.1.3-27.el9_3.i686.rpm a3686034fae229695ce3c2bef0bfc35a0f40c1efd91564a498f868a463ce9460 rpm-sign-libs-4.16.1.3-27.el9_3.i686.rpm aa05f639292fb30baf5db7d546cecf42ea08be847f2204e4a7efee409ff7202d rpm-4.16.1.3-27.el9_3.x86_64.rpm b9ec6c0fc60af55f7a56b124e769817685719226eed3e2145594ad1e9c566629 rpm-libs-4.16.1.3-27.el9_3.x86_64.rpm c8fe6cf36ae39a1669a87379440302d487afcfd1d8e8ddd502c7d06c86a4a757 rpm-build-libs-4.16.1.3-27.el9_3.x86_64.rpm d0b53f9a0ab188211a67cb088a19a5e44a8212f342c6790e964daffdd947fff1 ALSA-2024:0464 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default python3-urllib3-1.26.5-3.el9_3.1.noarch.rpm b10c9569d32ff47bdb1d446b72060944656edae700c6aa03a090ebaa341e2420 ALSA-2024:0465 Copyright 2024 AlmaLinux OS 0 1 Moderate

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default sqlite-libs-3.34.1-7.el9_3.i686.rpm dc6946a8344b8f4f476fef9479d1786c86fdcd045e988ab5d85fef7780e1fae4 sqlite-libs-3.34.1-7.el9_3.x86_64.rpm e7f87444f24a03b37caa02942082b6d4283067ecbbd3f7798f882d22b55713cf ALSA-2024:0466 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default python3-libs-3.9.18-1.el9_3.1.x86_64.rpm 4ea193c359dac0a3d9ae723219a7b66f205c6d05a17123d99197b836293343e6 python3-3.9.18-1.el9_3.1.x86_64.rpm 63777d4cf697ec3546f335993e14ebc2969980e600b6f798b13f9ebac273fefb python3-libs-3.9.18-1.el9_3.1.i686.rpm 792aff4d819f4c9d33f29f919c0303f7690b159e508b07881fe9ec548c77ca7d ALSA-2024:0468 Copyright 2024 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: bypass the GRUB password protection feature (CVE-2023-4001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default grub2-efi-aa64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm 179ea165d11bcf99836b5ef8b9c8d4b48e76d81e07195622afbb30245804ca46 grub2-efi-x64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm 1e79dc1c4e529f35e1444b4c58a10f81faa74700d2697a25d972a41bbb0adba9 grub2-efi-x64-cdboot-2.06-70.el9_3.2.alma.1.x86_64.rpm 1f279fc7b61d6a4dfed82a2708e6192bc57207d51a6d2f0db96cc5fa74e9fb45 grub2-pc-2.06-70.el9_3.2.alma.1.x86_64.rpm 33387050001919a47023c5462026c7ad429e5bab528043c8d3efafc95b27d86f grub2-common-2.06-70.el9_3.2.alma.1.noarch.rpm 7d3d0624d4d27e1ca89edd58f4230c2cf00c3d0372d88fa625ae4de77ef118f7 grub2-ppc64le-modules-2.06-70.el9_3.2.alma.1.noarch.rpm 7fb83679f32899bb37e8d3ca371a80d8b46e9463020fa545c6bbf428a2348a43 grub2-pc-modules-2.06-70.el9_3.2.alma.1.noarch.rpm 95f803595806417954794916c929e285cf90733f5c2f201d4bf84c5232be65f6 grub2-efi-x64-2.06-70.el9_3.2.alma.1.x86_64.rpm a32b9fec4060b8609105bffd272c0e44342b214df63f1b2351e0d1eba1a9f6d9 grub2-tools-minimal-2.06-70.el9_3.2.alma.1.x86_64.rpm ba1a585c7d168833b3b91148468442971c5f1755f2fa79b65ceb5b300421f940 grub2-tools-extra-2.06-70.el9_3.2.alma.1.x86_64.rpm c473787db822d4bbc487b34dd4eded6667e39b544f2d7457eb9520bee55f3824 grub2-tools-efi-2.06-70.el9_3.2.alma.1.x86_64.rpm ccdf4aa183214244ead0cba492dbc8c8bd971d4021651739ad583662a6246d82 grub2-tools-2.06-70.el9_3.2.alma.1.x86_64.rpm fca4c645c4bd04852185519eb7112a1498351b45926a663f5911fe9507b96048 ALSA-2024:0533 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981) * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553) * gnutls: rejects certificate chain with distributed trust (CVE-2024-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default gnutls-3.7.6-23.el9_3.3.i686.rpm 24c0361cb2ce5bfa0e5a3a8f8f17968403a3c3ef7f55847f41c7edeb0fb453f0 gnutls-3.7.6-23.el9_3.3.x86_64.rpm b20bb707d8f9f27eba48ddce817752383a32e91201aa74963293f661f9597624 ALSA-2024:0790 Copyright 2024 AlmaLinux OS 0 1 Moderate

nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default nss-util-3.90.0-6.el9_3.x86_64.rpm 05162e2067305cb8a9e5aca22c7483d5af2af0c0acf0ecc86a55bd70a0840f2f nss-softokn-freebl-3.90.0-6.el9_3.x86_64.rpm 0e5d007e3432d36c0f06038cd7799507c72a139c7b1c9b50aa953e28488e9a66 nspr-4.35.0-6.el9_3.x86_64.rpm 29e0cc405953947e36c4a51911323991f22c43a4a8aab701b0af40e70c32677b nss-sysinit-3.90.0-6.el9_3.x86_64.rpm ac4e22fb6e32de62e9811de5dd73128016f92616790f58722fcf7faa05335303 nss-3.90.0-6.el9_3.x86_64.rpm b343a3cd362f409d45b983cfa1f2086e0d06bbd14959dc37c70bf4f529da035e nss-softokn-3.90.0-6.el9_3.x86_64.rpm c9a7bb7794269448af09506f035e4c63a87f5693450d11a11ff6c95cf4d68597 ALSA-2024:0811 Copyright 2024 AlmaLinux OS 0 1 Moderate

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Bug Fix(es) and Enhancement(s): * CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output * CVE-2023-28486 sudo: Sudo does not escape control characters in log messages * CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default sudo-1.9.5p2-10.el9_3.x86_64.rpm 1254f39f3995a137bc47f62081b2cb946d897570191afe7f8cce49af5ce7153d ALSA-2024:0966 Copyright 2024 AlmaLinux OS 0 1 Moderate

opensc security update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fix(es): * OpenSC: Side-channel leaks while stripping encryption PKCS#1 padding (CVE-2023-5992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default opensc-0.23.0-4.el9_3.i686.rpm 2c3d0d3eb7d706b1da1d89d1704234e6f37eac49e62dae3dea8156d3408058d4 opensc-0.23.0-4.el9_3.x86_64.rpm 2dea9de7eb125aba4bb12b3d5d45b8567fa0ddd289917b29144d261db6c42b04 ALSA-2024:10244 Copyright 2024 AlmaLinux OS 0 1 Important

pam:1.5.1 security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default pam-1.5.1-22.el9_5.x86_64.rpm 15bfe177d3c10982c75e81d7b274883a9fb53322011c8d829667c983ee419b18 pam-1.5.1-22.el9_5.i686.rpm f2ae4441fc667cdcb930e7a2cfe90f7342e7d1c8848d6d18cb350ba68e025862 ALSA-2024:10274 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244) * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-modules-5.14.0-503.15.1.el9_5.x86_64.rpm 0a3375b8320c256f7da17c9ea63e4752996eeb2287bf772770a892b1e7077d1d kernel-abi-stablelists-5.14.0-503.15.1.el9_5.noarch.rpm 1d5e5d44b9f6c7e7e0651497c28595d44c3fd0f7d3be85f7804b0d99f01f4b17 kernel-debug-modules-core-5.14.0-503.15.1.el9_5.x86_64.rpm 20ca0544d282fb98fc1a00c3231218ae30b61ff37f2420cdb3a94ad127215d0a kernel-debug-uki-virt-5.14.0-503.15.1.el9_5.x86_64.rpm 38e72148f448578bd2ff35775f25c2640487479a0d7fcd42fdf1851b8537ec64 kernel-uki-virt-addons-5.14.0-503.15.1.el9_5.x86_64.rpm 3ca63003ac8ae32c5a73cf1381f7e8a691966653d67bf38159bf2f044d5fc46e kernel-uki-virt-5.14.0-503.15.1.el9_5.x86_64.rpm 567f19ac7a1c0ca774a3527fcde90ddaae027392e45492a45247657b53c80345 kernel-modules-extra-5.14.0-503.15.1.el9_5.x86_64.rpm 5a6b130f1187178a25046772a0549ec4096a7b5d7e47bc3a7e0547755d988b28 kernel-debug-core-5.14.0-503.15.1.el9_5.x86_64.rpm 74d350e4af83637081e1bdc0d9e4c68d64cbe9491eca359445746de280b0f609 bpftool-7.4.0-503.15.1.el9_5.x86_64.rpm 772ae2f015453fbc1bd6fd338421bc1d26ce92fa71c123961230a2fd4a7944ee kernel-tools-5.14.0-503.15.1.el9_5.x86_64.rpm 7bb1df51a54c9dc7e821cd367601720cce381bd227696016112e013aafbd1039 kernel-debug-modules-5.14.0-503.15.1.el9_5.x86_64.rpm 9e431cf232538b57266c11e77121e2441f1e202fc7963c17c96d0cc2f9594b36 kernel-modules-core-5.14.0-503.15.1.el9_5.x86_64.rpm a9cb4a281f8236c2863138fcd5c2e1c25beb3516f3589d0a27961756d382fc88 kernel-debug-modules-extra-5.14.0-503.15.1.el9_5.x86_64.rpm bf912e7ad4cd58a3d5055471d71703356c4bd20c9b9d1582d30adf161b1bacbf kernel-debug-5.14.0-503.15.1.el9_5.x86_64.rpm cc47d69b45095a819b79a1ab5dea1e49a9de8954a453c73f91f40426e85a1d38 kernel-tools-libs-5.14.0-503.15.1.el9_5.x86_64.rpm e720a425057e19acb192e8f38cd8791692c94ff9c63997eb9457490f338165cb kernel-core-5.14.0-503.15.1.el9_5.x86_64.rpm edf318fd71f039b1bf0a3c8a54f7af5f4faf994340a4d3629be3fd503758e225 kernel-5.14.0-503.15.1.el9_5.x86_64.rpm f225a5b0b30a1dd9873a922e084a524ee80d0d234cdb8195f3c798a832ae3cab python3-perf-5.14.0-503.15.1.el9_5.x86_64.rpm f2c0b71110f033fae00432ab617252c5ebdd7aff1dbee81fa0fcd8cda762553b ALSA-2024:10384 Copyright 2024 AlmaLinux OS 0 1 Important

tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336) * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default tuned-profiles-cpu-partitioning-2.24.0-2.el9_5.alma.1.noarch.rpm 9662c799e8afb9456a6ae87280a7d8704c0afedfc6811f6dc0c64f8959655bc3 tuned-2.24.0-2.el9_5.alma.1.noarch.rpm ca29a8e23a29740e54208ed8a3464161c12a39e92a0325471b77322465e6bcab ALSA-2024:10939 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695) * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949) * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-uki-virt-addons-5.14.0-503.16.1.el9_5.x86_64.rpm 094cf9890e0465d4f6b9f7bf51f5d7d58e48ad8b6d27f67a2dcf7bc0e564ff12 bpftool-7.4.0-503.16.1.el9_5.x86_64.rpm 09a1b93c3bc57931768123320f778c61d28b64fd92ab56d22406ce5a11c43dde kernel-debug-core-5.14.0-503.16.1.el9_5.x86_64.rpm 0f5c52cbac9f2f0a9225e0e37c3f0bce548850c3433dead9af8756d96659563f kernel-core-5.14.0-503.16.1.el9_5.x86_64.rpm 17cfcd052470b350ff789a8a81f189bca997ec4ea4065dba2a4ca35fca3c9a72 kernel-tools-libs-5.14.0-503.16.1.el9_5.x86_64.rpm 1a09760457c9be9ad63ea4ea442a1a86bc1485587cb673bfd5ed07a500b5e95a kernel-uki-virt-5.14.0-503.16.1.el9_5.x86_64.rpm 243005e540bd3debaa5fae13e1c44811b63d1d74bdf136a619e137a6f015920b kernel-modules-5.14.0-503.16.1.el9_5.x86_64.rpm 3fd7b6efd6883c1a02e5b49b58f69a1c4239c28fbee85b38671b56bd66d45566 kernel-debug-modules-extra-5.14.0-503.16.1.el9_5.x86_64.rpm 543b9aafeacb106af8cdab9c55785a41ae78887a983800fa0885b409a508ee7f kernel-debug-modules-5.14.0-503.16.1.el9_5.x86_64.rpm 696bdc9f5b5d1f2f5f6860691711cf763962ec5b9c04d89bd3d666a54669ecd4 kernel-debug-5.14.0-503.16.1.el9_5.x86_64.rpm 703ccfc5764686cf8d1273fe27ef8272694ac5f5bac9afbc72b49b84abf7f30e python3-perf-5.14.0-503.16.1.el9_5.x86_64.rpm 835afc331016c644b96da785c58e1e5f8e6b15f2d50305c38f50f1cf3a59261f kernel-abi-stablelists-5.14.0-503.16.1.el9_5.noarch.rpm 8aa4b120084589a342a50e5f8febaf33ab97c3b99b3d9241dd29055c6e84256a kernel-debug-modules-core-5.14.0-503.16.1.el9_5.x86_64.rpm 93b22744d3a981efaab86a757994b8eedff247631d4fb500b4397291da6733fe kernel-debug-uki-virt-5.14.0-503.16.1.el9_5.x86_64.rpm 962b9874bea7ba1fdac039c05812eeb9356f8b241d508b60d3ad433955985cc8 kernel-tools-5.14.0-503.16.1.el9_5.x86_64.rpm a602fa4902aad1610b6a586f6cb29113a1d1bc9a36de8e8dcc040039ef032dd2 kernel-modules-core-5.14.0-503.16.1.el9_5.x86_64.rpm a943523e441c1002451003b4e1e30296cc276b7940ac939b3c6ff036ecc8da26 kernel-modules-extra-5.14.0-503.16.1.el9_5.x86_64.rpm f6cf784c57e17ff8185f635a74b9f03e13726a7cacea2bfb64a01bf2b76ce758 kernel-5.14.0-503.16.1.el9_5.x86_64.rpm febcec797e68becd657fa40d98f4d3a2d8396bbe36764d3a1159309f4e2a3ac7 ALSA-2024:10983 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9:3.9.21 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default python3-libs-3.9.21-1.el9_5.x86_64.rpm 7d20517d86d52af523d50413e097d217841bf13e7dc540a5c25a2a131a64adc0 python3-3.9.21-1.el9_5.x86_64.rpm dc9ec5d7107c44d119da78843482ee8fbd61a393d136dd7d9a2fe55ec28af93c python3-libs-3.9.21-1.el9_5.i686.rpm e1b73c40ad80733ac578b409567eebf7164dc4188170c8705cb4de71d63deadf ALSA-2024:11250 Copyright 2024 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default pam-1.5.1-21.el9_5.i686.rpm bbc696ba3b60b23321df08c27e8a6d02ea72516e4678380e7d07e696f188cf4f pam-1.5.1-21.el9_5.x86_64.rpm d353cd21aad9a596c0defb8be833c7507cc68c2ec23082801776f86ce2bc968c ALSA-2024:1129 Copyright 2024 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default libcurl-minimal-7.76.1-26.el9_3.3.i686.rpm 7997a230dfc8a0c3ecc879cc845c075b8bd50d89814f5522b5f37d035ef8901b libcurl-minimal-7.76.1-26.el9_3.3.x86_64.rpm 9cb6eff0d3828dff3bd99fd6942fa258dbb616d4b82e6f6992f22704f059cd53 curl-minimal-7.76.1-26.el9_3.3.x86_64.rpm c82fc5326e3b1817678854409b551e0caec663d4a5e2e5d749002847e2fcabbb libcurl-7.76.1-26.el9_3.3.x86_64.rpm db34779e41fccf8e0d51534a7be0c341154570eab383b5d0e3d1d3769828c514 libcurl-7.76.1-26.el9_3.3.i686.rpm f400e2e218b5227773902cf04aeaaa650a5a58a7a46dc2433a6febb9fcb162a8 curl-7.76.1-26.el9_3.3.x86_64.rpm f71a8b24a3b3d23f3d6ada279ecfe19c80f56e4ff3313313f1152de38f4fce8d ALSA-2024:1130 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) * openssh: potential command injection via shell metacharacters (CVE-2023-51385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default openssh-keycat-8.7p1-34.el9_3.3.x86_64.rpm 2f8eedefb87df5aa5eb3691bf4b1359dfa9b58ebd5c279ede801522fe61c9bd5 openssh-8.7p1-34.el9_3.3.x86_64.rpm 611051064151ab8f367d547ddbae77b46ad034b31b8f6e818dfb307c3b143207 openssh-clients-8.7p1-34.el9_3.3.x86_64.rpm 71df6f5e24a62425f4d520ed94eb95c21402e586ffd7c064ddc8f04faa5c80ab openssh-server-8.7p1-34.el9_3.3.x86_64.rpm 965c4d263a913f3bb8fac33f2ddbfc56243a452ed79962ccb02e95e02a8ed8db ALSA-2024:11486 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020) * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697) * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675) * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888) * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099) * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110) * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124) * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115) * kernel: xfrm: validate new SA&#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142) * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148) * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192) * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255) * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223) * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-abi-stablelists-5.14.0-503.19.1.el9_5.noarch.rpm 02c4d188d748c129c6ea4d2bc3827ce7842d3ae90f3bba5af8826813fe9d2155 bpftool-7.4.0-503.19.1.el9_5.x86_64.rpm 0bac1993c673800566d3168b953ce17c8389aeef8aa24251a78cacc038a86224 kernel-modules-extra-5.14.0-503.19.1.el9_5.x86_64.rpm 0e26d8539ceb95026de338044826a64257bfb6841685e15c17719d065a5ee9a3 kernel-debug-modules-extra-5.14.0-503.19.1.el9_5.x86_64.rpm 58a5bd107cd0e28710e3af85717a4ecd1f4aed737d8fc633a67314576b88b0a0 kernel-debug-modules-core-5.14.0-503.19.1.el9_5.x86_64.rpm 8e1a929258e96925fbc98f89b4035dfe73e1af1e09ff6feb6a87bb5cfb4835b7 kernel-uki-virt-5.14.0-503.19.1.el9_5.x86_64.rpm 8f0b0316f998b219a178444c5392a32e11ec18e25e1520f294356853f0b6d718 kernel-modules-5.14.0-503.19.1.el9_5.x86_64.rpm 98da2ef354eecef59e76617f9dbf139992ef663bde4f6d6a539a170cad289e8b kernel-tools-5.14.0-503.19.1.el9_5.x86_64.rpm a7689952ddfa56e7727d29175a9404c30e91c2364beaba099354bbb40c3b38e4 python3-perf-5.14.0-503.19.1.el9_5.x86_64.rpm aa137219b85cb02e47bf929fff6050dc674ef7b171a56ae10d5e9a1287840222 kernel-uki-virt-addons-5.14.0-503.19.1.el9_5.x86_64.rpm ad2684fd397ddbf89c0c5f60bb96de1d6f81dfd26dec6df300272fbcc440be1a kernel-core-5.14.0-503.19.1.el9_5.x86_64.rpm b24c4c12770ea920e4e01c3dbbb35ef9fa5ffc947fd62c2c1643b7693d9521b1 kernel-debug-5.14.0-503.19.1.el9_5.x86_64.rpm b889b56911801939bff0d14655b85993d0b823c15c5d90dc440d513738e60960 kernel-5.14.0-503.19.1.el9_5.x86_64.rpm b9857de5dd20ca942f6cd0716d41ff906af055a4e461caf9c53db0e5a2c30c65 kernel-tools-libs-5.14.0-503.19.1.el9_5.x86_64.rpm cbc64156c487e3b9f7f75b29c7b6b75f515ee09f0d47ab595a4c1d96b67bce6b kernel-debug-core-5.14.0-503.19.1.el9_5.x86_64.rpm d220c55bfb3e2cbe0f64828b8e6a21e4d53f996ca3d17f763561f4059a582ee3 kernel-debug-modules-5.14.0-503.19.1.el9_5.x86_64.rpm daade28b5dc8b97523d006c4f9cee94eee9acc7ae6a39b56b2be1d8af21d6787 kernel-modules-core-5.14.0-503.19.1.el9_5.x86_64.rpm e5e60da33878eb31140fd41939fe2167892b6763ced52d3410261cd086bc5bd5 kernel-debug-uki-virt-5.14.0-503.19.1.el9_5.x86_64.rpm e5f5c8b95d992d88ead3af412ac9ca2f48021969678fd421924b000002ba607b ALSA-2024:1239 Copyright 2024 AlmaLinux OS 0 1 Moderate

opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): * opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default opencryptoki-libs-3.21.0-9.el9_3.alma.1.i686.rpm 0aac50c7725512b0c6286dddfa80c008282e6ff34f98a3d22d6c420ee9b7f26f opencryptoki-libs-3.21.0-9.el9_3.alma.1.x86_64.rpm 341d5efbacd7b914d143db0de3ef13cdf6e23e323c93454f3b4ad0bc74f358ff opencryptoki-swtok-3.21.0-9.el9_3.alma.1.x86_64.rpm 548d4a614ee43de7b1da74d1f6559ddd0bfa0e950da5a9f9e52be6350338a69d opencryptoki-icsftok-3.21.0-9.el9_3.alma.1.x86_64.rpm 5d3cad932ff41c26b238287a894c34657ea6d61ad5951a8c8ff513bdaacf4e53 opencryptoki-3.21.0-9.el9_3.alma.1.x86_64.rpm 759956418bcbbb603730a418c9cb8a0ea91ef4b04c3b2634c0bd990220399d85 ALSA-2024:1530 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425) * expat: XML Entity Expansion (CVE-2024-28757) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default expat-2.5.0-1.el9_3.1.x86_64.rpm 64a116cc64e8afdebe60bb6e8a009644b604dab742bd89f1cfdbdda763732c2b expat-2.5.0-1.el9_3.1.i686.rpm 8d5d37a481367f45543af1bb5d3f1f8cd4af65373ecc2faa7d9b3f98c2bf4e3d ALSA-2024:1692 Copyright 2024 AlmaLinux OS 0 1 Moderate

less security update

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fix(es): * less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default less-590-3.el9_3.x86_64.rpm 424c061224348fc6999a073647944ad871160db13c35225e1b7e83f03a541707 ALSA-2024:1879 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_3_default gnutls-3.7.6-23.el9_3.4.i686.rpm 7473d486f7aa8811b485487653a81a19365d30d288336045f01f6a7f785768e4 gnutls-3.7.6-23.el9_3.4.x86_64.rpm 91ed884e420cb2eee2ce5ddba26b91b20ce87d7ce42b7afe85085a8d197108d9 ALSA-2024:1903 Copyright 2024 AlmaLinux OS 0 1 Important

shim bug fix update

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments. Security Fix(es): * shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547) * shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (CVE-2023-40548) * shim: Out-of-bounds read printing error messages (CVE-2023-40546) * shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file (CVE-2023-40549) * shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550) * shim: out of bounds read when parsing MZ binaries (CVE-2023-40551) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default shim-x64-15.8-4.el9_3.alma.1.x86_64.rpm 190274ec5c3d10347c176cf70168fda177502feb1cf74aa61e1759596c481460 ALSA-2024:2394 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582) * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555) * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480) * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448) * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934) * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040) * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531) * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931) * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023) * kernel: irdma: Improper access control (CVE-2023-25775) * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464) * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866) * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083) * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194) * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756) * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863) * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489) * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522) * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581) * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578) * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580) * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610) * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565) * kernel: tls: race between async notify and socket close (CVE-2024-26583) * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585) * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586) * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593) * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609) * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176) * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476) * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-5.14.0-427.13.1.el9_4.x86_64.rpm 001062ede5186fd47f676d3a9d023bb4b2a8ee4be344db21ad4951697110f245 kernel-modules-core-5.14.0-427.13.1.el9_4.x86_64.rpm 02dd92e4833eaba0b73ab6ea06e49a24aada656138a32d172142320302242b30 kernel-abi-stablelists-5.14.0-427.13.1.el9_4.noarch.rpm 12854ee27cae13fd20945a3c7aeec81b22b24fb8e5e6494387d39c7b838ccc76 kernel-debug-modules-5.14.0-427.13.1.el9_4.x86_64.rpm 19ee1dd7791baebcb94dab04ae624b18d75c6178e2fb84983f6eb8a8ba37aa3e kernel-tools-libs-5.14.0-427.13.1.el9_4.x86_64.rpm 1c70056ef88e43b5a5d685604792e1068dfe12eb25d4dd258b95f9732506a70e kernel-debug-modules-core-5.14.0-427.13.1.el9_4.x86_64.rpm 3046beec58380d2a4b690b464f7e58dcac9e6f467e3006e02ff069524a99296e kernel-debug-uki-virt-5.14.0-427.13.1.el9_4.x86_64.rpm 338bc4afb2b446e70fc5aad879d5ad415c8ac566b3b7f7e442c940c1f052e56b kernel-debug-core-5.14.0-427.13.1.el9_4.x86_64.rpm 5ae7a420b70871ec098027f7ebb60d4fc048c6e5acb02b48861e4d98f7b6c2ca kernel-tools-5.14.0-427.13.1.el9_4.x86_64.rpm 5f172e84b8286bce2e05f7b4367ca62afabe5cfc4e61a191a00a70f912353550 python3-perf-5.14.0-427.13.1.el9_4.x86_64.rpm 741e2a6cf08cf0a5eeee6a30434a83fa300fddfa3ae5c470ff30b5339188f747 kernel-modules-extra-5.14.0-427.13.1.el9_4.x86_64.rpm 7efc54ceed8c2d5a8630cb11872fa8a0fc293e132b8e643ef4e68d780dd889bc kernel-debug-modules-extra-5.14.0-427.13.1.el9_4.x86_64.rpm 9cc6813cd34526feaf5780e8970e4eda2c8c2d798201f35a975e615fea1b6bea kernel-debug-5.14.0-427.13.1.el9_4.x86_64.rpm ae02ef7a6c934ba5ef4a971f000f7a9579d7d6ce03a11878f031987e271fb2ad kernel-modules-5.14.0-427.13.1.el9_4.x86_64.rpm b04530ee53fcf719102395658785bdeb6eca88b20eb7cc2f47a4bc19f159c929 kernel-uki-virt-5.14.0-427.13.1.el9_4.x86_64.rpm b7f4a53ff31d52ee18c3d6c904fc7174887db1ddab900aea8cb53b4fcf6780c6 kernel-core-5.14.0-427.13.1.el9_4.x86_64.rpm f28b7d495f07f5d3cc198f689cdb2e3ae1e02634185456fb6fe68877754afd2f bpftool-7.3.0-427.13.1.el9_4.x86_64.rpm fa02b0d91ee50b212beac8d118b32cc35f688ffcaddf1db09f2886c9116d1519 ALSA-2024:2396 Copyright 2024 AlmaLinux OS 0 1 Moderate

squashfs-tools security update

SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems. Security Fix(es): * squashfs-tools: unvalidated filepaths allow writing outside of destination (CVE-2021-40153) * squashfs-tools: possible Directory Traversal via symbolic link (CVE-2021-41072) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default squashfs-tools-4.4-10.git1.el9.x86_64.rpm c0082aafae43da8d7a204dac17717178df0b805302af6e15b28f494ae2e8d482 ALSA-2024:2410 Copyright 2024 AlmaLinux OS 0 1 Moderate

harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default harfbuzz-2.7.4-10.el9.x86_64.rpm 1f81073019abe4176d4496723a89b55a349c31f507e96397a0b3efa7cea0ff61 harfbuzz-2.7.4-10.el9.i686.rpm 5157daf2ab0a03b403d37c60b150b8f0f866754714f81e3d96368e06a16339ce ALSA-2024:2433 Copyright 2024 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469) * avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470) * avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471) * avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472) * avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default avahi-libs-0.8-20.el9.x86_64.rpm 3fdc372b3c5a49f96cc891202cb7623f2a703ee176be3bfd7ab49e1cfd2ea0b2 avahi-0.8-20.el9.x86_64.rpm 93685678fb1ecac1711583bd9dec079ed5e0ce8804ab31378918b43b2f713185 avahi-libs-0.8-20.el9.i686.rpm cf26b9f20f10d8e85aa7447c4dbe402500c52183fb5499703387c3979729e14a avahi-0.8-20.el9.i686.rpm ed17bf6b3e260d6eb8279682511b7e10401fcffb3e221973d0b33bc96682347f ALSA-2024:2437 Copyright 2024 AlmaLinux OS 0 1 Moderate

exfatprogs security update

The exfatprogs package contains utilities for formatting and repairing exFAT filesystems. Security Fix(es): * exfatprogs: exfatprogs allows out-of-bounds memory access (CVE-2023-45897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default exfatprogs-1.2.2-2.el9.x86_64.rpm 7344778a9338550aca9b46ac6ffd58ec8748fda3f422067ac56d3f69f07c5182 ALSA-2024:2438 Copyright 2024 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: allowing unprivileged user to block another user namespace (CVE-2024-22365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default pam-1.5.1-19.el9.x86_64.rpm 8e5fe731f8eaebf41be0ed080c415eb86bbbf9a315df51f4f2d2792902b4e189 pam-1.5.1-19.el9.i686.rpm aa43e2ef5806472f74b1f5dc15a066fbe331e4b855d5a1ad7de9059bddea763f ALSA-2024:2447 Copyright 2024 AlmaLinux OS 0 1 Low

openssl and openssl-fips-provider security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975) * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446) * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817) * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678) * openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129) * openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237) * openssl: denial of service via null dereference (CVE-2024-0727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default openssl-libs-3.0.7-27.el9.i686.rpm 1a6991ac853f9b61d4ff97b9e0ec090dca42dc498881e97801d5ca1a3628b3f0 openssl-libs-3.0.7-27.el9.x86_64.rpm d541d3311e82d9743d848fa95ea854472966479190eddcc3a39b083d64e1bfca openssl-3.0.7-27.el9.x86_64.rpm fe27c582e6e3f9a048c2c5f3c5b3e300b87b54948eb8138662b5ff0d4e3e238f ALSA-2024:2456 Copyright 2024 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048) * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692) * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default grub2-pc-modules-2.06-77.el9.alma.1.noarch.rpm 1b0e6216aa285ff2b09fde2a5789e456445a8e73d0ed0a93df0949d84fc9139c grub2-tools-2.06-77.el9.alma.1.x86_64.rpm 21a434a0426173c7d87aa0e7cd9c8a51389f5819ba65efc9431599160edfe7a9 grub2-pc-2.06-77.el9.alma.1.x86_64.rpm 66026ed762c385e48c7dddd93508185cfb7d8dc10ae4c5599b2b6771d53f94e7 grub2-tools-extra-2.06-77.el9.alma.1.x86_64.rpm 9f4edede2243f10a040caf804b6ddfc8e921e8538595129256b26001a5400410 grub2-efi-x64-2.06-77.el9.alma.1.x86_64.rpm b02f1f05ae576f78122af4674ba5d279d6dd4809330d513481eae0bfdf2521f9 grub2-efi-x64-cdboot-2.06-77.el9.alma.1.x86_64.rpm b0caac251a3822d24467ccd533c63badb768927c7f792eb070a2b88a8a1891bf grub2-tools-efi-2.06-77.el9.alma.1.x86_64.rpm cb7f22ed16e88806180bc98cada307d9a187399b3d4075a0d66028cf69cc02f7 grub2-efi-x64-modules-2.06-77.el9.alma.1.noarch.rpm d4419dc59c9f40d93a8a87c55f39e347002dc9ed3f1185cdea105f7a31fe102d grub2-efi-aa64-modules-2.06-77.el9.alma.1.noarch.rpm e5ac6ac43c2b18b57fa6bf70a0141c5dbadc0eb7f808cad0545b973d75184232 grub2-common-2.06-77.el9.alma.1.noarch.rpm fd4804f9aabf9ab0aa42432b26d96c2a942ebbfd80c9ea052e867d50d260cf5c grub2-tools-minimal-2.06-77.el9.alma.1.x86_64.rpm fea118ef08a9e654d6b0d3674619d2b94851a15c9c8fcd6ae192d2a908ea7e22 ALSA-2024:2463 Copyright 2024 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default rhel-net-naming-sysattrs-252-32.el9_4.alma.1.noarch.rpm 2b44f8403d902496012e3bc2dcc06e1fc50676fb36b503200bb8417eb6b96187 systemd-container-252-32.el9_4.alma.1.i686.rpm 3085df7ec8f765bc678f646211c6d69a6ad766ad0b90731c19c20e225653b042 systemd-udev-252-32.el9_4.alma.1.x86_64.rpm 479bd29b156216894d72ed2547482afecd4d5c7ce4ce0dadfff6cac8cea5940d systemd-oomd-252-32.el9_4.alma.1.x86_64.rpm 519465335500404290442ef6ac98d05c701414e991d77019c0e1e9a3773baf0e systemd-252-32.el9_4.alma.1.x86_64.rpm 53ae7ca5323f96a091f403cb7fe220422e56dad8af30e933dadac2ae7a34226e systemd-libs-252-32.el9_4.alma.1.i686.rpm 5681d97f77fc3c63d07586386d09efed1b2ef02368fe8f983c38bb13c845137a systemd-libs-252-32.el9_4.alma.1.x86_64.rpm 7658ef639b88e76e456d72e44cdcc7fad4d373213e79a679c0a0ab689a5f797b systemd-252-32.el9_4.alma.1.i686.rpm 887e8cde5849de81a965524238eea836a81673e7a4e9ed2306f967cb5e2a5076 systemd-pam-252-32.el9_4.alma.1.x86_64.rpm a7c3a495158f72de7c597262dbeffedfb8a5bfa76a55ab020c642f8aaf6ead50 systemd-container-252-32.el9_4.alma.1.x86_64.rpm ba4f3d377629beec7d46a3f4dad75eca45f07df2284dcb63d0c5b83d832a6223 systemd-resolved-252-32.el9_4.alma.1.x86_64.rpm d31a0cbe04f5d1ed02a678733f270784fe8d2451ccddcc40695d91d6fd1f0713 systemd-rpm-macros-252-32.el9_4.alma.1.noarch.rpm d90c0d6253154dbaa4d1cac7580811b07043b6f51a1da78b07d86e461af91e0b ALSA-2024:2483 Copyright 2024 AlmaLinux OS 0 1 Moderate

traceroute security update

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host. Security Fix(es): * traceroute: improper command line parsing (CVE-2023-46316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default traceroute-2.1.0-18.el9.x86_64.rpm 971711b81f525ba1b981e7fb45285a462b2ab14f496ecd53253dd3e0616f2964 ALSA-2024:2504 Copyright 2024 AlmaLinux OS 0 1 Low

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004) * libssh: Missing checks for return values for digests (CVE-2023-6918) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default libssh-0.10.4-13.el9.x86_64.rpm 3fde58b1c5fd34aa3e3c4f56a22a4e3149d2fa83dcf9f1db1c87cb455ab62fde libssh-config-0.10.4-13.el9.noarch.rpm 85ecc8ec9402526a3679378df72e4bca55583c0b6f819f5f3bc34f3f3f338430 libssh-0.10.4-13.el9.i686.rpm d698c93cd633813e5d8aa7c519780e36104603ef30f723695eb4779eb7872f2f ALSA-2024:2512 Copyright 2024 AlmaLinux OS 0 1 Low

file security update

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats. Security Fix(es): * file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default file-libs-5.39-16.el9.x86_64.rpm 4b1f183535ebcce0ed63936df0b7c54c4ed2d4b3d76a0d89f8c7c1702a8a99ba file-5.39-16.el9.x86_64.rpm abe175b558e56897b3e930e68e91959baace2e8966b8d17d53c19c10db2b8e62 file-libs-5.39-16.el9.i686.rpm edbe6d61717c3922535c019dc052f8952b27d4b635b22f1744789715480b7388 ALSA-2024:2517 Copyright 2024 AlmaLinux OS 0 1 Moderate

wpa_supplicant security update

The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver. Security Fix(es): * wpa_supplicant: potential authorization bypass (CVE-2023-52160) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default wpa_supplicant-2.10-5.el9.x86_64.rpm 077bd42d21e1fbb56a6b01696cd0fb3c1a2f528d5682f1396e28fd380f3d6092 ALSA-2024:2570 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default gnutls-3.8.3-4.el9_4.x86_64.rpm 16c48c504fe62f8e19cac7c6442d3e08bba487f610c2f533116dac32357cda86 gnutls-3.8.3-4.el9_4.i686.rpm 64cf0b0136d3f9b80b07ce2d4b8ce6a4ab86617e8ef9baf560bdfa5edef825ea ALSA-2024:2571 Copyright 2024 AlmaLinux OS 0 1 Moderate

sssd security and bug fix update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758) Bug Fix(es): * socket leak (JIRA:AlmaLinux-22340) * Passkey cannot fall back to password (JIRA:AlmaLinux-28161) * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-sssdconfig-2.9.4-6.el9_4.noarch.rpm 071f94740f1e4f5558d872c369f3f3c3a0ff420674c566ce9223e94bcfff4e42 libipa_hbac-2.9.4-6.el9_4.x86_64.rpm 117676c95736e2d0d7d7ef318a1e0e33f0bb991315cb7ed49fdfb841c7763e1c sssd-client-2.9.4-6.el9_4.i686.rpm 1a466a47b6abf549137206991f2d309aa0c809ad113648104f508856cb4e69a5 python3-libsss_nss_idmap-2.9.4-6.el9_4.x86_64.rpm 1de8946e6c6c91aa503cfa62fb49877e46a76c3d162d8376dccda6c4c1f8a6d3 sssd-common-2.9.4-6.el9_4.x86_64.rpm 2390652b18dbc4e9762e9deced3f9e22046066d90e9fd300296c860380bc813d sssd-2.9.4-6.el9_4.x86_64.rpm 273155a35f83e06d73e8b33f5f0897dee700d10a123f352076aa2431cae3356d python3-sss-murmur-2.9.4-6.el9_4.x86_64.rpm 30ba52ad059142e194c1ddc67b05132b0e609d18c2165d57e4f0aecb5fb09028 libsss_simpleifp-2.9.4-6.el9_4.x86_64.rpm 35dc48e85ddd80d3bd778679c88dec16281054f563b76bd64ba0b0137fd125ab sssd-ad-2.9.4-6.el9_4.x86_64.rpm 3812b6a2c3093ff7dd3cf19dbfe72ff9d572f58d2a647fb959be1bf0271eb907 sssd-proxy-2.9.4-6.el9_4.x86_64.rpm 38bd18067fee98a72a4e261e60b394646902686fb904806a33b8e553c2a427da sssd-krb5-common-2.9.4-6.el9_4.x86_64.rpm 3d9bba34cb863a88be2cd1bb76b24408cb7fb2cf06b366189f651be8eafdddb1 libsss_simpleifp-2.9.4-6.el9_4.i686.rpm 5820e8dd8c83494abdda172b10126a166523a24311f49b9e75d024b75b8c4d2d sssd-passkey-2.9.4-6.el9_4.x86_64.rpm 5cf742d1db112b4868494d3198535acf135b48ec77e3a83c694a13f61ef9c639 sssd-tools-2.9.4-6.el9_4.x86_64.rpm 64aa6fa543c275043a915d390a1008cb47aa7dec2506e04504d6411e4b100be6 libsss_nss_idmap-2.9.4-6.el9_4.x86_64.rpm 663f7f0a2de6737d10c6f8f5aecd11b4afe4a215b5021d2b5bbc0350024079b0 sssd-dbus-2.9.4-6.el9_4.x86_64.rpm 716936339ae5b41dbd5a9a8cc8610d600c4478a82bd260d9674ff4bf635abdff libipa_hbac-2.9.4-6.el9_4.i686.rpm 78850431a4185c4e24f76933b5278a5ecc2eb8cdb46cdea43efffbda565688d7 libsss_certmap-2.9.4-6.el9_4.i686.rpm 7c539081efba96f6f1b830d28843f8f01495619964bd61d7104b940afc18d77c sssd-common-pac-2.9.4-6.el9_4.x86_64.rpm 813084b250ed51373e8e6e5c717240d0c299f946089c5ef5306e9987b00fc6e0 python3-libipa_hbac-2.9.4-6.el9_4.x86_64.rpm 84de68eda1b6e639080a1855ce84fcd80f66d89fe41cc802f80eb493f28835e8 sssd-ldap-2.9.4-6.el9_4.x86_64.rpm 8cd9ffd9d7dbf690b44b16cf1dde19452fd974186599bf8a962af5df98a66712 sssd-kcm-2.9.4-6.el9_4.x86_64.rpm 8f20e1c2c7250afd75cfc6b3a65b0c2fa421f2b05f758c2ae8440b0c5d7902de libsss_idmap-2.9.4-6.el9_4.i686.rpm 9280114c045ab8547706e386690fe876bb1df8aad9da3b2afb2f886e4b924a25 libsss_sudo-2.9.4-6.el9_4.x86_64.rpm 951855761aa8175b311b937bf535cee7c3e6d0b8bea5d1326498803bba7ac20a sssd-winbind-idmap-2.9.4-6.el9_4.x86_64.rpm b8ebc968c60ed74397f7c64105fa3ad2717a54a1c25f368ae7db99280dd04178 sssd-polkit-rules-2.9.4-6.el9_4.x86_64.rpm bb5c8b9f1c084b70499779398fd5193763bb587bd97b672d9953d596373e22b3 libsss_autofs-2.9.4-6.el9_4.x86_64.rpm cfe02f3243d649a472636996b892fbf86d4a1da9a292e61368cfc9f591f06d67 sssd-ipa-2.9.4-6.el9_4.x86_64.rpm e04efad60918a2167c19da5af3d68ff1e0901d2cdc4a978a86ca9e499f6ee497 sssd-krb5-2.9.4-6.el9_4.x86_64.rpm e06c70e6c6f13c734524383a31c7561ebf57703e3899f42685058713865bcade libsss_certmap-2.9.4-6.el9_4.x86_64.rpm e147b2bc2fdee3e42e5e3c691e537d7e663babefe98f27fac364845f72b3f635 sssd-nfs-idmap-2.9.4-6.el9_4.x86_64.rpm e51aebe58eac06cbcf71d37e096b4d4744239dc7c46c00f097e2848b3de69c25 sssd-client-2.9.4-6.el9_4.x86_64.rpm e974f5c92ac84aebe37a24ac9f678a7bf620615096d4fd6046de4430a06a94cd libsss_idmap-2.9.4-6.el9_4.x86_64.rpm f6043a252d831934c24fb582e6dc5521e3733b9d1f9ee12b2b05bbaac1280323 python3-sss-2.9.4-6.el9_4.x86_64.rpm f936ca65813ce72aeacdaf26324179278f3c58d4c9cc40185f302490d46eed12 libsss_nss_idmap-2.9.4-6.el9_4.i686.rpm fb1ef7e1555a3e5e62fa046fdbbac97ce59194a112930534632b48b3dae8fd4e ALSA-2024:2679 Copyright 2024 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: use-after-free in XMLReader (CVE-2024-25062) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-libxml2-2.9.13-6.el9_4.x86_64.rpm 5b74afaa10e62e8767407204f6f27835de71506885335d552ac2c6656e41eb6f libxml2-2.9.13-6.el9_4.x86_64.rpm aa32c00bdfb1adecf1490add9ea876cbb2bb368879433f3873915598188c0a89 libxml2-2.9.13-6.el9_4.i686.rpm e661e18c05e10ad18f08119459a2166903cc485226bec9420b8d0945a6315e95 ALSA-2024:2758 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743) Bug Fix(es): * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009) * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235) * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673) * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678) * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-debug-modules-5.14.0-427.16.1.el9_4.x86_64.rpm 065088eeafeea678a4274b98332367404d9d8764c7574236ae8a1a4dc6777ad4 kernel-debug-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm 24c339653339a06af43ff4c6799cdb1bc4c4758b60c2b697d1116fba99db573d kernel-abi-stablelists-5.14.0-427.16.1.el9_4.noarch.rpm 3bbbefeddd0549e92e9aa912423166f98b363818b5086772f7fd56ee99895fc4 kernel-5.14.0-427.16.1.el9_4.x86_64.rpm 53b9127c0fd14c0b1cf805caa716ae34233dda7d4388f368689d8d7012cb40d2 python3-perf-5.14.0-427.16.1.el9_4.x86_64.rpm 566c26236b1922fec30ef91a56217e982d6bccd98aed51cd8d23c665581fb770 bpftool-7.3.0-427.16.1.el9_4.x86_64.rpm 6900389eb1d8e6302110bb1a2a54184cc1c0e09b3d95bb555415e8bb368b7d0e kernel-debug-5.14.0-427.16.1.el9_4.x86_64.rpm 769e26eb3c414b990f093c33b167abb59457e8845be2551bce8423e8eb375b56 kernel-core-5.14.0-427.16.1.el9_4.x86_64.rpm 84ee9a635abf36a7943b23b496006122ca7be2113dfd714130d3faa9c75c85b2 kernel-modules-5.14.0-427.16.1.el9_4.x86_64.rpm 94c782e8c156ffa71303977e58c083bdd5da2d91be3ad46dee6d62494fc6f6f0 kernel-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm 99463a4184b43a0b8d958b8dcd64cd3cb1d0eb90549f354583c68a80507b6dad kernel-tools-5.14.0-427.16.1.el9_4.x86_64.rpm a954c19819edd2aba7b57cd29ab626819778a8ee2fff90c4c7ba964435920bd2 kernel-tools-libs-5.14.0-427.16.1.el9_4.x86_64.rpm b1735c84729e0480e247f3f3b13bb7701c512adc97958fec6dce700fc3dfe695 kernel-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm b6fcd62d6b33a42f8177b016ae7e476705a53d20111838af3160f7f756180ea1 kernel-uki-virt-5.14.0-427.16.1.el9_4.x86_64.rpm dfe276d8721d41a16a87a20a27c453d11853a8653996dce2b9fa87c07d5bf6d9 kernel-debug-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm eab0898fea3d86c23f405b028e125eae5c0a985d5b21aa2078c61e4f51fbd69f kernel-debug-core-5.14.0-427.16.1.el9_4.x86_64.rpm f1afa8a07a7804b701b668a7ca97dfbad47d97eb60744d21e21a081072596703 kernel-debug-uki-virt-5.14.0-427.16.1.el9_4.x86_64.rpm f55194dd27001686b33bf81d03a959a03a8f31bc2763fc011217acd3210c3348 ALSA-2024:3306 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673) * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-modules-5.14.0-427.18.1.el9_4.x86_64.rpm 21c4c16c079d6352ebff2d75d3c84294749d3983bb5bf50afacf4039dc2d3d9f kernel-tools-5.14.0-427.18.1.el9_4.x86_64.rpm 274774f95ee702b84f68fe9b8a9c50b777d84d3a782742dfc3762449c333afe7 kernel-debug-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm 3aca58fd68abb510e5cc3a8adfac8cdb9e3be4bbf1e6e098ad2a082f0a55eb42 kernel-uki-virt-5.14.0-427.18.1.el9_4.x86_64.rpm 45fdcb715851bfe48bfdfac28ce856d7e89067272a09708c20ca13ffe4755c0e kernel-debug-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm 5a04e2ccaf253292303869373681ab6b31537bbdc75ebb4c3abb0af96d07288a kernel-abi-stablelists-5.14.0-427.18.1.el9_4.noarch.rpm 5b969c444733f016f919ea7cda008efe29eb14d3d27d7813be7a65d252582deb kernel-debug-core-5.14.0-427.18.1.el9_4.x86_64.rpm 6bd0b13d2faee966b7f75ecf4bbb6319094b733d0f91f26f038980fc7e9c48f7 kernel-core-5.14.0-427.18.1.el9_4.x86_64.rpm 79efbc6a0bd9f1a636559223af067419ae99044fc4e8bb0b0f6aaf076b2aec83 kernel-debug-5.14.0-427.18.1.el9_4.x86_64.rpm 7bdef3dca6fb72b70acbcf5cf4b76f926840e6d5e2e6544bfd4b4a620abd4bd4 kernel-debug-uki-virt-5.14.0-427.18.1.el9_4.x86_64.rpm 7e62696429c5448ed00d9575a44cd2f547bb0e2eca1456090ded043ec872b678 kernel-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm 8b3241b0bbe391612f2e2b553bc4fd8739d4627a47673da9c593f68b78b989b6 kernel-debug-modules-5.14.0-427.18.1.el9_4.x86_64.rpm 99815e0f5bacd90e4a2abe27909c0dff4a86bdd712e7cb2f763ee75ee27f6578 kernel-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm cc8aeba59a492ae576016f321bf3d049eef6c9bb04b47045f2bdbe98814a6537 kernel-tools-libs-5.14.0-427.18.1.el9_4.x86_64.rpm dc9c34c32e45d8b7af4d803caf90cf9912aa4a811b1275a8a0ad967233f1be88 kernel-5.14.0-427.18.1.el9_4.x86_64.rpm f503b95f2cb0200e4630ec0cd65b57ae3458f334dea414f4ed91111f424c8ab6 python3-perf-5.14.0-427.18.1.el9_4.x86_64.rpm f906e69ceec30c0b635650894629c0bf83821a9ae755f40d2d7c9bf8e4bfd6bf bpftool-7.3.0-427.18.1.el9_4.x86_64.rpm ff3d9a87b00515bf8802046237f2bc5825024be13aad195bf4603eff79bbc0ae ALSA-2024:3339 Copyright 2024 AlmaLinux OS 0 1 Important

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (CVE-2024-2961) * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599) * glibc: null pointer dereferences after failed netgroup cache insertion (CVE-2024-33600) * glibc: netgroup cache may terminate daemon on memory allocation failure (CVE-2024-33601) * glibc: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default glibc-langpack-pl-2.34-100.el9_4.2.x86_64.rpm 0032ac27903604017678e46b1ead4839f8058fbd27b05e91417ca5b88c78a530 glibc-langpack-ar-2.34-100.el9_4.2.x86_64.rpm 014c20d93a6cbbb0333944032a8a6fe47b7ebd1108852d81cdbfbc7513665d24 glibc-langpack-sd-2.34-100.el9_4.2.x86_64.rpm 01ca3ef04ab2995d0f79b0a1a926e7c5eac01f4ef14becf0f417c2130ea284bd glibc-langpack-kab-2.34-100.el9_4.2.x86_64.rpm 040f7fd4fdd8c7e4017c00c6b75277c477ae556bcecf02dda60ee029211ef0e4 glibc-langpack-fur-2.34-100.el9_4.2.x86_64.rpm 0586b9308d86736383fc32929068489eb44245451e254ac3f401526a3f8d0f7e glibc-langpack-mnw-2.34-100.el9_4.2.x86_64.rpm 06986476a9c413550e518bc2eea6b46b546b31019e32e1be41592b1a8af277be glibc-langpack-fa-2.34-100.el9_4.2.x86_64.rpm 07d38c2a7eeffb707e8619d42823c7ac0fda631190c0ab6e3fc2188025834a14 glibc-langpack-sv-2.34-100.el9_4.2.x86_64.rpm 0ad21af2a8a10554347813f8e01b93a16f5516acea18cfbb475a70a20ad37e22 glibc-langpack-cy-2.34-100.el9_4.2.x86_64.rpm 0c71f962016f89748843a61b9f3f0ca15b321813b6c0431fa0353240709596ba glibc-langpack-be-2.34-100.el9_4.2.x86_64.rpm 0e33c172f9655939a15c194f72b51345a39d9b5115d489e8879e716c46ef52bd nscd-2.34-100.el9_4.2.x86_64.rpm 0f8b89eae507b54bbdf20fc5caa70f573f99497a574c7c36b64e7f42fd2d96f2 glibc-langpack-agr-2.34-100.el9_4.2.x86_64.rpm 132fa337c78409593c8bf8056d28f530b036f1652ab4cfefc6b55eddb673a7c4 glibc-langpack-tg-2.34-100.el9_4.2.x86_64.rpm 135232fe8d659fcf8a2225f556d5639feca54b90b14f03930383a08dd349d96c glibc-langpack-ber-2.34-100.el9_4.2.x86_64.rpm 13c76a8af3177a202dbc8bca66bcd5c3e69f3f34bbed8a3996c3a576da74877f glibc-langpack-wae-2.34-100.el9_4.2.x86_64.rpm 1423e87f8c46c9d5769a7952eeb723abb6da1ef934b32364f26be0f66faf5560 glibc-langpack-cmn-2.34-100.el9_4.2.x86_64.rpm 144a27da312f5516c90f591c068655d88f41f4ca214b71610e5386fc1b158f96 glibc-langpack-ms-2.34-100.el9_4.2.x86_64.rpm 16294610966df94013920df828ee8af3f70cc4429f093fed2be6d8a24c7025d0 glibc-langpack-ro-2.34-100.el9_4.2.x86_64.rpm 187a77a5bc9e2f91b1d5c61e629f6293a5472a86dff0815584ee8542a8c2dfb9 glibc-langpack-pa-2.34-100.el9_4.2.x86_64.rpm 18e0b3516f16c91aff68623b9b0a4fb58b6c0fafcac26b4f256361db3504a9d6 glibc-langpack-kl-2.34-100.el9_4.2.x86_64.rpm 198da8791f788ab3bee26c3ba5806da71d23048252aa8ac49d1a90d889c282f5 glibc-langpack-lv-2.34-100.el9_4.2.x86_64.rpm 1b7d12affbc046549834c5b87495e57cfa7808e208909c9b2d6f2d55e592a220 glibc-langpack-th-2.34-100.el9_4.2.x86_64.rpm 1c4971d0d978f117826f8f25adb6282738bf7b4aa886c0808b6375d10641d986 glibc-langpack-lt-2.34-100.el9_4.2.x86_64.rpm 1fbdb526942af97f4b78bd798517b014d4683e16f3e250c3e0531939cc1aa82a glibc-langpack-ce-2.34-100.el9_4.2.x86_64.rpm 21afb74124f3acaf3ebba6e02f0c8ed140fa85d32624e9f8faa3d6d2497bddb8 glibc-langpack-sgs-2.34-100.el9_4.2.x86_64.rpm 23e8fe19adf2735028a60c8e26b3b6355b0d6d7497df8b3898eb777db0cd4d29 glibc-langpack-ik-2.34-100.el9_4.2.x86_64.rpm 24267f110d89b60f7efc02b6db1b484b31a33bb854b805fe015c501e1dd1d547 glibc-langpack-bhb-2.34-100.el9_4.2.x86_64.rpm 24703724efbe94895e8451d1a2d4240a518aeea09f388cad626111207861794e glibc-langpack-tcy-2.34-100.el9_4.2.x86_64.rpm 2471040e83fc0606de2cdeee63955ece7fe5ed380e34470443bb7fc511564abf glibc-langpack-ka-2.34-100.el9_4.2.x86_64.rpm 258679fee7e5ca3d7f03b36b02b366e0922da42859f67b6e0532343d70d736d3 glibc-langpack-ha-2.34-100.el9_4.2.x86_64.rpm 2597d9e6f42f152be37d5d2c8b8089b478b8597bec94e51192e04763eb5aef0c glibc-langpack-unm-2.34-100.el9_4.2.x86_64.rpm 26dc4e5cb9c9b27862277cc52b777ba9bfbe5c22af3e9c752dbed24e4905f4b0 glibc-langpack-sid-2.34-100.el9_4.2.x86_64.rpm 27bc3d73d1e5c9ac85537b039af5d93ff95088b90f05e5428646930b8939cbc7 glibc-langpack-niu-2.34-100.el9_4.2.x86_64.rpm 27d9f69d5f421049b4d79aa5fcf613bb7b347800356dd4c5818278e106e54ced glibc-langpack-aa-2.34-100.el9_4.2.x86_64.rpm 297d80f1aea0629e1cafbb7820a9cde0436852c96fd889e51f6b692c753f796e glibc-langpack-et-2.34-100.el9_4.2.x86_64.rpm 2f7131c16ebce892a04746a5ffbe21f94f24cc8d4e41638148cf86339e6217be glibc-langpack-mt-2.34-100.el9_4.2.x86_64.rpm 351964a233ad610247c1e46519fb135312235c94d2e365ee9dfc553e385d70ed glibc-langpack-ast-2.34-100.el9_4.2.x86_64.rpm 35cb9bc2cc7bf4e74a9f4b87bdb51caa912d3d1360862d345e28e4076f4148b4 glibc-langpack-hy-2.34-100.el9_4.2.x86_64.rpm 360e3e7ac568d3a4e95ada751294be254086d70bc67009ab5f44c15ea439b242 glibc-langpack-doi-2.34-100.el9_4.2.x86_64.rpm 3956f25516f84cf60cc2c4240744f7ac0559f9d65cdf2cefbaa165d5765051cf glibc-langpack-xh-2.34-100.el9_4.2.x86_64.rpm 3b8f2b07dc85c4c1f7e44504b881a0d5ee33bad646cc9ad8179cadad37d298a2 glibc-langpack-fr-2.34-100.el9_4.2.x86_64.rpm 3e3e7630816493b64aa01e3c447bf8cabc81f5c6cc97becbcba54647e9e883c5 glibc-common-2.34-100.el9_4.2.x86_64.rpm 3eb7997301f4a22fe03ae82546ee9e6862512e16739b2a7567f2dcc145943e2d glibc-langpack-sc-2.34-100.el9_4.2.x86_64.rpm 3f0f1877c630db7ac755b53caa0af1ddb074c2d98353897d534c64354f356814 glibc-langpack-hr-2.34-100.el9_4.2.x86_64.rpm 3f9de7117ff998a881dbb4591be57e72c14b69204d9e968cf65fe443cc2e11e3 glibc-langpack-oc-2.34-100.el9_4.2.x86_64.rpm 438524459989ef0be8f3d64918ed0084eb0084d60c421d41ed78db330df008fb glibc-langpack-hak-2.34-100.el9_4.2.x86_64.rpm 43d02c2f9bf78ba688fab21738667115fba6ebe27c6388975359965373c002eb glibc-langpack-ko-2.34-100.el9_4.2.x86_64.rpm 43e84b80a9ca9d32db333ea2b9e9dcbdf4fd4768b152f4972d0ae437dbf76f30 glibc-langpack-am-2.34-100.el9_4.2.x86_64.rpm 43fed439c784296f3c71bbd6656fc84bf866a2249b9907ebf3652a2f6e768154 glibc-langpack-ky-2.34-100.el9_4.2.x86_64.rpm 4420c01aefe81dfe267ae352d4bf3361a9f34903219907c185aae0887cc38fa5 glibc-langpack-anp-2.34-100.el9_4.2.x86_64.rpm 444f6e0a516df7c3bc4403ad00fa894974aa0894007f2233fc9a346a370e7106 glibc-langpack-sa-2.34-100.el9_4.2.x86_64.rpm 453b0e8f3d54f5646693bfe21b5faa5d2a34fa30c1ad063cfbb4cf4c90f9c1c7 glibc-langpack-the-2.34-100.el9_4.2.x86_64.rpm 4817477159b738afbbcb2e2dbe1a42cf3a7682c519a21b57024f6179a68aa204 glibc-langpack-hi-2.34-100.el9_4.2.x86_64.rpm 4832183737ecf10836a2663e51d7bac45717b6587c2da6df8597060bdad2db15 glibc-langpack-lg-2.34-100.el9_4.2.x86_64.rpm 4995c294618a265d6f9a4527851093bdd2944008c60933f4b55b4aa1b59ba165 glibc-langpack-mni-2.34-100.el9_4.2.x86_64.rpm 4a3a15341b7b0c860921400619ec19eb71cc017fb25df87313bb1190f6504198 glibc-langpack-li-2.34-100.el9_4.2.x86_64.rpm 4e5168e2e032785447bbe06daa2ec5c1c9063f83c4f686c7121131b67858b6ba glibc-langpack-bo-2.34-100.el9_4.2.x86_64.rpm 4f85f909c82734ede8daa213044baaae00007637982f678115702035c4133179 glibc-langpack-dz-2.34-100.el9_4.2.x86_64.rpm 4fdd4f963a2f746b1951355fab981fbe2fd3e7d6886afbb05af65c20e2169ccc glibc-langpack-ml-2.34-100.el9_4.2.x86_64.rpm 50084f5b163749f03505339d0db994e499a6b6c41c59abefa07e38c9c753a14b glibc-langpack-uk-2.34-100.el9_4.2.x86_64.rpm 519c37738f4bcd557ecb577f093ff6b87091f95600cf9afedc372f89e2d62cb0 glibc-langpack-wa-2.34-100.el9_4.2.x86_64.rpm 52788129d375364a6abb8e7473b8d76f31d35dcec904225cb9cf69b845e97f28 glibc-langpack-az-2.34-100.el9_4.2.x86_64.rpm 52b7b2decf09b7723053f319a4b54253e5ee45cebc72e335ede9413e8b7a93ab glibc-langpack-ve-2.34-100.el9_4.2.x86_64.rpm 56d5174a095befed662cdbad950b8b90f8ed0f338b5d1dcbba750a083c3d512a glibc-langpack-cs-2.34-100.el9_4.2.x86_64.rpm 57b80d09c2484bbf8c9c961d2225923fe3d487e06123bce54d3ef652896931b3 glibc-langpack-rw-2.34-100.el9_4.2.x86_64.rpm 5820c7dd959243ec71ea3f2f42a89c85b3c7811267ec3b66abbf0adcaa5f94b1 glibc-langpack-byn-2.34-100.el9_4.2.x86_64.rpm 584c260d8a80dc1ece12f02e8aa801feeffcb64ec00519ba6b9eaa932630a09b glibc-2.34-100.el9_4.2.x86_64.rpm 58ee1d470b75422fd3b16ef00dcfd2325d5fe59d657f1734c743cb2c5f3a05be glibc-langpack-mg-2.34-100.el9_4.2.x86_64.rpm 598997c29d33ac482c2cbffced86e4f37045624a7a75d760d4481cdacb4bc89f glibc-langpack-te-2.34-100.el9_4.2.x86_64.rpm 5a9f8da8f050f81171773088c08d4aa80857adce04e496ef4ad67f6f40b4179c glibc-langpack-mjw-2.34-100.el9_4.2.x86_64.rpm 5bd0cc730580577e40728d1a4f3dc5819f72a6af5006f9b6d56255d487b274ce glibc-langpack-id-2.34-100.el9_4.2.x86_64.rpm 5c5e52bb7b726f400ea2d38a10e7b83ec1e8406f63422c73205cbc99c4c66d22 glibc-langpack-yi-2.34-100.el9_4.2.x86_64.rpm 5cc3ebf481ab04b2c4dacd23dee8a25207b2b00f910b0c4c97cde657962ea0e3 glibc-langpack-hif-2.34-100.el9_4.2.x86_64.rpm 5cdf7832624bdad3147705528f9f2132ed6fc10a9fc3cdacb640038e0459ffd0 libnsl-2.34-100.el9_4.2.x86_64.rpm 5d4557e8ae619f2ad5e8805732eeb55d30e87d67196c7e2810b1532531f39cfc glibc-langpack-my-2.34-100.el9_4.2.x86_64.rpm 5d8b0ca37d0b34e1f6d3acf7a006674e74380027e7d4ebcd202ff91af31c49ee glibc-langpack-ps-2.34-100.el9_4.2.x86_64.rpm 5e691bb6d0fb357d7f5999f5d949a98f754789cc6616431067e387adc2e660db glibc-langpack-nds-2.34-100.el9_4.2.x86_64.rpm 5e71e734af8dcec405cacc54cf7c3031760747c1a3f7de2087831cdc7269cc30 glibc-langpack-yue-2.34-100.el9_4.2.x86_64.rpm 606127614422fcfc723326cf9fa4a297a16a2e47d6f435f3a46a31a8341a7c02 glibc-langpack-en-2.34-100.el9_4.2.x86_64.rpm 60ba6c2d18ef5ba393c9c5ec0f15af77f9176d44926e46c311dd48cee0678abb glibc-langpack-ln-2.34-100.el9_4.2.x86_64.rpm 618b79acfc036f3504783e4d68943b7cadbcd500777f69020a490b496aadc158 glibc-langpack-bn-2.34-100.el9_4.2.x86_64.rpm 6673f96603293b5f9de7b9aa8757ac073bc020aec973ccf9f2835c7a541d09ef glibc-langpack-nso-2.34-100.el9_4.2.x86_64.rpm 66913e9e54536a40c3423a4d87609fc217816ba3baee1ffa8c21b32a2bb0f370 glibc-langpack-brx-2.34-100.el9_4.2.x86_64.rpm 67caa65fcd627cd18405b609f9bf9c15b9702674f0748a7123cd995edb94a2fd glibc-langpack-tpi-2.34-100.el9_4.2.x86_64.rpm 69d079d5f11e3ba48676af54b5aeb83221f054d516fd5790104aab736104064e glibc-langpack-ht-2.34-100.el9_4.2.x86_64.rpm 6d3d5bb46052ea79e05bc05d10b3106a5f65e9dd2554474dfe3e586e41c2cf3f glibc-langpack-nhn-2.34-100.el9_4.2.x86_64.rpm 6de8390c60836fb546ac7816a99bfeba90eeb25f9cfcb198fa6f8a4dc55e1700 glibc-langpack-szl-2.34-100.el9_4.2.x86_64.rpm 6ed94fcc5ead2be942a52c5e323e342b8ea39feff0f5d0ac23dac365b46412e7 glibc-langpack-lo-2.34-100.el9_4.2.x86_64.rpm 6f18781c2f74d27b6d9972d6871fedbf6e7e9428f36d13cfddbde844889a98f1 glibc-langpack-zh-2.34-100.el9_4.2.x86_64.rpm 709b5f1c3199d025bdc2b3cb9c37572b401886651d15f9cc5de1bb2e24491f66 glibc-langpack-ca-2.34-100.el9_4.2.x86_64.rpm 70b837b6f3678c73704c63422e1f9508aa42ef3c1312782f0357e6b143622168 glibc-langpack-nr-2.34-100.el9_4.2.x86_64.rpm 730b21312d56c12e104a68ae31d55e2d61776bfd4f2a473c4e8f0c8500138854 glibc-langpack-shn-2.34-100.el9_4.2.x86_64.rpm 75d63d22b260d911e57bc0310f0d2a3e2dd6fa7bebd2cbe95c1c3b4df27b9e12 glibc-langpack-ta-2.34-100.el9_4.2.x86_64.rpm 769ffbcf52b336db9f98e59bebfd25cf37df4f2f518cc9c9cbce90cee3fad519 glibc-langpack-kn-2.34-100.el9_4.2.x86_64.rpm 7ba25c9a161f34f7e67f4bff692f30f1df9fb6cf4ef0f1e033ce38f743df5122 glibc-langpack-mk-2.34-100.el9_4.2.x86_64.rpm 7bbeb032dfecde77e05267bcaa25478cc2ac6391b641a7a6710e1a12d9e0bd53 glibc-langpack-eu-2.34-100.el9_4.2.x86_64.rpm 7cbd00a36cf12d59bb77767b2dc1a84e3259f95dde5178342ab836a394fc5441 glibc-langpack-es-2.34-100.el9_4.2.x86_64.rpm 7d904ee699c1e8b047767ebc0526449725905f2605a36585333e0b63bd2c8d21 glibc-langpack-is-2.34-100.el9_4.2.x86_64.rpm 7f3f95f68ae2eb4c7a5bfd6b719622118ea28370c3ffe96338e8639d8fb1f67e glibc-langpack-tk-2.34-100.el9_4.2.x86_64.rpm 809cf9f0d507c274c4493546415528d340d71c95cd695172ea33e45f2d5e8894 glibc-langpack-kw-2.34-100.el9_4.2.x86_64.rpm 80baaba8c7408f6fb8c09b59cb5befbcf34657d9154d2d0f5612d2e595fe7510 glibc-langpack-si-2.34-100.el9_4.2.x86_64.rpm 80dcd94cf57eb80c7ff632a82e5b0fb945a4300123d7498457fdd5cd56d50888 glibc-langpack-dsb-2.34-100.el9_4.2.x86_64.rpm 846924c68f22c534cd1e1c306d02d30518fd552f23532b5138bd636cd6da2c70 glibc-langpack-ga-2.34-100.el9_4.2.x86_64.rpm 86f46c39b72d9930514525e233abb2d1f6ca1b1e846d95661f74a3156f1a855f glibc-langpack-ti-2.34-100.el9_4.2.x86_64.rpm 86ff27dc7be1c1553ff139e70c5a7ff698ad24a4eb9283d185e1cbe0e81863ab glibc-langpack-bho-2.34-100.el9_4.2.x86_64.rpm 882875731927427c9f2079c8252df0cbeaee8b14d9d291f6ff1a374b227b1f4c glibc-langpack-de-2.34-100.el9_4.2.x86_64.rpm 882e9d95266f9fd13749d7bbc63d6d57bda7d9830dd1e2163d13ae4b81033925 glibc-langpack-chr-2.34-100.el9_4.2.x86_64.rpm 88555335e3e319d90eb6d859a0497aa0f6465f29d044ef79f6bb42fa3763740b glibc-langpack-gd-2.34-100.el9_4.2.x86_64.rpm 8ac1b08f0485f00eb3d9fbe87ac0043e1e686fcd625b6fb92ad2da7c1c3cae44 glibc-langpack-kk-2.34-100.el9_4.2.x86_64.rpm 8adb42fffcd23f2ed69fc9d10998b795f0c7e5b4873d1f70e15d155485787abc glibc-langpack-br-2.34-100.el9_4.2.x86_64.rpm 8ae959b4bc28b4703d045a2743a676219206ba544c5aaf9373fafc8a89ffb576 glibc-all-langpacks-2.34-100.el9_4.2.x86_64.rpm 8b9bc2ccff54c3b9958126636396f02cd77e807506131a99046ac9a6fba6ee6f glibc-langpack-kok-2.34-100.el9_4.2.x86_64.rpm 8f355389113dd75aa9456240ad3114b6a2aa51ddb25a7f12bc0e99f73d7e9c32 glibc-langpack-ckb-2.34-100.el9_4.2.x86_64.rpm 9171cef83df9e2ec78f25e3f123860cc0a32dda6df7ba8d5c4f92bfee4d9a902 glibc-langpack-miq-2.34-100.el9_4.2.x86_64.rpm 92cb1b30477bb86e9a2f2af253131b9adc502caf4fd8a30b304ba9a77a3b6d15 glibc-langpack-ig-2.34-100.el9_4.2.x86_64.rpm 9376f587dac23d1913832d9e978e4b3f16e987ae06f60ffaa25379d20eca1ca5 glibc-langpack-vi-2.34-100.el9_4.2.x86_64.rpm 9422bc8772abbac041fbd2f78f90b8ab3a4c964cc8654122646fcc9d21ee2bf8 glibc-langpack-sw-2.34-100.el9_4.2.x86_64.rpm 944a1d227c21b75095cf1027355fd58a35486b8848bc395c996e0589437f556c glibc-langpack-fi-2.34-100.el9_4.2.x86_64.rpm 961a9e3ae0fe8f34eddab773a488c86f020b0f140d69cd5d580a5925f21fa510 glibc-langpack-ru-2.34-100.el9_4.2.x86_64.rpm 97cc2faf4bbbaba3a2c13f411aae57dc538c3d06542c8a0f81aa034c987daa89 glibc-langpack-to-2.34-100.el9_4.2.x86_64.rpm 97d574ef379377fb3a8da3053ee043af6de7f9251d9ea2f4b3645791811cb91b glibc-langpack-csb-2.34-100.el9_4.2.x86_64.rpm 99e67e567906074b5589f4dd8ca0836300bf99cd111684c3df330691df8c8e37 glibc-langpack-sl-2.34-100.el9_4.2.x86_64.rpm 9b10dccb37fd3dd5366edb69bcfad8d8f0bd184e2ac53808be535e146a1e5dcf glibc-langpack-hne-2.34-100.el9_4.2.x86_64.rpm 9c12ac88b9b0b3824ed96a985c202df993181062da3ffdaa874da8391ece07c6 glibc-langpack-zu-2.34-100.el9_4.2.x86_64.rpm 9cc76d502a99755ced672bfe516e8f564e83a47a130bbb8394bd9dcfb4411093 glibc-langpack-raj-2.34-100.el9_4.2.x86_64.rpm 9ce07b6ba553822f03cbb9792a538d0a241d859b3414e984e4330a6774a74142 glibc-langpack-bem-2.34-100.el9_4.2.x86_64.rpm 9d2c1ed2dd97e6b63c5f87afd91c7a1e18149405679e3fb0e66f7d0b724017b1 glibc-langpack-hu-2.34-100.el9_4.2.x86_64.rpm 9d472913e633464ef484e74fe5353a50c48fb3364196b8dbd6c6f1d5c89190dd glibc-langpack-sah-2.34-100.el9_4.2.x86_64.rpm 9dbd5e5823138e57ac0793e8c942c1f5ebec1d93161042313259ff368f79aabf glibc-langpack-ss-2.34-100.el9_4.2.x86_64.rpm a1847f53fe184c022761c4530534478bcaa2178cab234c28faac3562c019dbe5 glibc-langpack-yo-2.34-100.el9_4.2.x86_64.rpm a251d63739a05fb37c49db369d8be654032b3373591990af9adb1afd6606d43c glibc-langpack-tt-2.34-100.el9_4.2.x86_64.rpm a27c1cd0349fdb7825e1be353ce2e20fee2b63e00463b0fe73dcefc164c58dc8 glibc-langpack-mhr-2.34-100.el9_4.2.x86_64.rpm a36d62944d6321031d4b8eab7440234eae80b94541076f5521276a41a0a3d017 glibc-langpack-om-2.34-100.el9_4.2.x86_64.rpm a5589f65da5e34eeb3835e3ea94e003e1577d73e18d9c22d5e05223352d69a6d glibc-langpack-gl-2.34-100.el9_4.2.x86_64.rpm a5c6c295d5e86adbf3d0c70884062b764e06fc1eb2ee9691c32f90147185bee8 glibc-langpack-ff-2.34-100.el9_4.2.x86_64.rpm a731fe157bf7aec24e97232188ee10af69d59dc7b9d7f565c800bb67399c9333 glibc-langpack-af-2.34-100.el9_4.2.x86_64.rpm aabc72df4bdc4bd460efbe08de8d075f0726d3efc1c5ffb798d02618b2f1dcf9 glibc-langpack-nb-2.34-100.el9_4.2.x86_64.rpm ab16e3f404881429337c2928191701d54b342467d8b9378096cb2839670b796f glibc-langpack-ayc-2.34-100.el9_4.2.x86_64.rpm ab8060db5bf37b3666a4877da36a6f92ccc583c01d98320a10624939f62d5d78 glibc-langpack-ks-2.34-100.el9_4.2.x86_64.rpm af51f76e8406092ddeddae7c852bc60604eb42947b8c31a32deb4f40afcf945e glibc-langpack-sat-2.34-100.el9_4.2.x86_64.rpm b06d736c9c4763eaee6bac51558f00183185de4fe36304dc5ff1a9dbe7314cb0 glibc-langpack-ur-2.34-100.el9_4.2.x86_64.rpm b0f46f50329660ad1c20bf255f16bc5dfdc855e887841965e75350e0d7fe793d glibc-langpack-da-2.34-100.el9_4.2.x86_64.rpm b1792ba4993a35d919928a040cacf3f13a2a82d6ba546c4339d312b5f4302984 glibc-langpack-so-2.34-100.el9_4.2.x86_64.rpm b267c5a1a45003e8083cd7f684f0a405f895242d14080a0470ca75e84a7ed0f9 glibc-langpack-nl-2.34-100.el9_4.2.x86_64.rpm b31ea1041d671e08892966c2b84796439d7deb7ecf147bed4854ef64cb3dab11 glibc-minimal-langpack-2.34-100.el9_4.2.x86_64.rpm b41e2859c6bf672fb55eca9c6bbbe2e48527c73241fa14fdcee1a4657dbcd16f glibc-langpack-it-2.34-100.el9_4.2.x86_64.rpm b5db8dcd9788a04129507288f93db210ff12db5060607941e9524fef103e97a1 glibc-langpack-fil-2.34-100.el9_4.2.x86_64.rpm b6148aad7d4763c69ddd73978825ab81858ab7af0d4b510b6a4485845c7b7680 glibc-langpack-bs-2.34-100.el9_4.2.x86_64.rpm b63f050f3649455cc96e8a76c540b3a3a85c2ff0ee5fadb83f87973a1900a135 glibc-2.34-100.el9_4.2.i686.rpm b70f599779ab1976a95cdc0928901ac4a19b413c450ed48031c4eb7f3241dac8 glibc-langpack-se-2.34-100.el9_4.2.x86_64.rpm b7c76c1e60acb730b3b73a0f11aa45fbe60749738476176cd49725bad268cac2 glibc-langpack-fo-2.34-100.el9_4.2.x86_64.rpm ba53034e740c534abd77c22a93fd550c50cc98cba94481c8a70e29658e9846a8 libnsl-2.34-100.el9_4.2.i686.rpm bb6e6cf8732d234926a54d39cca04d21baf51850db99a809d1c52bc0405e77ad glibc-gconv-extra-2.34-100.el9_4.2.x86_64.rpm bd675fea8dd8119d1c9ea7a1e82a900332ca38c3a3abc229fcf9a67601249f74 glibc-langpack-pt-2.34-100.el9_4.2.x86_64.rpm be79df76e446603e3706dc19378279e76349af3eb086880f0bdc1be804d10ee0 glibc-langpack-nan-2.34-100.el9_4.2.x86_64.rpm bf384fad7b92c0247952513d33f5dd3c73da5c50c1b75568dea5ce26b993863d glibc-langpack-an-2.34-100.el9_4.2.x86_64.rpm c01de4293349da0f109a76e91e3ebf24e0403bfc8945e78742812571a0f935ec glibc-langpack-yuw-2.34-100.el9_4.2.x86_64.rpm c0fa0137ef15321fc6fc98dea88b0d1fff97f7f05f1a6a55411ee327550d6dac glibc-langpack-tn-2.34-100.el9_4.2.x86_64.rpm c11c417c1110c2ffaed881bea0c0b1f75c543a7ba78e43da47edf5d90e98638c glibc-langpack-gu-2.34-100.el9_4.2.x86_64.rpm c3462df3f81f354e886184f0aef5cb4125f2d3e8e77114b6e5e2f22ae94188d4 glibc-langpack-uz-2.34-100.el9_4.2.x86_64.rpm c39edde8477aeb10a0be7125b1f4eb635b5fe9a5634352d1dcd9279344d137da glibc-langpack-mai-2.34-100.el9_4.2.x86_64.rpm c3fd56335d9a6acfd45e6335558490940a2a98befc4cda47fafe2414e58cbbc3 glibc-langpack-sr-2.34-100.el9_4.2.x86_64.rpm c42df3606d68030592f2c3d69763d88c14fadfc404e50f39f9575b080ea7621e glibc-langpack-mfe-2.34-100.el9_4.2.x86_64.rpm c534ba2fed71a297b2649a6c0f2cad7f06ecfbc083be5c6515be580f82618c8c glibc-langpack-gez-2.34-100.el9_4.2.x86_64.rpm c6ce663155b838909de86fce4ad7c72d7ae40067c69e7af40f50d3ed186dbfa5 glibc-langpack-eo-2.34-100.el9_4.2.x86_64.rpm c9912849c96df7422b2bb7a0bbe2abc1d92066291e4690fda43020be7bbfb555 glibc-langpack-as-2.34-100.el9_4.2.x86_64.rpm cb25c5cf94eda6368c688d474998fafbf44e4e53a132d8fbb2ca0481b01250ba glibc-langpack-mn-2.34-100.el9_4.2.x86_64.rpm cc38bd8592274b1181413574d87fc598efb50ac8757e61456105826709e0dc89 glibc-langpack-fy-2.34-100.el9_4.2.x86_64.rpm cf2bd2c22236569a7518a416672a3c8e8a6151611c98944e7c68227a9f559483 glibc-langpack-ak-2.34-100.el9_4.2.x86_64.rpm d0170ed33a14aa74c54da5893848e502027ac90c22ec07159f6860e9f5bd40a8 glibc-langpack-ug-2.34-100.el9_4.2.x86_64.rpm d04ca2f45f61216ab18c7bcc3bcd8b47ce65377cfb65b0396a50a5add7d3d27f glibc-langpack-ja-2.34-100.el9_4.2.x86_64.rpm d0cb1725a6ede4443b7c158af4e30ee55d4e984a892b9ebb2ec7298020e720c4 glibc-langpack-bg-2.34-100.el9_4.2.x86_64.rpm d328bba468ca02a9883397caa7009b6d6ee73985132923792a3e05b8a4912ece glibc-gconv-extra-2.34-100.el9_4.2.i686.rpm d4affa6c47d2749a373d6f029cf52a165b54cc9669c119d040a9169cb9babe4f glibc-langpack-lij-2.34-100.el9_4.2.x86_64.rpm d4cafcb8fda73926d0f8ad09ca3abe7bb09cec749a9d5c26b81d6ffe47b81b72 glibc-langpack-cv-2.34-100.el9_4.2.x86_64.rpm d93f0aba4e07c926b980993db0f13d4c13a942af8edd99a9c9c1988af4677ce7 glibc-langpack-st-2.34-100.el9_4.2.x86_64.rpm da4c8dfae4271b7d6c073c5ea2b7dfb1cd60ee94440e011e33ce04b64cc5c5b8 glibc-langpack-hsb-2.34-100.el9_4.2.x86_64.rpm def523acb0121bd102016252f0120c0338678121bb07ab1e39db0cfd966147c7 glibc-langpack-bi-2.34-100.el9_4.2.x86_64.rpm df902af2dc2f4d354b6a1583c7f90e228f97cad4bbd7286288ba7a8dea11ff5b glibc-langpack-quz-2.34-100.el9_4.2.x86_64.rpm e0e366f1b36613844e74d95a1e877160379a37f0f4c364d0d392cf4f0508408c glibc-langpack-wo-2.34-100.el9_4.2.x86_64.rpm e124d5bae1c681ad003015bb14cc83f0a80be32215d2c2e0f145fb256048664f glibc-langpack-mi-2.34-100.el9_4.2.x86_64.rpm e2271606548b9100b71c9da3d178c641f6ec2d1a8d263de4b49cc323f8d3c148 glibc-langpack-el-2.34-100.el9_4.2.x86_64.rpm e2cb8872a1084017cca34877eea858324c1b53c58bcf47023dd9b0e42bc8337c glibc-langpack-lzh-2.34-100.el9_4.2.x86_64.rpm e48258f38bf52adeccc699d595d1f059190c056e5187483323f5e5817e5b4e69 glibc-langpack-iu-2.34-100.el9_4.2.x86_64.rpm e51f091af1829d30f362fff82f4ed2e1379e6390968b68b73742524046a3d19a glibc-langpack-pap-2.34-100.el9_4.2.x86_64.rpm e536881786c74acaef3be943aa81d606458eb340f742df5f42a38c14ed12997c glibc-langpack-tr-2.34-100.el9_4.2.x86_64.rpm e5dd819cded3c8510d5b3b0f8c0d880688bc77a36078d5443b8aa08272ba3313 glibc-langpack-tig-2.34-100.el9_4.2.x86_64.rpm e77fc1ef676dbaecc6347245f168cd794c7052e75cb98c5d2e290c066b3d0de3 glibc-langpack-crh-2.34-100.el9_4.2.x86_64.rpm e7d59ff28251ff9197907910f29855cf229f2f84ebb714761072eccccfa5a1a9 glibc-langpack-os-2.34-100.el9_4.2.x86_64.rpm e7df5352985b045db128285cd36b8138652e4436c75ace8d199d7d4c1cbc77df glibc-langpack-dv-2.34-100.el9_4.2.x86_64.rpm e7e46e97b1cb590abe6a4cdaefb076debd536d234ed0a111463291f5624955cf glibc-langpack-ia-2.34-100.el9_4.2.x86_64.rpm e89d2d3baf8cbf4a4f0f442da365595df0063c939d0d62baca86280369d9299e glibc-langpack-nn-2.34-100.el9_4.2.x86_64.rpm e8de7bcad7daa0baaad2ce24d39e88980fef26ab3e744f0759ed01dfa96d6599 glibc-langpack-gv-2.34-100.el9_4.2.x86_64.rpm e949169c3c354fca013b997148f7a0dd715854ee09775857f07370d99af8f8ef glibc-langpack-wal-2.34-100.el9_4.2.x86_64.rpm e9c308a4caeb8f9dc5437ff82f45dfb0fe5fe5a99ab79b6ca7955ea9d3cdbb0e glibc-langpack-he-2.34-100.el9_4.2.x86_64.rpm eafc4d0e3a66e7a139739a43c251ee81a4c492bb659277745231a60a568ccd2b glibc-langpack-ne-2.34-100.el9_4.2.x86_64.rpm eb4a0d0fb15ede305bdbbda778cdabb33c0ca83b0fa05900ccf827394806e2df glibc-langpack-sm-2.34-100.el9_4.2.x86_64.rpm ef6c8ae64ee3fa37c1ad590e0331007d008a4426056dd9358faeddf18f06aa0d glibc-langpack-ts-2.34-100.el9_4.2.x86_64.rpm f0a8c0c400683220d1278f027d20414f7329399668b2f3d714556e866a11010f glibc-langpack-tl-2.34-100.el9_4.2.x86_64.rpm f164777f3dc2deda2c3cbb83a9bc4268c94a68e4ab2341ae2f5f424c46253b9d glibc-langpack-sq-2.34-100.el9_4.2.x86_64.rpm f1ed79449f1eb99af78d9a1ef8fe9a79ea5c98d11e7541709c50fc0ab9350ce3 glibc-langpack-mag-2.34-100.el9_4.2.x86_64.rpm f94cc3b23f1f8589eab1cd874760cfb3599ad9eceb1c78e97891c8d564d16928 glibc-langpack-km-2.34-100.el9_4.2.x86_64.rpm fa22b656f92835ddc14e699158235967cf2c4dbd7b6053692006a0e5d4af975c glibc-langpack-lb-2.34-100.el9_4.2.x86_64.rpm fd005b7c9b52fc8c2c123c6c257919636f333db15319642d6315a94e76ed7ab6 glibc-langpack-ku-2.34-100.el9_4.2.x86_64.rpm fdc4dfa65c2e189867aa7261c9990bd8189ced8ff4c3246ab6f24638cebec030 glibc-langpack-or-2.34-100.el9_4.2.x86_64.rpm fdce9a5feb06f0999ba741758d7263ad19f0de447d6f2ac1583fb17fb4703672 glibc-langpack-shs-2.34-100.el9_4.2.x86_64.rpm feab3402e37905871be3ab99eed63e4031c7bad1469733ccb6d3b65f9f4173ff glibc-langpack-mr-2.34-100.el9_4.2.x86_64.rpm fedfe385666e568a4a52d8d1390bfe58823fc13b2d9ad010e7b505a913066fd5 glibc-langpack-sk-2.34-100.el9_4.2.x86_64.rpm ff23ca5d6365fe2656bb6f906fdaf1b53ea64ccb30ef2542330ab1a3c560a619 ALSA-2024:3501 Copyright 2024 AlmaLinux OS 0 1 Moderate

nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default libnghttp2-1.43.0-5.el9_4.3.i686.rpm 0cd9d328ade0313c1eda3aeefa19f47d9a898d1964f95f411789573c4bcc6368 libnghttp2-1.43.0-5.el9_4.3.x86_64.rpm 6ed96231e1ec061486e746d27ff76615c098eaac1f7aeb100e50df7f5a1b8a96 ALSA-2024:3513 Copyright 2024 AlmaLinux OS 0 1 Important

less security update

The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fix(es): * less: OS command injection (CVE-2024-32487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default less-590-4.el9_4.x86_64.rpm e991bce4845ee1f31a098544ba30f87f98efb472cb290114468f6a562f6b80fb ALSA-2024:3619 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735) * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64.rpm 09bdc1714b1b869a919c4a2b29ed3ada57ab18ba8352fc59d2c94eb52fb4df86 kernel-5.14.0-427.20.1.el9_4.x86_64.rpm 0ade9824f49c81b2e974d0b52f4506bba77d4a685f477ae5ab8245510b5b9627 kernel-tools-5.14.0-427.20.1.el9_4.x86_64.rpm 139172b48942615ba165672959eed3ad86d8ff0b9effe6859409a50ff52c99c4 python3-perf-5.14.0-427.20.1.el9_4.x86_64.rpm 1c6e101cedc763764aa33b129b205ff2c0719362539c26822c28781547740939 kernel-debug-5.14.0-427.20.1.el9_4.x86_64.rpm 319b7dd05cd5a52312930996d42e75bb2d48199cbf3de00d605b2b9c5360a607 kernel-debug-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm 5ed68a12090e5c0b1f737863215aff7c7cb79e813356d6dee34fc5b602e1589d kernel-debug-core-5.14.0-427.20.1.el9_4.x86_64.rpm 613d689e74290fe46585dc608a3181f604df9ee43d2932ce263492035d8c9c1d bpftool-7.3.0-427.20.1.el9_4.x86_64.rpm 68874d63ac64cc60d2f65373b10ca388022967fb44de4085f63562a14fa3183d kernel-debug-uki-virt-5.14.0-427.20.1.el9_4.x86_64.rpm 6bb67310a369a4f250c1b3e3282bd0f881c63dee17d167224e60ad3236e706b0 kernel-uki-virt-5.14.0-427.20.1.el9_4.x86_64.rpm 6f62388617dc186292ccbb3d490e7c7555dda5d2766118660e9922f9edb1197a kernel-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm a579a2329082fe5910229f2add5aedef7d956af736b3509d738564c4362d07fd kernel-debug-modules-5.14.0-427.20.1.el9_4.x86_64.rpm b23722ee745bff1dd69f05b894c06f1e850958e81cdd3b2db9252209939b242c kernel-modules-5.14.0-427.20.1.el9_4.x86_64.rpm d1f8aa1dcf70acb24c26890854a2313e46fc23daaa5e74d9b10cc88e436ec02c kernel-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm d6e3ab569b91eaa1404f7d172d530f70316ffaec0f200529a19c099b692689dd kernel-abi-stablelists-5.14.0-427.20.1.el9_4.noarch.rpm dceb7ca8d5424a487bf88444ab35a55e07ef3f50083cd5985ae710b10f097aa5 kernel-core-5.14.0-427.20.1.el9_4.x86_64.rpm e0a52225a03fa130bc43103c7937859335ae9ca9d79ae1fe7157d1a60a6d5c38 kernel-debug-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm ec238f4b718c496c7c98dba5e6857aff58c2c4008b447589d9557f6ed9f4650a ALSA-2024:3842 Copyright 2024 AlmaLinux OS 0 1 Low

c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default c-ares-1.19.1-2.el9_4.i686.rpm 0c015faea25e85c2f024a594c619c75cefe84cba77c82a315f4b43f728a57d3e c-ares-1.19.1-2.el9_4.x86_64.rpm 759d2347c7912d7638c851b9afc5aae532569328787f64c5ed97beac09e31723 ALSA-2024:3843 Copyright 2024 AlmaLinux OS 0 1 Moderate

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: command injection when deleting a sosreport with a crafted name (CVE-2024-2947) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default cockpit-system-311.2-1.el9_4.noarch.rpm 0b6c5162e712cc0439838dd40e86dc8912d79e6315bd9c9c680625b995c21efa cockpit-ws-311.2-1.el9_4.x86_64.rpm 4cacecacd0ecec951adaab3ef8b3757cccd3387cf032f1c373ea6363506e0143 cockpit-311.2-1.el9_4.x86_64.rpm 53b46953d636ca9aa9f8a46ec460a8fb7b5df3afa20024e23fd7f9d677e49897 cockpit-doc-311.2-1.el9_4.noarch.rpm 86357b0231f081824fb70b7cd8f07ef710e4b4dfd63777a38de238aa314236c5 cockpit-bridge-311.2-1.el9_4.x86_64.rpm 98a2d05daa91ecb3d470e9f775fba04277bfb6b86f6cd435f2b5b605d2a856c1 ALSA-2024:3846 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-idna security update

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd). Security Fix(es): * python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-idna-2.10-7.el9_4.1.noarch.rpm 466dae94af8101d05da26c89ac5e6cfdb2488f4e324c03eb856c034084d0ac7d ALSA-2024:4078 Copyright 2024 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-libs-3.9.18-3.el9_4.1.x86_64.rpm 2a564f2fb6b6b837587608c878b54b518cba2afee4c7e1fafa5dc14f6711f7d3 python3-3.9.18-3.el9_4.1.x86_64.rpm 814c549f809e3054f7ec2fa8333d7001f47c82902e5061cf2a1ec2cac4128560 python3-libs-3.9.18-3.el9_4.1.i686.rpm 85f9533f727c09bfc99a5c26ae8087aed15452ba25391ffbabb0ec0c36ce43f1 ALSA-2024:4312 Copyright 2024 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Possible remote code execution due to a race condition in signal handling (CVE-2024-6387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default openssh-server-8.7p1-38.el9_4.1.x86_64.rpm 3b334d9427d3134fad029caf4fba69590ba7cd72dde3d3e89c23d8c0b55bdc4a openssh-8.7p1-38.el9_4.1.x86_64.rpm 4bfc59d355fd6b67b11ceeb4747c46d9384b2a972fa53d8256cba95a816a3a98 openssh-clients-8.7p1-38.el9_4.1.x86_64.rpm 7053aa4754cfb825654de92b5151e08a615784080ac85b0621e68471129932c4 openssh-keycat-8.7p1-38.el9_4.1.x86_64.rpm 74ccedac590e72cf50815c227a3a9ab98eb622a16c5e17e44a1417d65bb016ba ALSA-2024:4349 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626) * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801) * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974) * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393) * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667) * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870) * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400) Bug Fix(es): * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943) * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672) * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220) * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687) * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716) * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641) * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669) * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252) * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595) * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083) * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953) * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-debug-uki-virt-5.14.0-427.24.1.el9_4.x86_64.rpm 068be97d7626682b1d6c549a6a7d49812ff575d9a32b704573f037abb9512465 kernel-debug-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm 0bf49e4f9f73450e128c8b2b948b69a0f086c6089a59dda71266963c565e14c8 kernel-tools-libs-5.14.0-427.24.1.el9_4.x86_64.rpm 45b95a018d487d0ae1b08fb6533cada8c3c67b82d3686380e83583a4354241b4 kernel-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm 4d173f4bc15f86fb99e1577b3be314f921ee0c5383d79782d037f21fcf0e60e2 kernel-debug-5.14.0-427.24.1.el9_4.x86_64.rpm 523b5605a4ef4617204d03d75b72e4aedc9552932fc5fcd1988cbb5fed6a1bce kernel-5.14.0-427.24.1.el9_4.x86_64.rpm 5ef04f28571c79da8adfee3661b81813d1b68ea0bee7f86814231b395e995ef7 kernel-uki-virt-5.14.0-427.24.1.el9_4.x86_64.rpm 8d9a95d44f7672f34d81235cca62bb575e80515a60089aae24683df04aa97389 bpftool-7.3.0-427.24.1.el9_4.x86_64.rpm 9ff41573f5229e9bdba67b66e47fd0d8832044a71bfb18e5d306c2ec8e0da077 kernel-core-5.14.0-427.24.1.el9_4.x86_64.rpm a9f4012d82fc2a9493b83399315658cdbf99914152e14b1d0dfb7170504c2e36 kernel-debug-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm b7aa28e02777ce6a375c2162495901c4c8bbb06655414ebec759985273a71f24 kernel-debug-core-5.14.0-427.24.1.el9_4.x86_64.rpm c9d3301578859d23c2f5f5ba2761243fc512ddd8755960e89caecb57bf79eca8 kernel-modules-5.14.0-427.24.1.el9_4.x86_64.rpm ca08de6edf6ece2ba953f78c13f06e558e8e26f4f837e7ecdc0aa522a6fbe13a kernel-tools-5.14.0-427.24.1.el9_4.x86_64.rpm d24c5e0e406b76e8c6fce95708ba49ac29a1b5072fc9f2fa37a8d6668b74ea3e kernel-abi-stablelists-5.14.0-427.24.1.el9_4.noarch.rpm db4fdd714b18224ee84259ccab6c9f58b6a1d11dcefb95745c2b60fb8a7639ae python3-perf-5.14.0-427.24.1.el9_4.x86_64.rpm dc07c1907fb2be7d987cf5c4007f935c06033a1b4a3d2b7bbe45833f59cbc56b kernel-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm ec9c3de643bb54146eb5b99cca913496a1b3797cbaa3b9e56e3860a330ee5233 kernel-debug-modules-5.14.0-427.24.1.el9_4.x86_64.rpm f943068513647174460b8a135b23c958a72c9001c0f7b6174dc7ef5da46c7ce3 ALSA-2024:4457 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Possible remote code execution due to a race condition in signal handling affecting AlmaLinux(CVE-2024-6409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default openssh-keycat-8.7p1-38.el9_4.4.x86_64.rpm 03bf8b1f82b5dcfbbe71cff59340c8341cd01a3b9227356e5267bd589640bd38 openssh-clients-8.7p1-38.el9_4.4.x86_64.rpm 197053c566edde7d1bcf4df5121b229c555bd6746f6d54b1c51b5f75bb6b3f27 openssh-server-8.7p1-38.el9_4.4.x86_64.rpm 628524e5f95313b117d2684160cf5c8486183ea5b03c0af7437b6688530aeecd openssh-8.7p1-38.el9_4.4.x86_64.rpm c67a826764c6e5b2bb6721292f01316e853fc9276a400591269bc5734f2a1239 ALSA-2024:4583 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886) * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548) * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596) * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627) * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638) * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783) * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858) * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397) * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435) * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958) * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904) * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543) * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593) * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957) * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-debug-modules-extra-5.14.0-427.26.1.el9_4.x86_64.rpm 02a171d19f00e9ac4ced90f59f3ec6a6dcf453ca9ca616ed431520d96ad17828 kernel-tools-5.14.0-427.26.1.el9_4.x86_64.rpm 09b9808b5c081ca0f6c03184749b08f3b354e6d4ae0380a00ac18c35bf567fbd kernel-debug-uki-virt-5.14.0-427.26.1.el9_4.x86_64.rpm 0b082ac2ed9ff67d996fcc1609cb8c063b1d1b1f1579b76100f335b8297136a7 kernel-abi-stablelists-5.14.0-427.26.1.el9_4.noarch.rpm 18206d334756a20afcef825241edf3bd180951f5ba2a0bf7a1d286cb1d1a310d kernel-debug-core-5.14.0-427.26.1.el9_4.x86_64.rpm 2169a61c4405ca58f8f400f39fdbb8e128accdf0ff5582a4e6ebb4681c187725 kernel-debug-modules-5.14.0-427.26.1.el9_4.x86_64.rpm 2ace18045888ce4eabbcdfc464db505a1e93f18b96756100c7556f4cc6f483f4 kernel-core-5.14.0-427.26.1.el9_4.x86_64.rpm 40847814679d88f6c6eaabd3101c0ccd070193b40b2482ce29314d2a8e76e2b2 kernel-modules-extra-5.14.0-427.26.1.el9_4.x86_64.rpm 41a5c7893f0d518a5fa4d703367a1ba307ab7e961cccb75db6f2f675d7373e1f kernel-tools-libs-5.14.0-427.26.1.el9_4.x86_64.rpm 43a7858886ebfeb7dfe90250d6a0442941de26e5721a511adeefc6e51ca397fa kernel-5.14.0-427.26.1.el9_4.x86_64.rpm 4f9cb222879bc64c06837a0a0a98e631128692f737ef2b67b5a74d8305040495 bpftool-7.3.0-427.26.1.el9_4.x86_64.rpm 56d1db9f3b5815479af58aae801f4c5fc07d08ebb7ede16cb2231a421a308f9d kernel-debug-5.14.0-427.26.1.el9_4.x86_64.rpm 5bed46ac34797176ca59f213415e01e771976af222c6cd2df1fa94d445bf66d7 python3-perf-5.14.0-427.26.1.el9_4.x86_64.rpm 5ea0091e2801e22f978d115d40090ffd18cdd957d0169bb40f9bbd1d4112115a kernel-modules-5.14.0-427.26.1.el9_4.x86_64.rpm 956cbcf39033c9749539b2703edc6fb3a6edc427ca1185213f72eab95dad97ac kernel-modules-core-5.14.0-427.26.1.el9_4.x86_64.rpm c27ac9a66a0c0a008ca891037497307cf59b0057e60ad0f963c9937e51d7b40b kernel-debug-modules-core-5.14.0-427.26.1.el9_4.x86_64.rpm c5f78fd79da30eb07dc79ad1697dcdc235a70dc2f155e8a0ab154f3d44706b9a kernel-uki-virt-5.14.0-427.26.1.el9_4.x86_64.rpm c66e22a19a65b70c8a2dd506ca3efa93e3147c993d8b4f00aba8d68f310ce4a6 ALSA-2024:4636 Copyright 2024 AlmaLinux OS 0 1 Important

libndp security update

Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages. Security Fix(es): * libndp: buffer overflow in route information length field (CVE-2024-5564) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default libndp-1.8-6.el9_4.alma.1.i686.rpm 5e2928bad3bae4874d9855965fe8c6f17c85eafe291e0dda3147725a90789a3d libndp-1.8-6.el9_4.alma.1.x86_64.rpm e64914236c532fbe81a23bd1593c81c6d997f7c23d714281255b1f1fa3cc887f ALSA-2024:4774 Copyright 2024 AlmaLinux OS 0 1 Moderate

linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default iwl2030-firmware-18.168.6.1-143.1.el9_4.noarch.rpm 00003a0fe1eb6489dde6e801c030ca13aeffee4da81f37429036d3de529efd36 iwl6050-firmware-41.28.5.1-143.1.el9_4.noarch.rpm 0491143a660f270ab820465f9ccb194d7a6073816ed434f9e52943ab3d1ea490 iwl3160-firmware-25.30.13.0-143.1.el9_4.noarch.rpm 0b65b78a5f2684271bab632af14c44330efb35f408993a582e529512bd73ccdf iwl6000g2b-firmware-18.168.6.1-143.1.el9_4.noarch.rpm 12f751bfaf9f33c5f6f501042f2f865a36d27c18e35218e11470bd0e7612e0d4 iwl5150-firmware-8.24.2.2-143.1.el9_4.noarch.rpm 137f57c496d8d89526330c251ffd7a1eef54802a13478bee4139b113a6312607 netronome-firmware-20240603-143.1.el9_4.noarch.rpm 14a6d88ad5f61bc6dd34dfa01965773242cc7e23049586310a1ecb6afa0f839c iwl100-firmware-39.31.5.1-143.1.el9_4.noarch.rpm 1ae5672618effbbab3845a87911d30639fe44c1bc530b4e6ac7716b5461834dc iwl135-firmware-18.168.6.1-143.1.el9_4.noarch.rpm 1c252cfbe80a86f1cb7f7a5c32dbf5206b859a81a8f99c889259b8ae9ab6c490 iwl105-firmware-18.168.6.1-143.1.el9_4.noarch.rpm 218eed834f88f6a0067037905544162312ad841e6fda47c0b5b3e30dd2ef00e8 libertas-sd8787-firmware-20240603-143.1.el9_4.noarch.rpm 33ebe97e1644307eb1caaaa4a22e6433c6b5d94779570c6d6fa114c222889d75 iwl1000-firmware-39.31.5.1-143.1.el9_4.noarch.rpm 3e075f305407d5728b08538fa5c784a9843c56f6d8c93f187e080b8152371dea linux-firmware-20240603-143.1.el9_4.noarch.rpm 4230f4cd4c89824ee5a7fc16702b79105504e354df3bb7a67ba91ff0764791d3 iwl6000g2a-firmware-18.168.6.1-143.1.el9_4.noarch.rpm 6fe8f453c421c58b1fdd989c0c200512cf6058fe71e159ef2cb103d328eb46cb iwl5000-firmware-8.83.5.1_1-143.1.el9_4.noarch.rpm 912b7dad27463b890f7fbe8c3a64d4bdf9bce6973ebe2c21a49df9eab52c69cc iwl7260-firmware-25.30.13.0-143.1.el9_4.noarch.rpm 92173256d6f510b4cd3fb43e29822211c88533a3b9354aa012659896d21fa3ce linux-firmware-whence-20240603-143.1.el9_4.noarch.rpm ef453630f9a74bc0e8b62f4dfca9cadfd9b4277ca0389f09538482d06f9aa112 iwl2000-firmware-18.168.6.1-143.1.el9_4.noarch.rpm fe68bc34356aa192c7ead79a2c485412255ef9d44e0355f23c02c2408e1cbae5 ALSA-2024:4776 Copyright 2024 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default cups-libs-2.3.3op2-27.el9_4.i686.rpm 334b7d50e474d95cc6da4dcbb41b90b44bf660a989b423e1e13c00c38462f0d6 cups-libs-2.3.3op2-27.el9_4.x86_64.rpm a1bd4e7c04504824a61ed0d9399b806c631687714620f77c52e4f71d22b5bbdb ALSA-2024:4779 Copyright 2024 AlmaLinux OS 0 1 Low

python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-3.9.18-3.el9_4.3.x86_64.rpm 402808555790f571af47db7f2f5041b67d723b8ac2e1ec2b7cf2adfceedd2156 python3-libs-3.9.18-3.el9_4.3.x86_64.rpm 7b7c8359f5032438bbc48167df24c49b55d91ba22f66686c3a3602d6cf8851a5 python3-libs-3.9.18-3.el9_4.3.i686.rpm e4f01fbe7ed38b939401f7d0187c98d7f60d17013f278c2ac611ac90aa7822d1 ALSA-2024:4928 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458) * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773) * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737) * kernel: dm: call the resume method on internal suspend (CVE-2024-26880) * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852) * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982) * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046) * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030) * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857) * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907) * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885) * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809) * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459) * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924) * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952) * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743) * kernel: epoll: be better about file lifetimes (CVE-2024-38580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-modules-extra-5.14.0-427.28.1.el9_4.x86_64.rpm 0cb41f6d4fdb99831781119bb39572d3ef80b185c6effac71779008bd5008b72 kernel-debug-core-5.14.0-427.28.1.el9_4.x86_64.rpm 1c74ac7c30376b860315011e18ee261a0dfebff8a37640a7cae6577713dd0cc2 kernel-modules-5.14.0-427.28.1.el9_4.x86_64.rpm 324e4dea5b05c154432415c3800d13bf6dd425fcc853e23c5b97d6056f522faa kernel-debug-modules-extra-5.14.0-427.28.1.el9_4.x86_64.rpm 467fc49969e47fcf671ce9d33859797a568c63e5f81e041c24237af3d959e05a python3-perf-5.14.0-427.28.1.el9_4.x86_64.rpm 57f6b80abe1339e5f52d8d3451cdbf437835bfbfbc94261bbec6cbf65edf0b68 kernel-debug-modules-core-5.14.0-427.28.1.el9_4.x86_64.rpm 5ce577afdce8b892063fa7a1ad03a5657f7c70e34dbb17b1a55798123a26c153 kernel-tools-libs-5.14.0-427.28.1.el9_4.x86_64.rpm 77ad47dd0b4de523683424eff8ebf0927a0945ee7e02777d9a4066a6ad2347dc kernel-uki-virt-5.14.0-427.28.1.el9_4.x86_64.rpm 782933cefd917773dca42c4eaa17fd20ffab46ce3de1c89d8597b64818129da0 kernel-modules-core-5.14.0-427.28.1.el9_4.x86_64.rpm 896562a66217c14baf9fa73760929b3286539109ce2fe14627391c1ce61a9c05 kernel-5.14.0-427.28.1.el9_4.x86_64.rpm 97b23fa5418f6039ed9b8bf89a13544534e0138325a1b1ac0d3227651b37e350 kernel-debug-modules-5.14.0-427.28.1.el9_4.x86_64.rpm a4d70ce7c37ad945e39944a4838b7f3315b5820820b8e69737ed6d872d3b7520 kernel-debug-uki-virt-5.14.0-427.28.1.el9_4.x86_64.rpm a95998adc0a3a6982b585aae911bdea879b67db50248c1f25242b092d6638d00 kernel-core-5.14.0-427.28.1.el9_4.x86_64.rpm c4bfd654279f68bf880dca80f61788a265fe84625e80576662cb466d77032488 kernel-debug-5.14.0-427.28.1.el9_4.x86_64.rpm d5931c10a0fe626f071f896f04383985de5ff72d2a572cb9609e210b12ede19c bpftool-7.3.0-427.28.1.el9_4.x86_64.rpm e4bca04e779212635b591eeeb8f202a840679a708729d4d41a63de00988883ac kernel-abi-stablelists-5.14.0-427.28.1.el9_4.noarch.rpm e529722518213dcfed921c6a127b4fc8af002cb5b17c86889e8e72deaf95f234 kernel-tools-5.14.0-427.28.1.el9_4.x86_64.rpm f5e8e98492e18e21782b34355014c0a25b5129bea93459a43162f8b89c290d31 ALSA-2024:5363 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: phy: (CVE-2024-26600) * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005) * kernel: cifs: (CVE-2024-26828) * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575) * kernel: nfs: (CVE-2024-26868) * kernel: igc: (CVE-2024-26853) * kernel: dmaengine/idxd: (CVE-2024-21823) * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961) * kernel: vt: (CVE-2024-35823) * kernel: efi: (CVE-2024-35800) * kernel: mlxsw: (CVE-2024-35852) * kernel: eeprom: (CVE-2024-35848) * kernel: ice: (CVE-2024-35911) * kernel: platform/x86: (CVE-2023-52864) * kernel: i40e: (CVE-2024-36020) * kernel: rtnetlink: (CVE-2024-36017) * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954) * kernel: ipvlan: (CVE-2024-33621) * kernel: tcp: (CVE-2024-37356) * kernel: virtio: (CVE-2024-37353) * kernel: tls: (CVE-2024-36489) * kernel: cxl/region: (CVE-2024-38391) * kernel: bonding: (CVE-2024-39487) * kernel: netns: (CVE-2024-40958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-debug-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpm 11d2bd0462fad5866163103fedeb5e249fd98108a3a1b2dffb6a396a8e8e427e bpftool-7.3.0-427.31.1.el9_4.x86_64.rpm 27de13504a45fe3055665e207f18b7379644a91475621f262c1ae83453f5db15 python3-perf-5.14.0-427.31.1.el9_4.x86_64.rpm 669cf5bdd878a0e57927f8060c577f56560a4968bf361e9a5adcba09a029a6fa kernel-core-5.14.0-427.31.1.el9_4.x86_64.rpm 67600ddac5cb4282dec3e7bd7a989a40a3a2844ca44bf153215c887ea3d38882 kernel-5.14.0-427.31.1.el9_4.x86_64.rpm 6bea376392da4ca716f32a0657ef95adfd76265f839672d4aba869f7e9fa8eac kernel-debug-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpm 772f32a9620d803e4f73159025c1e5516b1089f213f774f913af7a37be257b08 kernel-debug-modules-5.14.0-427.31.1.el9_4.x86_64.rpm 7bb83ad44de3fc16af8401a2cc83aa359c060263d75212607b771337191230f9 kernel-tools-libs-5.14.0-427.31.1.el9_4.x86_64.rpm 9d847260d539dbbcf22c2101d6c7c6899504635fe7fe9c315dd78ea13ebc2438 kernel-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpm a7a7d2c191a7075d9b272c76243221b08f78969580fe6815a236f48ee10d9c76 kernel-modules-5.14.0-427.31.1.el9_4.x86_64.rpm b1b3f1a0c91c46cdf0101f462e7e2efc719fa5d7dacd611cd58519feb2e062f1 kernel-debug-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpm b506b81f5ac74e1348ed22e4f40a9d60736114127c48b44392153f1588a1f5a6 kernel-debug-core-5.14.0-427.31.1.el9_4.x86_64.rpm b5a31bb67ef3e22e640e5ce6493b61f1c6e2855f7132c49dc928f04b90026048 kernel-abi-stablelists-5.14.0-427.31.1.el9_4.noarch.rpm baef2419f2e4dff04a0c58830526c99ebf86081f9814841a6f30f6458ff6572b kernel-debug-5.14.0-427.31.1.el9_4.x86_64.rpm c9f500849fa9b40ba515ae2814a666c738693fda929f17ea04bd0df9436ba1d6 kernel-tools-5.14.0-427.31.1.el9_4.x86_64.rpm dedb842d95c6f99b020e9cbec583b173d503411b0bf3036548a3cbd27437d7c2 kernel-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpm ea45f761b653ab385ca9a531fbb69986026251956495b9e8a4ad39b6276105e3 kernel-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpm ffd458b73a9d16895e6c55452e4dd800f996260f1cefa8cee1a95e225be20410 ALSA-2024:5529 Copyright 2024 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP/2 push headers memory-leak (CVE-2024-2398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default libcurl-minimal-7.76.1-29.el9_4.1.i686.rpm 2a7e89ebad2ae969c38f176884fb0a866be3135b145c5a65bc7040a114c2a9b9 libcurl-7.76.1-29.el9_4.1.i686.rpm 95b7d63c29cf2f1df1ea03b707e95fc06cabd02e5386ef6d015283313dbf2307 libcurl-minimal-7.76.1-29.el9_4.1.x86_64.rpm b249d11140e43e455584aef13747853e864f6334e917c1621c9d60f8216deb92 curl-minimal-7.76.1-29.el9_4.1.x86_64.rpm b2ee6bc325540d02367c07c038c13b65184e1d96c8a2cd1a2d2d24ff050a4f42 curl-7.76.1-29.el9_4.1.x86_64.rpm c756aeac37a7da10ab234e4d46f013bd0ec79742268bdbaacb7e719c09287be2 libcurl-7.76.1-29.el9_4.1.x86_64.rpm d761e726fb0d82c71239f4dd60385a822d2dcbe826d51b0964c4c8cf2d5b0d50 ALSA-2024:5534 Copyright 2024 AlmaLinux OS 0 1 Important

python-setuptools security update

The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-setuptools-53.0.0-12.el9_4.1.noarch.rpm 7768fa628178ca13a658de8ec0f93304d6f68000fea6385ddf995b8b34c62c90 python3-setuptools-wheel-53.0.0-12.el9_4.1.noarch.rpm b168555b17be4c12bf2352be13c2dc479a75b72372615e003644351f4f8c9d11 ALSA-2024:5928 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581) * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668) * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810) * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855) * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908) * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016) * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415) * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898) * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897) * kernel: netfilter: validate user input for expected length (CVE-2024-35896) * kernel: netfilter: complete validation of user input (CVE-2024-35962) * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003) * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771) * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880) * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025) * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608) * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544) * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540) * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538) * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476) * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905) * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911) * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912) * kernel: mm/huge_memory: don&#39;t unpoison huge_zero_folio (CVE-2024-40914) * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929) * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939) * kernel: wifi: iwlwifi: mvm: don&#39;t read past the mfuart notifcation (CVE-2024-40941) * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957) * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978) * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983) * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041) * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076) * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110) * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-debug-core-5.14.0-427.33.1.el9_4.x86_64.rpm 09ba30a08de049042471a8123332f66a7448cf998679c88c75167b1ae651bcab kernel-modules-extra-5.14.0-427.33.1.el9_4.x86_64.rpm 0c7f41b73e5a657ab2ddd398a7345ccb05397a977b1c04c02c7800b4777cb97f kernel-debug-5.14.0-427.33.1.el9_4.x86_64.rpm 103542b6fa2503cb578ece3d17b5ae41fa5b5d9a98cb6965b88d2087e5561785 kernel-abi-stablelists-5.14.0-427.33.1.el9_4.noarch.rpm 199f388382579d1778abdf96c5da608ba75ecdb6c4193f166420b32a33728676 kernel-debug-modules-core-5.14.0-427.33.1.el9_4.x86_64.rpm 322ebbe0bba7ad7b00ff421e8f7aea29612b942b74f6107547bb24a4b90a6318 python3-perf-5.14.0-427.33.1.el9_4.x86_64.rpm 33bfd7314c5dc2fe14b5586256f7877ab4dbe19f555d37b7d7aa127d08e84cc8 kernel-debug-modules-5.14.0-427.33.1.el9_4.x86_64.rpm 4559da85fef2eb63a524c1252ede3a364a00c9115d5d9379a270deeb4d9ecf17 kernel-5.14.0-427.33.1.el9_4.x86_64.rpm 4824d3c8e00a637a8ce37e37a35e3e4345ea598a3aff33683bb936590175005f kernel-debug-uki-virt-5.14.0-427.33.1.el9_4.x86_64.rpm 5cd2bb1bee88dca8e68f49c7f514e53fa8c31bc98569408b7b44cd9a638f4169 kernel-core-5.14.0-427.33.1.el9_4.x86_64.rpm 5fb573e2f28c36c13551c8ff7fae3ab46f84ddb75f0f094eee7c44aa13f664a2 kernel-uki-virt-5.14.0-427.33.1.el9_4.x86_64.rpm 77351ee90a3192bb70c2e4c46ae6a259824ce2addb609cf1baaf5f19a376edf6 kernel-modules-5.14.0-427.33.1.el9_4.x86_64.rpm 82fddb1afc45437748c3246ac148ea14d280a8bdf325ccd54d0698e71fd7002f kernel-tools-libs-5.14.0-427.33.1.el9_4.x86_64.rpm 9965667ab3dbe897c1e34807e98f2e754dd839271dc86609adc0d065a567ee56 kernel-debug-modules-extra-5.14.0-427.33.1.el9_4.x86_64.rpm ad9786c3a0128272b48a86fde9396e743e6dd091f414c9eaa56b0d45e7f38119 kernel-modules-core-5.14.0-427.33.1.el9_4.x86_64.rpm d32e3c6a39c4ce1f6edb36ed8dc08483cf2664028d9b3462cb3969cbd853abaf bpftool-7.3.0-427.33.1.el9_4.x86_64.rpm dd17e884894d4e0827a398ae81ff3750c533e8d41b0892393c938ac45dc97d28 kernel-tools-5.14.0-427.33.1.el9_4.x86_64.rpm ff56ff33a72dd991709fba9f98b5e4f0f718753e02bd0ce1d5a6c35fbf16dce7 ALSA-2024:6162 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-urllib3-1.26.5-5.el9_4.1.noarch.rpm 87417c04ea939cd6258c6cec2c2d2f328c44e7866518477f66c33c00134edb51 ALSA-2024:6163 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-libs-3.9.18-3.el9_4.5.i686.rpm 96c885e457eb0a9c1760fa72e01e8f7b1f52862ce55564f2423e44a4c9781318 python3-3.9.18-3.el9_4.5.x86_64.rpm c2dc6296f3bbd4b9850be33d4d17fce76a914f1791df3f377157fc0ed9b6488e python3-libs-3.9.18-3.el9_4.5.x86_64.rpm cb2a5e4114942a0e1711d5c12c88e320a01c08566f92579ee32b6ca0d0418988 ALSA-2024:6166 Copyright 2024 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: GSS message token handling (CVE-2024-37371) * krb5: GSS message token handling (CVE-2024-37370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default krb5-libs-1.21.1-2.el9_4.i686.rpm 710e3ff78fa43b2b60d63418cf49982509e65a879eeaaea1fc701d3aca4881bb krb5-workstation-1.21.1-2.el9_4.x86_64.rpm 75572d700f8d769482a481a50b1c0397128457cb259b3fe7c66d5fcdb47a2318 krb5-server-1.21.1-2.el9_4.x86_64.rpm 8d85c95855dc74c3962ac4f1b0ae81bc8058fd4587ab973e64112bd521321c87 libkadm5-1.21.1-2.el9_4.i686.rpm 97c69b44008c706db78b27b5efdd7857d626ed7f7c197ebb0edf4a522eb4a837 krb5-server-1.21.1-2.el9_4.i686.rpm a8ab639fc573cca9004e1147f7f9fde07ca15825d1e83e219a815896b07d4e09 krb5-libs-1.21.1-2.el9_4.x86_64.rpm b1adadc0b7d340723fd0959725ec7c621d3a0493691db32c0df684d5ee48de49 krb5-server-ldap-1.21.1-2.el9_4.x86_64.rpm cd154fbb53e6e6c9aaaaf19f1986e2eca74b44af1bf6497421deca4f57e31131 krb5-pkinit-1.21.1-2.el9_4.i686.rpm d347cf50dad7d812039ddee97c4a8d56713b3a3abf507c27e5c555220a047543 libkadm5-1.21.1-2.el9_4.x86_64.rpm dc90a08ad44e3e2ba274d8d145241a13380ee4b161973e9364e0dca653219584 krb5-pkinit-1.21.1-2.el9_4.x86_64.rpm dcb2e1ab753d5d52170c6ca671c09aede4c28701d4e8ca835c377b5712d1907b krb5-server-ldap-1.21.1-2.el9_4.i686.rpm f81b2bf24e2ad4db9c8c4c4636af6c2f49fbc4477a5aad360660004a0fc37004 ALSA-2024:6356 Copyright 2024 AlmaLinux OS 0 1 Important

bubblewrap and flatpak security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default bubblewrap-0.4.1-7.el9_4.alma.1.x86_64.rpm ee649f893b4d60520bff15674ad68773f2379bb9a32de59f943993935ff2c57a ALSA-2024:6464 Copyright 2024 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib2: Signal subscription vulnerabilities (CVE-2024-34397) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default glib2-2.68.4-14.el9_4.1.x86_64.rpm 2309263c8fb1e3b732eb643bd243cbd7bbe73ed6a58851e8661f19ef41ba7128 glib2-2.68.4-14.el9_4.1.i686.rpm e651d60f1906415554e34e21ce414b7eea9f8bd0316ca8a320a6d9da98b2a44d ALSA-2024:6567 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463) * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630) * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720) * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886) * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946) * kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791) * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797) * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875) * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000) * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801) * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883) * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019) * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979) * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927) * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936) * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040) * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044) * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055) * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096) * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082) * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096) * kernel: Revert &#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&#34; (CVE-2024-42102) * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131) * kernel: nvme: avoid double free special payload (CVE-2024-41073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-tools-5.14.0-427.35.1.el9_4.x86_64.rpm 171b893848f0313649fda0e3197de8db5802f7dcc9489e1ae299ab9ddef666aa kernel-debug-uki-virt-5.14.0-427.35.1.el9_4.x86_64.rpm 21ea6f4a6f562a499d30f7d108d439c1e86f91466739635a9d3140d0c9362c5c kernel-modules-5.14.0-427.35.1.el9_4.x86_64.rpm 24f8c496e1edad68b73585d7b47e907bc2e131d88b381c4d8554bd5194df1f5a kernel-debug-5.14.0-427.35.1.el9_4.x86_64.rpm 2b41c894a31f50e04304916d0a9f548f19ab5e3df59fc1df994534854c070109 kernel-core-5.14.0-427.35.1.el9_4.x86_64.rpm 2d96227f06c7cfdfd749ba8a8fa55e51ff4b865f7d8c52b89d2b800bb7d22e89 kernel-debug-modules-core-5.14.0-427.35.1.el9_4.x86_64.rpm 2e13443b1ddaa098576324a2ccbddce0793c51d243f519e9970ff1a42302aa83 kernel-modules-extra-5.14.0-427.35.1.el9_4.x86_64.rpm 51b1048b7d66976614816f6c624483926b56ab708656834e18504ba91e4e1fc0 python3-perf-5.14.0-427.35.1.el9_4.x86_64.rpm 65aee568007925d9d385cef668c3cb95e6ebcf1d98e0c15e4db29a1c7a5665db bpftool-7.3.0-427.35.1.el9_4.x86_64.rpm 8520502cc69ff7644c36811b6e1ccb074b2d78d670665e15d93c4c4860bfe33c kernel-debug-modules-extra-5.14.0-427.35.1.el9_4.x86_64.rpm 8743652e8aaee7364365fc6adddc4251e9d603f3b87a2071195ab8b38d55de40 kernel-5.14.0-427.35.1.el9_4.x86_64.rpm 8cdabe62e2d2b7bcf6d345e85cda6aa0f4ad659b75fb870937915ddce9149f51 kernel-modules-core-5.14.0-427.35.1.el9_4.x86_64.rpm 98fa9b78c0a0c484aa96327e979e4c6473faee3e4f3dac96ffd2b51034ad3f7b kernel-debug-core-5.14.0-427.35.1.el9_4.x86_64.rpm a1df4bd16c29128013a7e6f47ea5f894aa78bbcd3ced99e437e726537d105d2b kernel-uki-virt-5.14.0-427.35.1.el9_4.x86_64.rpm a63451c0d7cd7084af0fb69336c049b652fb57b33dedf8a9f1216e05dbba350b kernel-abi-stablelists-5.14.0-427.35.1.el9_4.noarch.rpm b8c108f7b59a724b27fbd686b92ddce3161ff1b870ea895a1cda51a7299eefc4 kernel-tools-libs-5.14.0-427.35.1.el9_4.x86_64.rpm cf554ddb1b9b9f0789323aceb164c19793d8cd7c141a66ba17fd64fd33267af9 kernel-debug-modules-5.14.0-427.35.1.el9_4.x86_64.rpm ffd97e89667416ba843bd65b85cbccdca41331a36d4a8bb49da871417d01fecd ALSA-2024:6754 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490) * libexpat: Integer Overflow or Wraparound (CVE-2024-45491) * libexpat: integer overflow (CVE-2024-45492) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default expat-2.5.0-2.el9_4.1.i686.rpm 0f5b667891dc53a5374c8110af3b994ff54ec824df762369934175acd93b29fc expat-2.5.0-2.el9_4.1.x86_64.rpm d91e8baf3d4357b9f48fcdba0159cd26e7abb4a0ecd47eab2de85cf65616f9c0 ALSA-2024:6783 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default openssl-libs-3.0.7-28.el9_4.i686.rpm abf51062d5ab15621ea7fac738af4249c8d79c7ca48f81fde32dab5e1b116bca openssl-3.0.7-28.el9_4.x86_64.rpm bbf421a333b24adbfb4c742fe56619a4b2ed7ee972ebd71e21c77bc4a6b06e28 openssl-libs-3.0.7-28.el9_4.x86_64.rpm e95d4f3bad3536e56682c7ef82ee5b38241c72b195b2282e3c935e612e25268c ALSA-2024:6997 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439) * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739) * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947) * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931) * kernel: scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (CVE-2024-26930) * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929) * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022) * kernel: KVM: x86/mmu: x86: Don&#39;t overflow lpage_info when checking attributes (CVE-2024-26991) * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895) * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899) * kernel: cpufreq: exit() callback is optional (CVE-2024-38615) * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573) * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570) * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562) * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884) * kernel: ACPICA: Revert &#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&#34; (CVE-2024-40984) * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225) * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-core-5.14.0-427.37.1.el9_4.x86_64.rpm 235e7f4d6daa90f98db0484ae002ab505b9e71bcc7d2677c0e3a8d7b8b14448d kernel-debug-modules-core-5.14.0-427.37.1.el9_4.x86_64.rpm 3dea1aad470cd4d1581559465a073cba3fd16a2d342ae86d52f9c08e4387ac38 kernel-debug-core-5.14.0-427.37.1.el9_4.x86_64.rpm 4025f371c985bb121ced10442cd712532911ca0713e41be09753b0b496005994 kernel-debug-modules-5.14.0-427.37.1.el9_4.x86_64.rpm 46af4c0251b88f6f15878918c26b3c823059f12bb9dd561c5587d02297db286f kernel-tools-5.14.0-427.37.1.el9_4.x86_64.rpm 4b59eab7d567fcda1f98c950daa8d5ebac7a031e4b68e16914429d60f2ab76da kernel-5.14.0-427.37.1.el9_4.x86_64.rpm 522a8264fa18031fdbee41307a66a85ac0df0bf13a05ce561075f66ff5d1edbe kernel-debug-modules-extra-5.14.0-427.37.1.el9_4.x86_64.rpm 7fa10da7198878cb88ba621b2ae0704b0457a2a43ea3da723926e027b16095c1 kernel-debug-5.14.0-427.37.1.el9_4.x86_64.rpm 8d880654005b1277c007a4fee5434f33b6c4570e356fd744fadf56d8a7bc2b34 kernel-uki-virt-5.14.0-427.37.1.el9_4.x86_64.rpm 942fae82a8127c744c6f8ea33c4e5e83225c63aa2883763c58bd190649431105 kernel-modules-core-5.14.0-427.37.1.el9_4.x86_64.rpm 96eede718aaca2fdc271643c501adfd777d6fc2ead1f711e1811f9a0efc15c9b kernel-tools-libs-5.14.0-427.37.1.el9_4.x86_64.rpm 99b8177192c111d5dcc5a8a65aed6fba0d61533a4431d9a2659cc6387a9b4d7f python3-perf-5.14.0-427.37.1.el9_4.x86_64.rpm a790a219c760e9a416b67613be81e59f7373ebc4fdcec06d1da8537a58c9e361 kernel-modules-extra-5.14.0-427.37.1.el9_4.x86_64.rpm abc0c089580ac4a01cb58aafa3a3903c4d685a3cd2ebae2d01aed6183b09b160 bpftool-7.3.0-427.37.1.el9_4.x86_64.rpm b32dfb63636bacd0eecd235cf688ac5691e6c3a9f4b77d47f24d95388eab3b9e kernel-debug-uki-virt-5.14.0-427.37.1.el9_4.x86_64.rpm c406797f6c50d98f5c2d5df18ef04712a9ba2b4a95162062d794157e405c5d4c kernel-modules-5.14.0-427.37.1.el9_4.x86_64.rpm c6b92ee5962dde671be8e4d0e2371513bdf11b104456ceaf7e3d8a8bcec36e5a kernel-abi-stablelists-5.14.0-427.37.1.el9_4.noarch.rpm daa207841f02d9dd6c1c040ca4cd33800f4c843c86061895d5c9b005318afc85 ALSA-2024:7484 Copyright 2024 AlmaLinux OS 0 1 Moderate

linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584) * kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default iwl6000g2a-firmware-18.168.6.1-143.3.el9_4.noarch.rpm 03388ed2705c49d3944f25fd82554355a9d8e18439ab61d5a928be6f1d9bb647 iwl2000-firmware-18.168.6.1-143.3.el9_4.noarch.rpm 0430121006fec4e2e49e6369eccbe17cb36f0f9caa8b4cc3b3e3a6df8aec11a9 iwl105-firmware-18.168.6.1-143.3.el9_4.noarch.rpm 25dadeb4bc3387c82347955e9575f2798e82bf80642732c5fc494ef04b331e10 iwl7260-firmware-25.30.13.0-143.3.el9_4.noarch.rpm 263f5643a8578010a11d6f6816be9fb70a2cfedc0c30f98c59dfdf86d486f24c iwl1000-firmware-39.31.5.1-143.3.el9_4.noarch.rpm 2c6065a0665bd2bfd65a851b68c9d50eb017bc5cfb46b4cd6e8020179dc0ef4f iwl3160-firmware-25.30.13.0-143.3.el9_4.noarch.rpm 46bd49ebd60c9e1def27ea4d67cb941f9b719824473a2dc15fd35f3012d164a2 iwl5000-firmware-8.83.5.1_1-143.3.el9_4.noarch.rpm 5b1409bae5937a56c9e6141641852908d20036b2fbf5cf1636949c6106210735 linux-firmware-whence-20240905-143.3.el9_4.noarch.rpm 6ab4e85d882307d5331a55d3bddeb192c32406e92fe51769f588c1edaa66a762 iwl5150-firmware-8.24.2.2-143.3.el9_4.noarch.rpm a855365eae209cc93f76a272eaffd066ae13a87909af9730acab12c16984868f iwl2030-firmware-18.168.6.1-143.3.el9_4.noarch.rpm acb5dcba83e08ab4fb0cce30a5b9d91635ca01f06659ae6264b06dbea3b4586e iwl6050-firmware-41.28.5.1-143.3.el9_4.noarch.rpm b35cb88a9417938a6d17f6d14b4fb660eaaaba9b1535bf38fb85900e81c2208f libertas-sd8787-firmware-20240905-143.3.el9_4.noarch.rpm b458ed7d0a2d2ce1e2cf6e156aae13bfddf2b28eb6f705e0131efdcdb0ae3029 iwl6000g2b-firmware-18.168.6.1-143.3.el9_4.noarch.rpm c1574bfe2dfaf060f07d936a1e043ef33ec0feb76a6e4ed408aa0c5527ef70bc netronome-firmware-20240905-143.3.el9_4.noarch.rpm c2e95a533ae5194e5d1988a15453be836d8f067ebea3e9087bb624a9f6076b7e linux-firmware-20240905-143.3.el9_4.noarch.rpm cf9ce8fbb000919c5c231772aed74595378a28a5a80b8130637ed9aaf7d07d3d iwl100-firmware-39.31.5.1-143.3.el9_4.noarch.rpm e35811f39878a84e054efa5e2c265063e08a7d58f02b00ece15ce5a2d021ea77 iwl135-firmware-18.168.6.1-143.3.el9_4.noarch.rpm f7c04cb833b4ee5c62b2f5ec3feedbd3e1159230d92c54c1f6b11023fd158334 ALSA-2024:8162 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403) * kernel: Revert &#34;net/mlx5: Block entering switchdev mode with ns inconsistency&#34; (CVE-2023-52658) * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989) * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385) * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889) * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556) * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483) * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502) * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959) * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079) * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272) * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-uki-virt-5.14.0-427.40.1.el9_4.x86_64.rpm 1ea71a234cb6ae05d19af22576b1c98980f057deaa9f1e7bf4451c0e87620361 kernel-debug-5.14.0-427.40.1.el9_4.x86_64.rpm 22229d05129bb7fa2fd162d3d43a6d4d354d118b476688483278628539d9d1fd python3-perf-5.14.0-427.40.1.el9_4.x86_64.rpm 4661c1f71d3dca59e67a9eaa516d72bb44faca1561e61956cc8c078f91c41503 kernel-core-5.14.0-427.40.1.el9_4.x86_64.rpm 4b44cf8a7f23788c34d046e5ed582eafa4f8fa891fa6929852b88e6f5c60e585 kernel-5.14.0-427.40.1.el9_4.x86_64.rpm 4e60b7d02ca5c7b2f87d2ab2ba9575b84d405e899ef736b66a74607a77e5a5e4 kernel-modules-core-5.14.0-427.40.1.el9_4.x86_64.rpm 6b1b82d61358494a120494bf82a66b834658e68b3d5f80cb4af64399e7a5914d bpftool-7.3.0-427.40.1.el9_4.x86_64.rpm 77cf4af997855c7b4890814bf98e58e0089a0caff18408a13cf493156c8114a8 kernel-modules-5.14.0-427.40.1.el9_4.x86_64.rpm 8f74a2bf63503d5f951684ab3d5e6db3536d65c3ca3e4efd36a8de91286bebaf kernel-debug-uki-virt-5.14.0-427.40.1.el9_4.x86_64.rpm 94109fc165585acacc47e721a2208c86bbe7cdf40cc280f8f2eaae0fdda8d26c kernel-modules-extra-5.14.0-427.40.1.el9_4.x86_64.rpm 966ce5e36a70db29d6780654f218b8526ff34d917e76597af7cb06191f4e23e8 kernel-tools-5.14.0-427.40.1.el9_4.x86_64.rpm 970f402bb97af6d8515ae67f7e44c7a304506a16612c6426a634b17448dd8deb kernel-debug-modules-core-5.14.0-427.40.1.el9_4.x86_64.rpm a0791b8f2babd1584ebd51ab67b8bbd60b3aafd853f28b9e556bda12f4d22f78 kernel-debug-modules-5.14.0-427.40.1.el9_4.x86_64.rpm a4140d644df4e248e834f6556b0ee56b326dcd11d6511e89396cb2bb6cd67d39 kernel-debug-modules-extra-5.14.0-427.40.1.el9_4.x86_64.rpm ab15ffc33685cd82032967e8be7e3b9ab46a71a53a8982440fe00f5a7a95627e kernel-abi-stablelists-5.14.0-427.40.1.el9_4.noarch.rpm c55893247457a92a3ac101b685fb7631d73b5dbe5a06a66cb6e4e17f1ac393e6 kernel-debug-core-5.14.0-427.40.1.el9_4.x86_64.rpm cd36b6c34ab307310f0f571330ce1b7dcdac248713a8a240c0d17f1133e40fc9 kernel-tools-libs-5.14.0-427.40.1.el9_4.x86_64.rpm d312f66efa18a582a39b75d041baee664643ef078879589b75342fc2d0e160af ALSA-2024:8446 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-3.9.18-3.el9_4.6.x86_64.rpm b7f12376a41195e0a8aa61422206399bfb519c8a061acd0ba89de3e994536bf9 python3-libs-3.9.18-3.el9_4.6.i686.rpm be0ac44db7de55b76f9b1b79c8049efdfb0d9e9c933dc04b421c08c700f99ed1 python3-libs-3.9.18-3.el9_4.6.x86_64.rpm f3a9aae90ed479f3e463202ecdd99f8ca6c9a63714e0d704333ed067f3d1cd9b ALSA-2024:8617 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201) * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640) * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826) * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961) * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935) * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383) * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244) * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472) * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504) * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904) * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931) * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960) * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972) * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977) * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995) * kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (CVE-2024-40998) * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005) * kernel: xfs: don&#39;t walk off the end of a directory data block (CVE-2024-41013) * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-debug-5.14.0-427.42.1.el9_4.x86_64.rpm 127f90ce400ce38a0ad7308a37643c5827e2c1bb4cdcfbf2591ee1a9298a28b6 python3-perf-5.14.0-427.42.1.el9_4.x86_64.rpm 1aeaf5b369244c99a7807473a2be16110aa7cf16f4e21e7e0bacdffcc45e6710 kernel-5.14.0-427.42.1.el9_4.x86_64.rpm 1c9ca210ccd0781fadef1ed4ca45725597cfd25e475e0f070f9d364e679dc242 kernel-abi-stablelists-5.14.0-427.42.1.el9_4.noarch.rpm 25ecf7e16caa649786886061c099b4299220ab823dd6745c059dee4a006c53e8 kernel-modules-core-5.14.0-427.42.1.el9_4.x86_64.rpm 5baed7a97ad739c2ead382c41cebdb3877b2f072d9f29cc0fb0906b7d177202f kernel-debug-modules-5.14.0-427.42.1.el9_4.x86_64.rpm 5cc31f5102894994e42d5e24ace1a19b6f7c3ae76cb54421961aa3eaaae3531c kernel-tools-libs-5.14.0-427.42.1.el9_4.x86_64.rpm 5d37b25e2e50488299c2aa17f838daaf014f163171d3c2fe4f59b849cdec0dc8 kernel-uki-virt-5.14.0-427.42.1.el9_4.x86_64.rpm 6504370407f525693248ebc4a06c95c7a91feae5ae590a4bbd9108c3a6e56f1e kernel-debug-core-5.14.0-427.42.1.el9_4.x86_64.rpm 6891db937389412e7f1c103aa52d5014af2ff878662ffd0541dfe4f6c7d225d4 kernel-debug-modules-core-5.14.0-427.42.1.el9_4.x86_64.rpm 903153391a4c43f92e8035c95a9c27a562b30a2451df18d64f00981c53d1185c kernel-tools-5.14.0-427.42.1.el9_4.x86_64.rpm ab77b170fd051a0f0d1b74895b45dcb80493252c09e7a4a14ea7edc7680e91c9 kernel-modules-5.14.0-427.42.1.el9_4.x86_64.rpm b807a8017686e85191edf4d608853732c37ec276d9a53b8a8e8ca42abe4fa6ae kernel-debug-uki-virt-5.14.0-427.42.1.el9_4.x86_64.rpm ca448e32d89f9ee0ad3dfbce6d1de9206142925bf9f1edbcad218e9447141655 kernel-core-5.14.0-427.42.1.el9_4.x86_64.rpm dd6db79dfa425f432062215de60d475772f8ee5bb3d612ea0fa7f596547d27e3 bpftool-7.3.0-427.42.1.el9_4.x86_64.rpm e76d43814782d7f7fc9d833fd2aead742527006b604a146dff45af4f72f7f1fd kernel-modules-extra-5.14.0-427.42.1.el9_4.x86_64.rpm edd29b8402aa8f83c25d807958af8725f306949f27af6fc04c58a875b2578eec kernel-debug-modules-extra-5.14.0-427.42.1.el9_4.x86_64.rpm f31691b36cc2be98ead395c1ba422e2c6c1ac3470422fa647f5d1afe073e96c5 ALSA-2024:9317 Copyright 2024 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * NetworkManager: Denial of Service (CVE-2024-6501) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default NetworkManager-initscripts-updown-1.48.10-2.el9_5.alma.1.noarch.rpm 1626d23f5e041576ad82b4b7726c7f8cee5a2c32c3f4383f86d59b047595e6de NetworkManager-wwan-1.48.10-2.el9_5.alma.1.x86_64.rpm 5b3196de1258445e11f68c25184fd5968a07ff9c71f225df8e5766feee715681 NetworkManager-bluetooth-1.48.10-2.el9_5.alma.1.x86_64.rpm 8d56e6b91cfeb116930aa5ba2a2e1b198632a357f510dabca0f2a144d9682d28 NetworkManager-config-server-1.48.10-2.el9_5.alma.1.noarch.rpm b01d15eb0c223ffc8d4ddfe82bc92fef4899c7a1d71db5b98ba471f82a0d2b56 NetworkManager-wifi-1.48.10-2.el9_5.alma.1.x86_64.rpm bc0c32d3e583f3844b34376b24c5ba5bb75c63d95172407726cd0e17a51a0193 NetworkManager-libnm-1.48.10-2.el9_5.alma.1.x86_64.rpm bd420f2b916759aeb229d0fac011faf0c2bc4941acf27b9abb220acbafa1fc14 NetworkManager-1.48.10-2.el9_5.alma.1.x86_64.rpm c501167fe54d6440719384806691439ffcbf7b81f6d11a78180778a8c34805e5 NetworkManager-libnm-1.48.10-2.el9_5.alma.1.i686.rpm ccc0536c9b3941bc56a4e53d47a3b3cd3161f33268ae3570efe8d34d3a7705bd NetworkManager-adsl-1.48.10-2.el9_5.alma.1.x86_64.rpm cefba5693814dcf5a2bfae1cbe0c682ae207eeee618feccf98901065e4de4f48 NetworkManager-team-1.48.10-2.el9_5.alma.1.x86_64.rpm e83b5b8283aa4e610a309e7b46be5c8997bfccd226947df6c1d1a4c8a0f1ff01 NetworkManager-tui-1.48.10-2.el9_5.alma.1.x86_64.rpm f6ec39eac6a20c5914c57e9a9a6f6d79629742648a49e5d39924ee7293753a87 ALSA-2024:9325 Copyright 2024 AlmaLinux OS 0 1 Low

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default cockpit-bridge-323.1-1.el9_5.x86_64.rpm 48fd889385ec628844eaae9a2d765e6a947539f82279dece96e7d8ff3ecf8a30 cockpit-ws-323.1-1.el9_5.x86_64.rpm 5b715069254e8d755dd50f31a49c4055b5dbc0e76f1117e3f97c10720994fbdf cockpit-323.1-1.el9_5.x86_64.rpm 7c2ca163030355714ce2348623b7d1f8c0161185d20968adb4287ac736ed17ce cockpit-system-323.1-1.el9_5.noarch.rpm cdf2fb7bbfe7bb2e80b3fe43c86de823d68e66151a164327ba25ab5c6fe77f86 cockpit-doc-323.1-1.el9_5.noarch.rpm e85cf41907667446afcda7471b80d7d8f046b766b8d8f52ff8d27eefd6358156 ALSA-2024:9331 Copyright 2024 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c (CVE-2024-26458) * krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (CVE-2024-26461) * krb5: Memory leak at /krb5/src/kdc/ndr.c (CVE-2024-26462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default krb5-libs-1.21.1-3.el9.i686.rpm 1cf5bed811eba1d651d5794cae1c428142d23f919a2c261ed717b2536b4e104e libkadm5-1.21.1-3.el9.x86_64.rpm 1f544c86724d0d68cfc08ce238565976906bdadb37659ca108657cdfddecf518 krb5-server-1.21.1-3.el9.i686.rpm 3e9e0910b434b605c6b132803b190c72428f5c2adaac803471d1ce77e9fbf65e krb5-server-ldap-1.21.1-3.el9.x86_64.rpm 4314a6b529bc4741af0ba6fd2a170b63c3658e03a8e2cfbbab8fbced01764694 krb5-libs-1.21.1-3.el9.x86_64.rpm 6f79783d3976111836d21cef849089e2d8f0c097b58c5a0c3597a7c8248e1f17 krb5-pkinit-1.21.1-3.el9.i686.rpm 938086c9080283840b870d4ea1996b48bc22a28f8236c87a62c640d15a78f8b6 krb5-server-1.21.1-3.el9.x86_64.rpm 9f595bbad35673f2c8daa359dbb51d32c3a2c2cee2f7f53f12dc8fd980b7c432 krb5-server-ldap-1.21.1-3.el9.i686.rpm b4b69bef69ebd230f848c52ca9b221f129c58fb7430502333bcb0ab3a6cb5337 krb5-pkinit-1.21.1-3.el9.x86_64.rpm b5a7c28632a423dcd2488266a89aa04421b879958fe144ccf1e8543f815f6bd1 libkadm5-1.21.1-3.el9.i686.rpm f3626feda9f911b92bb14ae78bc4a3c62f16380f47eec2c4f83c66c342581afd krb5-workstation-1.21.1-3.el9.x86_64.rpm fc1e3e228dfd29129670d2aecb21f07be8a0205962ad2e0aca90550b2f8d24dd ALSA-2024:9333 Copyright 2024 AlmaLinux OS 0 1 Low

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511) * openssl: Excessive time spent checking DSA keys and parameters (CVE-2024-4603) * openssl: Use After Free with SSL_free_buffers (CVE-2024-4741) * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default openssl-3.2.2-6.el9_5.x86_64.rpm 2336f095135bed40a2d9c4a5b2901b0c8b408837776c22b06847f822d94ca9e8 openssl-libs-3.2.2-6.el9_5.x86_64.rpm 6a50ff949f63b349f33c8522955351c696af7a2f0796279caca6903dc8f6af8f openssl-libs-3.2.2-6.el9_5.i686.rpm df4ede3753246453c095d79528b522594795a6d489f556b49c74f90c0deb2705 ALSA-2024:9371 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-libs-3.9.19-8.el9.i686.rpm 0e6905e409093f6abaa15b5cacc493c6a0609e4cdb052323e3685e5942dd5f4f python3-libs-3.9.19-8.el9.x86_64.rpm 959f0be0196aa2594afc20b16e0ff7e5ce0c2f4c441694c41252422a1b35932a python3-3.9.19-8.el9.x86_64.rpm de683d8dbe0d18ff6ea19cd946f093a76dc6fa481cb60522a4bfbaecfc8141a2 ALSA-2024:9401 Copyright 2024 AlmaLinux OS 0 1 Moderate

microcode_ctl security update

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655) * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575) * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368) * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490) * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733) * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default microcode_ctl-20240910-1.el9_5.noarch.rpm 8c62be3b9b3b71c9b4cfda517ca9f93f184cb644316a144729859fd6193216a8 ALSA-2024:9404 Copyright 2024 AlmaLinux OS 0 1 Moderate

libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default libgcrypt-1.10.0-11.el9.x86_64.rpm 576b721f09644adc8fe7058dd7defadcd6a7f340fe05a17ddc966f39d3f32045 libgcrypt-1.10.0-11.el9.i686.rpm 80f5c7359a929c68c4ba38c87a6a358069fe04d4bb418499a2fe0602cfded595 ALSA-2024:9405 Copyright 2024 AlmaLinux OS 0 1 Low

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap-based buffer overflow vulnerability (CVE-2021-3903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default vim-filesystem-8.2.2637-21.el9.noarch.rpm 5d7edeecf4d5942a0a2a135bc67f4a681d7125f838be60bfc77b3aa09f1e4c20 vim-minimal-8.2.2637-21.el9.x86_64.rpm 7458e04ca18e72594df4893b94b551870df911cffc73957c0cd4b5984f91292b ALSA-2024:9413 Copyright 2024 AlmaLinux OS 0 1 Moderate

bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files. Security Fix(es): * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866) * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596) * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594) * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592) * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589) * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580) * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default bluez-libs-5.72-2.el9.x86_64.rpm 49c273813b4616240acdae8dae893192658c7541482f9bbb2c46dfe19b61877d bluez-5.72-2.el9.x86_64.rpm aadf82f9fa8186e964f44017fcffa79ccfdba1a57b87ed23bb540bdb9c5c96f7 bluez-libs-5.72-2.el9.i686.rpm af1aba8e6fa5ccf33032d58a3acc59368c07d532293396db205fb9a4bc1241ae ALSA-2024:9423 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-dns security update

The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode. Security Fix(es): * dnspython: denial of service in stub resolver (CVE-2023-29483) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-dns-2.6.1-3.el9.noarch.rpm b0119d64551f2546511b878ac9aea12e3caf90ae97e450091c643fe02d410681 ALSA-2024:9424 Copyright 2024 AlmaLinux OS 0 1 Low

tpm2-tools security update

The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module (TPM) 2.0 devices from user space. Security Fix(es): * tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038) * tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default tpm2-tools-5.2-4.el9.x86_64.rpm c4a45b22f276d641b74b615f53bf3c55383d22dc6cdc42a51c7146a0c99522cd ALSA-2024:9430 Copyright 2024 AlmaLinux OS 0 1 Low

nano security update

GNU nano is a small and friendly text editor. Security Fix(es): * nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file (CVE-2024-5742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default nano-5.6.1-6.el9.x86_64.rpm 30234cc14099a08a96b115233e1826c119c98c46239b627fc9af312bd895c335 ALSA-2024:9449 Copyright 2024 AlmaLinux OS 0 1 Important

bubblewrap and flatpak security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default bubblewrap-0.4.1-8.el9_5.x86_64.rpm e7aa3d43f61e3e1d58942a530dff2f86c1e32848705711334f3ad434dcb705aa ALSA-2024:9468 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default python3-libs-3.9.19-8.el9_5.1.i686.rpm 25c2fa392bccde0412711932835b06e6b98e5107f5049836da002688a2667da0 python3-3.9.19-8.el9_5.1.x86_64.rpm e1700ceb887498d3fbeab09b6d9184b4dd062b5cd0d4a70cea4c88b598c5802f python3-libs-3.9.19-8.el9_5.1.x86_64.rpm ffe4afdee44aae44a7b16752a146d1521bfcb9daa8f4144330cd8fcd334d9c6b ALSA-2024:9470 Copyright 2024 AlmaLinux OS 0 1 Low

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: libppd: remote command injection via attacker controlled data in PPD file () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default cups-libs-2.3.3op2-31.el9_5.i686.rpm 36c4f34b0d7f6228ec41be43d00b77ae0e015a4b2fccc21fbe9bea335268bc69 cups-libs-2.3.3op2-31.el9_5.x86_64.rpm 51240ee5b1dcc6f1142ade3949af9e543342e72ea54dce9a1437c963f4d20c1e ALSA-2024:9474 Copyright 2024 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * freeradius: forgery attack (CVE-2024-3596) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default krb5-server-ldap-1.21.1-4.el9_5.i686.rpm 0be4150e2ecc917cdcf38f17eb4f0379bbcf10f0ace7e5b0bbfa82de3147600e krb5-pkinit-1.21.1-4.el9_5.x86_64.rpm 2ebf473b972f8a60056751faf6f41afbd84367c7a3c851ffba99fef9a1ab0c0d krb5-server-ldap-1.21.1-4.el9_5.x86_64.rpm 3484eacd9899ab8ba17706e4944e0e861ff754e77c0d5a11a5b89368b75910dc krb5-server-1.21.1-4.el9_5.i686.rpm 46aa398b110f920dc9ecdf7d0bbd922988ed09a004359db9f30ae13e974ac83a krb5-libs-1.21.1-4.el9_5.x86_64.rpm 60afc76dabc675da28d988e833a82d4f4619091c9dbbf55daf507ac924f5547a krb5-server-1.21.1-4.el9_5.x86_64.rpm 6f251a88a27cff320cf00b63332467d2c0d48916e2f7cff56b1ac717b26d14f4 krb5-libs-1.21.1-4.el9_5.i686.rpm 7868900114ecb463d735081d958d2c402d7554b485f02a959248acba24e4f94a krb5-pkinit-1.21.1-4.el9_5.i686.rpm 839cb875caf3358663496102b1f4758a2f0b7917cae25fb2bb29db8d49733261 libkadm5-1.21.1-4.el9_5.i686.rpm cc67e85afaa36e49f949b46742a8c0e90c45b4c9aa7136431ee0554f51937f37 krb5-workstation-1.21.1-4.el9_5.x86_64.rpm cf87541a9c22b18ecdb4e83c3f63a02bb2720b80d6a275947aaa7df742e66238 libkadm5-1.21.1-4.el9_5.x86_64.rpm df282774e1605fe641b56e8ffe20fa410be07182c5119def92b01f132e2790c1 ALSA-2024:9541 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default expat-2.5.0-3.el9_5.1.x86_64.rpm 481ec409834355039546de36ec40ac3858c808f333428a4d1d6ffc02891f8eca expat-2.5.0-3.el9_5.1.i686.rpm ed37991c964bebdd6c0f374db38d1f709e7e31b1009d6c89b5eb0a8f1494dfac ALSA-2024:9605 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283) * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824) * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_4_default kernel-tools-libs-5.14.0-503.14.1.el9_5.x86_64.rpm 08c72d71a8f1c7b742607b5b0e0020caa170caf7a59cfd0702ee079acab61c82 kernel-uki-virt-addons-5.14.0-503.14.1.el9_5.x86_64.rpm 10ff89526224f43465cdf2a216cd5caa680342db331f23f58c1709594dbeefdc python3-perf-5.14.0-503.14.1.el9_5.x86_64.rpm 15dd1d7d0f5add20f34aa823dd778227a9f2657b833b53cd4e6e58f7d4270ebc kernel-debug-uki-virt-5.14.0-503.14.1.el9_5.x86_64.rpm 27aa4775f83019a6cf6a9ed6cf0e1264baf8679ee0e52c5d374ad598d7e8bdbd kernel-debug-modules-extra-5.14.0-503.14.1.el9_5.x86_64.rpm 3d8f99e8525aab53ca541ae7a5d96277a5c0c32dac122760f777dd9b21409ce2 kernel-5.14.0-503.14.1.el9_5.x86_64.rpm 49ce4ad7655e23906e941e85ca6dc4b9002fa9743afba674f2f127e8fc9697ec kernel-modules-5.14.0-503.14.1.el9_5.x86_64.rpm 72e6eac1402809ea9f8794b19f67199ff3273082bc922b09e0319f02f9c95eda kernel-tools-5.14.0-503.14.1.el9_5.x86_64.rpm 8854aa35fa33438e48edfca5eb584c6785a492823c1b5fff7476467baa16c519 kernel-debug-5.14.0-503.14.1.el9_5.x86_64.rpm 991537d82c04b0204c36a8b6b64a92c1205f5dd0eed29da20f6e9ff2031702a4 bpftool-7.4.0-503.14.1.el9_5.x86_64.rpm a30c68cfe88c84a63efda0ae23f6bd18965f1742ce1309a1bc67b63a1d773c3a kernel-modules-extra-5.14.0-503.14.1.el9_5.x86_64.rpm c27576639557104cbd49d2a5b2f10558c334ddd86ef26c6cda3fa0250cc88ba4 kernel-debug-modules-5.14.0-503.14.1.el9_5.x86_64.rpm cb6849510c98b785fa4dcd72f39157a85c4ae8d02cd776e6ebd96f5d01e2fe8f kernel-debug-modules-core-5.14.0-503.14.1.el9_5.x86_64.rpm d0b30448713c99e16305f96ef06bd49ccbaf2a76299a0771220733783db9e4e3 kernel-debug-core-5.14.0-503.14.1.el9_5.x86_64.rpm d2400007304d3474566e71b7fa58e0d26ae6f14464ead1c048d1d83a00a639aa kernel-uki-virt-5.14.0-503.14.1.el9_5.x86_64.rpm f41a072eec3147d06c862b5198da9a44f394a5a8ac13f1562d4b0ce468d1b3f3 kernel-modules-core-5.14.0-503.14.1.el9_5.x86_64.rpm f57e7600ee6ad21f5f9fc5dbbdd8070b3344e02f8bf3219e6d0709e80be12c70 kernel-abi-stablelists-5.14.0-503.14.1.el9_5.noarch.rpm f5b993e316afa8f22855e21014063a32f44ba30be95699e439215645db1b0c30 kernel-core-5.14.0-503.14.1.el9_5.x86_64.rpm fffaebdf4a3464d26f7b17fdfa06a4e5c948cb70c50619d7ce4ae02775948a20 ALSA-2025:0059 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713) * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208) * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252) * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-5.14.0-503.21.1.el9_5.x86_64.rpm 0a7d58b4a83ecbab2c6864ee5e583588ce800bac5b3e70ce4e74a005bb20349a kernel-abi-stablelists-5.14.0-503.21.1.el9_5.noarch.rpm 2737be5a0989ad67b7a52f8f75885e5524d1e5a9c4d6d75cf5a8c8771a21bdcb bpftool-7.4.0-503.21.1.el9_5.x86_64.rpm 4561d238b9ea9ccd9618eae3f1009a2e69120514671caab80088654791eea6fb kernel-debug-uki-virt-5.14.0-503.21.1.el9_5.x86_64.rpm 47a38edd3955a9796763a8acc14ec52274a2c45215d8e1bd2c078374eccd0e74 kernel-tools-libs-5.14.0-503.21.1.el9_5.x86_64.rpm 51e611b44b12c004b8bc022edfee8a6b2386440919d9a636d025fdc58b714b9b python3-perf-5.14.0-503.21.1.el9_5.x86_64.rpm 5555742bb5300998a1696feaa05e50f57dbf38fe1fb35c5655f2ad77d292c7e3 kernel-debug-core-5.14.0-503.21.1.el9_5.x86_64.rpm 5d53c0dd902e92ffbcc03376c2c4a4a49d124fda02c1fca876be4cc84b2b8dbd kernel-debug-modules-extra-5.14.0-503.21.1.el9_5.x86_64.rpm 65d16474fabe648aa0d7281c8f3c1ba389a7c34a5bf533a8ed4d82bd8004cf47 kernel-modules-5.14.0-503.21.1.el9_5.x86_64.rpm 67d4f5f1940de9594d9dfdf4d87c6ebe539c968d5935933536bcc72ca42efe23 kernel-modules-extra-5.14.0-503.21.1.el9_5.x86_64.rpm 6b7a264ef2fdce4ffb2049865a750c92092ab65da89a58329ef1b9072611efb8 kernel-modules-core-5.14.0-503.21.1.el9_5.x86_64.rpm 7ea4ce7511df6eb216404a40c4bf3a9deca957cbbadd96161f93ea44ea7a82dd kernel-core-5.14.0-503.21.1.el9_5.x86_64.rpm 8b82360a57150248197b1ed943fefc2f50880fc21ac9021cbfdb5825429fb08f kernel-uki-virt-5.14.0-503.21.1.el9_5.x86_64.rpm ad94618f9414816ae9e87fe7839e0ca482bd11a4b4494da7577c50e5f4f56cdf kernel-debug-modules-core-5.14.0-503.21.1.el9_5.x86_64.rpm c10d0bfb30309d4d6b8813ac382c1dedf6dd39b9fe04ab6b85e9c20ea5faa9e1 kernel-tools-5.14.0-503.21.1.el9_5.x86_64.rpm c6229d4a1cff2af4bf2e69c60448ef17bcf1da1a4fd09cd67ea68b1edab4e002 kernel-debug-modules-5.14.0-503.21.1.el9_5.x86_64.rpm d28be4f9a89f23781e8c3ab4ee919610df4f64fc18ed8d7c3532a999892e582f kernel-debug-5.14.0-503.21.1.el9_5.x86_64.rpm f5a6ac91dd2f33471d598e809d1e6e85af2fbc5ed0c8a193806ac3c91e18f5dc kernel-uki-virt-addons-5.14.0-503.21.1.el9_5.x86_64.rpm fc70932581eefcf484d2bcd1c90a5d0945c80cc3d02fa66098156ab08283fd71 ALSA-2025:0324 Copyright 2025 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default rsync-3.2.3-20.el9_5.1.x86_64.rpm 3d5bea15d5dfe5be28b25fda7d623d7a8f4571078761369c2eb37cfc7cee0dc9 ALSA-2025:0377 Copyright 2025 AlmaLinux OS 0 1 Moderate

Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security and bug fix(es): * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013) * Route to VPN server not stored in routing table that is specified by ipv4.route-table [almalinux-9.5.z] (JIRA:AlmaLinux-73166) * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167) * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [almalinux-9.5.z] (JIRA:AlmaLinux-64726) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default NetworkManager-wwan-1.48.10-5.el9_5.x86_64.rpm 011f31f6d025a26588d498d2beb0a9b2c22cc67b55b735f54dc5bd6c2d6d12eb NetworkManager-wifi-1.48.10-5.el9_5.x86_64.rpm 08939f9e08148d26df7516dad3c836ab84484def6fc90eca99df211badc5ae29 NetworkManager-team-1.48.10-5.el9_5.x86_64.rpm 2e385f7670757a01af551187712bb536d924ca1caf0e6f28f14d3f68008237d5 NetworkManager-adsl-1.48.10-5.el9_5.x86_64.rpm 569540d5b866a75effeba7f97c0d3e14ea06729d3f6f81895c4cedbf7d395ef9 NetworkManager-bluetooth-1.48.10-5.el9_5.x86_64.rpm 7709d198936617dc7b4740682d513e38723bdf6de1797869206ab485975e540a NetworkManager-libnm-1.48.10-5.el9_5.x86_64.rpm 77f7c9deaf8a1213105aef5a386aefbcf36aafc42a3f9c8a90197015d72169b6 NetworkManager-tui-1.48.10-5.el9_5.x86_64.rpm 925997066062b5bbaec6a85d632b77aafb41be3961bb315524e6dd18314d5472 NetworkManager-libnm-1.48.10-5.el9_5.i686.rpm 9821994a5dfa774a46d2474885ee95026fe85601bd621a02cb639a917a2fc144 NetworkManager-initscripts-updown-1.48.10-5.el9_5.noarch.rpm 9b597d82ae0b0f2e47ede76215cd1df2f8a396ed6c843611cd2ebd8e4736459b NetworkManager-config-server-1.48.10-5.el9_5.noarch.rpm b095d35957b8bcbc61e35337fbc41de09f404df4b2660df88b35367110fb61ac NetworkManager-1.48.10-5.el9_5.x86_64.rpm e0ea16f6f951488d2b1c70769cfaf8aa85992afd11b01fde0f4378e2c96449ae ALSA-2025:0578 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp/dccp: Don&#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154) * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275) * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-debug-modules-core-5.14.0-503.22.1.el9_5.x86_64.rpm 023f63ae1daa018cb1e1d1c6f8e8df27c62a9f88a554f21eb33052eeecb28904 kernel-debug-5.14.0-503.22.1.el9_5.x86_64.rpm 048ecc21fd70b4a8222898a2752c3c9f5d682f9b87b71c5d71a296ccf5d65874 kernel-tools-5.14.0-503.22.1.el9_5.x86_64.rpm 250cfe19c0730ed72f22f06f5ef01f015acf68de68a9b6ae1245d30fdb97f697 kernel-modules-extra-5.14.0-503.22.1.el9_5.x86_64.rpm 2a4e7e822227b859ad6851988b49bfe0884070e1d228313810dc0d9d5bef40d7 kernel-tools-libs-5.14.0-503.22.1.el9_5.x86_64.rpm 4125954ad3ca97133f9e0838c37b0d3bb718d9ff2db1b7676ab34451dd789a31 kernel-modules-5.14.0-503.22.1.el9_5.x86_64.rpm 41378bcdec20cd3d669994a83485a7edb35ef78e8effc6876300a047b6ece841 kernel-abi-stablelists-5.14.0-503.22.1.el9_5.noarch.rpm 5f2061235111c2f40b83e82eae415449b633ff0d4185ee055d042cc56b0f8e53 kernel-uki-virt-5.14.0-503.22.1.el9_5.x86_64.rpm 627e1590c41ae556b1daa9c1712154b452b7e8e85237f4599e573f81dd6d7be4 kernel-debug-modules-extra-5.14.0-503.22.1.el9_5.x86_64.rpm 65f8ab9d07d38d82461fb9bd9154dba349e6ca22f083a1fcae9850d431a39a8e kernel-debug-modules-5.14.0-503.22.1.el9_5.x86_64.rpm 6f5530c22189f5ffd30c233dd919f7ffcdb90ddffe6c3204c9962331646d95c4 kernel-core-5.14.0-503.22.1.el9_5.x86_64.rpm 6fdb87d66f5d625f5036e8f8c6c3c542f524c189601bd7aba6ecc1ef14646204 kernel-debug-uki-virt-5.14.0-503.22.1.el9_5.x86_64.rpm a193b65a06cb1d979676521dbe492853206b158f7d5693484d58d9baea08e55b kernel-debug-core-5.14.0-503.22.1.el9_5.x86_64.rpm a526b68859f663f5ca3056b5b0264d512bd010fa336419c1a8483df194fca555 bpftool-7.4.0-503.22.1.el9_5.x86_64.rpm a9ee997470cb3a6b0df9bc1ca0620ad7e99cdaddb1f1eb592dd0a05ff17cc878 kernel-modules-core-5.14.0-503.22.1.el9_5.x86_64.rpm ba0449a6ec542ae7a5da00aff2232a72124ceebb3e5bd26a3d0f2c9c546c4a80 kernel-uki-virt-addons-5.14.0-503.22.1.el9_5.x86_64.rpm c544e2541fcfcd8000383fcadb4179ada7e98746e98d5506a8e018fe4b1f951d python3-perf-5.14.0-503.22.1.el9_5.x86_64.rpm f51cbf0a221cf9dfed67a1e4769383bd6288b7cdb592d4f94d2d7ee9d8969c78 kernel-5.14.0-503.22.1.el9_5.x86_64.rpm f91b7215366e5ec748298d07bb33c9da4f07652a74a674fd1b0c2a510c51efbf ALSA-2025:0925 Copyright 2025 AlmaLinux OS 0 1 Moderate

bzip2 security update

The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs. Security Fix(es): * bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default bzip2-1.0.8-10.el9_5.x86_64.rpm 0ac64343a97c36a32039fa5481a24ed3d5b316c4758637a478b886911e8bca9e bzip2-libs-1.0.8-10.el9_5.i686.rpm 3af3fd15c5f09a32259e24a43620ea3268ac4b8def77f502aec65343eac9d51d bzip2-libs-1.0.8-10.el9_5.x86_64.rpm 6284777a7e01fe8c2a0734aa207f875a9ba8549283e3be9abc3bee39873c3e6e ALSA-2025:10136 Copyright 2025 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-3.9.21-2.el9_6.1.x86_64.rpm 1fabfc7d6a3f6228e1856386122cfa25acca71d9bf9d405062334ef77395bb8f python3-libs-3.9.21-2.el9_6.1.i686.rpm 2166ce8c1b81d3ef0fb2706bd0ee05cab8d84e8b8654cc1e24c4ed840dee2946 python3-libs-3.9.21-2.el9_6.1.x86_64.rpm ee85b9095dc5b6d86e39ae4327075611510f2bb8979900263393a04690c5834c ALSA-2025:10379 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759) * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887) * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004) * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846) * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-modules-extra-5.14.0-570.25.1.el9_6.x86_64.rpm 06d6cf0a6503eeacde75064d41dc261a97481cdf554b4e321877d5bd1c2a37de kernel-uki-virt-5.14.0-570.25.1.el9_6.x86_64.rpm 108fc3c491243078292e893b3fbca915284c2886ccb7ea8117c20e2702ee4150 kernel-uki-virt-addons-5.14.0-570.25.1.el9_6.x86_64.rpm 50d704aa0c13d3e0e8850ffb1051e39738609c833f83de9dfd170fcd7e3e32b8 kernel-debug-core-5.14.0-570.25.1.el9_6.x86_64.rpm 52f731764ff488b32cec8a0b60a9e878d54115a7e8c3686cb146eac9b99877ee kernel-5.14.0-570.25.1.el9_6.x86_64.rpm 6eb099677735db26b69967a7e49b5b5887911fc83608249f1d8ea81a0ba76cf0 kernel-modules-core-5.14.0-570.25.1.el9_6.x86_64.rpm 7ca0e1d5c3f4c5fff0dbf080495a8e76f5d805b52f0c7734b972dbc05b6f57a9 kernel-modules-5.14.0-570.25.1.el9_6.x86_64.rpm 7ff4a87dc1006900e6c6d2fd0da89dae63d36f53047e05a5e081decfd4f3869f kernel-abi-stablelists-5.14.0-570.25.1.el9_6.noarch.rpm 800362ec04c4149df6f6b7f194a0bca9ebad1fd8d8e88fd70145bd560fca3777 kernel-debug-uki-virt-5.14.0-570.25.1.el9_6.x86_64.rpm 9d5f0989f0ba7bb79af7ada94f30a2c0851c7e6c5f55446ed0ef43b57b2480a5 kernel-modules-extra-5.14.0-570.25.1.el9_6.x86_64.rpm 9f88825d3bda8197e34a9ba39d4a875346bd98be3086502aa536123bcecf02ad kernel-tools-libs-5.14.0-570.25.1.el9_6.x86_64.rpm db27f38f30bc4b94cff09ce2e415de4150c74f0cc4a7cdbf16f440f31d3a39fa kernel-debug-modules-5.14.0-570.25.1.el9_6.x86_64.rpm dcd9d28c6f73582adb02c1ef38bb7950f6a44bfccdad486b9f603064aed90b1d kernel-debug-5.14.0-570.25.1.el9_6.x86_64.rpm ee8a94d685ec753042adc38f57ca535da63bdb0e6691a1315ed0025ca7109f90 kernel-tools-5.14.0-570.25.1.el9_6.x86_64.rpm f05595705997dcab6a790ad2f4038103702caf4e38c8edc25feebee484c9d763 kernel-debug-modules-core-5.14.0-570.25.1.el9_6.x86_64.rpm f4bd2ae48684ff0468a0f9d57bca44a7b666cf0757598d2440a879ac21469902 kernel-core-5.14.0-570.25.1.el9_6.x86_64.rpm fffc7fd6e9cfd2369ca35b7f307beb2f87dae60818133729d3835a594f90eeb4 ALSA-2025:10407 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-setuptools-wheel-53.0.0-13.el9_6.1.noarch.rpm ddbc5c5f7e7fa1292b607f706e4eb9f6953171bf7b805748eaab5b728cfc42c7 python3-setuptools-53.0.0-13.el9_6.1.noarch.rpm f730a591b297e284ee6ef3cc48d0932b8db1cbc7dbb28d96e1374ec80c96fe37 ALSA-2025:10585 Copyright 2025 AlmaLinux OS 0 1 Moderate

jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fix(es): * jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337) * jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default jq-1.6-17.el9_6.2.x86_64.rpm 4ee2d6d9859dd6254ab82332c23fd2764b9385497512af90349edc83fe6e47eb jq-1.6-17.el9_6.2.i686.rpm c3c541c0f1e9462fe03d044bc51d32cb0a5ee7bec288c36b0d15e67d5652e13f ALSA-2025:10699 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794) * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796) * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libxml2-2.9.13-10.el9_6.x86_64.rpm 0701851820895dc30b46ffedaee011e67f31fbd7e4cec584febc1d2269748653 python3-libxml2-2.9.13-10.el9_6.x86_64.rpm 7464456bbfc67a8e4d870933c1cd4ef8a64aa246a2e3dcd6c0b449956076975a libxml2-2.9.13-10.el9_6.i686.rpm b655af0c74b877fb062e6619a3101cb2fda824cdada589281c351d0f09b7199d ALSA-2025:10837 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-5.14.0-570.26.1.el9_6.x86_64.rpm 07244b164136eceb2b51a0496c2969a40f841465ff55549c2c0777c9c47243c5 kernel-modules-5.14.0-570.26.1.el9_6.x86_64.rpm 3023cfc723d31f3bccc0ebc37bcd1ebbd732ad9ebb74ab279e033240752fbfde kernel-debug-uki-virt-5.14.0-570.26.1.el9_6.x86_64.rpm 392c2421c9da983d5a74bf6e3b5f3b0660ce09cc23327cc223d0a5eb1afc7371 kernel-uki-virt-5.14.0-570.26.1.el9_6.x86_64.rpm 3e6dd1cba2211d44cb0d0662c48acd5ba88e9bc3039ae50a6cdfd4e81b63234c kernel-tools-libs-5.14.0-570.26.1.el9_6.x86_64.rpm 40aaef70bca21e716e70825087974b6faeaa2d37e7e41ed8282243a4d3bc5178 kernel-uki-virt-addons-5.14.0-570.26.1.el9_6.x86_64.rpm 494b69d5c4ff023ed0775345ad2dc3c4fd045e6bb2cb1a4d7ce87be681d2dc15 kernel-debug-5.14.0-570.26.1.el9_6.x86_64.rpm 6970dbdad717cc374a79bddeadc58ef72eef5ab88e3e6cbafde6322958618b61 kernel-debug-modules-5.14.0-570.26.1.el9_6.x86_64.rpm 790bf144bb0c819f3b444c3cad24616e11dbcfaad49e3a29ad8a35857a40d42d kernel-modules-extra-5.14.0-570.26.1.el9_6.x86_64.rpm 7b65ddf70ece5182e95c14b971bb17d40f74252f0e05fd432b05be3da9b478ea kernel-debug-core-5.14.0-570.26.1.el9_6.x86_64.rpm 8712ba358a29f0279a020077ee4b4a7c18c5c8242aef2cb722bd22c68cf6a1c4 kernel-modules-core-5.14.0-570.26.1.el9_6.x86_64.rpm a233df13d4320ecea8ca8a2b528188991da840b32362da98cbb82f607bf10e34 kernel-debug-modules-extra-5.14.0-570.26.1.el9_6.x86_64.rpm cc50774f40fed39a561c5f3d40927b006db807a1fcfa13f68d62fd2b670e4a27 kernel-tools-5.14.0-570.26.1.el9_6.x86_64.rpm e2958c5d0cd3be6fe4004836d2f4d5001a619e5f07dfb8da6cea5ed5ded77e2d kernel-core-5.14.0-570.26.1.el9_6.x86_64.rpm f56bdfc584d6662df47826270466805d313abd2f2adc91d2c5251159c2fe9a93 kernel-abi-stablelists-5.14.0-570.26.1.el9_6.noarch.rpm f8c7b5eb7a0efba111fceab3afc67cb1260cb7e779766e381f1da512f31099b5 kernel-debug-modules-core-5.14.0-570.26.1.el9_6.x86_64.rpm fa780b44751c5af40bd52c5d5c8f4a816bd8766a52bb2e93b553315017c8344e ALSA-2025:11140 Copyright 2025 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer overflow in set_connect_msg() (CVE-2024-52533) * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default glib2-2.68.4-16.el9_6.2.i686.rpm 5f02c1e5f16784bac27ee5769529f34aa177a5be4f9354f59ef0efd590fc66d9 glib2-2.68.4-16.el9_6.2.x86_64.rpm ef697fff912d08a272d955ae800d23915a5c8991f992eca02529483246f41354 ALSA-2025:11411 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002) * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-uki-virt-addons-5.14.0-570.28.1.el9_6.x86_64.rpm 18f45f5f42b9d3e29f0d0a20c5576e538ae7efc0f70aea3022c24c600b374503 kernel-modules-extra-5.14.0-570.28.1.el9_6.x86_64.rpm 45c8c8ecb176d24352dbf50cf888b1520d4ce6a79cf27d97ebfb83a465c0fc50 kernel-debug-modules-5.14.0-570.28.1.el9_6.x86_64.rpm 61bc2a7f01d321b2a12f1233c73a4640f17602d24a12d74c682431f04067a9ba kernel-core-5.14.0-570.28.1.el9_6.x86_64.rpm 689c5322a494c8fef30fd9a062e402aef1cceace16d5c387d4e63efe8677ddd3 kernel-modules-5.14.0-570.28.1.el9_6.x86_64.rpm 6c135265e50f97d89746e0d1661cc15f37164d5cfbd786fa2ce952434646d873 kernel-debug-core-5.14.0-570.28.1.el9_6.x86_64.rpm ab66d60eb8424f2d47641b452b7772a531fb7d865af02e743d581d347827e398 kernel-5.14.0-570.28.1.el9_6.x86_64.rpm d76cf3c885c9599bcaeee5014af57f4e74fb23c6fef39423ac7deba3cfeea233 kernel-abi-stablelists-5.14.0-570.28.1.el9_6.noarch.rpm dd0919a5f9407fa4792561e8b7ec2e8b9b10c837915e9d19b32ea131374dba31 kernel-debug-uki-virt-5.14.0-570.28.1.el9_6.x86_64.rpm e491a5a22271edf1a83e8589aba2b0ca2763f4013a4fa8d51c15d8a93d35a7ca kernel-debug-modules-core-5.14.0-570.28.1.el9_6.x86_64.rpm e4f63a9e9cbeb37a4957cc6fab2b090fb756fef7b111e9d0361e584315d377a3 kernel-debug-modules-extra-5.14.0-570.28.1.el9_6.x86_64.rpm e81a85b8f2d50ec41252d55921386f707e67ca32420192e4f72387a29d2bbd09 kernel-tools-libs-5.14.0-570.28.1.el9_6.x86_64.rpm e96978583ef2095abe95f2ce10e1b76c90f8b2e05f3c29f636a5866a6f6172d7 kernel-uki-virt-5.14.0-570.28.1.el9_6.x86_64.rpm ee02a866d403459fdf4f4f1b544ca8dbab8cc8c57ba7b6360a29013d457f9ddd kernel-modules-core-5.14.0-570.28.1.el9_6.x86_64.rpm f1065f4ac97d9a5e59a2639781e72b18abf0eaf39abc63a7f373946ff0bac4a8 kernel-debug-5.14.0-570.28.1.el9_6.x86_64.rpm f3e54156c66b8c02c382cca04a57e8cf6d5605d131e53fff17fe13fedee651af kernel-tools-5.14.0-570.28.1.el9_6.x86_64.rpm fb011cf6a30b93e7195af927f79a7feb67c7cf4f619d1747f4231ac4d5a76a26 ALSA-2025:11861 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905) * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091) * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121) * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113) * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797) * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-core-5.14.0-570.30.1.el9_6.x86_64.rpm 0885f395e8fdb3553b3587ccb2217696e9e93e65d5d98ca8a8960d8118207a59 kernel-uki-virt-addons-5.14.0-570.30.1.el9_6.x86_64.rpm 0d363fb20c86e524aa8b6c0a4366147019507b8e9e8139bd83974a8bbea552b8 kernel-abi-stablelists-5.14.0-570.30.1.el9_6.noarch.rpm 2825a2e3e85f6043be5615196cad176d967e46ded0b861ddfd15ce6a1c3ddb6e kernel-debug-modules-extra-5.14.0-570.30.1.el9_6.x86_64.rpm 2d9969bb65bf9e5627bb06204801d308df9bf480dffa2eb8e977bfae1490594e kernel-modules-5.14.0-570.30.1.el9_6.x86_64.rpm 4f733e84be89745f0a3dd292fa982ec37a40ed1eda5ea49c6eb863ce8d48f326 kernel-debug-modules-5.14.0-570.30.1.el9_6.x86_64.rpm 61769ebd46ee5be13412ea0224d4f4f5b14c50b35b17282e716548862da0ca8e kernel-tools-libs-5.14.0-570.30.1.el9_6.x86_64.rpm 6183f01260e7b74c14f7bb8b3d95ca518bd84380691e2df1f8a0b7c2c515e74b kernel-uki-virt-5.14.0-570.30.1.el9_6.x86_64.rpm 6eadb25d20ee8200fe7d5c636fe0500ee074944b303cabfc2836810365bdd983 kernel-debug-5.14.0-570.30.1.el9_6.x86_64.rpm 797f65e447d7777c8261be11d97770e1c6a65e1f50746cfdb8af6bb20e063508 kernel-core-5.14.0-570.30.1.el9_6.x86_64.rpm 8e0bec5ad8440a4eaf17a11a6792e9f8fe0af87d7ce837665e24bd022f9a3d0c kernel-5.14.0-570.30.1.el9_6.x86_64.rpm be3e8c2242769cf0465ef5ffcb693002485e5a9599545153159d961bd506bd58 kernel-modules-core-5.14.0-570.30.1.el9_6.x86_64.rpm bfd5f70ce34fee26c4c9f5b1fe99071a598cf1075f59dcc59e6c2cfe70deb2fd kernel-debug-modules-core-5.14.0-570.30.1.el9_6.x86_64.rpm cbeffd18317af91bd18994ba1ed9600e5e48c1a48acb1f3f1f8d1cd47aacdcae kernel-debug-uki-virt-5.14.0-570.30.1.el9_6.x86_64.rpm da5fc76c148bec79789df85fe0d545d4e50ea3a1d0823fe46aedc007dfe5ce76 kernel-modules-extra-5.14.0-570.30.1.el9_6.x86_64.rpm e1cb7c4d5c90452b5dad9bf865694fcb6552aed0c44992f292b3b5c32900f754 kernel-tools-5.14.0-570.30.1.el9_6.x86_64.rpm f32472b96d297cb3d2deae8655065bb571fa822abcb48edb02feb96185ffc202 ALSA-2025:11992 Copyright 2025 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: Integer Truncation in SQLite (CVE-2025-6965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default sqlite-libs-3.34.1-8.el9_6.x86_64.rpm 5ea901ff57dc14a498d2a4093af371c5961e7ec79d8b52b4494fed1dbfb561a7 sqlite-libs-3.34.1-8.el9_6.i686.rpm b554ae2e990b78056ce74408806fe80bc3b3c292e999b77244f943bea479f4f5 ALSA-2025:12083 Copyright 2025 AlmaLinux OS 0 1 Moderate

icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. Security Fix(es): * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libicu-67.1-10.el9_6.i686.rpm 6c17a50f5f698a2060975191ce8fef3ec872de7fdcd4874d6ff03a2b988e60b5 libicu-67.1-10.el9_6.x86_64.rpm 6efa992f6387ea01b1f630c1804f09a7f0dd584d6207cb7b2d432cdc5ee74121 ALSA-2025:12447 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libxml2-2.9.13-11.el9_6.i686.rpm 0ad635cff5a61f4c36bfda71b2d801c99576613900ead1475d6a9f05262e30b9 libxml2-2.9.13-11.el9_6.x86_64.rpm 5edb16233d29bade8453d37f7cabbede324b7c4c7c5c354778dd5b1f57ef1ee3 python3-libxml2-2.9.13-11.el9_6.x86_64.rpm a56e9ce07a3c04f8bda5b414a986c59be00d39746121e36559acf2f0f104a815 ALSA-2025:12519 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-requests-2.25.1-10.el9_6.noarch.rpm 80c8d782266664a64b93f1bb080bb9fde6bb859e9a248118e56953dfdb20cc89 ALSA-2025:1262 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-uki-virt-5.14.0-503.23.2.el9_5.x86_64.rpm 009343e7377120ef8f153aaab9244dcb2a5080c5216ec3a659b7172cd24cf4d8 kernel-core-5.14.0-503.23.2.el9_5.x86_64.rpm 0658d8333cc56256ea29ee2f0c7aae522cca61d2b21d9ffcb641ac3be48463ba kernel-debug-modules-5.14.0-503.23.2.el9_5.x86_64.rpm 16b4b75f7d1cf6682e91b602aaaca0992eec3a8498fc62d9ccbb860bf3b2c15a bpftool-7.4.0-503.23.2.el9_5.x86_64.rpm 2842a7b0f7d8e4575dd4c50922c05a6d171a62e193a2066aa21934caa93a7431 kernel-debug-modules-extra-5.14.0-503.23.2.el9_5.x86_64.rpm 2fc6fa015e241a3c1d0d60fe65095c2d0cee9f875e5ca011ab9dfbb88b4e8c86 kernel-tools-libs-5.14.0-503.23.2.el9_5.x86_64.rpm 4a2de5745250ce56d49183dfad513b445c948ea0a789d66cd2b285c9ea8fe111 python3-perf-5.14.0-503.23.2.el9_5.x86_64.rpm 6c4d858d2da6aefae1a130f42d088b980aea762b4bf26b864b6c632b0649c016 kernel-debug-modules-core-5.14.0-503.23.2.el9_5.x86_64.rpm 7808b69ab0571adbe74f37f0f4eee76241ed010ce497090bf65ced4309700a33 kernel-tools-5.14.0-503.23.2.el9_5.x86_64.rpm 87d8f62d18a4c754477aa3c00f7f91258c3a38b1d831becbe64ace76e086e234 kernel-uki-virt-addons-5.14.0-503.23.2.el9_5.x86_64.rpm 8a7070125d1a23ff564a8d7087e902711b14e6520dac70082f26ed4b42222def kernel-debug-uki-virt-5.14.0-503.23.2.el9_5.x86_64.rpm 8ce71fc67b8af26db3bca4a486f9e6ba2fcda8d7fbbb5ddeba7c37c38c91e8a1 kernel-modules-core-5.14.0-503.23.2.el9_5.x86_64.rpm a3f97f61fe02c6b6c60b0dedbc76959e35449d5bc61ae31a28d9571d9914eabf kernel-debug-5.14.0-503.23.2.el9_5.x86_64.rpm a45e718b37b195f703e6fd810d00081550e9fa9e6d9b5e5219117a86d3840b26 kernel-debug-core-5.14.0-503.23.2.el9_5.x86_64.rpm a92413fc8a05df23fde190203d5ca99a7226d85e5fc2ee80b1085e17530d416b kernel-modules-extra-5.14.0-503.23.2.el9_5.x86_64.rpm d673aa6585d20badeeb6f0befe4d119b5eff28bf09ce03531e556f9d91a9286f kernel-modules-5.14.0-503.23.2.el9_5.x86_64.rpm d99262ef21b56884ed2bb731a0e9896639923f33437f8a820efe65c5cd23c86b kernel-5.14.0-503.23.2.el9_5.x86_64.rpm dfee4c921db3c7ce9db40413820de8328b924c3730d1e07a73f78e772b959b9d kernel-abi-stablelists-5.14.0-503.23.2.el9_5.noarch.rpm e32ff75c6a6c28349bb7e2dac9d68e96d83a30e81432b8d501609912cb1dd8fd ALSA-2025:12746 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929) * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962) * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020) * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-modules-5.14.0-570.32.1.el9_6.x86_64.rpm 0bde1f45f446f2c6d8b0ad1d4b139d51b78a6c4e57245d6120662abf6683543e kernel-uki-virt-addons-5.14.0-570.32.1.el9_6.x86_64.rpm 45b53ea8c75e11437d0736711142a66665ef08507e9572c44f5613a1eb300068 kernel-uki-virt-5.14.0-570.32.1.el9_6.x86_64.rpm 5342a02f8bc985470a49431ef3663549ad0cbe3080a3b4ee0f8e0b41b8f7cf01 kernel-debug-modules-extra-5.14.0-570.32.1.el9_6.x86_64.rpm 53f0c40bb4e41525b0353e91b4b415541bd0560af40d608592bdceaf6f7b9b09 kernel-debug-uki-virt-5.14.0-570.32.1.el9_6.x86_64.rpm 5f6f6c53056b2f8a2511418cc6beb39903c511793c30433e0331316dd60e7945 kernel-modules-core-5.14.0-570.32.1.el9_6.x86_64.rpm 7f336bd40daf74d57be2952fde4c97982572eeaa3ab45df760ebc9cf7cf35919 kernel-debug-5.14.0-570.32.1.el9_6.x86_64.rpm 83164c4e0a58157654163a16756d433d36d863cdb02e65e010375afac51df8f5 kernel-core-5.14.0-570.32.1.el9_6.x86_64.rpm 8bc70256aa188ea7ed0dd694c537600d6ed4fda860618b1df89e25bf6ccc0ce6 kernel-5.14.0-570.32.1.el9_6.x86_64.rpm 9141c9640931f8904c289ad0ffd61604cdbea10255937af8de5c55ad56426fdb kernel-debug-core-5.14.0-570.32.1.el9_6.x86_64.rpm 978f31fd5c0bab9338783be304fe945d7305b8226bfe9a2654be7814fdb2112e kernel-tools-5.14.0-570.32.1.el9_6.x86_64.rpm a03aaaac964cd94575765d92d08462d62982cdd9a3ef5d92f0b4027b6b9ced28 kernel-modules-extra-5.14.0-570.32.1.el9_6.x86_64.rpm aaea37b40c7f85b16cb24d0974d0c0cc1ef03e7ca965f24da41dd784d23fe7d0 kernel-modules-5.14.0-570.32.1.el9_6.x86_64.rpm af0d337f993bdbaf100bf15ca3fe1268dd6978d80990644bb934fff5da50a241 kernel-debug-modules-core-5.14.0-570.32.1.el9_6.x86_64.rpm d09a693f1ead0dac3a6a544f3e4901d481eb5fe9cd5889d45ab2c8f16cd9115a kernel-abi-stablelists-5.14.0-570.32.1.el9_6.noarch.rpm f18b56229b2768edc0735443d4b50e4eceba566265d1d6a260ce354b4212e5c6 kernel-tools-libs-5.14.0-570.32.1.el9_6.x86_64.rpm fa595d2e8b5244bfd61b154573971b27e964aba71125eb2c10790f701dd2c9b1 ALSA-2025:1330 Copyright 2025 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default openssl-libs-3.2.2-6.el9_5.1.i686.rpm 1ffc5c8f4b7422e7d92404b1bb26b7125f720e86ec0d88673a35d1832f4ad336 openssl-3.2.2-6.el9_5.1.x86_64.rpm 91e187f6980a2622bff1df16dc1d190a77b628c239c484ea16a12ae7dcb02f78 openssl-libs-3.2.2-6.el9_5.1.x86_64.rpm cf0e0916f0c38b3e75111cbf1ebeddd97f828e02f8c50c378c4463c22b6c0093 ALSA-2025:13428 Copyright 2025 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) * libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-libxml2-2.9.13-12.el9_6.x86_64.rpm 2c6f175806d0e8ed7309e8bd976508427696d2b225d79f1b88c53eb7c75c999d libxml2-2.9.13-12.el9_6.x86_64.rpm ab1e6f37d70577edceeecd50ad4531dcd99d150dcb595be8c774912737a9dc0d libxml2-2.9.13-12.el9_6.i686.rpm d997ff9cc15e74d7d3e55d137ba46cc19e7eff5231dc509a2ab40d54c971e72a ALSA-2025:1346 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default libgomp-11.5.0-5.el9_5.alma.1.i686.rpm 05d9bf01b8d6fec5a215786b771c814dd8a7d22d4e5968ac284170bf29108090 libstdc++-11.5.0-5.el9_5.alma.1.i686.rpm 05fd29569c312a661374aa69e28ed5cad20812822070a3138265c92a446e2c80 libgomp-11.5.0-5.el9_5.alma.1.x86_64.rpm 14b82476407f066c41ee19bfd4cfa3fe97e0495bb25921a0c52f258e18916c1a libgfortran-11.5.0-5.el9_5.alma.1.x86_64.rpm 458633d14c6c7d603b7f96568db480d33c3016844d6957b0e6f4721c71c149e4 libgcc-11.5.0-5.el9_5.alma.1.i686.rpm 4bdb8e2732d38b112f13154c94adba019de8e35b3194cc34756a68a9cf96de4e libgfortran-11.5.0-5.el9_5.alma.1.i686.rpm 5e08641b2a86d6bccbc87ee2178ba938c0005a1dd87c41082acc660f0292b75d libatomic-11.5.0-5.el9_5.alma.1.i686.rpm 779cd216e43ae918a6582c6d97d54655ee572703b9fa3e0a22c4f124fb8469c0 libgcc-11.5.0-5.el9_5.alma.1.x86_64.rpm 7bd3ec130e1712442121b61b27164386006b9bfa6f0fa188316ecb35575a768f libstdc++-11.5.0-5.el9_5.alma.1.x86_64.rpm 7efb1ded0ec2763589dd3bc6a9d52fa9f898cc1f3db6e8761e1d223ce4506424 libatomic-11.5.0-5.el9_5.alma.1.x86_64.rpm 8fa37dab6bb6d444a991a3c02368da11f9bc8e375959f9128b6af42a6c0630cc libquadmath-11.5.0-5.el9_5.alma.1.x86_64.rpm dcb8671b4192a172cf16cf35a1fb331aff8c1e207a29032e812f89c92971c584 libquadmath-11.5.0-5.el9_5.alma.1.i686.rpm dd01361ef2ebdc77c60c9ce30e37b929d52336080569e637c25deda9643f3b1f ALSA-2025:1350 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default python3-libxml2-2.9.13-6.el9_5.1.x86_64.rpm b12ebaf010dbec302f36a650b122235f569ac350dbec7d33016f8615e21b7b3d libxml2-2.9.13-6.el9_5.1.i686.rpm c63e590e10becd27e7ab11949b279067dfdfc34a57b833128d5a59d947aca3e8 libxml2-2.9.13-6.el9_5.1.x86_64.rpm f7995103f5cef884d446f10821b6f2ee2250db56e1fd0757d4e696dba339b546 ALSA-2025:13602 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-modules-extra-5.14.0-570.33.2.el9_6.x86_64.rpm 2cf8a7ca602dc7fb3f198f6c8a2405d6fdb8ef91dac7488aff110b444a32cabb kernel-modules-core-5.14.0-570.33.2.el9_6.x86_64.rpm 34a66b5f7ea62d12e2280920b43e20964a4ba4e1f0a6d74d3ae694856b25dd62 kernel-debug-5.14.0-570.33.2.el9_6.x86_64.rpm 3fe899bdcb340755a10f56404b7a941ca1a0578c1a2587838049d64b8b0838cd kernel-core-5.14.0-570.33.2.el9_6.x86_64.rpm 405a568325cfc6821dadfa468839d1ea1ecc072bf5609d0f8c4890af82f5159b kernel-abi-stablelists-5.14.0-570.33.2.el9_6.noarch.rpm 67f5994d8d8b09e1907e5c29a3be773020852b81eca189ca0d68bf56f0c514af kernel-tools-libs-5.14.0-570.33.2.el9_6.x86_64.rpm 6cde7feaf5af4134d4ad0b7abb371163f16b3214afb3d3e03524f5d2be572547 kernel-debug-uki-virt-5.14.0-570.33.2.el9_6.x86_64.rpm 72d040b0e77db7f2ab1075e5f57abda545fb4e642a2a404113a55568b7e46493 kernel-uki-virt-addons-5.14.0-570.33.2.el9_6.x86_64.rpm 9482efd2b1446ddcaff03c0d787f76f8d85804f7d5d2b4c05670a61e839203ff kernel-tools-5.14.0-570.33.2.el9_6.x86_64.rpm 9801bd2c6b3589db02b2e9015b9286cb7f8dc60a774fb64a5a3c9598b1c8b2af kernel-uki-virt-5.14.0-570.33.2.el9_6.x86_64.rpm c58b2b4deae07cde2d7a4a65ae64d6201b00d64767f08c6524106b3a8d49f311 kernel-modules-extra-5.14.0-570.33.2.el9_6.x86_64.rpm c8e05e2daf5dfc581ef9eab8319b021f0a0bf8c96b11787076adb58249214284 kernel-5.14.0-570.33.2.el9_6.x86_64.rpm df5b0cdfbe5d4e49a2987414757876960fa77766528dbc8ab3bc17441559f8ef kernel-modules-5.14.0-570.33.2.el9_6.x86_64.rpm dff22becc7a59540d7d28a98f9b671a83d1a1596de628cdcac313acfb233a23e kernel-debug-modules-5.14.0-570.33.2.el9_6.x86_64.rpm e72e9b5765897145b0aa9cf187a6084c9d22d6f21d34c761f76ad442afe56f16 kernel-debug-core-5.14.0-570.33.2.el9_6.x86_64.rpm eabc99464d11c66128f46fbf83514a176872f0f0db2ede9a33bdd4a8f6f92b96 kernel-debug-modules-core-5.14.0-570.33.2.el9_6.x86_64.rpm fbe1c543e52d04803cf6e3bccd0022c41eaf3e4d3cefd434839c92aca6699a4a ALSA-2025:13962 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867) * microcode_ctl: From CVEorg collector (CVE-2024-28956) * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084) * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085) * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124) * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159) * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250) * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380) * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-uki-virt-5.14.0-570.35.1.el9_6.x86_64.rpm 01816d5775ac3700e78a89d6053ff56a9c71a91531ceb799388f7db258ce0199 kernel-debug-modules-5.14.0-570.35.1.el9_6.x86_64.rpm 112ba9deab3566edf94f32ea2acd58822f8ad0acdb3dd24be3977709eb223c25 kernel-debug-core-5.14.0-570.35.1.el9_6.x86_64.rpm 14465b5b1bbfe0e9e5b0c918eab92828385de41af9e3c0cd5f72f612fcb3489c kernel-core-5.14.0-570.35.1.el9_6.x86_64.rpm 18587b8252840ed873a3043c01b582afd337578521b025155d35f63578041aef kernel-tools-5.14.0-570.35.1.el9_6.x86_64.rpm 3e2e2dc8b94cfcc20bd70ac887febb562852e3978ec1001263cf6a152a32ca20 kernel-tools-libs-5.14.0-570.35.1.el9_6.x86_64.rpm 404c50ec3af61f3ffb232de3621211b975438cbb31142fc6b801f3b246a30197 kernel-5.14.0-570.35.1.el9_6.x86_64.rpm 7d50cc6842e68464bfed828574efebc1ca03003b5c74984b6125eac8cb011737 kernel-uki-virt-addons-5.14.0-570.35.1.el9_6.x86_64.rpm 7ec2775f2d654be28769675ec057bda86fec5fcc9b9292122aef5ba876f917e0 kernel-debug-modules-core-5.14.0-570.35.1.el9_6.x86_64.rpm 9838fac6b3a68090e9b5876a5abe17397bb379a4d2fa8f3252acf87b2b9ed829 kernel-modules-core-5.14.0-570.35.1.el9_6.x86_64.rpm 99164713b18d211222c4b001b4e60e6a01c6ee6bf2a886e5597ee08d0d655a53 kernel-modules-extra-5.14.0-570.35.1.el9_6.x86_64.rpm aae03110367e668f60eff2576f417da6ec366b69d594473cfe9c4da6fb18cc6f kernel-abi-stablelists-5.14.0-570.35.1.el9_6.noarch.rpm b54e44fd9b85a7cce2614d7622802a1665b0168e194c7b1b6c289f79cb69dea3 kernel-uki-virt-5.14.0-570.35.1.el9_6.x86_64.rpm b5746201fd668a60f96d2d42ca06384e77fcf1bed1593b06bdd998fedb2a7b9e kernel-modules-5.14.0-570.35.1.el9_6.x86_64.rpm d60232d29d70faf54cec0426016e0afd6ed3e31a03a4ca27f0c31930bad36e18 kernel-debug-5.14.0-570.35.1.el9_6.x86_64.rpm edd3b3385a302b53d076d1f991c302902446d31eae0720a3a1a037d77f938572 kernel-debug-modules-extra-5.14.0-570.35.1.el9_6.x86_64.rpm f9be9d4b6b48f60c991cee01ac8d4a4e2e074b38cd7eff5127adec73dea3500a ALSA-2025:14130 Copyright 2025 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libarchive-3.5.3-6.el9_6.x86_64.rpm 26a94a1e2983ec109271466380fe4e307dbd97023ca0225961fd40ac2ef030ad libarchive-3.5.3-6.el9_6.i686.rpm e94cf2e63e7b7a9f3e2396ceeb5b886b13e8f215b9bf224a9981fd766249c038 ALSA-2025:14420 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914) * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-core-5.14.0-570.37.1.el9_6.x86_64.rpm 0375f5390db97eb0b1b6ca309f040789954d45403c7b268939aed0676fcf7c0e kernel-uki-virt-addons-5.14.0-570.37.1.el9_6.x86_64.rpm 1b78ae0b2baac6f5e5ed07c16bd81b999874bec42cd1b083f99c821f4aa148fe kernel-modules-extra-5.14.0-570.37.1.el9_6.x86_64.rpm 28c075d7552fd47db2206de62cc943349c568ffe4a3e37c52853e75d3b2d883d kernel-debug-uki-virt-5.14.0-570.37.1.el9_6.x86_64.rpm 2bad7989467a0adc65ab7d345dac11ad6f07f06251cef3ab5e7778795e88515d kernel-tools-libs-5.14.0-570.37.1.el9_6.x86_64.rpm 362aaf2cf70cfbcd61833ddc3b65b48dd1e58f8bd8db2a58edc415356eb72218 kernel-uki-virt-5.14.0-570.37.1.el9_6.x86_64.rpm 3982a51ea7fdfd5a81b6240244dab58dc2f0ce790f4179e5ca56b655752b6d9d kernel-debug-modules-5.14.0-570.37.1.el9_6.x86_64.rpm 46a3ffba2f6897349e5962bcd551bb3865736e1eedbd6abf7d5336fcf1177333 kernel-modules-5.14.0-570.37.1.el9_6.x86_64.rpm 63dc4e2316e8746efab990638636f66570138130479243d8a6ca6d92604f0d00 kernel-modules-core-5.14.0-570.37.1.el9_6.x86_64.rpm 836e4bee96e998ab3f2cecaf909523154bf448fdf52c36a09f4bae1de39ea0f8 kernel-5.14.0-570.37.1.el9_6.x86_64.rpm acdf693916151dec58ac8dfaa887f00a2a2425fa77c4997a922006b4dfe22b3d kernel-debug-5.14.0-570.37.1.el9_6.x86_64.rpm b04d46b1e10bf9887cbfeb7c02eb77ad2cddd71f0277776428ac9019d210a282 kernel-core-5.14.0-570.37.1.el9_6.x86_64.rpm d2bf08be626627aefa8cffa7132854a1b4fc86ee86944ca9b37162d4b10d9582 kernel-tools-5.14.0-570.37.1.el9_6.x86_64.rpm d8fd05d83a19140aad0babae3b4b96d731dde7f374d0080d7160d15feeb3b5bd kernel-debug-modules-core-5.14.0-570.37.1.el9_6.x86_64.rpm ddcc28348897e4f934cefa48de53dea92f71cbc79a6f209627ec52c886108cda kernel-abi-stablelists-5.14.0-570.37.1.el9_6.noarch.rpm f7c6cf0f17070dcfa22b13cc564f504b5414f0d3c5a4ff064602971ab4509dda kernel-debug-modules-extra-5.14.0-570.37.1.el9_6.x86_64.rpm ff5d5c4db0f58de1dfe65da2d72a6719538b00c97bc13da4a7c0f56b5b0ad993 ALSA-2025:15011 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200) * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-tools-libs-5.14.0-570.39.1.el9_6.x86_64.rpm 003f35c3d7cf660173a40991d755289a49c4ec2975ac0d6753b0b7e2908b9bca kernel-debug-modules-extra-5.14.0-570.39.1.el9_6.x86_64.rpm 075625b14759b12b1e1d6d6259eb8cc78274f628247c0ec5e41b203823e8a5f5 kernel-modules-5.14.0-570.39.1.el9_6.x86_64.rpm 1d7673f5d66ddd3daec5040ad58d2a8b56242a504bd69d0728fb7cbb22acd019 kernel-core-5.14.0-570.39.1.el9_6.x86_64.rpm 39cce2dfec77b752cd51701f49f1a0087be9ac7587c0f1b8db4c0c2f1ea4d798 kernel-debug-modules-core-5.14.0-570.39.1.el9_6.x86_64.rpm 64392d96128ed02ee4eedfc1b425178e7dc76f62098fbe29d5741a3404981f9c kernel-debug-modules-5.14.0-570.39.1.el9_6.x86_64.rpm 6f407c5f6845971b27b98f3b4c6e88100dea5c4c5880476232859b7649d0d65e kernel-modules-core-5.14.0-570.39.1.el9_6.x86_64.rpm 84c13637b6216bbc4d464b8ceb77bb02bdca9434d91538be73297d80d5c34fea kernel-modules-extra-5.14.0-570.39.1.el9_6.x86_64.rpm a205dd78d20b694da01f92511908122b65b0f7ef81f25037c4be8f012684b484 kernel-tools-5.14.0-570.39.1.el9_6.x86_64.rpm ab84c1a71cd297841f24bf974bfd22aac30004745d28590e075ffb951d07c56d kernel-uki-virt-5.14.0-570.39.1.el9_6.x86_64.rpm b641650a2fa66209df7ed02b88aa4abbff646739e983aececb4045197f68dfb5 kernel-debug-5.14.0-570.39.1.el9_6.x86_64.rpm bbf6b5869054f4e47fa481cd867cdb4db95bbde3167a8b306b376585d893c836 kernel-abi-stablelists-5.14.0-570.39.1.el9_6.noarch.rpm c58a5ab73d97b8c597460175dde4bb8966150c3d5516d1ae7dc26a2183d0081a kernel-uki-virt-addons-5.14.0-570.39.1.el9_6.x86_64.rpm f09828a0d61f883995f0e22854088c1cb10e670fd8dab87221bea90f122f0c53 kernel-debug-uki-virt-5.14.0-570.39.1.el9_6.x86_64.rpm f1dee8d0a178c7e96c45b4b341b8947368969970dd456e96343ef732f9ffaf63 kernel-debug-core-5.14.0-570.39.1.el9_6.x86_64.rpm f71e6ca38f05748671e6afbaf082fbd7ff2c53ec312e14df5888c369c9ccf885 kernel-5.14.0-570.39.1.el9_6.x86_64.rpm fe14f98f5a36440227d1633dad7407a973405ca1247a65db21ea9e507af99cb1 ALSA-2025:15019 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-3.9.21-2.el9_6.2.x86_64.rpm 0958cae3ce479885fe38088655724729db6fad246b82137aabe830170fa285fd python3-libs-3.9.21-2.el9_6.2.i686.rpm 53220324c157acaa46009f6dca9deb8bd6a7548bea1d053ddbabec532e0c1263 python3-libs-3.9.21-2.el9_6.2.x86_64.rpm 5eb0a1098559a8c14483e02b536911fe0fded01bd66d5c5c95be31d187725f2a ALSA-2025:15099 Copyright 2025 AlmaLinux OS 0 1 Important

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default pam-1.5.1-26.el9_6.x86_64.rpm 132e962e69c73eb79668332a588e223a6c74fabe4a9486f1f8d95534c0d639c8 pam-1.5.1-26.el9_6.i686.rpm 169521396fdb167c769cf8e5231017c6cdae6d794e1837bd603ec53ca0de27bd ALSA-2025:15429 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803) * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-5.14.0-570.41.1.el9_6.x86_64.rpm 115748c790ec1847c491aa7f752e578cc19af4e8dd426938a62a5dd75abfe502 kernel-modules-5.14.0-570.41.1.el9_6.x86_64.rpm 23198072fb44bea4a036ad908724928e3cc18b60020b0a741505ee9e31d3192c kernel-abi-stablelists-5.14.0-570.41.1.el9_6.noarch.rpm 58aceec38c043d7e7140a8917fa2e274ce00b713f1f01af2a939a37f7c42467f kernel-debug-core-5.14.0-570.41.1.el9_6.x86_64.rpm 5f828b618f1003e510433772453f063fdc15f15cc0be36584c42cea6c4325e5b kernel-debug-modules-extra-5.14.0-570.41.1.el9_6.x86_64.rpm 6b152e015f5e71c3238659fc2af28757a4eb83baa3dfa09d18b7c4eb0d92acde kernel-debug-uki-virt-5.14.0-570.41.1.el9_6.x86_64.rpm 6dad01c5ea4814f046498a6313dece13c5dcbee12e09d892ef558069d8842681 kernel-uki-virt-5.14.0-570.41.1.el9_6.x86_64.rpm 74fa56b371d2dc5aecfc233ee7e009500d24bd77a363fff5422ef3e7d2fd5a2c kernel-modules-core-5.14.0-570.41.1.el9_6.x86_64.rpm 79d2a0dad5ff2089e621c377f9d09c927a3870f511d280a01d5339424dc1caa7 kernel-uki-virt-addons-5.14.0-570.41.1.el9_6.x86_64.rpm 7a6ff616ad39d27504d0fbfcb78f08e63f46a85f1c6c48cac5e6e07c05d3d4a6 kernel-tools-5.14.0-570.41.1.el9_6.x86_64.rpm a2031e98a54239945d03512b0ec9f744b4afd1a9f8c201b8d7001741f5778035 kernel-core-5.14.0-570.41.1.el9_6.x86_64.rpm a3459c28bdcee5f300b0acd48fe54881afa53b9d39967be376d1a1f104d24106 kernel-debug-modules-core-5.14.0-570.41.1.el9_6.x86_64.rpm aac93e335da4c653fdd811938cfcf16c1159e9e7a379899f201971c934cdc080 kernel-modules-extra-5.14.0-570.41.1.el9_6.x86_64.rpm b5e98c5e229fdb735232fff1a42c6e30492c1de66c223cb6ceb4c9e867e6469e kernel-tools-libs-5.14.0-570.41.1.el9_6.x86_64.rpm d3d23ec0185054b6220497abd63b9ca5f493cf900718813d1902c3926abc1e51 kernel-debug-5.14.0-570.41.1.el9_6.x86_64.rpm d5a7c7edeabc81a942e98405c488f4c74c4f3eed44a2ecf562ebd5dd7b8790df kernel-debug-modules-5.14.0-570.41.1.el9_6.x86_64.rpm d7353dabe142afa42851d7bb4bb811c6b4ba0ebf484bed9aa9955302ff1fa29f ALSA-2025:15661 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097) * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-modules-core-5.14.0-570.42.2.el9_6.x86_64.rpm 3a7045f2bb8e461ffe27969be62abf1056fe8787a4701ad831b9ad15e3e64bd8 kernel-debug-core-5.14.0-570.42.2.el9_6.x86_64.rpm 45f0ed2d496e93cf89afe3db5cbd095982769c88e3370408371a735a72d3c545 kernel-uki-virt-5.14.0-570.42.2.el9_6.x86_64.rpm 46198acd8d85f5bb7eb966b61b84304342309ab2581d7fa5cd2e0cf1df7125b4 kernel-uki-virt-addons-5.14.0-570.42.2.el9_6.x86_64.rpm 4686afa905abe146c92f1bb6adabd13befcf807d02cb3366f3c429368ae8e160 kernel-debug-modules-core-5.14.0-570.42.2.el9_6.x86_64.rpm 55001765aa5f2463cd5b2d521335f56cc56e852774a79d99c0d9f33217a9b00f kernel-debug-modules-extra-5.14.0-570.42.2.el9_6.x86_64.rpm 81d59f9323478709f09837c3040323e64284c7f2da0f37ea32a5f1ec67fceb61 kernel-debug-uki-virt-5.14.0-570.42.2.el9_6.x86_64.rpm 83be5773a427280c8df8cc660d2e581bb2f3209812b8e148e393fd94fcd47b87 kernel-debug-5.14.0-570.42.2.el9_6.x86_64.rpm 8b1ea8f9caf1024648441de0fe3f1f080b948e0edf6ddff306c992e57f28ba12 kernel-modules-extra-5.14.0-570.42.2.el9_6.x86_64.rpm 9ace7e7084d073a8e0f74620dc4642d8302522222ca9e0923eb3e5aae6cef679 kernel-tools-libs-5.14.0-570.42.2.el9_6.x86_64.rpm 9b4c00e07ee0d41f91b90c01bae17c3365149497f27a0ac6fe9edfa34c2d1c1d kernel-5.14.0-570.42.2.el9_6.x86_64.rpm a32f5b04c5404af87c2f6dd44d14d863c4cd700c1557a23d13684ce79df1e813 kernel-modules-5.14.0-570.42.2.el9_6.x86_64.rpm c1a7aae270966973b105aa41fc0a21fa961a61c748d74982705fdd3faecfa47d kernel-core-5.14.0-570.42.2.el9_6.x86_64.rpm e9ba81a3123395923783da9eec5e0608150514c473623c28fae072b446d45873 kernel-debug-modules-5.14.0-570.42.2.el9_6.x86_64.rpm ed23da2a15855c1899aa01960310b58848cdf21d800b7edd5fafb05ef189aee9 kernel-tools-5.14.0-570.42.2.el9_6.x86_64.rpm edf17f9a621f710a550347e551235c01b7db349515af6ea492924fdff319ab70 kernel-abi-stablelists-5.14.0-570.42.2.el9_6.noarch.rpm f629d5e7e913ceecfbff3999ba851fb127f69bfe72acf0e1e45accaf94cfebbd ALSA-2025:15700 Copyright 2025 AlmaLinux OS 0 1 Important

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS (CVE-2025-58364) * cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default cups-libs-2.3.3op2-33.el9_6.1.x86_64.rpm 4cfc7673e7915fdbfbd4b54fee4f3c6d0b9add221a201c40915ca46d8ebbba11 cups-libs-2.3.3op2-33.el9_6.1.i686.rpm df3d2a20b846701b6dd3266a8fe430e2dc3bfb7acb1c9f210c6aed458cb529bc ALSA-2025:15740 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CVE-2025-38550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-uki-virt-addons-5.14.0-570.44.1.el9_6.x86_64.rpm 0d200850f2af50df816c97825a9b3dfd559a317083778fa96e8a9628589318cf kernel-debug-modules-core-5.14.0-570.44.1.el9_6.x86_64.rpm 0d37fc595387157fffc86eab14aca4301ffb04bb1a3e97fa86e50775418250fb kernel-debug-modules-5.14.0-570.44.1.el9_6.x86_64.rpm 2761895ba5d0b57a8ac9275756c50a4a9e2569dd5e890b4a1858c4f1e6828d97 kernel-abi-stablelists-5.14.0-570.44.1.el9_6.noarch.rpm 42e0eb00647169d924025077fc44307aa3257997c3aaa7123fb1911d424d2284 kernel-uki-virt-5.14.0-570.44.1.el9_6.x86_64.rpm 430dd4645b68ee9a556186cebc1ab51cefc378571b69d0ac469f22199534ee88 kernel-modules-extra-5.14.0-570.44.1.el9_6.x86_64.rpm 66104a50a9cb541dbd4507db3d8b5624a2aac5447c2322d69c0c7cd4f4d8880b kernel-tools-5.14.0-570.44.1.el9_6.x86_64.rpm 68ff6062d09ad5b1de2a1569f25acd2076f38c39e9066548b82a7808a80637d2 kernel-debug-modules-extra-5.14.0-570.44.1.el9_6.x86_64.rpm 78ceb0113b680d39ea51f85fc490af8cfce9ea82a8af50553962d1e3d69216bb kernel-5.14.0-570.44.1.el9_6.x86_64.rpm 8583f53e6e9ced0d2847c7ed45bf346e545a76141fccd1c0305bc3989fd0fbf4 kernel-modules-5.14.0-570.44.1.el9_6.x86_64.rpm 9587fe45762470e9c0801de6fac20cc936d278bb9773c64973fb171d97afec50 kernel-tools-libs-5.14.0-570.44.1.el9_6.x86_64.rpm a746dbec9d0abc1116b7345487a4eeefcfc16a51e91e158e79aa2c9da326a162 kernel-debug-5.14.0-570.44.1.el9_6.x86_64.rpm b09bdea931f9fea35a95478cacd6663b12a27bc09ded5efaca4618aac10fce8c kernel-modules-core-5.14.0-570.44.1.el9_6.x86_64.rpm ceafc0d65849b26a7e7276bd3d3118ed526ee10cf80e1ad918b55d270d3b41ef kernel-core-5.14.0-570.44.1.el9_6.x86_64.rpm e4f269507619318bdbeabed920b5c3b5d4f860287400a496884f4adb9cd3a5f2 kernel-debug-core-5.14.0-570.44.1.el9_6.x86_64.rpm efc03a271dec5efe566d5d537827a212c226ce9eb75fb12b62f8b4d788c29ee3 kernel-debug-uki-virt-5.14.0-570.44.1.el9_6.x86_64.rpm fcfb0f1aa6b5966a6b2162d674dd5a7a62e4c8d023510057f344f368886a11fd ALSA-2025:15874 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-cryptography-36.0.1-5.el9_6.x86_64.rpm 4dd4a26ef25dccc1330712ec750c3eefcf94b4efc39008589555eedd513b7699 ALSA-2025:16116 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnutls security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989) * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395) Bug Fix(es) and Enhancement(s): * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620) * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621) * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default gnutls-3.8.3-6.el9_6.2.x86_64.rpm e43afba5f9918c4e4020d1e1f3c6c76541f9b08354d8dfa9c0f4db4a93014890 gnutls-3.8.3-6.el9_6.2.i686.rpm eab218d1ae661b6e6ce83bc2156714c9481aebd833934de6baa34ed2d6fc7714 ALSA-2025:16398 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125) * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810) * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498) * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-core-5.14.0-570.46.1.el9_6.x86_64.rpm 02784dd69f59967ed89ee3b3570d5477dac5955895fa83d1dbbe07ea3e5f8bd0 kernel-debug-uki-virt-5.14.0-570.46.1.el9_6.x86_64.rpm 07ae8895c3d5ab32dae46a6d61f114a4265f11187114046d4773466730f815de kernel-modules-core-5.14.0-570.46.1.el9_6.x86_64.rpm 3cc83afc53d980941f6b56371cf6d32b5084a55679bb19d467497f3041b790bd kernel-tools-libs-5.14.0-570.46.1.el9_6.x86_64.rpm 5af929d872cba144d1927d90a275109a59d97ce706e3a385cfd694cd321296a2 kernel-5.14.0-570.46.1.el9_6.x86_64.rpm 756f99354266901883eecca7d7e9eb45950810ad5453d9f551eab100e2cb9b81 kernel-debug-5.14.0-570.46.1.el9_6.x86_64.rpm 76d97c2e3a22a26b9967d584aa8925896d4d1418f1257cacbd13862e71d4f94e kernel-uki-virt-addons-5.14.0-570.46.1.el9_6.x86_64.rpm 7e3fb4d8402414c0bb6a399b2c53ec629e772a26a5ba5f928b924aaaf188fb41 kernel-debug-modules-core-5.14.0-570.46.1.el9_6.x86_64.rpm 7e7a0b8eba1ad6d8f694163ef826892c95f378f024e0858440c1f972416a236f kernel-debug-modules-5.14.0-570.46.1.el9_6.x86_64.rpm 81f706e925e5212a5b6dfae4a6fa02b6e6713c29581f75ae93f304542341b225 kernel-tools-5.14.0-570.46.1.el9_6.x86_64.rpm a3443b8bb69fc4772e7f2d469cdbd75c86ea5e9aa372c58271e4f1f856f2a3db kernel-debug-modules-extra-5.14.0-570.46.1.el9_6.x86_64.rpm aa06ae1c89b35d4a12a1ce40194dfc3db6ac969a609fb7792ee8ffdc4a5ba041 kernel-abi-stablelists-5.14.0-570.46.1.el9_6.noarch.rpm b7c9324e4ddade47a730801c23eb442812253922fc6f04faf529c12a0069835a kernel-modules-5.14.0-570.46.1.el9_6.x86_64.rpm bd487ce5e71bfd036767767cac8986d6749a9eeb178f5367f76d6753f358be62 kernel-debug-core-5.14.0-570.46.1.el9_6.x86_64.rpm c2af62b2cb5213c539800ba7c3fe5fe96928cbbf9c312e715c4e989a832a4fa7 kernel-modules-extra-5.14.0-570.46.1.el9_6.x86_64.rpm cbcbc494c02e227613cfbdaab2f187e90ba4f387420325f260b7e8a65e5b5256 kernel-uki-virt-5.14.0-570.46.1.el9_6.x86_64.rpm e449ecc3bf91d34423a29e5472225c760807736b5982412d2a0ecc658efc26d7 ALSA-2025:1659 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default python3-perf-5.14.0-503.26.1.el9_5.x86_64.rpm 011851286b4a61d8932e27d4f017ac5ac5fb21fc03d65d60483b9bc95ec611e7 kernel-uki-virt-addons-5.14.0-503.26.1.el9_5.x86_64.rpm 050f19fa188c84d3358f96515ecb33fba59698c3f035b6353cd73b34140f90a8 kernel-core-5.14.0-503.26.1.el9_5.x86_64.rpm 12b70f6cf4c1b3cad655346dd09fa6530f280474e716ca6f801b019abaa21406 kernel-abi-stablelists-5.14.0-503.26.1.el9_5.noarch.rpm 198b166df62201e35ff2a8c8d1a5ca267231adc1dd0e11874d380b9ab0c2919c bpftool-7.4.0-503.26.1.el9_5.x86_64.rpm 1d9365649ccf6a596dfda8b96c2ab744679942e38731344ac6c1a6edd08ab892 kernel-debug-5.14.0-503.26.1.el9_5.x86_64.rpm 3a3521d9065c726a0318f1c2685bd361803efe79ce099c89f333cbc9975fc33e kernel-tools-5.14.0-503.26.1.el9_5.x86_64.rpm 4248aa25599228541792e6269f316939e2988c7997690af38537f9f308ceab2e kernel-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm 50e46516987231b5ae81c7552dff20369e6274fcc59acc741ecf467f88b5fb54 kernel-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm 57b3e06e52f02cdcd8fd39d05f020f873448b93b2e83314318062475171ee209 kernel-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpm 8603f908ad99f7df040d26347cd3c3b339adf420b896910cf46a3e48b809c157 kernel-tools-libs-5.14.0-503.26.1.el9_5.x86_64.rpm a71aec38e64f345a25195757a8f902ae66ab0a6e4c3c112b2c912e25f815f51d kernel-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm a72f302e6ee5651325740feb2d2763eea867172bb38ddebe7e5df4963e64964f kernel-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm ab7dba11cdcc341f7f499a11ca3c7b0485a72e0d964052ca777044fe5cb0fa1b kernel-debug-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm c66bd82651da20dce9c8d88f2b58fbaeeb187cafdcfc4db08edd5fbd57074ff7 kernel-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpm ce82e65be5a5266eb99b95f2907e4e6f0627271d011466d85b11334246c8d5f8 kernel-5.14.0-503.26.1.el9_5.x86_64.rpm dffb42907e280a4f8f27e1c4448c0c18648a664289a08989901b8e86542b3018 kernel-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm e2f43fe8dd4865c828c2bc95cce4cb06d0e9791900f4e53a88df9ad53b4bda49 kernel-modules-5.14.0-503.26.1.el9_5.x86_64.rpm ebeb532b207c619a7a47b12ceb9a38c66abcea99938a3b1e9f0e5e4d9d7a43d1 ALSA-2025:16880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-abi-stablelists-5.14.0-570.49.1.el9_6.noarch.rpm 032d14ef53f9d9ad33cbfd3cc3aa9b62b44f076dd084a8bed6e2b003bc5a078b kernel-modules-core-5.14.0-570.49.1.el9_6.x86_64.rpm 157f5eeaca5e3074b545a4cc267edbc9263b88ab1a9c12740ec947439929422d kernel-uki-virt-5.14.0-570.49.1.el9_6.x86_64.rpm 1d21849e1a120155fd197d6fd8b21acf6b67100893180da0bb950f09c053b11b kernel-uki-virt-addons-5.14.0-570.49.1.el9_6.x86_64.rpm 2a95eecb8bda49f9785a65cebd86fea38f408036017057156200935bfaaa4214 kernel-debug-uki-virt-5.14.0-570.49.1.el9_6.x86_64.rpm 2e3a9cc57bbc3b0de254eca5ece3aaa60b4c2c95078e9b267ed4ff721ff5e5ea kernel-tools-5.14.0-570.49.1.el9_6.x86_64.rpm 3124c64f81daac6ae17579e3a82adf8053f51a75949a970d6e732c8deea8b682 kernel-tools-libs-5.14.0-570.49.1.el9_6.x86_64.rpm 3258ef472ced2dfacabe216facb141ca7e6a2d32e41bee379c577ea2444d03cd kernel-modules-extra-5.14.0-570.49.1.el9_6.x86_64.rpm 4d043044e9845c92a3acb8ba3c92888fb47fa1928dfc5223c380b3f29d9e2adc kernel-5.14.0-570.49.1.el9_6.x86_64.rpm 9d530c8260e412e9a969e8a5aa7aeb8792fea5441e0a361de20371a04b2c6262 kernel-modules-5.14.0-570.49.1.el9_6.x86_64.rpm 9ec02f3e907fab48d73ecc57bddb6ce9c3b477dd0116308886d3afc3f0b9efb4 kernel-debug-5.14.0-570.49.1.el9_6.x86_64.rpm b55eb7d8ee638ab63da901f1d7f5a4ed6c073d57d3d01c6b3f143adcd57f7bc8 kernel-core-5.14.0-570.49.1.el9_6.x86_64.rpm bc3e42006daafdef2c7510c8ab76c95af8e3d80ffe24a651f57c69e0421838f1 kernel-debug-modules-5.14.0-570.49.1.el9_6.x86_64.rpm c777e5f03c630cb092cc9edf45d74df18d787b31dd817335c5e0e29daf6751e0 kernel-debug-modules-core-5.14.0-570.49.1.el9_6.x86_64.rpm dfbb059420895ca7a8b87a71297edcf8db8fd933778dc0a13627b357e7463c02 kernel-debug-core-5.14.0-570.49.1.el9_6.x86_64.rpm e064c8c7e2084b0282914f0d3571f813bfe80230cf36d6c64480211b73e939f2 kernel-debug-modules-extra-5.14.0-570.49.1.el9_6.x86_64.rpm f197d7a8f72f2ce19063042e3f08796915f35758970b52bf113d71d70adbe6c5 ALSA-2025:17377 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351) * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-tools-libs-5.14.0-570.51.1.el9_6.x86_64.rpm 047856e3643b70ecf3469b48ee623a0edcfab16f57afb39d878aed76ac26dc7a kernel-uki-virt-addons-5.14.0-570.51.1.el9_6.x86_64.rpm 09bf1ff98d0412ddfaaf5e79e0cdd58890a6065bbcf2db0774e3ab425baec78c kernel-debug-uki-virt-5.14.0-570.51.1.el9_6.x86_64.rpm 0acd02c786c20fe4572010aef2901350f2766a941c1071e255516a4857775620 kernel-tools-5.14.0-570.51.1.el9_6.x86_64.rpm 1a43f1f385512395a2a8430335bf7a939a2774c666c118d60792fc91f508f0b7 kernel-debug-core-5.14.0-570.51.1.el9_6.x86_64.rpm 1bfb90d9d2f9efa4775118e21521b1c011ebf5f984376508155cb8c74c382252 kernel-debug-5.14.0-570.51.1.el9_6.x86_64.rpm 1ee19108170494a3105785adb88b722b9a82f7364a32abb2453c4df5dac31f31 kernel-uki-virt-5.14.0-570.51.1.el9_6.x86_64.rpm 6444cb63ed2d083b2fa8b2f8971e5855244b390644a066492301155165e4c3b4 kernel-modules-extra-5.14.0-570.51.1.el9_6.x86_64.rpm 98e69aa0afe992efec870b217e380975e55965b90f624d056d83c1e530f4ff25 kernel-debug-modules-extra-5.14.0-570.51.1.el9_6.x86_64.rpm 9cf88bcf633aed8a1da8b7946797c3d071445ce7c14c9ca73545593bb53ac570 kernel-modules-core-5.14.0-570.51.1.el9_6.x86_64.rpm b3a950022d4161fdb16e16e24fe052edf68eda23fd0c60461356cc07fead1c43 kernel-modules-5.14.0-570.51.1.el9_6.x86_64.rpm b9f329b328412206d37534eb149ae905b329afdb10a14bfc80ca32c812e2cb93 kernel-debug-modules-core-5.14.0-570.51.1.el9_6.x86_64.rpm ba3c8f5c77ded8c55af4f99717cf9709d7ca1a1724485ee18cca1e381e4882f2 kernel-debug-modules-5.14.0-570.51.1.el9_6.x86_64.rpm d027bf9db5f1c8652b070e21bc32d729092b14f1f98fe322d78be588fa8bd9b4 kernel-core-5.14.0-570.51.1.el9_6.x86_64.rpm d17f3075bc587f6f476047e44fa72d641ec171392f2d83f2734b6c31cbc801c9 kernel-5.14.0-570.51.1.el9_6.x86_64.rpm e18119d235143b0873fba1e0339ed4b63315a43a48d20625a026f5ab39832a21 kernel-abi-stablelists-5.14.0-570.51.1.el9_6.noarch.rpm ec740e3e4ef8fb9403dff07c21e3deb82aa4be2d681b7c4927d546167a09a302 ALSA-2025:17558 Copyright 2025 AlmaLinux OS 0 1 Moderate

iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: iputils integer overflow (CVE-2025-48964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default iputils-20210202-11.el9_6.3.x86_64.rpm fe2aa4b69051ca6ac9c7b3197db33c8eb581043ead09e827d6d13f8ffab16be0 ALSA-2025:17742 Copyright 2025 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default vim-minimal-8.2.2637-22.el9_6.1.x86_64.rpm 2378e816a3fa68d295f41124406039b9c3b146464f3d7d78e066e6549fb53a5a vim-filesystem-8.2.2637-22.el9_6.1.noarch.rpm 6b729898b51fd8c517a86254b3055b02e253adb7af04b790d8303e57b40c856b ALSA-2025:17760 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-5.14.0-570.52.1.el9_6.x86_64.rpm 0e47231e19aacfb3a2ae3a349b694d3c817003d85ee2f54ed1cfa767d9c71b46 kernel-tools-libs-5.14.0-570.52.1.el9_6.x86_64.rpm 2776094bc462e24f551b0ec4a6f38c794dbb5ad6df3530e6740daae63095a8c6 kernel-tools-5.14.0-570.52.1.el9_6.x86_64.rpm 3adf738590ff1a25c542bd4eb4b8b569dd136b574ad446093d73dd887c0095b5 kernel-debug-5.14.0-570.52.1.el9_6.x86_64.rpm 3c70ff03f489af519add951cf52045a884eb22d460092fbec9d6bcfb8dd5d964 kernel-debug-uki-virt-5.14.0-570.52.1.el9_6.x86_64.rpm 419eb1c86b03e0ad6340423cb77543c2ed336bdbbc45092abd3636211ad025e6 kernel-abi-stablelists-5.14.0-570.52.1.el9_6.noarch.rpm 50c83aad7c7c5efecbf4b7ed0d793f1d1f3f01e67b7eb8e3306d5a00bc311312 kernel-debug-modules-extra-5.14.0-570.52.1.el9_6.x86_64.rpm 6a5ff857f8b37cc4b56a05e74297155f329441775d383be781e75fc7eb18074e kernel-uki-virt-addons-5.14.0-570.52.1.el9_6.x86_64.rpm 71704a096c67d6e09cf2fe86643d75e769f2979d452e014362ca68be8b0ae270 kernel-debug-modules-core-5.14.0-570.52.1.el9_6.x86_64.rpm 8bae905664f7690cb09eaee1f4f3f0f6c09f9d26b35617a1c3229559e69aad79 kernel-core-5.14.0-570.52.1.el9_6.x86_64.rpm 94fbef32a35cd57ed150ad17a5e5081ab0e09b0d95328dcea64267525b6c7a55 kernel-modules-extra-5.14.0-570.52.1.el9_6.x86_64.rpm 9ab9410c3dd568ec3af01a0355ba69728b60a7f149bbae780f09f4249ad0dc01 kernel-debug-core-5.14.0-570.52.1.el9_6.x86_64.rpm 9d3c76374b7cc0c7e7b9823ce9891cd964b2f1d61b6aeb6f80fc47eb3ace1122 kernel-modules-core-5.14.0-570.52.1.el9_6.x86_64.rpm a75735529ef1fe60ecfe20ee4e92f08bb80a1f16191e5876951b1e0de815d3b9 kernel-debug-modules-5.14.0-570.52.1.el9_6.x86_64.rpm b74818f1bd64ba0d57027a5ccb8f30b43f6c1e618b5a2b65060f8ed7bf9f10aa kernel-modules-5.14.0-570.52.1.el9_6.x86_64.rpm cb929f7e2e1d15b9eb5e1998dc85f0a634e74835348dca61a3799e49b0560211 kernel-uki-virt-5.14.0-570.52.1.el9_6.x86_64.rpm eb96f8d17de5b4c9fb92130c8bd64a0e8930f128faf910bf47774ad8386e39ea ALSA-2025:18275 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libssh-0.10.4-15.el9_6.x86_64.rpm 0dca2062dd5af2b0320b7e364056828d672ad4794819d30a69563b36d5bde129 libssh-config-0.10.4-15.el9_6.noarch.rpm 1608de2b893235495977bb972a9f975c6a743247301da12c536a04419316ad27 libssh-0.10.4-15.el9_6.i686.rpm 919bc9a6918b489abd8d0726e24040891ac167e4bcd819a4ab674b81742be1b4 ALSA-2025:18281 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026) * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-tools-libs-5.14.0-570.55.1.el9_6.x86_64.rpm 134168f1cb77da80ca04fc211a14d71f109046e31caf5a402f3c8560c063aeca kernel-debug-modules-5.14.0-570.55.1.el9_6.x86_64.rpm 263a163b62d6a63ddf83b64e5857e2d3f907228f579bd266bd5a70625c4777c6 kernel-modules-core-5.14.0-570.55.1.el9_6.x86_64.rpm 3187c5ddfd472a3bcc65c6baa627318c22fec96156e956f4715d643baecfce95 kernel-debug-modules-core-5.14.0-570.55.1.el9_6.x86_64.rpm 413424b31e345b5ab6a04be340c05aed14a40abc1d620a243df291c3547a4e6e kernel-core-5.14.0-570.55.1.el9_6.x86_64.rpm 4651e9cb8003dc7bafa873839073e52640f2237e1c2d576f66d59a7d7802dbd9 kernel-5.14.0-570.55.1.el9_6.x86_64.rpm 4739bab2be701da6b78c4af8242bfd5d671f6a7de34e1575adaf139c56e371f6 kernel-uki-virt-addons-5.14.0-570.55.1.el9_6.x86_64.rpm 653be87b114e8eda3b70744cc7858f1429828a4e172227297fd8d8f31cd2b577 kernel-tools-5.14.0-570.55.1.el9_6.x86_64.rpm 8571e987700a53c01377a38ff6ba63705457b6b25773726f6ac9268c946f7d61 kernel-debug-5.14.0-570.55.1.el9_6.x86_64.rpm a3a90911db80953e1fb3ba72466159ad6019d9127a5a4fb62f8e977cd797e1e9 kernel-debug-uki-virt-5.14.0-570.55.1.el9_6.x86_64.rpm bbe03be7217405a53fe04f75b151c84d1e2f98c0cd25285608058395994cc54c kernel-modules-extra-5.14.0-570.55.1.el9_6.x86_64.rpm bdbbac2c1c8dc9bfcd57de858e7975159a721f5f606bca93a5fcbb3ae0adfc01 kernel-debug-modules-extra-5.14.0-570.55.1.el9_6.x86_64.rpm c9dafd687ec9d7d4c9b1003fa007caccf1f3419dddc9078e844d20de41c76f70 kernel-debug-core-5.14.0-570.55.1.el9_6.x86_64.rpm ccf8048412c6f88d61eb7c254a36df51b6d02de48969e6cebe62d329e9b5b75a kernel-uki-virt-5.14.0-570.55.1.el9_6.x86_64.rpm e9f87cfbb257de97369f690e7ded4ef7129eaa63b430600563fef0344f998ac2 kernel-abi-stablelists-5.14.0-570.55.1.el9_6.noarch.rpm ec2a33112bc175921ed8dae5b141c55fe51ad31c69e588f28723f79b94a5d38f kernel-modules-5.14.0-570.55.1.el9_6.x86_64.rpm f8fcc645c4d0357219a7abb141e0a78bf34fee90db09395a8e74b64706f4ca29 ALSA-2025:19409 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-modules-5.14.0-570.60.1.el9_6.x86_64.rpm 13664528524ca6a0eb94a1c105d31802078dcc9c6534d1c0a5adec5278caf02d kernel-debug-modules-5.14.0-570.60.1.el9_6.x86_64.rpm 1baf7ce806f70226386793ccb13c781d3b363ae643de2fd7cb6d9df4201ab767 kernel-uki-virt-addons-5.14.0-570.60.1.el9_6.x86_64.rpm 2a9a474c5d4965fda267722f6b7f6d36291f28fda1433a9d3bbc2369bfecb3c1 kernel-debug-uki-virt-5.14.0-570.60.1.el9_6.x86_64.rpm 32f763ae658809246ff41c7ab249ae154252c01f4d850ab914332b0d7552aac1 kernel-debug-core-5.14.0-570.60.1.el9_6.x86_64.rpm 3c4f9eff278e9094d146ae694ee6ec34317569edc8de3db5d2c5bc1785228535 kernel-tools-5.14.0-570.60.1.el9_6.x86_64.rpm 67d7f4ae237bc2c0a1bc047daf2b63084b0a019fcb9b9c3282d3a49b5c658d24 kernel-modules-core-5.14.0-570.60.1.el9_6.x86_64.rpm 6913fbaeb54842eb88e0d8d920d37f36f175f1c27c4270079726931257ce58d8 kernel-uki-virt-5.14.0-570.60.1.el9_6.x86_64.rpm 790b2dbc173893210fe742a6d058f37f3ab84d02935b73ea7772936a908f68d4 kernel-debug-modules-core-5.14.0-570.60.1.el9_6.x86_64.rpm 859ce885158626b83f1021cb3d46f71f94cb44602681b369e61959043e9a2a63 kernel-modules-extra-5.14.0-570.60.1.el9_6.x86_64.rpm a6f09e6aa396b3f62d27ab7475a31dce59a252c2d35f8e04899308fbcd472413 kernel-debug-5.14.0-570.60.1.el9_6.x86_64.rpm b8ade8e81eb0f55f186a082aff31074a07ea03716811d54cac2ff45734049892 kernel-5.14.0-570.60.1.el9_6.x86_64.rpm ccf75c5e1a19091cc2f748c03fe75d77a96ae75c83714e22e79cf7f0331c386b kernel-tools-libs-5.14.0-570.60.1.el9_6.x86_64.rpm e91cff4af8a326e4545a34302a15ec3887711d6d16374884aead370a347cd3e3 kernel-debug-modules-extra-5.14.0-570.60.1.el9_6.x86_64.rpm ed0526986cfa9ecaae529f483f9ed0cc607f6b312ea13867f1fa82c3d420b0c7 kernel-abi-stablelists-5.14.0-570.60.1.el9_6.noarch.rpm eef8e6059900bf395b6ca1236984e5e2deb322877735ca5c91df7959b08bb793 kernel-core-5.14.0-570.60.1.el9_6.x86_64.rpm f68796ff4066e7a4ee8d95ed0ca9ff9104cddabcbb91b1d3779993861dbb7cfe ALSA-2025:19930 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-modules-5.14.0-570.62.1.el9_6.x86_64.rpm 02cf542aac876780028b5887baef7665cf1aec2679452a0a09a9352c33de33b9 kernel-5.14.0-570.62.1.el9_6.x86_64.rpm 083caf4c8f170f2807cc252accd27b5871f73cd5926a4a6c97785f7162cae6c5 kernel-debug-core-5.14.0-570.62.1.el9_6.x86_64.rpm 0b41ce1cfee5c9e6f1e0c202e1672ba0cdf2ea1831809dc6a06c52131ea92c40 kernel-debug-5.14.0-570.62.1.el9_6.x86_64.rpm 168304af9b93a1197a88bb9ad73ce19db1d15318a6548eee904c77a3dc5c663f kernel-core-5.14.0-570.62.1.el9_6.x86_64.rpm 2f4063b8e34322b7e3dc88b70be6ac7f665c59d74dc06a6f5aa51b810b0f774b kernel-debug-uki-virt-5.14.0-570.62.1.el9_6.x86_64.rpm 305238f06219793cc8a82da4d10a88a17848224aae6bb8d8927983bba0f28eaf kernel-abi-stablelists-5.14.0-570.62.1.el9_6.noarch.rpm 45a8febca4789f9028e18f736696e927654169a82b961ed5df52d621e87f30d7 kernel-uki-virt-5.14.0-570.62.1.el9_6.x86_64.rpm 52877d7535c8085f5b6a1166d2af345bddb2701255c9751e6faa47f9ef794fe5 kernel-debug-modules-core-5.14.0-570.62.1.el9_6.x86_64.rpm 774428e2a2a9d190984a1d2a5634f8a237dc68306b71ee1b789bdc2b9d1ae6ea kernel-tools-5.14.0-570.62.1.el9_6.x86_64.rpm 809a03088dae249601ac8b84fc88cc848c8a0d6a2372ab4836b2ff0d49608523 kernel-debug-modules-extra-5.14.0-570.62.1.el9_6.x86_64.rpm 8e4e298778bc78f207c75378c6e17172a312eee70d6e945ca6d1af8c76003430 kernel-tools-libs-5.14.0-570.62.1.el9_6.x86_64.rpm a88b2c725deb32aa41b61fe05f395e69a2358a4204d061660dfd1fb8a851f036 kernel-uki-virt-addons-5.14.0-570.62.1.el9_6.x86_64.rpm b648475626013e9afced9e7d8060827b9d4b294b137f3be3a8798c2a2b38d3d8 kernel-debug-modules-5.14.0-570.62.1.el9_6.x86_64.rpm cb00adb56535365c648ccaef4417c1e9344e0cc9c67f80607c05aab41002be03 kernel-modules-core-5.14.0-570.62.1.el9_6.x86_64.rpm da0630cb8b1d2d5ca70a9737e8ae6deac59305b9a08bc47843bff42db0c5a1e6 kernel-modules-extra-5.14.0-570.62.1.el9_6.x86_64.rpm dec42e3caa617fea4ac8ac5267147b2352e18ec2c07f27498d71b04e367a3f3c ALSA-2025:20518 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830) * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689) * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744) * kernel: vfs: fix race between evice_inodes() and find_inode()&#38;iput() (CVE-2024-47679) * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727) * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864) * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060) * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024) * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195) * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294) * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052) * kernel: afs: Fix lock recursion (CVE-2024-53090) * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119) * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135) * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241) * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229) * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170) * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216) * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672) * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662) * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675) * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690) * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709) * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739) * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786) * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332) * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680) * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648) * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647) * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631) * kernel: zram: fix potential UAF of zram table (CVE-2025-21671) * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672) * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693) * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691) * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696) * kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702) * kernel: usbnet: fix memory leak in error case (CVE-2022-49657) * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432) * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672) * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353) * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437) * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627) * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670) * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269) * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643) * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623) * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357) * kernel: list: fix a data-race around ep->rdllist (CVE-2022-49443) * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648) * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746) * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795) * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728) * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456) * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987) * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014) * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988) * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714) * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570) * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993) * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729) * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989) * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015) * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998) * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995) * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796) * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739) * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786) * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738) * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986) * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726) * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791) * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787) * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981) * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790) * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990) * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765) * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012) * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745) * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806) * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072) * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068) * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062) * kernel: idpf: convert workqueues to unbound (CVE-2024-58057) * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828) * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083) * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826) * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077) * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075) * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837) * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851) * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855) * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844) * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853) * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847) * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864) * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088) * kernel: acct: perform last write from workqueue (CVE-2025-21846) * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861) * kernel: io_uring: prevent opcode speculation (CVE-2025-21863) * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848) * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056) * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845) * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994) * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116) * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-modules-extra-5.14.0-611.5.1.el9_7.x86_64.rpm 286e782beb00b7ebb9bfd4d7872528d2ae86f6bd428432fe56ad0d9a7ad2dcc4 kernel-uki-virt-addons-5.14.0-611.5.1.el9_7.x86_64.rpm 290abfb1df9b3ef6b70c6a369f1f124dff4b5fe41d7ef6c981ad05f36cda47ba kernel-abi-stablelists-5.14.0-611.5.1.el9_7.noarch.rpm 38b0c579738575ed28238628956d361d2705ecd2caa15b5a97c75d4552e8b3dd kernel-debug-uki-virt-5.14.0-611.5.1.el9_7.x86_64.rpm 52aef5b04b3d9b5acfa526bfb4d672fba9748fcd37a05c4ef641ac5e9110eb43 kernel-5.14.0-611.5.1.el9_7.x86_64.rpm 6bb714f378b5ffd04f405cffb1c17f3f2475b2396d6d5eb0e3f3f4fd86c6a21f kernel-modules-core-5.14.0-611.5.1.el9_7.x86_64.rpm 7b8618f30aacdd29aae2fdea402e23f0d654a6b0bb608ce3a5a3adf284786226 kernel-uki-virt-5.14.0-611.5.1.el9_7.x86_64.rpm 815d3269e0f344e914dcb5bcb768f90657d305f6524c821441056008c934e8b5 kernel-tools-5.14.0-611.5.1.el9_7.x86_64.rpm 9b771133e3d84ae5a976bea34976063cee74b813dca079228c124532618ee2a1 kernel-debug-5.14.0-611.5.1.el9_7.x86_64.rpm 9cdfb357c085617e66a0e51eaba19376a7fb48682198fa6c36379d0c8df74001 kernel-modules-extra-5.14.0-611.5.1.el9_7.x86_64.rpm b139dc309ad1f75df986107728055c459617e102a18cef5d80e3baa3d030456d kernel-debug-modules-core-5.14.0-611.5.1.el9_7.x86_64.rpm ce1434b4b7ef9a232e8365999278512144bb662b61a84e2e1cd7a1378ec49985 kernel-modules-5.14.0-611.5.1.el9_7.x86_64.rpm ce21333be915a09e7726ef744a0c4a561bb23cee21bec3251bbb211ba59d82f3 kernel-debug-core-5.14.0-611.5.1.el9_7.x86_64.rpm d1889e150ba947273a646935ee4471f92908406949e9d8938e67f90ff63b9d34 kernel-tools-libs-5.14.0-611.5.1.el9_7.x86_64.rpm d94d9a516353aaad44243891332e95913781896f5194288b1bf0866e9b034197 kernel-debug-modules-5.14.0-611.5.1.el9_7.x86_64.rpm f62f0877da248ca556f53ca0c6a3bdd400fc272515b6034fe6619984e7648c8b kernel-core-5.14.0-611.5.1.el9_7.x86_64.rpm fa6b5c2a8909c61d7af35bcc5d7faa6da8feacd42621b2e7e0275ac7bffedacb ALSA-2025:20532 Copyright 2025 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. (CVE-2024-45777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default grub2-efi-aa64-modules-2.06-114.el9_7.alma.1.noarch.rpm 024a3e1c26e51feeed7910884b1913d14539f0ec6a6f9b48614a3e12831d7ef0 grub2-pc-2.06-114.el9_7.alma.1.x86_64.rpm 09b5ac325d70717a84d24e4c750eeb4c87e0b57544696f8a8dd5f53e6898c2d3 grub2-efi-x64-modules-2.06-114.el9_7.alma.1.noarch.rpm 318f7ff4ceba087242b7eaff4c83876795cb6aaffc045e634e869f98985e9913 grub2-common-2.06-114.el9_7.alma.1.noarch.rpm 8fd362f32efa8a13bf0e0db18cd6f8d8f01b45c2a7f747ab81971a169df61c1f grub2-efi-x64-cdboot-2.06-114.el9_7.alma.1.x86_64.rpm 94431e4d344d773a6be9728690f86c96ee99b5eb33a3a0ad762f6a788d0ed18a grub2-tools-efi-2.06-114.el9_7.alma.1.x86_64.rpm b7df5fb9135270cc7fade72990adbf43a66f27e8a44e656749e632204c0a3495 grub2-efi-x64-2.06-114.el9_7.alma.1.x86_64.rpm ba0cc973f2f26e001676c788b5372e19af2b9e12b399445555eda7faefadf627 grub2-pc-modules-2.06-114.el9_7.alma.1.noarch.rpm bbb561d57e7a44ab17215b52a0aefbfcc28b895d1f31c680c0249ba5d4058521 grub2-tools-2.06-114.el9_7.alma.1.x86_64.rpm c2df6a8d8ad633165a5f566779b3d855befa451273d43b3f56bbfb7a5f354a5b grub2-tools-minimal-2.06-114.el9_7.alma.1.x86_64.rpm c32773add160dae92f1a013e5e5968a0aae3c6abc19f26855106a109dd557748 grub2-tools-extra-2.06-114.el9_7.alma.1.x86_64.rpm c36e1736c14e59ad3208a32d68239708655637cefdf0497e7cd29b8915b7558b ALSA-2025:20559 Copyright 2025 AlmaLinux OS 0 1 Low

shadow-utils security update

The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. Security Fix(es): * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default shadow-utils-4.9-15.el9.x86_64.rpm 56c41107f88bb222e049140b7a77a890b06682e17740c0b8a7c2b64de37c8e1a shadow-utils-subid-4.9-15.el9.x86_64.rpm 7adaff0585f1599fd9f0e2e81ac0876c268c601cb8434a72a98b754d63e3fb23 shadow-utils-subid-4.9-15.el9.i686.rpm 837f64510e31e0e06f961dd40238d779c5d8e49612a42ab9598c15705b8ebe8e ALSA-2025:20936 Copyright 2025 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: Integer Truncation in SQLite (CVE-2025-6965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default sqlite-libs-3.34.1-9.el9_7.x86_64.rpm 18ee0f6cfa68bf713f2f59578e1e27f1293aa3ace9914d65e6c85242b0c8498a sqlite-libs-3.34.1-9.el9_7.i686.rpm 3f92690fc6cdf18fb4a223617cd91eee46fad35b569fa681a643c6642a914ac8 ALSA-2025:20943 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libssh-0.10.4-15.el9_7.x86_64.rpm 281af7c8bacdac6f172bad496102d49fc2b47e35b6ee08800c0b0a7cb602168c libssh-config-0.10.4-15.el9_7.noarch.rpm 4f6b50b82dc5bc30809f2ca6900f3494ec81e694370fa0530db7e37156a94079 libssh-0.10.4-15.el9_7.i686.rpm 6237496256dbf95e2e9361701eac1183a763db183c7ca133b2b8229e5518512f ALSA-2025:20945 Copyright 2025 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default vim-minimal-8.2.2637-23.el9_7.x86_64.rpm 112293b4a6f9dd676683c65aa35ca5e137019f8f9f678c51abe3362153443e72 vim-filesystem-8.2.2637-23.el9_7.noarch.rpm 2545904e3e3a1aab94ddd6c4c0e87a3fc167a76105dd76515f2d37bdf20f35b8 ALSA-2025:20954 Copyright 2025 AlmaLinux OS 0 1 Important

sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default sssd-2.9.7-4.el9_7.1.x86_64.rpm 021ed04d3a1418c8eaa3041b88c7c0f0b7130e40da7fefc9311a55ed72a52f8d sssd-passkey-2.9.7-4.el9_7.1.x86_64.rpm 19db41e542e7d8694a226a5d1b52f2cb2438dd34831aa2785c51b3ebe1149db4 sssd-ipa-2.9.7-4.el9_7.1.x86_64.rpm 1faaaeb987fa76e480d43489bba9819a0d9312b0d459c0f3dbd8396ccb98f10b sssd-dbus-2.9.7-4.el9_7.1.x86_64.rpm 3049831409901d9553195f99f1e5c1fd050b2b5d19bed8a909a317a73388e3ec sssd-tools-2.9.7-4.el9_7.1.x86_64.rpm 379f7e82df5dc4bc81da12710f75a8d8666f33d09e6c096a73f5e6183ee74672 sssd-proxy-2.9.7-4.el9_7.1.x86_64.rpm 3c37f5a7d128e06883c3a701f4f2e1890cde57ce138d26db9004022f3eefe5c5 python3-libipa_hbac-2.9.7-4.el9_7.1.x86_64.rpm 4af034125e40469a1e185295327c71bec44389df74ae7da70ed33493de41b3cf python3-sss-2.9.7-4.el9_7.1.x86_64.rpm 54e5f35cc7a8276a00b1e39232c81187bc4b3cc72a12ccf5ae1f7c821d6f4dd3 sssd-client-2.9.7-4.el9_7.1.x86_64.rpm 6c139583326bdcb2bb3f7aa941a64d6980cc660486bea138eff7c3f9c215c71a sssd-krb5-2.9.7-4.el9_7.1.x86_64.rpm 73d477d39b19bae36cccb1e14e092bffb0c8ca90a90b2f0b6b95609af632209c python3-libsss_nss_idmap-2.9.7-4.el9_7.1.x86_64.rpm 83493e2df0b65eec182a5904814df3a170efd1b07bf3c6ea5ac7ce04678bf7ab libsss_certmap-2.9.7-4.el9_7.1.x86_64.rpm 84415b1d3d83e712d1dc75a5dc916cd484f9d498d46c2006b58bde592a71b57c sssd-kcm-2.9.7-4.el9_7.1.x86_64.rpm 88b53e77b9982def9be0a80c0c116a3dc59dac9c2999ada4c0089c3e21863e99 sssd-common-2.9.7-4.el9_7.1.x86_64.rpm 8a518cc5c1bc645d7af990ce70c2e96dd13503c1205011f721900d9c25b8f97a sssd-common-pac-2.9.7-4.el9_7.1.x86_64.rpm 9a89684c07346540bbbedf55892265ffd852aea895b44e2cb2df2b57a3434d83 libsss_sudo-2.9.7-4.el9_7.1.x86_64.rpm 9b977f4bcdec794c02172901992c3d4b02edc6d336511925b5503d7a3065c289 python3-sssdconfig-2.9.7-4.el9_7.1.noarch.rpm 9bb6db54316a4584e3c0a55c91f77105c8e3c7eeff9403a30d047b6f2458941a libipa_hbac-2.9.7-4.el9_7.1.i686.rpm aacf6c2e359402e79fc4ef612910b85e8d20cea42cb24b7c59266f1817a4ac18 sssd-polkit-rules-2.9.7-4.el9_7.1.x86_64.rpm b10013ad0e1bc29e3a46f5cd55f4fc28a784e4a1565a020d26a745091c4a3f38 libipa_hbac-2.9.7-4.el9_7.1.x86_64.rpm b80ccafcaeb06f0043ec5d65032023d924f70ef7deb7f652be759ee16146697d python3-sss-murmur-2.9.7-4.el9_7.1.x86_64.rpm c1bccf838daef5dc0d3005eec985869fee937bad20570942f3464c12ce631187 sssd-ldap-2.9.7-4.el9_7.1.x86_64.rpm c3154383019d7e75184d8c48653c0f20e950a8cda073b72cd7526d231396a2cd libsss_idmap-2.9.7-4.el9_7.1.i686.rpm d1c99209e5661f3b31dda664f885a4e248da19918b81966291694396c4cedae7 libsss_simpleifp-2.9.7-4.el9_7.1.x86_64.rpm d1e09a58e01d0d7884ed8ab462f5c9126af277132c9c1fce69270e5d67ce0f33 sssd-winbind-idmap-2.9.7-4.el9_7.1.x86_64.rpm d260d91e4943f7455c81e585fcd29fb7ea4bd508d472bb0af8156a47b87e716b libsss_simpleifp-2.9.7-4.el9_7.1.i686.rpm d694356a68c2a18673b28aca8941371679398b273d9e1553c80c955bec72b4fe sssd-krb5-common-2.9.7-4.el9_7.1.x86_64.rpm d78a375402dda50669176b290d75b6eb4d295f00cfca805f4f728ce0354ee5dd sssd-ad-2.9.7-4.el9_7.1.x86_64.rpm e9658018b74796bcbcd8ba95338efaa5cfd728b6fcdddad6b960910dff5f6acd sssd-nfs-idmap-2.9.7-4.el9_7.1.x86_64.rpm edcd4cffc2f3b79da73213fd8fb12a4b104af440f9cbb55eff28d859d93ee226 libsss_nss_idmap-2.9.7-4.el9_7.1.x86_64.rpm eeb0d7be557420e4e9486be844e49ceeebbca54847f1317f9ec25f86ff96f7c9 sssd-client-2.9.7-4.el9_7.1.i686.rpm f17b748c7220fae14bcbf7906a4e2700748f4d82614197cd8a67fc3a96b50260 libsss_autofs-2.9.7-4.el9_7.1.x86_64.rpm f4ef8899a537a6ab44f418c783a97180b1443136b837e6e561b6607e8882e7a2 libsss_nss_idmap-2.9.7-4.el9_7.1.i686.rpm fae6b3dc0adc9dc45a077e9b785e8deef1c35feb85f4a382476f9b011631524c libsss_certmap-2.9.7-4.el9_7.1.i686.rpm fb1397d08046592f65e7feedba808282a6efaadb9634e31c761d600504b8ec90 libsss_idmap-2.9.7-4.el9_7.1.x86_64.rpm fba3f32a5fe1156a685d1687b72e7759712fc0ca315328686ccc82bba8130be5 ALSA-2025:21255 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default openssl-libs-3.5.1-4.el9_7.x86_64.rpm 746f13676464f2127bc61164f5c477084b9b3329350f1dbe250931a563655669 openssl-3.5.1-4.el9_7.x86_64.rpm bf340b9d1d279dcebbafcc934777d38fd58c39ed03d98e9678ab5804d8a787eb openssl-libs-3.5.1-4.el9_7.i686.rpm d67d695098e7f9efff12ca6a48f14b4732161c91929c4b863347b416be7c0cda ALSA-2025:21926 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-abi-stablelists-5.14.0-611.9.1.el9_7.noarch.rpm 1344ff719211f4ea286e816b2eac43f622a9dfb76dfc36b9955fa5c13f90353c kernel-5.14.0-611.9.1.el9_7.x86_64.rpm b7c54de73c4b1388f7828beeaf8aa28f7ad7c6279258c82af4ae14f1dde503dc ALSA-2025:22175 Copyright 2025 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default expat-2.5.0-5.el9_7.1.i686.rpm 6d9a042a6957716b9593135291208e1e957db3072a40fa92147a7cc5a0e8d839 expat-2.5.0-5.el9_7.1.x86_64.rpm c1a2ce1e511fb0f53ba235b06b4b120097777735cf5e8a417120e6d2e802a0f4 ALSA-2025:22376 Copyright 2025 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libxml2-2.9.13-14.el9_7.i686.rpm 1d04f05f018b769f2d21e3e8273abda35af03651316a3b3186762536240d797c libxml2-2.9.13-14.el9_7.x86_64.rpm 3ca6a164419107071c2758de30462f37369a795b910ee6214e53e48b8da853b3 python3-libxml2-2.9.13-14.el9_7.x86_64.rpm 4f116dcedbc8b12bde6e24dfef014d4bbc3a8aacce9c557abc7b5070f4a0b03e ALSA-2025:22405 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981) * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058) * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-modules-core-5.14.0-611.11.1.el9_7.x86_64.rpm 274398a532728517c1f9cfa9f4be14973e20546372d4044182f3ef3598621244 kernel-uki-virt-5.14.0-611.11.1.el9_7.x86_64.rpm 3606917f4eaee3aef2866fcb9b50349639f10130c9e8887ae02e57c4427c831d kernel-5.14.0-611.11.1.el9_7.x86_64.rpm 4f90b4f94d26c16b4f27044baa5030deed494af9f0d817ded3623a13c7885f25 kernel-abi-stablelists-5.14.0-611.11.1.el9_7.noarch.rpm 5ac14553f538e7a973fb5f756eae03d9e1734123e3531faabc3f019b1bce59d1 kernel-modules-extra-5.14.0-611.11.1.el9_7.x86_64.rpm 5bbef333d2d5fa36314b66eee466727a99138f3c822b704ac913a9427d17c01b kernel-debug-modules-core-5.14.0-611.11.1.el9_7.x86_64.rpm 627468af61f285a5d04ff8774d2b30565920b26c2dba9b9f5b31dbeb10e5351d kernel-core-5.14.0-611.11.1.el9_7.x86_64.rpm 6f6f1048083f8878277a5337fd78323df9bea7a4cbd25d69e3ba1f0d78517bfe kernel-debug-modules-5.14.0-611.11.1.el9_7.x86_64.rpm a4c1df2bcbf428b7912cb0623fd7bab491c1d411e640a8dd11bcec9732d6a241 kernel-debug-core-5.14.0-611.11.1.el9_7.x86_64.rpm a50badc728976e5db93b150520cd1ed449dd4da3a01ba89e395c7a80b3d3d2a4 kernel-debug-modules-extra-5.14.0-611.11.1.el9_7.x86_64.rpm a9a945b2a1d6363e0ed8f632094bf2bff22e341994d8cdef16f9e6f4154d44ca kernel-debug-5.14.0-611.11.1.el9_7.x86_64.rpm ac0f52ba147763d670cc610790e2b4df2c75b224ce1a1cb52cf2db8763044339 kernel-debug-uki-virt-5.14.0-611.11.1.el9_7.x86_64.rpm adf87ac0bbfc4dfe4c80e9b3c29b2cca7ba3da535ee25601b96bc302fc4ddf65 kernel-uki-virt-addons-5.14.0-611.11.1.el9_7.x86_64.rpm cdb4ff8d6827eb98cf403df850b5e42476a2af073530c6c65e96c3091adff8d3 kernel-tools-5.14.0-611.11.1.el9_7.x86_64.rpm d0490f05b3531d941376c0b77523a3e86fe31263e40c4e9c4e8b9c90582d7c98 kernel-tools-libs-5.14.0-611.11.1.el9_7.x86_64.rpm d66127f98bf340da628d56de45b366afd929f71dd4e16e6e0d6b9983db02e262 kernel-modules-5.14.0-611.11.1.el9_7.x86_64.rpm e7853b0351ebc5ae91a1d12f434eac5f846815892e463989b837ea8dbed68f29 ALSA-2025:22660 Copyright 2025 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default systemd-252-55.el9_7.7.alma.1.x86_64.rpm 17f1271cdbf7b74b1b362a6888a32540fd2d5a5af0b8eed912e8a1c62b0ed12f systemd-libs-252-55.el9_7.7.alma.1.x86_64.rpm 2ad275bd6f6a457d04464ee531976528398f001bdb6eb202579a9ba188bc4ad4 systemd-resolved-252-55.el9_7.7.alma.1.x86_64.rpm 41060930887767511e2a9a744b75cd727d4043abab4647ea2083817cf4bfd608 systemd-252-55.el9_7.7.alma.1.i686.rpm 6aca984de93c305f408d71ef40f41f633496aceb9bf1beedef4ae8dae86afb3b systemd-container-252-55.el9_7.7.alma.1.x86_64.rpm 6f2b96fdd13a7af0f0d434d8180807e101fc5f4a4f2e0beb7a258d25d77d3a06 systemd-container-252-55.el9_7.7.alma.1.i686.rpm 8f3dbe32de7382509b3069f71e64095753aa3ee01222356ef5407359ad35ef71 systemd-rpm-macros-252-55.el9_7.7.alma.1.noarch.rpm 9a984fdefda4084159a8b20fc5f3455dbadc73d46d14cdc6fb9c7f9d37a113a6 systemd-libs-252-55.el9_7.7.alma.1.i686.rpm c47342939c180c8f7865ee67c48fb469e1bd77e26c6034e37dc9f747d977b78f rhel-net-naming-sysattrs-252-55.el9_7.7.alma.1.noarch.rpm d5acde7bf97e84532cca5d92f8e0154ee43290fd504bfe9113145b92337ca361 systemd-oomd-252-55.el9_7.7.alma.1.x86_64.rpm e1b97a6b224141885f893213c7fa824234ec78d678a359735ef8c583e0b6c412 systemd-udev-252-55.el9_7.7.alma.1.x86_64.rpm f77b6bc7410a898709a64f67253d8bad84b3fa4cc6610df216459f899e31483a systemd-pam-252-55.el9_7.7.alma.1.x86_64.rpm ff5c65ab29b18106adc8e4461ba7893f58606b6d2e465ae6868e0819029ae9fc ALSA-2025:22865 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925) * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-tools-5.14.0-611.13.1.el9_7.x86_64.rpm 08cd159b0214f892e1bd9a5857afaf07ffecc125ba48bc00ffdad7371d307455 kernel-tools-libs-5.14.0-611.13.1.el9_7.x86_64.rpm 250c1c9d4ad7bf7b0b83d0e1df47464cdcd98cdcdb0999daafe70acb2b5d6e34 kernel-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm 2601f257e0381d32ec0000a8ceb9477a6670d803211ca44e97a0ebd0af1c32f6 kernel-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm 2f95b83bda8969669da177ba8cfc422cdadc6ccc6ff3ef8a7891a61d92d628ec kernel-abi-stablelists-5.14.0-611.13.1.el9_7.noarch.rpm 4c03463f28de5622a46c3d932ac46b08199a02eefe2824633573e3ebae011f9c kernel-debug-modules-5.14.0-611.13.1.el9_7.x86_64.rpm 7af4e24376ed67dbabc03897a85278fd821b604272f34f04742edbf384b069f8 kernel-uki-virt-addons-5.14.0-611.13.1.el9_7.x86_64.rpm 7c1c2de9d46909823e82745041e69bf21c1eecb101df449358b8316319c8813a kernel-debug-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm 930b1f96cc8b0b0b9e11499399a1175a0ceec63137117e2f1229f1c52e3b431c kernel-modules-5.14.0-611.13.1.el9_7.x86_64.rpm 97b773c94382526c5ca69d32279a8250f0c1e62658106c6292033a896fb573c0 kernel-debug-5.14.0-611.13.1.el9_7.x86_64.rpm a06f22c9ad3cbe7be3377934b4d9cb009af8226d756c9a7c7c723a44f8bcca31 kernel-5.14.0-611.13.1.el9_7.x86_64.rpm bd07b9fc47ca38ddb9504882c00d9ba3bc1d6309cb2c72051ecd8b70e062f8d3 kernel-debug-core-5.14.0-611.13.1.el9_7.x86_64.rpm d0448268bd30bb82f4c8bfe7b66eaac78c662e5bd074d23c8a7972a1728c74d7 kernel-uki-virt-5.14.0-611.13.1.el9_7.x86_64.rpm d15297437b1e28d99bdf79e7c200d4a152b54ec469f11af9d6b50425012828f6 kernel-debug-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm da61e38e410e1b0bc942e3b41f244c7afcd7bb9071141ab7994d18516520ceab kernel-core-5.14.0-611.13.1.el9_7.x86_64.rpm dffe2eb6af9d7d7a9e14308a57523de233342026f9aefa0a0b35c21804b52b42 kernel-debug-uki-virt-5.14.0-611.13.1.el9_7.x86_64.rpm f1bf56a7a55d7d51aa84a7afe6b2992812abd0fc57bb1df6ac5fc1e0d2a0df39 ALSA-2025:23241 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499) * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966) * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-uki-virt-addons-5.14.0-611.16.1.el9_7.x86_64.rpm 0af49fa9d852efffe433dd97bb694cdc252c08f2db7433a4a3bdee4a4fce9feb kernel-debug-5.14.0-611.16.1.el9_7.x86_64.rpm 1bbfa2a6f7ce5394e474b9b45ad32731903647bf1c1b9f00809e82a759010683 kernel-debug-modules-5.14.0-611.16.1.el9_7.x86_64.rpm 1bdacf7d09384dfe2c673bb63c8eed7f6dc4699daad359d4881b51a678cc19e8 kernel-tools-5.14.0-611.16.1.el9_7.x86_64.rpm 294dc3cfb7003fd7fa4d0a76921393a6d8bae6ac0d3192352d22680439316e96 kernel-modules-core-5.14.0-611.16.1.el9_7.x86_64.rpm 3e57e14c2f670ce276c7ae628da240d8a4cded19a68c078094e054c330c99483 kernel-modules-5.14.0-611.16.1.el9_7.x86_64.rpm 6bd054412e3820ea8730dd23e40d4a0c088386e9cdb9af9616117931a8ef38d0 kernel-debug-modules-core-5.14.0-611.16.1.el9_7.x86_64.rpm 703a08284ee6b77a6fec47a2b78d1b3871095d73c602a37d668e3815670e78a5 kernel-uki-virt-5.14.0-611.16.1.el9_7.x86_64.rpm 88d71dc4e22a8c960b9bfb73e6560a74a53e074d5ad7c37c870f6da77295fcf6 kernel-tools-libs-5.14.0-611.16.1.el9_7.x86_64.rpm b83bdb8948a47bb57d2c3866351a7dbc2dd34e894ccbc9f62147e0453fdfd9be kernel-abi-stablelists-5.14.0-611.16.1.el9_7.noarch.rpm c495c01bba08b25eadd05fe5e43be3c98c46f6bea2b307c1b92dbde452ad055f kernel-debug-uki-virt-5.14.0-611.16.1.el9_7.x86_64.rpm ce0e0769b46efc69222201f670c27851472a55ed6a2f1d008dcb2a0c67b34331 kernel-5.14.0-611.16.1.el9_7.x86_64.rpm da3110cf1f83ce9e221e8c3544de42b0afbb0cff3b312a57b50fccb7768ec82a kernel-core-5.14.0-611.16.1.el9_7.x86_64.rpm f096b99578d321f82a2f55895b0f364befe4581cd3c7e0b7d6e80baeda42071a kernel-debug-core-5.14.0-611.16.1.el9_7.x86_64.rpm f6b8866c5fbeeb8d1d072548dc4135c92a88b76afef42e1511f4b530dbdb76d3 kernel-debug-modules-extra-5.14.0-611.16.1.el9_7.x86_64.rpm fd771a045383f6045868e64cfb537da6f96e29f0235e464c1f1cc565cf39f73a kernel-modules-extra-5.14.0-611.16.1.el9_7.x86_64.rpm ffdab034a3841dbbcaaeb0bd8726007fc3473d0fee5596d1b41647c4fc68d226 ALSA-2025:23342 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642) * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069) * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default python3-3.9.25-2.el9_7.x86_64.rpm 03d5dedf998f17db539c619d0be08103221d897befbe3689f0e22cd6172103c2 python3-libs-3.9.25-2.el9_7.i686.rpm 3f794243955773bde0fb2f8441072441b6bd7721bdb4827306435f2d4880e033 python3-libs-3.9.25-2.el9_7.x86_64.rpm a901fc4e4b093536efcea95bcdba0757f79138f99ca7bbd1219e9fb7aac06883 ALSA-2025:23343 Copyright 2025 AlmaLinux OS 0 1 Moderate

binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default binutils-gold-2.35.2-67.el9_7.1.x86_64.rpm 221284d3735b0e088f7acdc50a2fb6875cc9072ecedafb47fd4c47aaf97c9d68 binutils-2.35.2-67.el9_7.1.i686.rpm bff53ba8f14ee962cb76a47b83ee90c5dbacd34fbb2be676a4e15560fee2c3f9 binutils-2.35.2-67.el9_7.1.x86_64.rpm fe38e12c62dd1d56eb3bda520d113e8635e91ae1e41e498ba0cb06db6909edb5 ALSA-2025:23480 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984) * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default openssh-clients-8.7p1-47.el9_7.alma.1.x86_64.rpm 4079a93663ff0c84fd4cd0a58e2800dc98cb8472d7c27171003361444439a5d3 openssh-server-8.7p1-47.el9_7.alma.1.x86_64.rpm 6e7258de3f85a090cddf8721e5150785a051732b841a19acad23afe3a8e432b6 openssh-8.7p1-47.el9_7.alma.1.x86_64.rpm c5b061e03b85461aa07b9ac92990d43cf573108838cf7b054a8cefd86a73ae26 openssh-keycat-8.7p1-47.el9_7.alma.1.x86_64.rpm e6858ceb81b02e7c3625364a31de117b5a7fdce11c926dc44472552c7707c746 ALSA-2025:23483 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libssh-0.10.4-17.el9_7.x86_64.rpm a18ba6b1785839e12e378cc7b04eca8864fa7391ee77265fb23fc3e3030cbd53 libssh-config-0.10.4-17.el9_7.noarch.rpm b21f4eb91c20107571aaaffd480f4176edc36969421c3cfcd512b56067e30147 libssh-0.10.4-17.el9_7.i686.rpm c030d541beb10abf762c9b9cc280f4bcdd44db0373a1d80152c5eea882af7838 ALSA-2025:2627 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605) * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264) * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302) * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922) * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113) * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default kernel-debug-modules-extra-5.14.0-503.31.1.el9_5.x86_64.rpm 0a11a375bb38d9fa41eb4dafce4da0bb924e12f9e02be5ece0b4c6f2d1aa5b9b kernel-tools-libs-5.14.0-503.31.1.el9_5.x86_64.rpm 40be51d30bed7a34a8f626367dcb0108c504bf3699d8d9b7db4ed13f592e4e97 kernel-debug-modules-core-5.14.0-503.31.1.el9_5.x86_64.rpm 439b18a7caeca147d93f07f0461c206e4199f31dfe73e0d1b7f4af4aab6bcb1e kernel-modules-5.14.0-503.31.1.el9_5.x86_64.rpm 4d873c98bb773d235966f7206071d279964b51194d553b6a38eef4dcc70ca348 kernel-debug-modules-5.14.0-503.31.1.el9_5.x86_64.rpm 51356b640012a8d9791008ff2aa8201b2e3c8213a7c6e5068bfa485552741702 kernel-core-5.14.0-503.31.1.el9_5.x86_64.rpm 552f73ad53f978499a83c7d17d578a2d80b83aef3a81f1441fe935f21d173d2a bpftool-7.4.0-503.31.1.el9_5.x86_64.rpm 595453cc7c2c5b16f505ab7f85514729a69296dbeee581af89d30326d102a3e2 kernel-debug-5.14.0-503.31.1.el9_5.x86_64.rpm 60eecac094089198aa97088de9f2b1f061bf4f6be40be25a35ececc29877c3f7 kernel-abi-stablelists-5.14.0-503.31.1.el9_5.noarch.rpm 962dd2c7c24e082c2ddb54ded5592262fd0760c31d7e0879c73cfccccb73c6a9 kernel-5.14.0-503.31.1.el9_5.x86_64.rpm 9b6e2b6424e8dc499da036a65df9a5834a011df4beec2eecabaecb51bd6ec885 kernel-uki-virt-addons-5.14.0-503.31.1.el9_5.x86_64.rpm a2d558900db11f2cdfb8f73afe2c3b006572c6a6b9543a292eeb393d44965576 kernel-tools-5.14.0-503.31.1.el9_5.x86_64.rpm a424beb4b7b065c9f0ada1b120a62d4921ad91cb40d5f590c8aa45e41707e5f5 kernel-modules-core-5.14.0-503.31.1.el9_5.x86_64.rpm a7270be68447e59a83873b4b492d77b654be14573967f0ee966224ecf4c924e5 kernel-debug-uki-virt-5.14.0-503.31.1.el9_5.x86_64.rpm a95b84aa40f097a980d978e603445d618a03af65de7077883eac3c56712b3ef0 kernel-modules-extra-5.14.0-503.31.1.el9_5.x86_64.rpm b3a3f5f5d7c5af87023236b01e78987bbdcd182b957cea4d0825a8e003624aab kernel-uki-virt-5.14.0-503.31.1.el9_5.x86_64.rpm b676dee52da453c44564239de42d6baef15bd2cd98eea65f1a75308ae9f6ef9b python3-perf-5.14.0-503.31.1.el9_5.x86_64.rpm c92b4d77e39b43d3aa7996f2782c9b46dc212a1b44715a7e54aaec3d59b32364 kernel-debug-core-5.14.0-503.31.1.el9_5.x86_64.rpm f2cf1f352c743a9d405c664dcc58bff8d99138b7847ab14de2e26e383eb1fa06 ALSA-2025:2679 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Use-After-Free in libxml2 (CVE-2024-56171) * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default libxml2-2.9.13-6.el9_5.2.x86_64.rpm 2c8fce716e74739120a0a6df69c5ee2a21aae5ddbc865090761bfe4aea0c9047 python3-libxml2-2.9.13-6.el9_5.2.x86_64.rpm be0103d534db4fe65d69f724086ff4d83e2d63cd43e3c41616c44fc1f66aa442 libxml2-2.9.13-6.el9_5.2.i686.rpm da9ac6021151ac642a836c5d4fe37d2f857a4f42bb828c6fca48792d7ee6824b ALSA-2025:2867 Copyright 2025 AlmaLinux OS 0 1 Important

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: net: Out-of-bounds write in grub_net_search_config_file() (CVE-2025-0624) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default grub2-tools-2.06-94.el9_5.alma.1.x86_64.rpm 021c08191a7ba9fc6987111458470a971b47fdd52185c5ffad9aa36042f1be0a grub2-pc-modules-2.06-94.el9_5.alma.1.noarch.rpm 0f74115758e957bee223401d6917e78a8ead8c693314e0887d7a8198446b4dd4 grub2-ppc64le-modules-2.06-94.el9_5.alma.1.noarch.rpm 1a9a4a1379668ed0d7f554b4e2a8cbd2b954a08b4041aa5602f8aa7cd13d7fd7 grub2-efi-x64-2.06-94.el9_5.alma.1.x86_64.rpm 275a58779c59b74d77f7c08266bd3dcd66ceca6e9fc7faef71be8648868a8cb5 grub2-efi-x64-modules-2.06-94.el9_5.alma.1.noarch.rpm 2b8277db740e7dfc5f4dac537b11d639716c651fcca3bdf326211cba5fdea01e grub2-pc-2.06-94.el9_5.alma.1.x86_64.rpm 389b7a7c2284b82c24ec011544246e5bae122acfda08f4c48e7c916b50f18a3a grub2-tools-efi-2.06-94.el9_5.alma.1.x86_64.rpm 7eb37096f031df612c24ca23f413c37369a0e5ed28c30a81c7bca21e30f86ce0 grub2-efi-x64-cdboot-2.06-94.el9_5.alma.1.x86_64.rpm ac8e6c0f49999b553517eddc20ef1e0391e31454a9ec2645a5412d42b5df5399 grub2-tools-extra-2.06-94.el9_5.alma.1.x86_64.rpm b69b858a4d175e040ed3606faa253c7ece04aa585ab66739e0eb3067f3ecfaf5 grub2-common-2.06-94.el9_5.alma.1.noarch.rpm cb4d2188428045a3d5209257b77b6eeade01a2fd140b18cb2df21d8cee944ca4 grub2-tools-minimal-2.06-94.el9_5.alma.1.x86_64.rpm cf7e5756aa66308a759683f4f7e845a6b7cf1aed87565474552a5741afe82725 grub2-efi-aa64-modules-2.06-94.el9_5.alma.1.noarch.rpm d8d666c7b9a5a5ffb5e4a5c736b7ddecded4038deae492881c90f5ff39f76d7a ALSA-2025:3531 Copyright 2025 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default expat-2.5.0-3.el9_5.3.x86_64.rpm 5120af28b28973b6ff4e3892a0d87e1105e3c24366f6b7f5251e47832523c3d8 expat-2.5.0-3.el9_5.3.i686.rpm b606c0dddf97e6e6a34256aa400fda3dfdb9ced53fddb7fd934304feb5ca1e02 ALSA-2025:3937 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default bpftool-7.4.0-503.38.1.el9_5.x86_64.rpm 02987e4465a80b2019d491fa1777f37e423ad246dcd0decf60099ef13a833163 kernel-tools-libs-5.14.0-503.38.1.el9_5.x86_64.rpm 2124de03a576890f9a0eef4998bf8fbe08ab4759cd331de79422069609f50e64 kernel-5.14.0-503.38.1.el9_5.x86_64.rpm 213927c9788b59053160c3118fdd74704f20c4ce350b902304e647a2a9e5099d kernel-modules-5.14.0-503.38.1.el9_5.x86_64.rpm 417153d7a9f5c302e4ecc548a8bc5e11d0f8f599c61da273eb1996365ebfef61 kernel-debug-modules-5.14.0-503.38.1.el9_5.x86_64.rpm 47b22e12c54200a28bce979fa31d29ec494628e4da9d9e7fa82d06ae38d4acb5 kernel-debug-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm 5731a2aabd1a75b9732568f6de2aba2a2faf9b53387fa2353f474aff36a67550 kernel-debug-uki-virt-5.14.0-503.38.1.el9_5.x86_64.rpm 59b0675d1153a64287d1b63a419476f37e62ad8e5f5181c9d9fffa1d9ab07408 kernel-core-5.14.0-503.38.1.el9_5.x86_64.rpm 7a1dfeac7ca798061a76b5e4952fc982f1b520cde0430d0e1ac0916a534abea7 kernel-tools-5.14.0-503.38.1.el9_5.x86_64.rpm 9d1bd898d6ddcca3a6116fa6a7b68adddfde1139a7b5599da8eecb753657e389 kernel-debug-core-5.14.0-503.38.1.el9_5.x86_64.rpm 9d8760f7d87353febfda0132d6a5aa7054104775bf5c01f901d7831236b8b041 kernel-debug-5.14.0-503.38.1.el9_5.x86_64.rpm a16198fc0ee074df7397d106f54504b389528e90bdb04e7cbf816c95624d470c python3-perf-5.14.0-503.38.1.el9_5.x86_64.rpm afc370361ea24425e302a8074b7694be7f6fa47e2ae130c61fe9cad36066c90c kernel-debug-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm b2cc1a480a9370e0a99501c6083ed8c44301c9a66f66d834fc106e839de1b5d5 kernel-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm b90348a0bebafe00289cc55060219da5e0d52bc8b7a11e63643b1e46be206f71 kernel-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm c4f3145148c49bc9ac460ad26a13d0548ff77ebd15b557ca7f496329491a2d56 kernel-abi-stablelists-5.14.0-503.38.1.el9_5.noarch.rpm d30600d71036f4521e69a47c70d96569f7f93ceaed413174e3577f7d2a9004b3 kernel-uki-virt-5.14.0-503.38.1.el9_5.x86_64.rpm dfc0afb69713991a39abf41faff328350d378fc2a7301ecff8c4888f9f8e704b kernel-uki-virt-addons-5.14.0-503.38.1.el9_5.x86_64.rpm e196ba4e500b4bff1503a6f06d1a291b46c62ab129537baf51b738b5dba135e5 ALSA-2025:4244 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_5_default glibc-langpack-de-2.34-125.el9_5.8.alma.1.x86_64.rpm 0095ddab33788d9d478052b17ae354da718ea428d61b157fd4028a1d05ad86b7 glibc-langpack-sid-2.34-125.el9_5.8.alma.1.x86_64.rpm 021e3789c9501c56882ef4a0f3b33455afa8439930fc3961c92ad1552cb922e5 glibc-langpack-ta-2.34-125.el9_5.8.alma.1.x86_64.rpm 0277b917b4ef42c6a62fcc954d586fbd1ea926a69e561b1a5b88eecafe8de36c glibc-langpack-sr-2.34-125.el9_5.8.alma.1.x86_64.rpm 058df3de609a08548d0846ac93208cca9dfe01fa1789c0364c7530b2cfa9acb7 glibc-langpack-ak-2.34-125.el9_5.8.alma.1.x86_64.rpm 070802615ca1aca9488124f6e1c229d6c7b35dacf45c8d84e5748078e922acd2 glibc-langpack-vi-2.34-125.el9_5.8.alma.1.x86_64.rpm 07d58e173ebeaf6a62937234fc81d3933a9b0e690beb08fcbc5c1fde53d3a5f2 glibc-langpack-shn-2.34-125.el9_5.8.alma.1.x86_64.rpm 08a42b4c77067e2625f64e15670de3acd1ad00660a37719958470685feb937ac glibc-langpack-ru-2.34-125.el9_5.8.alma.1.x86_64.rpm 0999e1d6a0c4377249bf39bf4d8b34da4876b194ea280e496c41ad68d5c2bb0b glibc-langpack-da-2.34-125.el9_5.8.alma.1.x86_64.rpm 0a99dae7ae70d0597739926d6c95fd94ce2f69637a7a8693a39fb1f225d9e3e8 glibc-langpack-oc-2.34-125.el9_5.8.alma.1.x86_64.rpm 0b1fc0d9cb1a6d3aebd33149ed0788695f57b01aca9e6e6295767d67c6b45c64 glibc-langpack-hr-2.34-125.el9_5.8.alma.1.x86_64.rpm 0ec13e99c9510be44cfa66bb72f54b7eb6245df23a8677479f90eb98f707e813 glibc-langpack-ar-2.34-125.el9_5.8.alma.1.x86_64.rpm 1015f40b65f594dc7b2ab35208d64f83032987079c11a5b99ad6217eac666827 glibc-langpack-pa-2.34-125.el9_5.8.alma.1.x86_64.rpm 12577083bdaef1872d61091a90bfc9a04951b13c9c80d6f445e3e240fd0e335a glibc-langpack-ga-2.34-125.el9_5.8.alma.1.x86_64.rpm 133be91883229bb67ca962f80f575c56069abdb91061a87aaefb29c3f91103ad glibc-langpack-li-2.34-125.el9_5.8.alma.1.x86_64.rpm 13f3fde7d3fdb031b33ac15a998e696c28a6cb72877d3c2da06b296c2b83c211 glibc-langpack-ms-2.34-125.el9_5.8.alma.1.x86_64.rpm 14ffda141e54c39782baddbe0c4dbde07b4225406dc4e5c43517157117e2984d glibc-langpack-tpi-2.34-125.el9_5.8.alma.1.x86_64.rpm 154c0064a6e8eb5dd0b0db35c2f5fff939d6ee147762e756a41cbf2e3a15eaea glibc-langpack-ts-2.34-125.el9_5.8.alma.1.x86_64.rpm 1634475b37c1b8ee2100e81e0de00231f96a2297ca87a466d391615d56d9466b glibc-2.34-125.el9_5.8.alma.1.x86_64.rpm 1848b9ced2dfec6c206791b23a5a8a6356939c5ed0492fc91c86bf1d3a255c1d glibc-langpack-ml-2.34-125.el9_5.8.alma.1.x86_64.rpm 1ae304ee8afbed41f4142ffe667613b9ee4df1a9081a7bb30a3b2d04cbd0dc59 glibc-langpack-ayc-2.34-125.el9_5.8.alma.1.x86_64.rpm 1da55f2e5bf436465b8f9adb203c4f43e4413603e71e23e3314de63462e42f9a glibc-langpack-et-2.34-125.el9_5.8.alma.1.x86_64.rpm 1e0fdbcab7e0d795ea359467e0267b9c631521a81f2dcfabd7e0c1eaa43754c8 glibc-langpack-uz-2.34-125.el9_5.8.alma.1.x86_64.rpm 1e92b2eeac9bb5b42b13d3fa2d964da06e456b06520f36228296410cfaa55642 glibc-langpack-nr-2.34-125.el9_5.8.alma.1.x86_64.rpm 1e9b577495d23f99e45b3c260afc077fe7907a6adc8d74ea02bde0f77baa4713 glibc-langpack-mfe-2.34-125.el9_5.8.alma.1.x86_64.rpm 1f5113156255b0ecb483d62ef030db413f39bac92a3986f599e529d01f355a85 glibc-langpack-hsb-2.34-125.el9_5.8.alma.1.x86_64.rpm 21549b6a6247b510c1b5fc77f399e235c8052fdd3406624ee719742cfa6d4505 glibc-langpack-mr-2.34-125.el9_5.8.alma.1.x86_64.rpm 22bcb323c0e01e54cfbe015fe22e60091b56901aa5dd6dce335ddf36cf903a9a glibc-langpack-zu-2.34-125.el9_5.8.alma.1.x86_64.rpm 22c091adce15358828a1209e3741a3ade238477984877b86278980ff0d0bef0f glibc-langpack-gl-2.34-125.el9_5.8.alma.1.x86_64.rpm 233a13bd4d4c71be7c363111759e3c08517ae8d99fb35773ebd6e0a54b8d8d7e glibc-langpack-niu-2.34-125.el9_5.8.alma.1.x86_64.rpm 235b99a3678146612e16316e1b70ba8f7cab62ae2d7c9dc2927b5c67eb87b158 glibc-langpack-mn-2.34-125.el9_5.8.alma.1.x86_64.rpm 23c246f5c1692fea9747ba710c7fac0bfc604258e87cd8a6a1b55952106ac58f glibc-langpack-cs-2.34-125.el9_5.8.alma.1.x86_64.rpm 248559efe5089b7c07ce31d83bbf564c3524cfcec3bfd44ce91681c9d07e8957 glibc-langpack-mt-2.34-125.el9_5.8.alma.1.x86_64.rpm 24df300b230f05a056f485a05e8854cb84e113176276df3eefd30d21b865fa0f glibc-langpack-cv-2.34-125.el9_5.8.alma.1.x86_64.rpm 25cb8f5d6193b2f219e78e8d773fca377e629e41079c4f57a62424973e54ddd4 glibc-langpack-mag-2.34-125.el9_5.8.alma.1.x86_64.rpm 26a59907be1026778cbdce3b7158d9a9e94a357a97dc8e1ac4b940188eee7fc1 glibc-langpack-tl-2.34-125.el9_5.8.alma.1.x86_64.rpm 282fad99a07cbe948dd60f2850c491ddb81de5483add794c6fc19efac21de3c7 glibc-2.34-125.el9_5.8.alma.1.i686.rpm 28bc1088e39483d145849e8804c5a0f2524faeb4f76631ae46c41100f40e08b9 glibc-langpack-bs-2.34-125.el9_5.8.alma.1.x86_64.rpm 2904ddba988a540a04eb2f9008c50a9073b8043915ced31dd7c617b889796a85 glibc-langpack-wo-2.34-125.el9_5.8.alma.1.x86_64.rpm 29b28c9b7f32b4d80b52d9e8ccac33d0692dfd4361d5e6fa3c89e58aa1a3a779 glibc-langpack-es-2.34-125.el9_5.8.alma.1.x86_64.rpm 2cfe2668cd8968078588e5dc840e7ec2bfc9940a8224c8ab723744136bd1d15c glibc-langpack-mni-2.34-125.el9_5.8.alma.1.x86_64.rpm 2d2bfb1bd584de64a2f61fa414421399e482eeb56defc76ecf1cc3db220dd412 glibc-langpack-aa-2.34-125.el9_5.8.alma.1.x86_64.rpm 2d789eada6989878075e0da038c21df928a77265cd3ca1c3a326b69c7a315ac8 glibc-langpack-ia-2.34-125.el9_5.8.alma.1.x86_64.rpm 2df2c63524e721f52b0f333dcb1715e3fabfe843ca06f4a8eef6fa73b00faf41 glibc-langpack-ff-2.34-125.el9_5.8.alma.1.x86_64.rpm 2e2e36086c390562be5293aaa76f210f5c2d78172ca95ec8eaeaae7fb4abeaa8 glibc-langpack-uk-2.34-125.el9_5.8.alma.1.x86_64.rpm 2e9b86f05d3893050a5743e1e2b91f0eb7953c3e1dd34be046e574e357c522b7 glibc-langpack-si-2.34-125.el9_5.8.alma.1.x86_64.rpm 2eebdb6f3e1726ce85469dbb0d8bb93d35e2826edf500f4559637310faf1972b glibc-langpack-csb-2.34-125.el9_5.8.alma.1.x86_64.rpm 2f74bbc3b576d2e73997748670f61ad5cfa3e5add82f84902c1e3cfc2e0a5b6a glibc-langpack-kk-2.34-125.el9_5.8.alma.1.x86_64.rpm 301eb5607b2fbc23a1c5cb54fb8a40f04f1224f35a75f6ff1198128e20f0685a glibc-langpack-st-2.34-125.el9_5.8.alma.1.x86_64.rpm 308b51fb540a985f5ca1cb9799224add70fc19b671027cca3edb320c0c147c13 glibc-langpack-yue-2.34-125.el9_5.8.alma.1.x86_64.rpm 30e037e12a0e548fadae9c305090bbac06c4d7e25173d36960cf8ec81be2a5f7 glibc-langpack-kok-2.34-125.el9_5.8.alma.1.x86_64.rpm 321660f62c6095c7ecc467049809f6c053dee355490ad170cc165c1c4bb292aa glibc-langpack-os-2.34-125.el9_5.8.alma.1.x86_64.rpm 332f732f7c263ba330d67407f4921451453b5b822024708449366de4b208c82c glibc-langpack-he-2.34-125.el9_5.8.alma.1.x86_64.rpm 335a4da3cd189b127ed18f7ebf9dee90b057da15684487d4917f69c93b8d4b2e glibc-langpack-sl-2.34-125.el9_5.8.alma.1.x86_64.rpm 34b613f53d7d2b35cd5f0a66084f41ff87140b72736395cda807a44d8a99ab30 glibc-langpack-ky-2.34-125.el9_5.8.alma.1.x86_64.rpm 35c8a143e9af24740eb882561dd849b20289a68188118cfba42b223b59343c01 glibc-langpack-ckb-2.34-125.el9_5.8.alma.1.x86_64.rpm 35cf853620d9ce598f9a7ad7df9b278c93635ae753f513900502a4078ce0aa70 glibc-langpack-sah-2.34-125.el9_5.8.alma.1.x86_64.rpm 35d123cf3c801717ab1d2dc1a8f5a7124430d1154bd6848175e550e932cb2dea glibc-langpack-ln-2.34-125.el9_5.8.alma.1.x86_64.rpm 35d45403a626b58b6679b3d7d42bf62674a0a32123a030b3795cb8251a69e788 glibc-langpack-hak-2.34-125.el9_5.8.alma.1.x86_64.rpm 371437b63fdbe9a5fcbecd700439c4f6da3236c11b460aa537b4bedc457b93f1 glibc-langpack-ber-2.34-125.el9_5.8.alma.1.x86_64.rpm 3ac6683b2a003239feba8b8cfd9ae0e63079c6c8965af83116030aaf5e037f6a glibc-langpack-th-2.34-125.el9_5.8.alma.1.x86_64.rpm 3b1cdb61fee797c3b1dff2ea02c13f8f9a4d177a0fc69e264869a5bea3b21cad glibc-langpack-mi-2.34-125.el9_5.8.alma.1.x86_64.rpm 3b34fe18825e3289994baf40baf64d53b765222080074b2689e9122b5c89aae9 glibc-langpack-wa-2.34-125.el9_5.8.alma.1.x86_64.rpm 3b8bc2e950d7b2895bbf0c39334d3b2a99f044486c90239567e9471f49602be4 glibc-gconv-extra-2.34-125.el9_5.8.alma.1.i686.rpm 3baac77b88c53eeeddf2c04c4cb6f9c79df622da5581e61d5335a3374acfdc37 nscd-2.34-125.el9_5.8.alma.1.x86_64.rpm 40cb572769b5f29aa81f81ad05e0a268d300c4d410b1052876d23222e00e533c glibc-langpack-hi-2.34-125.el9_5.8.alma.1.x86_64.rpm 43f3bc166fa19ccdcb37cbe26222b0ec57d5e198bb0b61d626d6fe1b53d8461c glibc-langpack-fi-2.34-125.el9_5.8.alma.1.x86_64.rpm 460451346c2399a4b7f0f2cce54bbb2699c0ca841469d532112f0650dd5817ad glibc-langpack-sa-2.34-125.el9_5.8.alma.1.x86_64.rpm 46328287fe16e42af12da5a63732f104051a1597c048379dcc6aff31765beed9 glibc-langpack-sc-2.34-125.el9_5.8.alma.1.x86_64.rpm 49f936047935cd7484a3feecc4e71a499cf3ef3af17f3be46e98f1d029a1c124 glibc-langpack-lg-2.34-125.el9_5.8.alma.1.x86_64.rpm 4e1564fc3bc71c4d2360cedd8ef68de74a4080bf825db0f2b43a0bf2b3cb9899 glibc-langpack-byn-2.34-125.el9_5.8.alma.1.x86_64.rpm 4ed57bb6dc545d7f9f19d2b7f3897d8c82db3e23a810ef6b9a7a054dbcdfc87c glibc-langpack-tt-2.34-125.el9_5.8.alma.1.x86_64.rpm 4ff65ec141ec0df5c221807a9ce4068c129967f2dd14ae7a3f37e65ff8d69b67 glibc-langpack-pap-2.34-125.el9_5.8.alma.1.x86_64.rpm 532a6a53597b44322cae35253845d16ed41794baa381b526301e9e9630433481 glibc-langpack-sat-2.34-125.el9_5.8.alma.1.x86_64.rpm 56ffd9ea14eecd07acb53bfa995b144d0671643e9cbdaa52dd86309a6f55b001 glibc-langpack-ve-2.34-125.el9_5.8.alma.1.x86_64.rpm 579566a87eec04eb2a5c339192899f7f287ad1ceee20f14bafb24a7b6de826e8 glibc-langpack-rw-2.34-125.el9_5.8.alma.1.x86_64.rpm 5802b9e21de504a6c2d5ebe93a579a26d86171c71bd3aad538434f4953b706e7 glibc-langpack-chr-2.34-125.el9_5.8.alma.1.x86_64.rpm 58ae82cdf73799f4b3ad64f17a18691d7016a7d58b3facf88c1cee08cc6cb5cb glibc-langpack-bem-2.34-125.el9_5.8.alma.1.x86_64.rpm 590132d79500d08612183376ea73569b30d7f85515c533497c83afe62e632562 glibc-langpack-lij-2.34-125.el9_5.8.alma.1.x86_64.rpm 5b057959532f3318c69c347a0ce24e2cc919fb25b206c5a960f1b6f0aec0fe2b glibc-common-2.34-125.el9_5.8.alma.1.x86_64.rpm 5b8582afb69c49880c2ceab98b392c22778e4670f348e8eb76697bd00c8f074e glibc-langpack-sv-2.34-125.el9_5.8.alma.1.x86_64.rpm 5f503b6ef4401455cb877196573414c1d1428a0fb1517bec09afddca822e95a3 glibc-langpack-ro-2.34-125.el9_5.8.alma.1.x86_64.rpm 5fa9fb7ffa5eade1f1a1cf7d01b3e816bea4ec60d1e2d30fa06144c989871177 glibc-langpack-hu-2.34-125.el9_5.8.alma.1.x86_64.rpm 6131e7f3360b5d46680ee49841d23ee91f3579d797c064d71197ccbb0d1f94a0 glibc-langpack-ha-2.34-125.el9_5.8.alma.1.x86_64.rpm 6178fca04267d300b48acd1c70090fd7f59e81c527ec1aead8985d976a171a8c glibc-langpack-ps-2.34-125.el9_5.8.alma.1.x86_64.rpm 622e92879c14e1f1e615d2241f6d833feb19a7b3b7fd1a549f67e72b4f1c80f1 glibc-langpack-tn-2.34-125.el9_5.8.alma.1.x86_64.rpm 63dc8f0d50049b166db90e62bcda2d932084339d957eaed1cae44061d8effe16 glibc-langpack-ug-2.34-125.el9_5.8.alma.1.x86_64.rpm 63fcca19319a90fc09b12aabdc3878bec624232bbd9a3a2e3b7072b44d7f537e glibc-langpack-lb-2.34-125.el9_5.8.alma.1.x86_64.rpm 646667d45985029ee5b54f188a81c25f4c010e9d54e68b08c77f9875f4ba6186 glibc-langpack-tk-2.34-125.el9_5.8.alma.1.x86_64.rpm 659f41faa7f90ed06b2e18ac2d4531646b49a30b398f2e7fb10f1c6d5ad8ef80 glibc-langpack-fy-2.34-125.el9_5.8.alma.1.x86_64.rpm 65cae3c2eb09fcc3f6ad7046a10ededdf02cc7a4a86a962938739b92430e89a5 glibc-langpack-cmn-2.34-125.el9_5.8.alma.1.x86_64.rpm 6633c5858f42297f068d896249e33c1b989a887a43e70ea515d22c184bdd75ca glibc-langpack-dsb-2.34-125.el9_5.8.alma.1.x86_64.rpm 66f084fa8e3205142e4c591163879e4c89ba64226d069a3822f16d1eeb2af0e4 glibc-langpack-kn-2.34-125.el9_5.8.alma.1.x86_64.rpm 6affef63a2e8e2a67753729e83c726f68d48051dede7fade670443381a839055 glibc-langpack-brx-2.34-125.el9_5.8.alma.1.x86_64.rpm 6bcafcb1983b436b790e5cf3cbbabb6c8cd038bb92dc6e2dafe0f5c761e0371a glibc-langpack-mnw-2.34-125.el9_5.8.alma.1.x86_64.rpm 6dcf2b11cc0eda5bb231ccd8fabf6d6d02ac5799d36ebb2d77732b4aebe72691 glibc-langpack-nn-2.34-125.el9_5.8.alma.1.x86_64.rpm 6f7f191a9d6b024f1a4c408917e253c3a361accead2c0cd8b27058e1df7cb6e0 glibc-langpack-eu-2.34-125.el9_5.8.alma.1.x86_64.rpm 7012d3a7f5743c43e2cb8a8e4daa67648a7698d793f80b932da690cac068f068 glibc-langpack-fo-2.34-125.el9_5.8.alma.1.x86_64.rpm 718a6a859e76570f13feab85a4b62d556c030d273c3e84211980e11d85e08d66 glibc-langpack-id-2.34-125.el9_5.8.alma.1.x86_64.rpm 73576aae1153158ea12375e523b02110c43b5ab252d92738c2ecab38570c85e9 glibc-langpack-ast-2.34-125.el9_5.8.alma.1.x86_64.rpm 75ec282b677171eb6111ad36065ef3e7f31f49d6c50a726fc5d537d167060890 glibc-langpack-el-2.34-125.el9_5.8.alma.1.x86_64.rpm 75f77e02d5dc10162030d0a122b538561fa2d6d2c36383e40cb4f35b1d054798 glibc-langpack-sm-2.34-125.el9_5.8.alma.1.x86_64.rpm 760781f80da7c3bd811eca0581f224504d58d5dc5f072cfb52b7569bf0dfb4e1 glibc-langpack-gu-2.34-125.el9_5.8.alma.1.x86_64.rpm 76ca6b0a58de28a205bf8900a729d1fe7f611f666a9e006f4dc506a9d78badec glibc-langpack-km-2.34-125.el9_5.8.alma.1.x86_64.rpm 77b51267c3a7265931ebbddfc18dfb2f7310dc84d730a61667f0fd87bf6aa5bd glibc-langpack-yo-2.34-125.el9_5.8.alma.1.x86_64.rpm 7881ea5e61de6743d9bd6b6b56d09f971ae251bb193840e47bbba1d2eb0e75be glibc-langpack-om-2.34-125.el9_5.8.alma.1.x86_64.rpm 797d5d9198d7273c8369b55c4f1e992c0f7116b5e631b5e01d97d6678c79926f libnsl-2.34-125.el9_5.8.alma.1.x86_64.rpm 7d0e521ab087807ee71d79da66a2829b827bf5080bb5d080dfab108e31cf218b glibc-langpack-nb-2.34-125.el9_5.8.alma.1.x86_64.rpm 7d262af91e753820189cab694ae1dca67e5178ee6f6dc1f11c2453d09a67bf06 glibc-langpack-hif-2.34-125.el9_5.8.alma.1.x86_64.rpm 7d7010d6752dd066d186705ce8f67a5bcd1d1e665be1a8a8c8df6ca5572bc8ac glibc-langpack-ti-2.34-125.el9_5.8.alma.1.x86_64.rpm 7e22c55d4404feb4270b1569548fb8eaf65835df34a357db5094e89c37d3a4fb glibc-langpack-mk-2.34-125.el9_5.8.alma.1.x86_64.rpm 7ece5e6960f593c1d4a3cdf64d72e1e8697d273b00062cf8eab64b3468f130a7 libnsl-2.34-125.el9_5.8.alma.1.i686.rpm 7f4d1552b6036c49028db959f82fc0bc30773cd7ed0a62c3906da0e2388f4dc5 glibc-langpack-agr-2.34-125.el9_5.8.alma.1.x86_64.rpm 800ca2dc4e89bb2c925a3fb402999fb34df593277c1813e8e8eba36f0877c09b glibc-langpack-ht-2.34-125.el9_5.8.alma.1.x86_64.rpm 808881b86c30706efa23b4f6ce81dc8e157b4d6e4960a4e0c533668ba1735086 glibc-langpack-shs-2.34-125.el9_5.8.alma.1.x86_64.rpm 813c37ef7fe0f1818d8d9a0ea915f9ce91a4349c78cbe8ec4e4841286644ed56 glibc-langpack-nl-2.34-125.el9_5.8.alma.1.x86_64.rpm 825b1b94876e69b5a7e9c33430a78579ed14e9fd1ae6e08180df3aeef6d24ebc glibc-langpack-quz-2.34-125.el9_5.8.alma.1.x86_64.rpm 8281409586e3186ab47ae70005f383491c41e9c8d94ca92ce57848e575bb43fa glibc-langpack-gd-2.34-125.el9_5.8.alma.1.x86_64.rpm 83af49215ad163c73e7c1e095d1396ce848690285fea2fd6ec35d2ea1b5d02fd glibc-langpack-sq-2.34-125.el9_5.8.alma.1.x86_64.rpm 86c7c49929c669cc201a41398df1d479f98b47c5ed8865a9d87af3a1e9f512b2 glibc-langpack-ka-2.34-125.el9_5.8.alma.1.x86_64.rpm 89a647c277fb5c5629755bd0c759d86570feb3fc9ebc519bdddd50c707392851 glibc-langpack-bo-2.34-125.el9_5.8.alma.1.x86_64.rpm 8af05a146ec380f94c3e1db61b748c47881aea09f3a46c027827cad37d443ef0 glibc-langpack-eo-2.34-125.el9_5.8.alma.1.x86_64.rpm 8b35373604d8b0e60070ce8b045dd77e417fc922c6cbabf97eadf6bb321c4315 glibc-langpack-anp-2.34-125.el9_5.8.alma.1.x86_64.rpm 8b53e204671620854194449684583a11291e14abcb1a7895356db2f810d01c90 glibc-langpack-en-2.34-125.el9_5.8.alma.1.x86_64.rpm 8d63f6f39f4a6096df8f8de4ba9fecaf3e2226462400cd9f5a551f38d793988c glibc-langpack-to-2.34-125.el9_5.8.alma.1.x86_64.rpm 8ef7d8136c8b0c8aacff8fdc1bf6428137d78e7c5d96492f571d9d33e73ddc9d glibc-langpack-hy-2.34-125.el9_5.8.alma.1.x86_64.rpm 8f581f1dd9657fc6dc8da0b75d10ae284228cad8560afb90194df6a6e59e4142 glibc-langpack-ko-2.34-125.el9_5.8.alma.1.x86_64.rpm 9369400f3641cb6b2e4f2c2c6f50c95af7b44f2af98a1a99f9bda5e416a156b3 glibc-langpack-my-2.34-125.el9_5.8.alma.1.x86_64.rpm 96a6f300340c583b82c15f855c97b9aeb4dcb24190ea289a16313e81830a0f7a glibc-langpack-wal-2.34-125.el9_5.8.alma.1.x86_64.rpm 9b476033a345574f5868c04bc320c8f2dbf18a8422be2afa8e0dd61174619437 glibc-langpack-tcy-2.34-125.el9_5.8.alma.1.x86_64.rpm 9bd90e1930908c6d0914da8cf8162e38dd21da4eb31abbf68b8e4ca395612be0 glibc-langpack-te-2.34-125.el9_5.8.alma.1.x86_64.rpm 9c5d6e5b99636724811cf7c399ac0a9292b1fcd99dfb27fe1c87564484d1e82c glibc-langpack-br-2.34-125.el9_5.8.alma.1.x86_64.rpm 9dd48b0e41ed8ef8f72a5001e956be323559045634bb7de33bd1bb2a61ad4e8d glibc-langpack-be-2.34-125.el9_5.8.alma.1.x86_64.rpm 9ec8bda8eafb3a37a72e9ee653ad4487a827cc8ca3fcb0e378885d34177f8fff glibc-langpack-hne-2.34-125.el9_5.8.alma.1.x86_64.rpm a04505af0fd17383009f094a991ae9827867db9329e38c4a8cbd7880a9cb4525 glibc-langpack-gez-2.34-125.el9_5.8.alma.1.x86_64.rpm a0e005770796612fe3992b5c4841b92c3448e2773d483fffa8e42c80af51bd5c glibc-langpack-szl-2.34-125.el9_5.8.alma.1.x86_64.rpm a1bcc48649732934aed5c4777e0345453e98ad9aed9aa3ce87a6b83ca4b5173c glibc-langpack-bn-2.34-125.el9_5.8.alma.1.x86_64.rpm a23935065614f36e29c3315642ae38efd80db45b9c29dd462c8901019699fb7e glibc-langpack-pt-2.34-125.el9_5.8.alma.1.x86_64.rpm a3977de06a21c68bf793973ad1dfb081392180f27f823e8763cbcd1968530e16 glibc-langpack-se-2.34-125.el9_5.8.alma.1.x86_64.rpm a487730f080f7a181f0108648c76591aecad7c9971c8ab026005e34b59907ede glibc-langpack-is-2.34-125.el9_5.8.alma.1.x86_64.rpm a8e45cb7014e66a05b0d2d5c8a87cad0114bcaf3fc34d968227d111601596417 glibc-langpack-xh-2.34-125.el9_5.8.alma.1.x86_64.rpm aafb1f8574c688470277d7eb218f8bc4995045e2d621c4d00b084dbe2d3e6aae glibc-langpack-so-2.34-125.el9_5.8.alma.1.x86_64.rpm ad3076f85fc3b3e9e7aecfc04d6352a7ce4c192c2b501770d6b48c891d5359ce glibc-langpack-lzh-2.34-125.el9_5.8.alma.1.x86_64.rpm ad80810e4f85be9542846ae549f00455d17ad06e32f55cb48fd7731dbeaa3629 glibc-langpack-tg-2.34-125.el9_5.8.alma.1.x86_64.rpm ae26ea0e8b739ffe080e827b68bc3049b7bb80917e616758902c5ab85e36eeb3 glibc-langpack-mjw-2.34-125.el9_5.8.alma.1.x86_64.rpm af751d6b78bda56e9e55f3d956b6e13c4541c78887a5f9c8205bc10f9fbf64a3 glibc-langpack-ce-2.34-125.el9_5.8.alma.1.x86_64.rpm b0deb2eb01c4ada8251c0ec8b8ee727b9d7336e9aeb011d0d397b50ca78e5b39 glibc-langpack-mhr-2.34-125.el9_5.8.alma.1.x86_64.rpm b0e5616ab23b5bb992b82b29d97b45eb5badccd392ee30cce148b715b48539f8 glibc-langpack-ik-2.34-125.el9_5.8.alma.1.x86_64.rpm b16adbf34fd5bdd93a0a2d84d9f439e826cc0599cf16841edb0eb0703b968c91 glibc-gconv-extra-2.34-125.el9_5.8.alma.1.x86_64.rpm b21cebfd6e96a3f8f8eb02b2317e69528649355657fe44a66b4b6dcc03fec638 glibc-langpack-raj-2.34-125.el9_5.8.alma.1.x86_64.rpm b457c522f5546d70da6c83d1bff017fb881fab725b46135f314d93070450eb86 glibc-langpack-fr-2.34-125.el9_5.8.alma.1.x86_64.rpm b49e49f605d916ff00ffc9cf0f7fb789ca273fdab42737d7e34431e32a97de9c glibc-langpack-ja-2.34-125.el9_5.8.alma.1.x86_64.rpm b7884a6828e8b862e50769d0640553c6fd177df6ddf37de071557b1ee4070f5d glibc-langpack-az-2.34-125.el9_5.8.alma.1.x86_64.rpm b9286b400f17b15a6a292cfb29214b098353737691fb3322466ce4f9445e4981 glibc-langpack-bhb-2.34-125.el9_5.8.alma.1.x86_64.rpm bc80ce6d66425aba056acb06e12fca2d22bc10af57047ab373d5e6b9141539d7 glibc-langpack-lo-2.34-125.el9_5.8.alma.1.x86_64.rpm bdf7622983770183ce09950c0c74f79de62274eb3ebf63fdcaea0390335eb1c6 glibc-langpack-ss-2.34-125.el9_5.8.alma.1.x86_64.rpm bf399d449ef6a69046617d63d111d2a7d541401504d3433368664d3422a01cea glibc-langpack-am-2.34-125.el9_5.8.alma.1.x86_64.rpm bfc8a91f37793c2938f0a4bb7f7006c6a0ed9fcc8504137f3781484cf0456a83 glibc-langpack-tr-2.34-125.el9_5.8.alma.1.x86_64.rpm c16191cc2d8ca0d8f68201e89d68dbe2461c3d99fd100a9852ac61b695d17440 glibc-langpack-cy-2.34-125.el9_5.8.alma.1.x86_64.rpm c1c0df2d333c01ed4dbf56baeacc5add84920d828a5610e36d4aae6586c2d08a glibc-langpack-sk-2.34-125.el9_5.8.alma.1.x86_64.rpm c46524c89f554a51381b809e561f696ca8b126071b6eda1ff232347c6a50c11e glibc-langpack-gv-2.34-125.el9_5.8.alma.1.x86_64.rpm c5ecce2aaad3303792db31930ffaf166d1419584a18a4dd92d90d609805ccd34 glibc-langpack-mai-2.34-125.el9_5.8.alma.1.x86_64.rpm c6045a4ff690c48e2a4d645d2683faa6a5c191bf56b160d095dcc92e3b005a4c glibc-langpack-sd-2.34-125.el9_5.8.alma.1.x86_64.rpm c69280751ae6619b5e000af9142b4f7839705e6bf89a014dd10e9e675bad3aab glibc-langpack-as-2.34-125.el9_5.8.alma.1.x86_64.rpm c7f32e062862628585d1528f81f9a29cf2d43328c92ebe19f67b294a3da2952a glibc-langpack-sw-2.34-125.el9_5.8.alma.1.x86_64.rpm cba0a7925aa7623e03cdaaa093ab8207411e11b3c3c9c54262630e7c06cee47e glibc-langpack-nso-2.34-125.el9_5.8.alma.1.x86_64.rpm cc7bfeff2232e1208256bc3364335fde4589ec81ab6c313b65b4e115c1f2fe60 glibc-all-langpacks-2.34-125.el9_5.8.alma.1.x86_64.rpm ce0681b433af2cf99b5da9e6f711087da4696a26dde4732b312ccf9a7c505536 glibc-langpack-unm-2.34-125.el9_5.8.alma.1.x86_64.rpm cf4724056f69c9466c6b0cdad68df8fc1084a1fe944ad7236be2631861c0e430 glibc-langpack-miq-2.34-125.el9_5.8.alma.1.x86_64.rpm d086fde706ab6ab5635c8862a88c971a607e0dba793f8658b197adf3e69ab3de glibc-langpack-fur-2.34-125.el9_5.8.alma.1.x86_64.rpm d183057e33929b1433dc38f5b013ad49b05da267feb3618ddfa374d9344a56c4 glibc-langpack-af-2.34-125.el9_5.8.alma.1.x86_64.rpm d2891c63f1680cb72638cd64cede8df7cf85db17100516cca6777edf3fd6b0b4 glibc-langpack-nds-2.34-125.el9_5.8.alma.1.x86_64.rpm d3ad7352e32448df3745d7b99cd995668fe1019544d323073bc788a96a5c0a5e glibc-langpack-ne-2.34-125.el9_5.8.alma.1.x86_64.rpm d60b6d7ab8dd42528d5ad70ec712ff5161eaa5dc5dc49a8609c98614b73645c9 glibc-langpack-lv-2.34-125.el9_5.8.alma.1.x86_64.rpm d810f4e0b634b9d171dfedef5b4677bd4cbc67b9cf2677c7e608ccb71124914d glibc-langpack-ca-2.34-125.el9_5.8.alma.1.x86_64.rpm d87d13da7123badf42c226a0d24513d1d12d1df0e521fae5f117a415ca15917b glibc-langpack-zh-2.34-125.el9_5.8.alma.1.x86_64.rpm d921efde5598864c2d81d4293b22546c024679eb1a402560887776e7a1a145ad glibc-langpack-bg-2.34-125.el9_5.8.alma.1.x86_64.rpm d9c69ff3c40086e6dbc7b261f71fb9d676d4062ecbaadbd9d4d2b169960cbc1d glibc-langpack-ur-2.34-125.el9_5.8.alma.1.x86_64.rpm d9cc4935408ed610d49cf03051a9692d0dc1365e33768d07a6a6665818721a17 glibc-langpack-tig-2.34-125.el9_5.8.alma.1.x86_64.rpm db30c230e978efae34fa00a550dcf0d36d91f04244444e0ff0798beb46c5c553 glibc-langpack-kab-2.34-125.el9_5.8.alma.1.x86_64.rpm db8b400de4177ff57eeda694d44d176f0b54a3b18ebfee9ee995542dd35e5899 glibc-langpack-bi-2.34-125.el9_5.8.alma.1.x86_64.rpm dc5deb20c862c36aa643b8a0b3be072325e02771319ec6026020fbaeb2123519 glibc-langpack-kw-2.34-125.el9_5.8.alma.1.x86_64.rpm dcf2a31cb27b9b3c7e32275ec47e05fe9293d6797f1cd2024ea9dec78b979810 glibc-langpack-yi-2.34-125.el9_5.8.alma.1.x86_64.rpm ddcde5a71b00e84c353143d1e14d98f230098872ad700bb7352e5b9c0b0d2429 glibc-langpack-ks-2.34-125.el9_5.8.alma.1.x86_64.rpm df06bc6b5d03455134c3a6f355b0453c26f802dbe2e6f83444f30a31e341a9e4 glibc-langpack-fil-2.34-125.el9_5.8.alma.1.x86_64.rpm df5a003b984f9d30829f2809d196dcb6f4611dc982cf296178ad97340be4c153 glibc-langpack-wae-2.34-125.el9_5.8.alma.1.x86_64.rpm df9e7e7646124cff737e6052f3d4c4cbe482a6102f60fd5f4ef6550094fe4efe glibc-langpack-bho-2.34-125.el9_5.8.alma.1.x86_64.rpm e30e8bb359a70dfe1ffbcae053b79c2539905e2322f20c6be432033191159578 glibc-langpack-yuw-2.34-125.el9_5.8.alma.1.x86_64.rpm e46e44e131e7e40fe3bb029be9f54278d375a4ce8b402920c584abc69a1587ca glibc-langpack-the-2.34-125.el9_5.8.alma.1.x86_64.rpm e5f38bef40d361b0ce3f5b66f6c549e868e4d436d007f48d55e6ce51c9e7c950 glibc-langpack-doi-2.34-125.el9_5.8.alma.1.x86_64.rpm e6a930fa79eccdaa16065fe28c4c8b0ada77ad73c95c84b4acdf8cb20c2bdc97 glibc-langpack-ig-2.34-125.el9_5.8.alma.1.x86_64.rpm ea145152eea72cb99f4847b1165b08796dc04d532d5f4cc1a22c8609443b511c glibc-langpack-dv-2.34-125.el9_5.8.alma.1.x86_64.rpm eb47d4b4cb24cb28929dc9802de76130b1365becc47a49be193086cbb82316ac glibc-minimal-langpack-2.34-125.el9_5.8.alma.1.x86_64.rpm ed3c6e805eeede8295892e6938f3afba7f9f33444df1902c8ec56008654ecf83 glibc-langpack-an-2.34-125.el9_5.8.alma.1.x86_64.rpm ed904d35fb7cbe9d010a0560bc136e1495d22bb0b1c17fb7026f62a82795c5c7 glibc-langpack-lt-2.34-125.el9_5.8.alma.1.x86_64.rpm eef68632eae46bee46a0a56288c004379785b591edc66c8f27712246a30f6491 glibc-langpack-crh-2.34-125.el9_5.8.alma.1.x86_64.rpm f0f5b471b0df88a9063a29741d25b2bbe2d32a44b75fd3b8b223343b3f61aaaa glibc-langpack-nan-2.34-125.el9_5.8.alma.1.x86_64.rpm f2c8d0488362fda495fbfccd18327eee28709b22a872f3ec2644e656b91b0d20 glibc-langpack-iu-2.34-125.el9_5.8.alma.1.x86_64.rpm f3aaf464b99652018ff258378f33feece00286c5e5fd61604259b4d7e07dd251 glibc-langpack-mg-2.34-125.el9_5.8.alma.1.x86_64.rpm f5217ac64e72c01a2757328b8fc69d2d10183ae42f68035b492679679cea304a glibc-langpack-or-2.34-125.el9_5.8.alma.1.x86_64.rpm f65c0275a8364105bea247f22405d3d63be3a478cce98eac603b731dd7f9ff47 glibc-langpack-fa-2.34-125.el9_5.8.alma.1.x86_64.rpm f7650764a6fb4ff1e805c12e729a37cde5b66a9a79646df28a9d41ddc734e65e glibc-langpack-sgs-2.34-125.el9_5.8.alma.1.x86_64.rpm f7ef0ebf0df6659c8b6dae9ea70608f8cc1ba8dd2c141ffb92637688ab90956a glibc-langpack-nhn-2.34-125.el9_5.8.alma.1.x86_64.rpm f956f66458c32e1983f47ad6e50599572c6ac10162a83774662d3361139b001d glibc-langpack-pl-2.34-125.el9_5.8.alma.1.x86_64.rpm fab67845dbe10e93f124b2b018021e3f5c0e8088ba668dd48009809d5c90539f glibc-langpack-ku-2.34-125.el9_5.8.alma.1.x86_64.rpm fad4129aa99ae7ce82ad7c77a805c90076c449beaaf2b35043bd727bfd790da6 glibc-langpack-it-2.34-125.el9_5.8.alma.1.x86_64.rpm fb456a30e4bb35d07b61cbb4af23f48f2dd6dd47724d67398ff758876ba7f0e4 glibc-langpack-kl-2.34-125.el9_5.8.alma.1.x86_64.rpm fcfa99f8ca77ca75f3c839c555530f43afdae610841670091dffbd2e9f3b66d2 glibc-langpack-dz-2.34-125.el9_5.8.alma.1.x86_64.rpm ff74c41be9d66b970762e3dd2ca2d4e53f19f54dccb25fb716c061efbcf11251 ALSA-2025:6977 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-libs-3.9.21-2.el9.i686.rpm a28ea5e4b232f7426a1b05debc2f6056476e7d6bf1b99e4d5fe75a3d18e2cee3 python3-3.9.21-2.el9.x86_64.rpm bd650dccac6000bc76dd75e10835c87f1f8402d2d7bb76854b3cd160ddeb1456 python3-libs-3.9.21-2.el9.x86_64.rpm e3c3dad501196445478dd351c4b81d677d5a2d7fb6820e5c087bbb9500fe0e48 ALSA-2025:6990 Copyright 2025 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774) * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775) * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776) * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781) * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783) * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622) * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (CVE-2025-0677) * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default grub2-common-2.06-104.el9_6.alma.1.noarch.rpm 1db378d2ed0d8b601c7b94d3ac146440a8d8253e164f72bac16da9a99f78fe5e grub2-pc-2.06-104.el9_6.alma.1.x86_64.rpm 463079a00d237b0b732a7ffa7e253ed68138ab32e09a310c7166b61953e94c57 grub2-tools-efi-2.06-104.el9_6.alma.1.x86_64.rpm 646b267c442255b07d04a7b8d568e9dffb7efacffbeb946bf8377e8742ac4586 grub2-efi-x64-2.06-104.el9_6.alma.1.x86_64.rpm 6a8535eecf4df3100a0cfa099bb97eb979b4e706abb35dab9b8d8f85003de5d1 grub2-tools-minimal-2.06-104.el9_6.alma.1.x86_64.rpm 8df06b98b8091fd816382a1ef98fb5df45cc3abf00121083c874cf8249759655 grub2-efi-aa64-modules-2.06-104.el9_6.alma.1.noarch.rpm 92f048f9cea6b4c565acd01e73c54b7faead2255addbbb8da22ab8e038ea89cd grub2-efi-x64-cdboot-2.06-104.el9_6.alma.1.x86_64.rpm 9b7417712ae17a1c7eba4686f6a573309a14176a4b84aeab4deb1a145cafe42f grub2-tools-extra-2.06-104.el9_6.alma.1.x86_64.rpm a3a2cbede290009337b48396d9f1bac5384423a620552582b7322cd39554ec11 grub2-efi-x64-modules-2.06-104.el9_6.alma.1.noarch.rpm ad4079a764915af6c7598e2ecadc65c22b07333c21c739970d2cb4b18e790c14 grub2-tools-2.06-104.el9_6.alma.1.x86_64.rpm d0895cbd50f3e489986770db5eee3404e09d866fb6fd80513d719782b62d2dec grub2-pc-modules-2.06-104.el9_6.alma.1.noarch.rpm ef2c38771e51097d02737e395037f0b09108048252a159a94d4fb2eaa64c5b08 ALSA-2025:6993 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled (CVE-2025-26465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default openssh-8.7p1-45.el9.x86_64.rpm 29ad4e9588bd0539b6e4b3b762a6556eccba66a3a669e43d269d68f98c7c6a26 openssh-server-8.7p1-45.el9.x86_64.rpm 3bd77eab3979778e5ded23a006119008587e3e86f760c98ffd0b1f98b040847b openssh-clients-8.7p1-45.el9.x86_64.rpm 6d772ae3105cce1852848aeed381de2f2e253efea4b0451a5043afff7cdb0ef3 openssh-keycat-8.7p1-45.el9.x86_64.rpm d371c435f0055ea819bc7dfc16a219f2301d34d1d8b8a95e541cb0342a78eb4b ALSA-2025:7043 Copyright 2025 AlmaLinux OS 0 1 Moderate

microcode_ctl security update

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047) * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279) * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default microcode_ctl-20250211-1.el9_6.noarch.rpm e9ee981e2cb12b3e11104458751afab3d3ee42d4d6fa5188724375669751d321 ALSA-2025:7049 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: subsequent requests to the same host ignore cert verification (CVE-2024-35195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default python3-requests-2.25.1-9.el9.noarch.rpm d0d399b82614eb9897de475d8198bfb5f2619ced822811ae4aa797a38658e842 ALSA-2025:7050 Copyright 2025 AlmaLinux OS 0 1 Moderate

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Path traversal vulnerability in rsync (CVE-2024-12087) * rsync: --safe-links option bypass leads to path traversal (CVE-2024-12088) * rsync: Race Condition in rsync Handling Symbolic Links (CVE-2024-12747) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default rsync-3.2.5-3.el9.x86_64.rpm d82dfca5929f8303c202e742fa21cc01dab98cb7c322027e7d304a484407932d ALSA-2025:7064 Copyright 2025 AlmaLinux OS 0 1 Moderate

iptraf-ng security update

IPTraf-ng is a console-based network monitoring utility which includes an IP traffic monitor, a TCP and UDP service monitor, and a LAN statistics module. It supports Ethernet, FDDI, ISDN, SLIP, PPP, and loopback interfaces as well as the built-in raw socket interface of the Linux kernel. Security Fix(es): * iptraf-ng: buffer overflow via ifaces.c (CVE-2024-52949) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default iptraf-ng-1.2.2-1.el9.x86_64.rpm 23fb9b0e2a71423f06ea2e24dfdc730688bd81b045fd26acd8f50af1719ca320 ALSA-2025:7067 Copyright 2025 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: overflow when calculating ulog block size (CVE-2025-24528) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libkadm5-1.21.1-6.el9.x86_64.rpm 19d81c5a8a91d38e7bd9f5137dc3d8a1a493507b849f9202987f23b362be4ef2 libkadm5-1.21.1-6.el9.i686.rpm 4cfe43da07a19f4561e9508df20baa1cf4595e8ed90bef249058868bc1c0f7a5 krb5-server-1.21.1-6.el9.i686.rpm 7a4ab5e95b82eb578d8f4c41acc028a47b4d1e608a22769e8708bf5d5a172d4e krb5-pkinit-1.21.1-6.el9.i686.rpm 82a8f0f5782d2785f31defb06fd6b03b30d73cd4d3ba236c93a1b36aa8a75d2b krb5-server-1.21.1-6.el9.x86_64.rpm 8ab94ce163b1a7904478b4ecfe525a116bbaabdff30fceb6735bfcc2cf4bb5d3 krb5-pkinit-1.21.1-6.el9.x86_64.rpm 8f9d76478d374983640f4e32fd0356f622111e4a48f62ee6eef9b171265cc899 krb5-libs-1.21.1-6.el9.i686.rpm 904ee44e125283a3c55875f5c4c1123e871d9289ab6d09575f4969e26b92ba96 krb5-libs-1.21.1-6.el9.x86_64.rpm a49f4502cd5d43a0b07343f172288696ffeab469fec07f2e20ef2f29819f3133 krb5-server-ldap-1.21.1-6.el9.x86_64.rpm b9ea7ee88d578401f1827bea1ce0ac568751f95349a60f1a98357fc262131d14 krb5-server-ldap-1.21.1-6.el9.i686.rpm e52a9f87dbc3cb097068b46e6f9d37683f6456db520101c1d6e8f9eb0ec89143 krb5-workstation-1.21.1-6.el9.x86_64.rpm f44329f85139c3abbb1b278e151a272e45bb5247a6a95e9115cc89fc088d2c5a ALSA-2025:7076 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default gnutls-3.8.3-6.el9.x86_64.rpm c9d430d0d0ecf0d4f269adef376c10881bf1cbe0479db6940114049c430fdd1b gnutls-3.8.3-6.el9.i686.rpm eb0a069ff9a70010095dfe34977362e18656fd3ba7fdab36bbc7d5bdcd671373 ALSA-2025:7077 Copyright 2025 AlmaLinux OS 0 1 Moderate

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libtasn1-4.16.0-9.el9.x86_64.rpm 27f1c08ce2e9bbecee5b9b4de3936303366c2967daa72947cdd89ea97e54582e libtasn1-4.16.0-9.el9.i686.rpm a4852e17f9bf297f2d8986d721656867de120a0866f4f5d04a54fff8879a8305 ALSA-2025:7423 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633) * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005) * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069) * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-uki-virt-addons-5.14.0-570.16.1.el9_6.x86_64.rpm 330e2f93d607317b672bd9cd39b0261d8cd839287dba2115d57f539b6af1f814 kernel-modules-extra-5.14.0-570.16.1.el9_6.x86_64.rpm 6570cfb2451a3ce9f514f543744cfc555ff87215f37e3b677ec912e84b2eef0f kernel-core-5.14.0-570.16.1.el9_6.x86_64.rpm 668eebd3da37ae87688ef978479de2128e029351efce3c6570eb5f5b3e07f3c8 kernel-debug-modules-5.14.0-570.16.1.el9_6.x86_64.rpm 719395fe8bca8655f24c8cf1cde27cff4cbda199c936cc1e562e273b9f6d5729 kernel-debug-5.14.0-570.16.1.el9_6.x86_64.rpm 812c6bd0e9dc21758b999708e002e091f83c90f5069a13f8e6e3ac599962c011 kernel-5.14.0-570.16.1.el9_6.x86_64.rpm 841b5f3c65d19091d5bf5f54e17bee0ad4c944aec528e46c791611d45e414f73 kernel-abi-stablelists-5.14.0-570.16.1.el9_6.noarch.rpm 84906bcd6cf93df06be55b96c5b36603d6483e92de3f64f34add3b3f6f3f6c7f kernel-debug-modules-extra-5.14.0-570.16.1.el9_6.x86_64.rpm 88457478be4faa633303618578b5802f6b26dd63895da256c7908b3ab38d19a5 kernel-modules-5.14.0-570.16.1.el9_6.x86_64.rpm 8b846ab9952b3ef4abeb9ea9a978d0face01e8c6b2c6c440414a4812fe8caeb4 kernel-modules-core-5.14.0-570.16.1.el9_6.x86_64.rpm 8f76f2d8f4d8da21c444364b76279376d43e123e5116d2621f736ae920f2c118 kernel-uki-virt-5.14.0-570.16.1.el9_6.x86_64.rpm aa2455aaa44bae7080697897b7ba074a502bc610374f907e83f4d833382ea09e kernel-debug-core-5.14.0-570.16.1.el9_6.x86_64.rpm c23073835054ebe9238a60abf3ca40495cc6e7b9c4a9f4f48ec68afc448243cb kernel-debug-uki-virt-5.14.0-570.16.1.el9_6.x86_64.rpm c3507de19608ac17e4f187c5771439d84afdb781cf1b51b7573fd0411f86fc12 kernel-debug-modules-core-5.14.0-570.16.1.el9_6.x86_64.rpm ce120b17b428c4f8f72029a8a18e12da8f77a61a2c305ce1368557890bec64e7 kernel-tools-5.14.0-570.16.1.el9_6.x86_64.rpm f290742bb2d693ec778707d698716be2c87235e2e96734d30e59cd4cd652f434 kernel-tools-libs-5.14.0-570.16.1.el9_6.x86_64.rpm fccdde841756d73710aaa360d6bc6af744e0cd7b0f7e41247c3add71621c17ee ALSA-2025:7437 Copyright 2025 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default avahi-libs-0.8-22.el9_6.i686.rpm 108c22dfcc9b27ceb9b828760858680b3f37cee34e654540bb4619e019b111d5 avahi-0.8-22.el9_6.x86_64.rpm 7fe8454ddb4a7195fbda14f96b6ff9a9976719f767e1157d7a90a27faa48f524 avahi-libs-0.8-22.el9_6.x86_64.rpm a975ce0e42b0035768be3ca9983b192b5f3a82e43ff8abe71f1fddb712d08fd1 avahi-0.8-22.el9_6.i686.rpm d6ac740e5146bf7d0c8fe674050b5bda9805a418d2007c09a0ea280a6a189cec ALSA-2025:7440 Copyright 2025 AlmaLinux OS 0 1 Low

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: use-after-free in function ins_compl_get_exp in vim/vim (CVE-2023-4752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default vim-filesystem-8.2.2637-22.el9_6.noarch.rpm 5092c1f882ce83967e120557825057124cdb8cbd3d1b9d13a8049ca6bdb01d10 vim-minimal-8.2.2637-22.el9_6.x86_64.rpm 65d1687925e7b0930b330c8c3f87c22ee914f643f2ee4e31ea8c483b49bfcfcc ALSA-2025:7444 Copyright 2025 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default expat-2.5.0-5.el9_6.i686.rpm 4eb137632636e34b9b5a6179b097f228d248b8dcf430fa42a55f81e7218655f5 expat-2.5.0-5.el9_6.x86_64.rpm 5613b077e20fab964955224fc3b0caa9ecd8b97c1adb30ae85439c1639920567 ALSA-2025:7903 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756) * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966) * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-uki-virt-addons-5.14.0-570.17.1.el9_6.x86_64.rpm 1557e411dc4ee248688a4ce8e7fbc37eecf144464984d235c52cc57153ad9f7b kernel-debug-modules-core-5.14.0-570.17.1.el9_6.x86_64.rpm 1c6bfd45df4a65012059459889d3b45bc8c4e1f1a8e70482f3a05c04c64aad1e kernel-debug-core-5.14.0-570.17.1.el9_6.x86_64.rpm 1e706ced2733811519dba4e836b5e01e2691963402adbca25b20d06c3dbfcbdd kernel-modules-5.14.0-570.17.1.el9_6.x86_64.rpm 1fe2b6b118bb87d4bf3d090cdca73781d47129f79f72aca003c3121ab97bf9b2 kernel-debug-modules-extra-5.14.0-570.17.1.el9_6.x86_64.rpm 30cfdb6fbe52b66c60583e1df37e2ef07d753f8a9779f517c0bba9c9d02983aa kernel-debug-modules-5.14.0-570.17.1.el9_6.x86_64.rpm 365ed035ebf8aaf582211b8388e05f4466840a59f48023a6df2dbf35c156edd1 kernel-uki-virt-5.14.0-570.17.1.el9_6.x86_64.rpm 60548567a0f9dbd82ba1ef5bbcee535ab5c1e04944cab8241234de81957add8a kernel-modules-extra-5.14.0-570.17.1.el9_6.x86_64.rpm 8de6946725e27a98177188cb29ead089ad34eedb27f7cb25a2d3e5012b5dfff0 kernel-debug-uki-virt-5.14.0-570.17.1.el9_6.x86_64.rpm ad13c9af2fa22cd0a355127cb75f93dc17579f186ca54740276b5c141301540a kernel-core-5.14.0-570.17.1.el9_6.x86_64.rpm c121c146cb12a94ee986e582044fc69d650d3709a241056200834148cbafcd14 kernel-debug-5.14.0-570.17.1.el9_6.x86_64.rpm c36463f687e07def0b8235e696052a89c3e5047e9e337434f99b100625500b63 kernel-modules-core-5.14.0-570.17.1.el9_6.x86_64.rpm c5bc446ab53290b51125c83e0b388d89e69ba45f5358c3eaf02eddedec55371f kernel-tools-libs-5.14.0-570.17.1.el9_6.x86_64.rpm d010480b2b1a01c4e1afef770e0dca98d6e19d71cd3152297c81e90e0ba86b1a kernel-tools-5.14.0-570.17.1.el9_6.x86_64.rpm e9c89181d7db9bcd3cd4f5b686fad9c2c0019f55a3d0106fed537e08ab60d7e4 kernel-abi-stablelists-5.14.0-570.17.1.el9_6.noarch.rpm ed07863e4c2f77143e464fc8c4a378decd9e7f6cb5510cc70f447810944f8787 kernel-5.14.0-570.17.1.el9_6.x86_64.rpm ef0f403b6d8c23eeb769025326933343120e023d69027f9ad120a191cccaaf34 ALSA-2025:8142 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-5.14.0-570.18.1.el9_6.x86_64.rpm 019b1aca73b363945c27b008efdb8b9ac6a16e4cad028ef97a6e7342b602dfb1 kernel-debug-core-5.14.0-570.18.1.el9_6.x86_64.rpm 0c304aa217383d519bf9c737a493d03e6d20745ac13bf894bdb5de32745766ec kernel-debug-modules-extra-5.14.0-570.18.1.el9_6.x86_64.rpm 15bf83a340fa0429544bc43fadef67a27a555dc67f050c78723198d54a180f7e kernel-uki-virt-5.14.0-570.18.1.el9_6.x86_64.rpm 3d49270c2550cbbd56f9086728562cef0d2c5422d97cbbd4891914d94c52389f kernel-modules-5.14.0-570.18.1.el9_6.x86_64.rpm 582054dd053727900de11868808335c8dc09bfd169185c6fbb023388e43f26ea kernel-modules-extra-5.14.0-570.18.1.el9_6.x86_64.rpm 616b8d54a238260925f64c41870046d0287c3b0c84429c6f92caeec57ce89887 kernel-abi-stablelists-5.14.0-570.18.1.el9_6.noarch.rpm 6ffe697903f2c6169e98716897c744440c0876877a457b48f3c1dc92ccb452da kernel-core-5.14.0-570.18.1.el9_6.x86_64.rpm 8e4e73c825fa3f558e4d6adac5882ddd7cdf0ccc809b4268772b49fa82b94c88 kernel-5.14.0-570.18.1.el9_6.x86_64.rpm 92b6a3e0915dfe4df481f7470ec36fcf14bbf66ede23bdbf091e5896a4587131 kernel-tools-libs-5.14.0-570.18.1.el9_6.x86_64.rpm 95d7f348a498e8a9d3a4383dd846dc81abfa3627753ce01f63d0039fa282849b kernel-debug-uki-virt-5.14.0-570.18.1.el9_6.x86_64.rpm 9bce3d049ca016d5c95c43cc1f1d24332af0db76644a01ce475400f983887eac kernel-debug-modules-5.14.0-570.18.1.el9_6.x86_64.rpm a75ef68dc19d37bb9336ae9330bc582850c2ed0cdf1b0f08460a6b68b80a5a44 kernel-debug-modules-core-5.14.0-570.18.1.el9_6.x86_64.rpm bd5da3e506c592187f039f53e07d9049f9fbd81ae8c8f2d38c6bb2b068eee209 kernel-uki-virt-addons-5.14.0-570.18.1.el9_6.x86_64.rpm bf63fc16c088b7c1eda157570ae0dd838897e4279b1659529b1110124cd703e9 kernel-tools-5.14.0-570.18.1.el9_6.x86_64.rpm c612f54d7e246e05f5f31e7163a25e465e2d8edf8b82bafcb0180e3a54283063 kernel-modules-core-5.14.0-570.18.1.el9_6.x86_64.rpm faa0917dd53cd383bd852551de49750f7bbadf657274fae255b28546a36dbf3b ALSA-2025:8333 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-uki-virt-5.14.0-570.19.1.el9_6.x86_64.rpm 186dc39d4743dad20d68fe072378fb8e45d936d212878c5d4cb3524bbe7e5831 kernel-uki-virt-addons-5.14.0-570.19.1.el9_6.x86_64.rpm 2051d505d076c3361541c4f78ef8609b5c874e3267f78b44741dfb03fc899022 kernel-modules-core-5.14.0-570.19.1.el9_6.x86_64.rpm 24cf186accfaa5f1022be9be23a4fdcb4f942ea503fba719df76d6059287423d kernel-tools-libs-5.14.0-570.19.1.el9_6.x86_64.rpm 2a50ec0f6825422a01600ba6e38db76ba4c59b37bb525655a43c2eb65a29bbe4 kernel-abi-stablelists-5.14.0-570.19.1.el9_6.noarch.rpm 4e8b254f9168b51a2562c68cf0b9cefa40f30cfc16770fa232d8af977e16fcbf kernel-debug-modules-core-5.14.0-570.19.1.el9_6.x86_64.rpm 55a609baf7f7ca10471ddd3d5a5a1daf0c9e3d589e948bc4212a41779e26c3fa kernel-modules-5.14.0-570.19.1.el9_6.x86_64.rpm 6242f6fa2f8d475b68d6f12aa3b4e361d973f019a83e88def88baecaa72f56ea kernel-debug-core-5.14.0-570.19.1.el9_6.x86_64.rpm 650ff2252e2d59a58f86b6b015f6184581cc1fcd67e2dbac814861d18cf6f4f9 kernel-modules-extra-5.14.0-570.19.1.el9_6.x86_64.rpm 6a203f7be432743fd1818bf67a1e430ca48ac0d4228fc7d702bb383c99bebd45 kernel-debug-5.14.0-570.19.1.el9_6.x86_64.rpm 737774fd2f25cd6e5756c29ac546a6b551400db20b1c86ef184fcb5f248c6c02 kernel-debug-modules-5.14.0-570.19.1.el9_6.x86_64.rpm 7564c6dab3eb85d5f60e8f750b2bcc273eff9a2374c318a4b060a39d1dff1249 kernel-uki-virt-5.14.0-570.19.1.el9_6.x86_64.rpm 82dbbe33f60decd96e9b71cff0559bca82518834b378af261bdd5d1bdec094f0 kernel-debug-modules-extra-5.14.0-570.19.1.el9_6.x86_64.rpm b98510f3af34a0739fb90e817adc8192de93b5aeb587577988f063acd211c4a0 kernel-core-5.14.0-570.19.1.el9_6.x86_64.rpm be92aa5c28f3c4f0e6a93fed5cddc05cb9a0387a1e6a3d729ab910d654777ad2 kernel-tools-5.14.0-570.19.1.el9_6.x86_64.rpm e8ca877cbc84796cc7f7a21c36da223ed42a2dc2e03a9133ffb47bbac73d0878 kernel-5.14.0-570.19.1.el9_6.x86_64.rpm eb2e51f78689fa26b4a5a12c1c64dc2e22e566e8a3fa4398534e80d06d79f568 ALSA-2025:8643 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926) * kernel: vlan: enforce underlying device type (CVE-2025-21920) * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997) * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055) * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785) * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-modules-core-5.14.0-570.21.1.el9_6.x86_64.rpm 0ac7db3743d50d18d2821714b0051340589cfa96d2bdfc8ca63a65a5ed8401ee kernel-debug-modules-extra-5.14.0-570.21.1.el9_6.x86_64.rpm 0cb6dc731fc25116782256e9bb3324f4ba003130db17e774cd2ecb21858193a2 kernel-modules-core-5.14.0-570.21.1.el9_6.x86_64.rpm 1926d276417b7a9eb2d5bfbbbc1f1d56aac1e0121bbbc8790b60e3c700f63fe3 kernel-abi-stablelists-5.14.0-570.21.1.el9_6.noarch.rpm 1d52868b230da44c6e012cfbd6194f3a59bb10e3a1d166fe8a39b0ed7e13410c kernel-debug-modules-5.14.0-570.21.1.el9_6.x86_64.rpm 30e1697c9fb2aa1c0f35f67ded3996d15f834bf484034ddd49ceefb4dd736b30 kernel-core-5.14.0-570.21.1.el9_6.x86_64.rpm 312e7cb7c0f75a233b2f66b01a372c8fd7864896ea57522631d737d705abab94 kernel-tools-libs-5.14.0-570.21.1.el9_6.x86_64.rpm 400b0866609a116a6d4d6ea2aab9a95f8851c2df0fb5732663cbc264462ef604 kernel-debug-core-5.14.0-570.21.1.el9_6.x86_64.rpm 4b44f06bf61d307a91f4d9af0abffc59ac4b0023bb1332cd123902e2c27b34e4 kernel-debug-uki-virt-5.14.0-570.21.1.el9_6.x86_64.rpm 589771dfd9ba20453a547aa1761825413e822f1deff0336c9192e16ed3ca09b1 kernel-uki-virt-5.14.0-570.21.1.el9_6.x86_64.rpm 79edfe4c62309fe12cee789a58acc77d8e22ec43f43f264e99aefbe8e81d0ce8 kernel-modules-extra-5.14.0-570.21.1.el9_6.x86_64.rpm 837ce168f2b52c6d17547a8970351f2ac096138c52b2de0093f0994ceb4b18d1 kernel-tools-5.14.0-570.21.1.el9_6.x86_64.rpm 9a8688626f65277d1dc5f77be252d2d6ec00d45e7fa9452f5c1fc4a3bee04f0f kernel-debug-5.14.0-570.21.1.el9_6.x86_64.rpm c15713bb64da3f96f227bca5ef2cde7d22b4090906dd36813b4071933ea0fcb1 kernel-uki-virt-addons-5.14.0-570.21.1.el9_6.x86_64.rpm c1f22886865bb9cb60a6da4727f1a514fc400438d7cc465a2dc8c2b4329072ab kernel-5.14.0-570.21.1.el9_6.x86_64.rpm c7cb73a30caab6539e8d185e016d929c3d2c724c704e0ddb5b7439a91bd2e612 kernel-modules-5.14.0-570.21.1.el9_6.x86_64.rpm d95ca1a203bf93715bb95b46ee72624057db1e7926df911711a1b865525b9be1 ALSA-2025:8655 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default glibc-langpack-pa-2.34-168.el9_6.19.x86_64.rpm 004f70a2366bed73a98b28ac3bfb179c753fe836930cb31feef60811f790e601 glibc-langpack-nb-2.34-168.el9_6.19.x86_64.rpm 008b79ceee3d2bd5902992b2ee4eb86356c1a7ebf5f1605ab1cb0d740df7b1b7 glibc-langpack-pap-2.34-168.el9_6.19.x86_64.rpm 01ca2302ba4171c8dc0499aa7d1c51c8d5068057c601383aa891122c4bb95764 glibc-langpack-hsb-2.34-168.el9_6.19.x86_64.rpm 03df4f591489505fb074c4b6773d41e2f6168b89d465da31081fe3462dd72659 glibc-langpack-sa-2.34-168.el9_6.19.x86_64.rpm 04a8cb96f7ffb6fe17716d6d7d5674e6c8ddeb12201a949b6c8739ca3dd85e4f glibc-langpack-lt-2.34-168.el9_6.19.x86_64.rpm 061f5b7377740f476408a2e2f4b1bfa362ef1d3310a46ae6bafc2800fbd55831 glibc-langpack-eu-2.34-168.el9_6.19.x86_64.rpm 072aba1c5f228e54b5f497940349d3de14dc50bbbfa6d7dcf008bf092558983f glibc-langpack-tn-2.34-168.el9_6.19.x86_64.rpm 07fc1bfbf9badc5cb80cea59d70765aaf72f456c54a5454981379980c60a4987 glibc-langpack-gu-2.34-168.el9_6.19.x86_64.rpm 0910fb30a30a4d299d898f8c292034b16ab096be485a148bb517a30a0ec45743 glibc-langpack-oc-2.34-168.el9_6.19.x86_64.rpm 09e83b6f4554596c826958469f9daee1ac095b7fc27a8c4d845f72cba5dee435 glibc-langpack-tr-2.34-168.el9_6.19.x86_64.rpm 0aa2031ee6deb4d2a83709b362114c622cfba2d60aed9807e3388f3582dd6aaf glibc-langpack-fil-2.34-168.el9_6.19.x86_64.rpm 0ad0fae5b3ff4aa71e9304b4be283180b154688349457e3298e92af2812113b7 glibc-langpack-sc-2.34-168.el9_6.19.x86_64.rpm 0d10d9254c3a3758a526c8f846ed45dc4af7092fae58293d8ea9532c8c7cdbeb glibc-langpack-it-2.34-168.el9_6.19.x86_64.rpm 0e3266abc8eabfdecfb7c2283b7095fa0b346a40a92bdde599ebf7c92cccc40b glibc-langpack-wal-2.34-168.el9_6.19.x86_64.rpm 0fd8e3a044d29e0ea1e35049043a32f54c69a950bd2fea2b97a32d6fb9da368f glibc-langpack-he-2.34-168.el9_6.19.x86_64.rpm 12fe26a509f27f3b3b9365acf5057b949b31396be08ae52e8b84c04ba5cca3e6 glibc-langpack-te-2.34-168.el9_6.19.x86_64.rpm 13375c4ebc5f4b88135ff61582a29c7846c70668801a7279a28b41a3eab23f72 glibc-langpack-tg-2.34-168.el9_6.19.x86_64.rpm 1400831975abeb01f34486bfbec4a2f9d3e50337da1ee4f510f7b95fdafce4f3 glibc-langpack-ro-2.34-168.el9_6.19.x86_64.rpm 1560d078980243fe9f6122008884a4998eeb842fad78ae8b620fb7102ea1ccb2 glibc-langpack-byn-2.34-168.el9_6.19.x86_64.rpm 162ced972a6bcf7b6972fc7c4c31c9069ad17d167bd65b098443174b7061d30d glibc-langpack-mk-2.34-168.el9_6.19.x86_64.rpm 16a489b73df3c3a3d95548a372e67096c605d209aa6174ab69e2e0f473eb7020 glibc-langpack-ss-2.34-168.el9_6.19.x86_64.rpm 1ac31a5c67ef6556803c67c39db0bfab5a53ffe30c7b57ac3d7fb7f657fb6f01 glibc-langpack-sk-2.34-168.el9_6.19.x86_64.rpm 1bbdb974484bf13326094aba58f563f889903a09b699e7ed7769a0303f07ecfd glibc-langpack-fa-2.34-168.el9_6.19.x86_64.rpm 1bca5f39763b13460814a4d646ced8768718ed4397961ad7f97075d4d90c4436 glibc-langpack-agr-2.34-168.el9_6.19.x86_64.rpm 1bd65ec57bda3434b6df04e7db1819afaee238c43487b97f1e3967193ee553e4 glibc-langpack-niu-2.34-168.el9_6.19.x86_64.rpm 1d022732020e6f7ef350e73f93eadba8b336932cea6d766687435d96c87fa23c glibc-langpack-mg-2.34-168.el9_6.19.x86_64.rpm 23a6c5d1997618f831de1b4352899a2c657113860e8467f042f238e9f49bb8e6 glibc-langpack-mi-2.34-168.el9_6.19.x86_64.rpm 24cdb13492aaac1538641370c356f3fa01c5473021c075ecb6d7865e812e92b8 glibc-langpack-dz-2.34-168.el9_6.19.x86_64.rpm 25e0880a3da9fff7bda6dbb9d18d9dba41432852c4b7b8a0da17b1d43e489e69 glibc-langpack-km-2.34-168.el9_6.19.x86_64.rpm 27a27c633ea5f33e9cc3ca6b272bdb2a08754f8dd64701b970260f27b5de638d glibc-langpack-hr-2.34-168.el9_6.19.x86_64.rpm 28bd6a4dbdc82f86a6f9c3c86cd492f15051ff84d351ec3bf5fc9966c056a474 glibc-langpack-bhb-2.34-168.el9_6.19.x86_64.rpm 2921754d7d4b3624b9723c29c0f206d87cd805cf6a39f66203069bb3f75cf1c8 glibc-langpack-bi-2.34-168.el9_6.19.x86_64.rpm 2b68c2b839e78ee65786f10ec21c97178730ca5e9c2f7cf850d4c95e79a1d7d1 glibc-langpack-ru-2.34-168.el9_6.19.x86_64.rpm 2ceaa73372bc26c4989b18a80f03fcef927f72cb36026da1ea450a88b59a095b glibc-langpack-vi-2.34-168.el9_6.19.x86_64.rpm 2d1165db6efd2b19998b9396d35710e101cfb2d99fc543297e77170a91e1d0b4 glibc-langpack-da-2.34-168.el9_6.19.x86_64.rpm 2f150e6deb04a1985d2cce5a8e91e80e7053d70c85a4bf852d4c040b30ecfa4b glibc-langpack-kn-2.34-168.el9_6.19.x86_64.rpm 32770bfd1fb3bd010702d0e5b0db3ed403d014b71f25d56f14df7bf1a3c44031 glibc-langpack-de-2.34-168.el9_6.19.x86_64.rpm 3477c75acdab71c5a1a86de2e3560513d6796a2a8813652017f57c3726e762f6 glibc-langpack-ik-2.34-168.el9_6.19.x86_64.rpm 34d368a568fdb2e166a5944aa77ae7c3174beab90bb7492d8979c04335262aec glibc-langpack-as-2.34-168.el9_6.19.x86_64.rpm 35dd027018905aee0b11e746212ba19806ba9ed6ca205b53129d9b85caeda618 glibc-langpack-hu-2.34-168.el9_6.19.x86_64.rpm 3686a9a96b4f84b889eb615201b0f6f3e8017c130deeb18809ecd3b273de1bec glibc-langpack-yo-2.34-168.el9_6.19.x86_64.rpm 3885194c064496eec485c12acec87b18d4e3fdcd233743f9bbf634404aece85e glibc-langpack-cv-2.34-168.el9_6.19.x86_64.rpm 39cc4d4aea82ae951af35be792c86686ed5db4f3c94d7ea60f34fa273d9ce4d6 glibc-langpack-nhn-2.34-168.el9_6.19.x86_64.rpm 3a6046047881916415c648c089691eadd5f8339029d70c3807132da55bbe1002 glibc-langpack-tpi-2.34-168.el9_6.19.x86_64.rpm 3a6616ecc1b66114e7b7e2ee34e1e258f7cd3d69a35899735747e2dc421bd44f glibc-langpack-yue-2.34-168.el9_6.19.x86_64.rpm 3bb57bba5a194d9dc0cea70c5db76105ef2770e3b0d63f439333fb501bf7195d glibc-langpack-ks-2.34-168.el9_6.19.x86_64.rpm 3c350a8ae38b9f67a0d59278e919600af5a60a2d0a1d4fdcadd9c01e047aca79 glibc-langpack-kl-2.34-168.el9_6.19.x86_64.rpm 3e074ebd7c251c1e3d5070b9235d031e0c762c6c001c239914282c6e8baec6d5 glibc-langpack-mt-2.34-168.el9_6.19.x86_64.rpm 4071c3cc8a2797989df35ac3eb4d5698720cb8ca85a2bb4f475b7270da7dd04b glibc-langpack-iu-2.34-168.el9_6.19.x86_64.rpm 408691a6b951ddb60cfc6e7d5245cf06ef9a9122708902b9d885f293555605b9 glibc-langpack-ku-2.34-168.el9_6.19.x86_64.rpm 41a973090687e19fec834ddb0fc2665dd31c571a6e0298276a7aca3e344ce139 glibc-langpack-mn-2.34-168.el9_6.19.x86_64.rpm 41ebed598f7d1eb01b8c5b98a561835fc530776ec4c41977deec57523f10052d glibc-langpack-ia-2.34-168.el9_6.19.x86_64.rpm 4265659eaa61a8b511ee712e81575cd6205f5b160a0e8756bd1d3c48370fbf34 glibc-langpack-gv-2.34-168.el9_6.19.x86_64.rpm 4387138133419c140a0b48fd6dcc220761cb13e7c4b43667085a64b560b3491a glibc-langpack-fr-2.34-168.el9_6.19.x86_64.rpm 445e5bcd6501c1e23c3b22b50fc20bc4ad37c024c488d3e2cb8bec89f92df8bd glibc-langpack-th-2.34-168.el9_6.19.x86_64.rpm 46d568b785c00893cf6de8118c50043b061d0d90969a22f7c607423ed8a57b1e glibc-langpack-sm-2.34-168.el9_6.19.x86_64.rpm 46dfd59b1aa52e55a7675e025ecdd445882e981d0f15750a14ac42a890935f12 glibc-langpack-si-2.34-168.el9_6.19.x86_64.rpm 471d76748212b98a8954ba9ad102c13fdfb3143a65781edc82269fa95ca44434 glibc-langpack-cy-2.34-168.el9_6.19.x86_64.rpm 487dae1600c7c9ff153f6e6bc68a031fac86e63f70c78d9a05d3b1d46384dfc7 glibc-langpack-my-2.34-168.el9_6.19.x86_64.rpm 48a0af2c95d5bc79867b13271c53c487c4620d7a1e7cdee6987f3d8e20495e50 glibc-langpack-quz-2.34-168.el9_6.19.x86_64.rpm 48ab230eec8a85c9082f6f517fb5641730b6dd4a5d5ab53a147b1a0b7897977e glibc-langpack-bo-2.34-168.el9_6.19.x86_64.rpm 48e2b982d2a647e5a637901e8448b4ca2995e21b9651719903c06e5094291619 glibc-langpack-sw-2.34-168.el9_6.19.x86_64.rpm 49a3c89a149dac8876d31ce66526a465d8811b95f2d48e1141044653e9f11516 glibc-langpack-zu-2.34-168.el9_6.19.x86_64.rpm 4be531a57111612fa2e815b16656d1431107d890bf384c88358aadf5cda14e1d glibc-langpack-anp-2.34-168.el9_6.19.x86_64.rpm 4c2914b525b8459d9c6c697f85c9eac9c5127e2212718245c8b9e7a587c6fe24 glibc-langpack-rw-2.34-168.el9_6.19.x86_64.rpm 4ca840ac3ab456c92260980367fb5063f109563761f3944b52ad7d47977f068b glibc-langpack-cmn-2.34-168.el9_6.19.x86_64.rpm 4d43287e475586e0bddc4e397a3dedb0c36e35e53383f0dffce5467370ad8866 libnsl-2.34-168.el9_6.19.i686.rpm 4e28226729e08983714ac7e97fbee8a75c13d8d040f17492936f2dcc66417427 glibc-langpack-af-2.34-168.el9_6.19.x86_64.rpm 4ef38f4ecb3830d47237b2d08ed0d5cbb8c8c24a9375c6e4372f4d24c3ea0a0e glibc-langpack-shn-2.34-168.el9_6.19.x86_64.rpm 4ef83e7d54b31a556e38ec0d066273d0c1e0a1aeee18725ed868c6306377d9b1 glibc-langpack-ml-2.34-168.el9_6.19.x86_64.rpm 53a913a3d02a689855ea1bc0ba67f624c1029933675896d3c724b2e95e857b2e glibc-langpack-mag-2.34-168.el9_6.19.x86_64.rpm 542606e585c92bf2172f42dc9728f34560cce4a1ce42e669863db518a0ca714b glibc-2.34-168.el9_6.19.i686.rpm 55ba5b891e690e40932afcc4659cc68964ad7c98155f4218058ad4b0640a9d97 glibc-langpack-to-2.34-168.el9_6.19.x86_64.rpm 5636ba0e481b304fde0db9fefe6fda00ddeef89ebfff25e1d08a4f8e3f32931a glibc-langpack-lv-2.34-168.el9_6.19.x86_64.rpm 571b2f4d449dad1f70667dbf9f3db03a55f57fa6658439a1114b291f00b88862 glibc-langpack-mai-2.34-168.el9_6.19.x86_64.rpm 58de52f6ecaff9799926503e0ff9fc81d48954bceb4c830eb4785c132ceb45d7 glibc-langpack-sv-2.34-168.el9_6.19.x86_64.rpm 5a8d00482693b03d04a128306431c0f7362f323e8bf85ea222c0880fae2261fe glibc-langpack-ti-2.34-168.el9_6.19.x86_64.rpm 5b1993cb320f17cf3086865747d76d77cc85d87998537e401ead1698e9e6e1ec glibc-langpack-mnw-2.34-168.el9_6.19.x86_64.rpm 5bd1f8e088511e0ba2c3465a581b27319385f1c4fc87eef2272aaec5f2aa42e7 glibc-langpack-eo-2.34-168.el9_6.19.x86_64.rpm 60b792a4ab9039f857c04a8aec207045c4ffba581c93f25e8d56c07946b315fa glibc-langpack-ber-2.34-168.el9_6.19.x86_64.rpm 62725964838d2b98ee13b5cba32fbfa2312282065fa517e936a5312ab21b8954 glibc-langpack-doi-2.34-168.el9_6.19.x86_64.rpm 62b2eb21d77f9e6ec341208a9c8500a4ac083784f8ef397aa77976b5293cdcd9 glibc-langpack-nn-2.34-168.el9_6.19.x86_64.rpm 62c698082e1b1ea08ab5f86fb729cf776dbdca42938da9297a895746677151b2 glibc-langpack-bg-2.34-168.el9_6.19.x86_64.rpm 64368f67345fda6f8096610d4cf9f9d6e0f8d900defef84368c8c3806927d1e8 glibc-langpack-ko-2.34-168.el9_6.19.x86_64.rpm 65a2c3aa2ee868dfa446add5603ed02da173485ff4f45407bbe0820dfac5c349 glibc-langpack-ka-2.34-168.el9_6.19.x86_64.rpm 668646d9d2bfb409669d680e9368c283a2eef1f2585a8d78c9b48f2f5ddffcbf glibc-langpack-is-2.34-168.el9_6.19.x86_64.rpm 66a7f75095b2bfe24a7b6acf3b640765d98196118e9e5e94aa2f149765a9825e glibc-langpack-sah-2.34-168.el9_6.19.x86_64.rpm 682a2e570268d140986d3329e646110cdaf3153d7c984f30623abd7b6376fda2 glibc-langpack-li-2.34-168.el9_6.19.x86_64.rpm 69898c8eabdc21fe217d4fe5c266f77b6b6d33df35eda91f4545718e3da17003 glibc-langpack-dv-2.34-168.el9_6.19.x86_64.rpm 6b94ed390b88d3244246f5977ae7c0a4ad1f1c121e7f6157d7ac11391c764609 glibc-langpack-sid-2.34-168.el9_6.19.x86_64.rpm 6d51464ea5ff82a9693c315f6525e7125b43502c00396cce076493d2585e54b8 glibc-langpack-zh-2.34-168.el9_6.19.x86_64.rpm 6e79c8d24aa5997f70fca4522fb5d01c1513b3e75043168c53c86e1e1ff19641 glibc-langpack-tl-2.34-168.el9_6.19.x86_64.rpm 6eaf60a1e1ccd2427999880e3155e30ce8c6bcd194974da7a01506eaadbf345b glibc-langpack-hak-2.34-168.el9_6.19.x86_64.rpm 6ebd69d9e58e9b407c2a3c72218a2a39d44d05ec1ac1a6e40eb9a657bcac5426 glibc-langpack-fi-2.34-168.el9_6.19.x86_64.rpm 6ed2e44c79e706231189816cefb718f734b1c381ce9437ba096ca1392a214faa glibc-langpack-ar-2.34-168.el9_6.19.x86_64.rpm 6f0ec6a7b3f6b89182838448a149495cfb0f8ffcb4302a0f1d97399da38f5c8c glibc-langpack-raj-2.34-168.el9_6.19.x86_64.rpm 6f915caee6928a2a48cb71a2cf75d4d473af98331a8cf8ce2d8df6bde4629ff9 glibc-langpack-kab-2.34-168.el9_6.19.x86_64.rpm 706fffdc4d8b975e3d9cd2b58c384e2e82c3a2b70ee833f8e23a486b7dd6bcdf glibc-langpack-bn-2.34-168.el9_6.19.x86_64.rpm 727f9d3961f8c626c72a34c7545f4f19f082e0633e0577046d3dba5f8e4afdd2 glibc-langpack-ve-2.34-168.el9_6.19.x86_64.rpm 72a9e2ad724593c1f4c1b8179dae0c890d249bf8c16f443fb1388cd11d4cecab glibc-gconv-extra-2.34-168.el9_6.19.i686.rpm 73d38785f07f9dfd7db2aa8bfb0a7e0ac21aca1ebe4ab46022d25ea42f9a1284 glibc-langpack-ha-2.34-168.el9_6.19.x86_64.rpm 74aed9e5fabe1974d3bb24a9153957970d454614de81bf1222ee9b5769aaa4cd glibc-langpack-lg-2.34-168.el9_6.19.x86_64.rpm 74db8a79b34b919ce20680559b230040acf137b9d989b89dd96f26e1c34eba3e glibc-langpack-lzh-2.34-168.el9_6.19.x86_64.rpm 758fc6963d8be5e3409865db94f55a8be2c16ecd0ba5fb71eb2301402ad89dbd glibc-langpack-nl-2.34-168.el9_6.19.x86_64.rpm 786c197b118dd3329115c03cf8d73dcad838e6501c80145902735c7b1d63a03c glibc-langpack-bho-2.34-168.el9_6.19.x86_64.rpm 78c77ecdabd5ef6b0d0cfba20d892cc20b79d01606a84d6612327933b025267f glibc-langpack-an-2.34-168.el9_6.19.x86_64.rpm 79cfe171122ebe173c532960d999baff947e75951f521a0bd6b64f8af8733495 glibc-langpack-kw-2.34-168.el9_6.19.x86_64.rpm 7b01812c92ef74efabd5c8b59e9662b4b9483b08243b3acdebef4339949758db glibc-gconv-extra-2.34-168.el9_6.19.x86_64.rpm 7b3f39be316c3025ada72ce5da167cb71fe454b1cae356f67d07b94f5aea4476 glibc-langpack-mni-2.34-168.el9_6.19.x86_64.rpm 7c11be8d3dcb8a340d621ab2a1bfb6968d79617c9e764bdb5b362405dacff5ae glibc-langpack-ur-2.34-168.el9_6.19.x86_64.rpm 7c32641bb1d54b2ff48294568b3343e894fd490c9f2a77b73e0732166532ae2d glibc-langpack-yi-2.34-168.el9_6.19.x86_64.rpm 7ca8f18a976dc7ce7639f688feae98281f1c6e50a3fa66533cb3960425b78465 glibc-langpack-ig-2.34-168.el9_6.19.x86_64.rpm 7cedc1121590fc19c11494e7e91e5e31204d2a2cd2d730eed0e2f99dcf7a8e47 glibc-langpack-sat-2.34-168.el9_6.19.x86_64.rpm 7d5c954d561e47776d4075a1834deb4bcc0ff6a89458bf06b3eed960566ac685 glibc-langpack-or-2.34-168.el9_6.19.x86_64.rpm 7f8548055bd2bf69ebcbd3890d85643ef01e1ba222723934bf0ba24edfd38eb6 glibc-langpack-ln-2.34-168.el9_6.19.x86_64.rpm 825fd559d4048672dae6d44030c9f723841bd4dca73637c71f1a9b329c196b91 glibc-langpack-mhr-2.34-168.el9_6.19.x86_64.rpm 8748001a8285d1526570fc1aad76c09d3b9faad7a4075b7dfab03cc52599466b glibc-langpack-lb-2.34-168.el9_6.19.x86_64.rpm 87819c2c6c5f9595e7bf08ddb4fdc056ca079f6dbc79466250e24bcf362c8379 glibc-langpack-ff-2.34-168.el9_6.19.x86_64.rpm 88cc1b4d2508283dba750dfc07b67e71494556bcc80c0d733684096bd9f00247 glibc-langpack-am-2.34-168.el9_6.19.x86_64.rpm 89976c6a1ecf8131a558bf6962af1f5820cf1e3ac05a5d34c96671f571465a96 glibc-all-langpacks-2.34-168.el9_6.19.x86_64.rpm 899aaeb809ddc7e20c755b182f3bcd45717eae3ecbd0119580911210e5ca05fc glibc-langpack-tig-2.34-168.el9_6.19.x86_64.rpm 8b0ea8cefbc699bf23fc5aea0027b9fcbe24d65f9b4d81efe0147a233036e39c glibc-langpack-sq-2.34-168.el9_6.19.x86_64.rpm 8db0cc348a509d5dc241b8948e30d64ec78df4766ac70cb6afc1436354c4e328 glibc-langpack-st-2.34-168.el9_6.19.x86_64.rpm 8ddd55a663fb6801619b717ef6e62ab041aba509835f5152feac598dc4689c12 glibc-langpack-ckb-2.34-168.el9_6.19.x86_64.rpm 8ef176cdfe142c70c4199907b572dc34b62018428022e5c2190c1988ba93f7a7 glibc-langpack-mr-2.34-168.el9_6.19.x86_64.rpm 8f64f327ed7c922a9c3c09f6a4b7e8e4b6ca8c39281423161bf08d8132a0c2d9 glibc-langpack-om-2.34-168.el9_6.19.x86_64.rpm 8fb8248de4849bd53b79f7a02afae124aae9afb1aab5aaf4ff8c7d91c887b01a glibc-langpack-be-2.34-168.el9_6.19.x86_64.rpm 90159417703ef1003f8d1b42783d1719d2a46401d5f87c30db478eec13e9f9f2 glibc-langpack-nso-2.34-168.el9_6.19.x86_64.rpm 9516a1e7a313db2ed29b70d6d46185d6f436822d178b6d5139ea03388bd8022e glibc-langpack-gez-2.34-168.el9_6.19.x86_64.rpm 95727b5deafbdc101a0753e8440324d64bc9f8b47c63043bbdf72c2c00ed807f glibc-langpack-nan-2.34-168.el9_6.19.x86_64.rpm 96a84eb4e4b3322c99fa83f5b797294fae5d4bed9c2f89c94c86b11ff837f177 glibc-minimal-langpack-2.34-168.el9_6.19.x86_64.rpm 97a465981d90c0a4e952f9948f51baaae035d8dd04c85edcd7b094c9d5cfacc3 glibc-langpack-ast-2.34-168.el9_6.19.x86_64.rpm 9bb74530ee1e4ce7558f20bb32825b8529181eb13f0e5eb46ce6381e16b77aa3 glibc-langpack-wo-2.34-168.el9_6.19.x86_64.rpm 9c24a58d42e09414a19b40357e2700cf63dd17035141d320079aeee24279f242 glibc-langpack-pt-2.34-168.el9_6.19.x86_64.rpm 9f300a05e52246d72b8c63e291409fdb5e51c6c428dd7a7c65064235e1065b4b glibc-langpack-ca-2.34-168.el9_6.19.x86_64.rpm 9fce48f959da3c1efa1445f98281155eb0a745b14a55b806a5c4339044757a64 glibc-langpack-sgs-2.34-168.el9_6.19.x86_64.rpm a1f1aba98f44425e0d7c2f9c662d6c5aa4bc8f601739d39c80cf74d5b36a13a2 glibc-langpack-az-2.34-168.el9_6.19.x86_64.rpm a417b7afc4d2a0930885961cc8d22af6705349da434984f8c02fa010a4ff868b glibc-langpack-br-2.34-168.el9_6.19.x86_64.rpm a4dd52a1e9066b450e2de72f9b96f9cc7b2663972871258c88da0e0c6ea79f10 glibc-langpack-the-2.34-168.el9_6.19.x86_64.rpm a711bd05d08b8e7ab50da9c40ec99c58732673e189cd2f83b7b658bc82e41b5d glibc-langpack-en-2.34-168.el9_6.19.x86_64.rpm aa83b4a641164a7eb7b92a46c9f6256187f88d254a91f3a938962113e6f8dc5b glibc-langpack-cs-2.34-168.el9_6.19.x86_64.rpm aaa7c6b7eede4a22318242925626f87ed6affec83f585c3a4d089e0d04acf404 glibc-langpack-wae-2.34-168.el9_6.19.x86_64.rpm ab317d7c72d76937a233a2026b7539cabac6b87bdc4eadfb9631cababbb80401 glibc-langpack-ts-2.34-168.el9_6.19.x86_64.rpm abb0d4f8cdb26c2197df8752a5387e131fa10c337be8272b43c28e2125624330 glibc-langpack-yuw-2.34-168.el9_6.19.x86_64.rpm abd1fc986925ae1177e927fd9bebf6fd5c8a6e02c65d61ca896a004ae84a1f01 glibc-langpack-nr-2.34-168.el9_6.19.x86_64.rpm b0ec216679d5929ad5c1ff7221d2abccf64f473451feaea3642e74a25228ea3e glibc-langpack-uz-2.34-168.el9_6.19.x86_64.rpm b39455ed88686fdc6209c3e941660af14de5df3c13feccea45ef32c89b131a0a glibc-langpack-sl-2.34-168.el9_6.19.x86_64.rpm b6464092c40f26f8538723355a41491fa1fcb9bf7a01683bb3f430cf061210ce glibc-langpack-lo-2.34-168.el9_6.19.x86_64.rpm b9d65a30448fd6d02fc9981efedd02e4b008c8df90f7371839feb6fdccfe3c09 glibc-langpack-miq-2.34-168.el9_6.19.x86_64.rpm bafe3eb1e725f5bf0beac53f843573933c7a65cadc77c77d471cfcf415017be1 glibc-langpack-shs-2.34-168.el9_6.19.x86_64.rpm bc73c18a87bd7dc66a7caa39ba255abab0242c25958c03c84c9a886bf73239f5 glibc-langpack-et-2.34-168.el9_6.19.x86_64.rpm bcd7a334d9546596837e767b479457cc909ffcfab679cb8aff7181bc832ba3d9 glibc-langpack-ne-2.34-168.el9_6.19.x86_64.rpm bcf3bb5bcba77c1aed81065b9a7032b367b87c125df2c402f200524abed56f0d glibc-langpack-lij-2.34-168.el9_6.19.x86_64.rpm bd62dc5e39c5f540466c5a03983bd6f5c6d61a3fd17a5805121931eee759ca58 libnsl-2.34-168.el9_6.19.x86_64.rpm be333e9bf788b08926f77169bffe5a38ddd3ba3c2e133cef9f8f89fa2c8dec2b glibc-langpack-ug-2.34-168.el9_6.19.x86_64.rpm c1a27561723de6bc08eb80fd8260d80f9a23182cf71b18dd9d41029d172d2549 glibc-langpack-ayc-2.34-168.el9_6.19.x86_64.rpm c2e33b3af7b62bf53f4fc4578cce969f30be44747a38ae0e940bac317c6cb887 glibc-langpack-crh-2.34-168.el9_6.19.x86_64.rpm c33d139afd9f24db72c757a4d7fe8d8f74c025686582de08773db010e284a8b9 glibc-langpack-gl-2.34-168.el9_6.19.x86_64.rpm c5d72e2c97ef27cb7870d4f94dfa6380528c4fcf54546e3999603a8943bb7129 glibc-langpack-kk-2.34-168.el9_6.19.x86_64.rpm c7f93e973b801ef2161d08f106d0a723add69017f9c6e9021062c01208047688 glibc-langpack-brx-2.34-168.el9_6.19.x86_64.rpm cbad8b68f88395c4e4a2d52711f16e6e578addbbd37dd5c4bb2c293e2f8e9186 glibc-langpack-fur-2.34-168.el9_6.19.x86_64.rpm cd91dcba92f3b82713f5519f9e7e61e5a54f008ed61708e1bd88fda8f905859b glibc-langpack-gd-2.34-168.el9_6.19.x86_64.rpm cdb7855370cf964811a8e1d196b9ddc3cdc504d74a7a627571e37ac2df678e68 glibc-langpack-sd-2.34-168.el9_6.19.x86_64.rpm ce672755173647d9e9f9fcaac2212db097c5e236bbca321448f7a0b03ae8a252 glibc-langpack-pl-2.34-168.el9_6.19.x86_64.rpm cede56e36259fe2676dfbc19f4b58d3645c21f4f0764c625c944e5d53be8ec53 glibc-langpack-se-2.34-168.el9_6.19.x86_64.rpm d1e62e5df4fa01400cc62d223087907fe7c4a2c00b28a8e247607b54dfef5a64 glibc-langpack-uk-2.34-168.el9_6.19.x86_64.rpm d2bc84e8be970105469473c6a5cf6ba8477bba2112ba606ef6c6ca669040767d glibc-langpack-bs-2.34-168.el9_6.19.x86_64.rpm d302cb526ec276ec3e6c214770da6d7ad7f7c14632b04544088202e58ca7ca52 glibc-langpack-ce-2.34-168.el9_6.19.x86_64.rpm d374dbdcb1034f888a8ca5015725bae264621ee1c1cf1a24e75912e28f9cb21d glibc-langpack-aa-2.34-168.el9_6.19.x86_64.rpm d3dfc9502b3eea5106d900998cbb419f55aaa44934ae91a12528dd2c23de4452 glibc-langpack-chr-2.34-168.el9_6.19.x86_64.rpm d3e90d9bf6112fd869e1f87bd859145209e7617395a151f8675e4d685fa55331 glibc-langpack-hif-2.34-168.el9_6.19.x86_64.rpm d5995e1c5f029c183a4a5510533790cc4237b1ed90370523dd6af3d87f8bccf2 glibc-langpack-mjw-2.34-168.el9_6.19.x86_64.rpm d5f04819ada00d59a85081571de4e4ed8402da3325c10e86ac1cda48f3c3b789 glibc-langpack-xh-2.34-168.el9_6.19.x86_64.rpm d6e27c821a3222e54ccda1115df2150fb1ddac3780af98fbf4d31b09f247f42a glibc-langpack-sr-2.34-168.el9_6.19.x86_64.rpm d748ea48d93ecc5667bc4c4a246eb5b8e5595ae8bd2c153428201850bbf4dfc2 glibc-langpack-hne-2.34-168.el9_6.19.x86_64.rpm d7c3551dfbe82f7d8624561d5024007dbcc5a2c81ef2eb5f0661bdb0337135ae nscd-2.34-168.el9_6.19.x86_64.rpm d883f42d82222c77f9572ff96e0731f5d26d5ddf479caa48eadc819ff7d8f45c glibc-langpack-fo-2.34-168.el9_6.19.x86_64.rpm d94136202d0c3eb95615c647cdaea4462c1b8bef57dfaa0ed7f69453aaf21a2f glibc-langpack-tk-2.34-168.el9_6.19.x86_64.rpm d9b0da34554d42dac82ffb9d3707764e7f521975e99df4f3c45ab501e48a7dd1 glibc-langpack-ga-2.34-168.el9_6.19.x86_64.rpm de6e876df0d398455a497e7178996a64314b81753273578b4c835c8487dd1a24 glibc-langpack-hi-2.34-168.el9_6.19.x86_64.rpm deb75e644b3910cca40c3b9aab15607153be046e50d0adb41357cac28b30f5e4 glibc-langpack-ak-2.34-168.el9_6.19.x86_64.rpm e05c29d85c73219619cb1b38420a1bf31524ae84fdf91da3e51e3206f732bfca glibc-langpack-dsb-2.34-168.el9_6.19.x86_64.rpm e0df0e21f43dcf4ddcfb5e2eb6f8fbe6b2e2f65c0ba2c7fcfb0850b33f4292b0 glibc-langpack-hy-2.34-168.el9_6.19.x86_64.rpm e4c6c8f58cb6c008c18911358f11bd6a0d6f445b651baad1fc7444192a3b1dad glibc-langpack-ht-2.34-168.el9_6.19.x86_64.rpm e4f50986a42fe5cb32ac2ec6577a347f4312354ab585113f5aaad6948ec86143 glibc-langpack-nds-2.34-168.el9_6.19.x86_64.rpm e7b211d5a5aeccde164eeba36a1cd83c742dafa48eaef3f17b0ae572383116a9 glibc-langpack-es-2.34-168.el9_6.19.x86_64.rpm e8d9aa5c4283789ac1c69cc91c4bc7c932fb8b1a4b4c4387d18f2bc751a20a55 glibc-langpack-ps-2.34-168.el9_6.19.x86_64.rpm ea090dbca710efa86bf5622cde0cbbc52545fa5fe1b8bedee2ee197ca0abfd3f glibc-langpack-csb-2.34-168.el9_6.19.x86_64.rpm ea8bf4cfd62039262202bb466977bd6019f9190380072257353f9bc7ad9b72c2 glibc-langpack-unm-2.34-168.el9_6.19.x86_64.rpm eae66923e31e28fb32dd3f93d080d5a59509ad6cefd47d7d6c14fb453d0ad69d glibc-langpack-so-2.34-168.el9_6.19.x86_64.rpm eb83b5a914b7b2cefb76e6a97b95f9f0a17c4f24af0a40c91a1c36e3486126fd glibc-langpack-ms-2.34-168.el9_6.19.x86_64.rpm ec66032e8da60d9290bc9ceb93b8c79778fc39f9cb4ddaae232e42f5444eda5b glibc-langpack-mfe-2.34-168.el9_6.19.x86_64.rpm ecfb1228e30c6cf79b4364e5ffc066384e9083e0cbee9b6a241384a67a9672b4 glibc-langpack-tt-2.34-168.el9_6.19.x86_64.rpm ee810c97e6e25195c8ba5563909fc91e9d9033c80cc236929c17b7cd682321be glibc-2.34-168.el9_6.19.x86_64.rpm f0a98e8e08dcc6639e2a573ab269ffa5e8202da4b5812db25d19304d8b939194 glibc-langpack-os-2.34-168.el9_6.19.x86_64.rpm f12955f833732da8e922de00d8fb0fc2be41901c67371c81ca4f47d79d6605fa glibc-langpack-wa-2.34-168.el9_6.19.x86_64.rpm f15d9368d2f63b94c13efdc81b05d9a3eb05b3f1ae70bfdb04e31ccdb00eab52 glibc-langpack-ja-2.34-168.el9_6.19.x86_64.rpm f1618e8af52a5b6098aecab65adea416be6901d88f9137c35a8404c1d4e874ab glibc-common-2.34-168.el9_6.19.x86_64.rpm f48b1a06533658e15b2606b4176df1a70c9e9d8d309be90dd6f945f50c7c4ee1 glibc-langpack-kok-2.34-168.el9_6.19.x86_64.rpm f72072ea3abbcfb959eb027d1083a3f10668a904fe3773f343c384c2e26fe4bc glibc-langpack-ta-2.34-168.el9_6.19.x86_64.rpm f9d73d831595749c6ce9645086d0cfdb13bf900efcab2ff54c5052cd6aa42fa7 glibc-langpack-bem-2.34-168.el9_6.19.x86_64.rpm fc154f28f389f80c6448a9333e7fbf30caa59c7c5e58be8c9aadd7cb82ac447a glibc-langpack-fy-2.34-168.el9_6.19.x86_64.rpm fe07d335cfb7c0160b549840bdb9cc37935097637cb7551ff8e043eabfa8a6d3 glibc-langpack-tcy-2.34-168.el9_6.19.x86_64.rpm fe78030022768f0b523f02f8cd3ade2a54a5c8832a956d592717262eef258d4f glibc-langpack-szl-2.34-168.el9_6.19.x86_64.rpm fe8d378967e3c410551a4110c5634c2334f193afa2cc49e07471e71b1b55a0e4 glibc-langpack-id-2.34-168.el9_6.19.x86_64.rpm fe9a3cf9f0cbb3386b0742c72dafa88f24e9ed4baffe560e410adf9c7b3a609c glibc-langpack-ky-2.34-168.el9_6.19.x86_64.rpm fea0b468607f60344e21193dafabbeb5ef733f7879c34ce8a6b3de02dd045291 glibc-langpack-el-2.34-168.el9_6.19.x86_64.rpm fee2a6bd31f85921dd5519dd67654224e3f4558b68156b8b7d9efc587b123e1c ALSA-2025:9080 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961) * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969) * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963) * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979) * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126) * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-modules-core-5.14.0-570.22.1.el9_6.x86_64.rpm 0a326941708f0237787ffaec4bb8b50bf8b76e0e76f1ecb224ada2996e23a188 kernel-tools-5.14.0-570.22.1.el9_6.x86_64.rpm 14cb5c48c678b1723e33516c826b8486fd490f9df699db61bbe741b9e9e827fe kernel-tools-libs-5.14.0-570.22.1.el9_6.x86_64.rpm 1b0e1e3416a790435a41677d01e63eb8a6e2029a043a2ee650417d49add580f9 kernel-uki-virt-addons-5.14.0-570.22.1.el9_6.x86_64.rpm 24c0ee412092bb233d0443bd27f614bf99a6b85ec104ae5f1099ea785622d640 kernel-modules-extra-5.14.0-570.22.1.el9_6.x86_64.rpm 360076168dfcfb80c68804e9a967eec2b5201aa81091c4373922a58c3aa9e0ba kernel-uki-virt-5.14.0-570.22.1.el9_6.x86_64.rpm 40647862c529c5f878e6b5f67451c824280d65258d72cbe4194d45442b5079bd kernel-debug-modules-extra-5.14.0-570.22.1.el9_6.x86_64.rpm 4fddbce390a24bcca534aa43ed4eb0a0b02f61f86d0b1ca5de299f5b1ecf180b kernel-debug-modules-5.14.0-570.22.1.el9_6.x86_64.rpm 53157652f6d19e228a217fda4ef407ffc55932ad7446c1d4d7a469e1a5c6f274 kernel-abi-stablelists-5.14.0-570.22.1.el9_6.noarch.rpm 5e4a853771b7f21f2041969eb9858e224fd9416fbb3bb05ca48b8a89c9fb9b10 kernel-debug-core-5.14.0-570.22.1.el9_6.x86_64.rpm 6e1c815d06ce8ee37900b84239e8f5a2a4444226b284eb9ed7c6677138921a1c kernel-5.14.0-570.22.1.el9_6.x86_64.rpm ac06fa338640a9c7830398e9b5a6bb49437e377b20bcbe9b4de63f46c65127cf kernel-core-5.14.0-570.22.1.el9_6.x86_64.rpm d6bcf6a664cd7f0ed7d316a196c12a293ac8c439d3c3908bf5eecdc1e6e00fc1 kernel-modules-5.14.0-570.22.1.el9_6.x86_64.rpm e02ef7f9ec6b207b1235289a85170229dd05648cb957675dc39316284c769620 kernel-modules-core-5.14.0-570.22.1.el9_6.x86_64.rpm eed520cdd4d516e80811ef2e32783afb7da711fb2d1ce6838a09b969558c4bfd kernel-debug-uki-virt-5.14.0-570.22.1.el9_6.x86_64.rpm f4a556929a19fea8726060d35691fc3e2418d1425964de702ec67c5461dfc760 kernel-debug-5.14.0-570.22.1.el9_6.x86_64.rpm f4d0adf40c49382fe1dfdd5b69b8ba6745b95566f579773494ae2afbf9ae45be ALSA-2025:9302 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883) * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919) * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104) * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150) * kernel: ext4: ignore xattrs past end (CVE-2025-37738) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-core-5.14.0-570.23.1.el9_6.x86_64.rpm 34627537a329398ea63ae0af2769909213f51094390989133b395f0d3a2c0471 kernel-debug-modules-extra-5.14.0-570.23.1.el9_6.x86_64.rpm 44eef1f96f6651339e0b005e6d99e4aa99797b4b97c118bb7271c88e8e8219a3 kernel-5.14.0-570.23.1.el9_6.x86_64.rpm 67b7bc3c6353c244e225805152899bca4c57973f8b0916d69dc45ca445b605b3 kernel-abi-stablelists-5.14.0-570.23.1.el9_6.noarch.rpm 80f42fa8071b43e6af526350db35f5a5dc7afb69ca5c56dc9e3890cc45b3f920 kernel-modules-extra-5.14.0-570.23.1.el9_6.x86_64.rpm 8846f31c54773e0ed3b07eff7854fcb448cdf5fcd64431d77bd8a305eab34cfb kernel-uki-virt-5.14.0-570.23.1.el9_6.x86_64.rpm 9d54ec565ce2e6fba6daa233dbe3eb622cdef0175ac2b1eaea3f15617b727431 kernel-tools-5.14.0-570.23.1.el9_6.x86_64.rpm 9e2eb2ef403cd3495dfcf927a54f9f04695ef2184e8f70f20a6e1d087260e14f kernel-debug-uki-virt-5.14.0-570.23.1.el9_6.x86_64.rpm a44d17e1a2056cdf91fbc1128bfa4e8c384101e6bc6a2765af70a50503bbd9ee kernel-uki-virt-addons-5.14.0-570.23.1.el9_6.x86_64.rpm aee280a62fe249d8c96ff3ec856a7f40c90016807ef3aec0b75982d5e39d2958 kernel-debug-5.14.0-570.23.1.el9_6.x86_64.rpm b9db0b88f1efed05e3d26be543e93c50ea96facb97fcc5f8ea4ac0648e153424 kernel-modules-5.14.0-570.23.1.el9_6.x86_64.rpm c828e4375173399d4c41bd885849b693a0eb31b07945bdefd9b579859e527af9 kernel-modules-core-5.14.0-570.23.1.el9_6.x86_64.rpm c869b890eb9238a4964e0fbe6678981bcb096c7f5d307714d8d9b2c9f11a56bb kernel-debug-modules-core-5.14.0-570.23.1.el9_6.x86_64.rpm d1dd84830fd4bbce7ed22758732de48a8bf83246bf4ed9830ccf4d9fa6db76d7 kernel-debug-modules-5.14.0-570.23.1.el9_6.x86_64.rpm df2696e13cb2a705c5ecc561577b5416943e6f6725b50bb6612f42ea86db73a3 kernel-tools-libs-5.14.0-570.23.1.el9_6.x86_64.rpm e65ea65671e99c47e62efe0692fd21923d80478a885b1812641d017ad30ce6ae kernel-debug-core-5.14.0-570.23.1.el9_6.x86_64.rpm f5b92053a9c6f8347f117eaac693fd987f23a8630aab8aae9fd349b4beb965b8 ALSA-2025:9430 Copyright 2025 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions (CVE-2025-3576) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libkadm5-1.21.1-8.el9_6.i686.rpm 4566c101d834e0e59770a59ec408d8ef118cbeb42b1aa6ca4a1e03fa0620ee76 krb5-server-1.21.1-8.el9_6.i686.rpm 8861ac32097f1cb56fd4140073e3f27f430168b8c0b2d45e6c33959379a647c3 krb5-server-ldap-1.21.1-8.el9_6.i686.rpm 9e9595327e179a0bec19f9968e17f758855dc5b9fd3fd16601e753d4f810727f krb5-libs-1.21.1-8.el9_6.i686.rpm b4e56c6b18dada36390cfc17a94ff2d2300f1d2319d58337c5d6fdb35889aaa5 krb5-server-ldap-1.21.1-8.el9_6.x86_64.rpm c79a953c317dd99c90e814f7b5db1e26a14e933478d18e5f932b2e99453f5b88 krb5-libs-1.21.1-8.el9_6.x86_64.rpm d1237fb8b81e9630869b03952281045b21805bb87f89481c4eadae0a9564dec2 krb5-pkinit-1.21.1-8.el9_6.i686.rpm d60ca29c11342462cadd13808fe5a6ec0c7783a580dcad40f0c212d2d9009267 krb5-server-1.21.1-8.el9_6.x86_64.rpm dd70e43018b337e3bbc938e2fbcedd87f23714d6af48834c23f1d76c20bf3b8b krb5-workstation-1.21.1-8.el9_6.x86_64.rpm e0e5bd46fd29e19ed3eeddfefaf5c131b8fcd66da0b8a43e7a87e0aae7e67114 libkadm5-1.21.1-8.el9_6.x86_64.rpm e3047f490160cfc3a1246da4fe1c8923643f7376600a10e420957c8b6b91226b krb5-pkinit-1.21.1-8.el9_6.x86_64.rpm e564a7c08ce2737923b923f102ff39a42d348f70ba55c421b67c2b6fd5946bec ALSA-2025:9431 Copyright 2025 AlmaLinux OS 0 1 Moderate

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default libarchive-3.5.3-5.el9_6.x86_64.rpm 0c2fdb0711c919a7d919da793cb391569303d56d176c4cef3dc87dd8f6232366 libarchive-3.5.3-5.el9_6.i686.rpm 67c9b19ec5cb9a209f2a2a631db11f5067ee0573bd0c0aa9d2039c0637fe80a1 ALSA-2025:9432 Copyright 2025 AlmaLinux OS 0 1 Moderate

iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default iputils-20210202-11.el9_6.1.x86_64.rpm 67d07b113f7ef4ec7ad5d04fa39bf8e26059cd00a4406997b8f0ac79d1d8d2df ALSA-2025:9526 Copyright 2025 AlmaLinux OS 0 1 Important

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default pam-1.5.1-25.el9_6.i686.rpm 19a999a0c663b184d6001aca597af01ea2b87f256914cd82372ff7b8b9cd0520 pam-1.5.1-25.el9_6.x86_64.rpm d9dd86d2347950090c35015f75dc6a8703e7b691121cc0700d189ac4ccb5623f ALSA-2025:9877 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Vector register overwrite bug in glibc (CVE-2025-5702) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default glibc-all-langpacks-2.34-168.el9_6.20.x86_64.rpm 0059003723652fa79471cfdc7f4aaca19bb8b6276bb59ac69924e50e57ce4ed3 glibc-langpack-ps-2.34-168.el9_6.20.x86_64.rpm 006e353bfef5838c2175ece5464c6849d4ce6ad70951c4f4df296abe7f59caae glibc-langpack-gl-2.34-168.el9_6.20.x86_64.rpm 009cd4f7f5a59c9cb8e617607ac4f8c4cbabc7cc318ee0821e0d1cc0d323d014 glibc-langpack-tl-2.34-168.el9_6.20.x86_64.rpm 0140b5b267eafbba47937d03e8ea41e1c1b6798819be5616d890aef69a256e50 glibc-langpack-ha-2.34-168.el9_6.20.x86_64.rpm 01ef9cf2899e11240f33473c8bcbf5e527e0e4d275bf6150b4027fd802c26a06 glibc-langpack-sw-2.34-168.el9_6.20.x86_64.rpm 080458179ec1023b3becfc720158b6187c726897f635d90214f76bcaa0c55c4f glibc-langpack-fy-2.34-168.el9_6.20.x86_64.rpm 09664a66bf056e731c82e2a77579b22df7aa6cd613ec83f8e919f3f0d37723d4 glibc-langpack-kw-2.34-168.el9_6.20.x86_64.rpm 09e943645a40e043e4208a8b5b72668396fab2066724d314b72e7f93f0ef113c glibc-langpack-tg-2.34-168.el9_6.20.x86_64.rpm 0afe52d0bff7f791782ac349af6ddfa687e78ce93e15e973075bf53e85a360c3 glibc-langpack-bi-2.34-168.el9_6.20.x86_64.rpm 0cb4bde14003a6a2b1b2f8c13beabc1df7b1969646cadb3ff1ade59c7991d0a4 glibc-langpack-mn-2.34-168.el9_6.20.x86_64.rpm 0ced5686e569a7f6fe6b90ec7fd534042ba0868dce14b696ac340a443fa09344 glibc-langpack-cy-2.34-168.el9_6.20.x86_64.rpm 0d0caa4a550564f49a921432f9948e60d581cd6fe136c8a043e77477a62fccd2 glibc-langpack-nds-2.34-168.el9_6.20.x86_64.rpm 0da6d8fd53633e05a3cc5da3284cb0fb9429e121539270b48ee2325076062b3c glibc-langpack-id-2.34-168.el9_6.20.x86_64.rpm 0daaf4e9867132c0df0e264894ddce7821cde59a2c44824961ac32953442d7b9 glibc-langpack-de-2.34-168.el9_6.20.x86_64.rpm 0df75816702e6f813375851bf8a3fbca26a331ede0d60fe6ebb05a2baac8d80d glibc-langpack-iu-2.34-168.el9_6.20.x86_64.rpm 0e91ba28cbf409796a02f46a17344a4717053f63e9b6aa0a1508ddc566d71f0f glibc-langpack-lzh-2.34-168.el9_6.20.x86_64.rpm 0ef2dde643ae2071ae2ff981fdcabda3e3374595563305924a7e262d2b1a61cf glibc-langpack-cs-2.34-168.el9_6.20.x86_64.rpm 0f459331ddbeb24f9c8d590023cf242a3c2e48de74b2cfba34d80a2d5e426593 glibc-langpack-yi-2.34-168.el9_6.20.x86_64.rpm 0fcdb817fd497b11bc933cf05935a926bba25998cf82119330eee5a76d1f7233 glibc-langpack-si-2.34-168.el9_6.20.x86_64.rpm 114bc72d9ac7b7d1064d659332a2aa18ace47d1e0b527f9fff5104a41360debb glibc-langpack-eo-2.34-168.el9_6.20.x86_64.rpm 11565efcae74636ac96779f07a898b4597399e3c1625cf3b34369a1145280134 glibc-langpack-chr-2.34-168.el9_6.20.x86_64.rpm 11cab157b870e3d3c60ed3062f48d31a9a0511b4cab352e770344d4a3f66d11d glibc-langpack-ckb-2.34-168.el9_6.20.x86_64.rpm 127aaf96dc8a891ebd79aa31541e4b31b48650ad6667c56d5188ba3d8a066c73 glibc-langpack-lo-2.34-168.el9_6.20.x86_64.rpm 136cb2b10017841c88dec620aa0d74d3b8659b3d51da559b75a5367326422c8e glibc-2.34-168.el9_6.20.x86_64.rpm 14b1c6bb7ca4b133b767baeb378177df7bf027afa36b7b321c8755e72eefdede glibc-minimal-langpack-2.34-168.el9_6.20.x86_64.rpm 19b189f10d179091deb26ff6c60f9acaa6919543a803a518e0e901183df02d80 glibc-langpack-gd-2.34-168.el9_6.20.x86_64.rpm 1af8334f7f8400401c4e435e17198b2d265bcde88170ef8f0d797435ef550851 glibc-langpack-uk-2.34-168.el9_6.20.x86_64.rpm 1da52e27147228e7c8cf914d7744abe6683e814047adaf4f17c84cd60341e217 glibc-langpack-se-2.34-168.el9_6.20.x86_64.rpm 1eb2c9ad9aacd518ab820c8dfbb21707853e248bfabec488c6198ef32613e1d3 glibc-langpack-hif-2.34-168.el9_6.20.x86_64.rpm 1edf41a5f4474bc075a08d54c351e8a1a5db18de5e99c9c2c1a01dd5698945bb glibc-langpack-aa-2.34-168.el9_6.20.x86_64.rpm 1f8b67c721d03cd3fd6d5cbac89c7daedc1a1dc35f8fb11dc1c52e4be0a50813 glibc-langpack-kab-2.34-168.el9_6.20.x86_64.rpm 20159175f3ebc14f68433a41a8d953b2ed271fbce049f2bcbd1d44577f11422f glibc-langpack-bn-2.34-168.el9_6.20.x86_64.rpm 22907ab591653b761d7fd29f8931480b0f303f87c9047e9ef6e99093a1dad0ca glibc-langpack-hu-2.34-168.el9_6.20.x86_64.rpm 2533acfb25fe88ed7c1d52e74dd14aa36926998bb560dddb07c90005ae7c8317 glibc-langpack-ak-2.34-168.el9_6.20.x86_64.rpm 25593fffa3690c27da8338bbf87d19a21cf49d9060df8ce7e3ebccda3d63458c glibc-langpack-or-2.34-168.el9_6.20.x86_64.rpm 266bbd4024f253c97ef0b72faf8ea6ff922db952a477292d791959f0bbcece5a glibc-langpack-mfe-2.34-168.el9_6.20.x86_64.rpm 2673f2fe142e025a66e7d4aaac0d048cc520e9d9ce50b87f483dbed1f87db5b6 glibc-langpack-ff-2.34-168.el9_6.20.x86_64.rpm 27221501b9f1e3762a20de67b260c7482257309b96205a42cc5133d951c02392 glibc-langpack-bem-2.34-168.el9_6.20.x86_64.rpm 27553ebd2c35183dd2287e98275576b8db5ffddadcd17e2456cbce6abf328552 glibc-langpack-ta-2.34-168.el9_6.20.x86_64.rpm 299426fa307374d3af14aa2c4442c1bd401ebeac4aac3baf45f32c30023b8360 glibc-langpack-ast-2.34-168.el9_6.20.x86_64.rpm 299af3005980b0ff8c3e6d67aa7a3d61c99d25569d130243dc15832a2efeaf96 glibc-langpack-mr-2.34-168.el9_6.20.x86_64.rpm 2b94bff11feb2d66db8a451ef2086be4a55b17fa3a5c377644e7b36758309254 glibc-langpack-ga-2.34-168.el9_6.20.x86_64.rpm 2bcbfbbaa9212fb73480f9c3392c3d25b3343015098bb0f46e9b04028d78f9f2 glibc-langpack-st-2.34-168.el9_6.20.x86_64.rpm 2c179e06f52e1f2edea31995e9f31548745d7339ab452187e5ec4d084278993e glibc-langpack-gv-2.34-168.el9_6.20.x86_64.rpm 2c2419dac2b7372b888cb1c86abc63ea2b4786c2ecee566b743d2111b18b2273 glibc-langpack-gez-2.34-168.el9_6.20.x86_64.rpm 2c84d891ec035d3394f0d668927d1ba5b1afc9658a23042a618af8d5023dff14 glibc-langpack-niu-2.34-168.el9_6.20.x86_64.rpm 2d0ba58fd1da991850d24baf4bf4ae3145a26215a0a12439e3abe9fd2f01aea1 glibc-langpack-sid-2.34-168.el9_6.20.x86_64.rpm 2db3434ac8b9c91e5c7192f7372c1a7f14784d90dbc6b22cbb399b8c51fc8456 glibc-langpack-fo-2.34-168.el9_6.20.x86_64.rpm 308bc6c10d7c5daab0edbf68c179015ba9a278b2002721fff4f1629db0bc4398 glibc-gconv-extra-2.34-168.el9_6.20.i686.rpm 35e59d463d95b05cdd68b07db2db64530cb3aebb2898ea9c63821e213af8ab5a glibc-langpack-ru-2.34-168.el9_6.20.x86_64.rpm 3638c81050f89bb969f68b149aeafc61f6d22fa59dd39f3350a0ec661f33274c glibc-langpack-fr-2.34-168.el9_6.20.x86_64.rpm 3668d34ee59671121d29450e882d73f6639ac27a2012e3c1385673f3b03b9f01 glibc-langpack-pl-2.34-168.el9_6.20.x86_64.rpm 3743326ba68df0615bdd4d9e11d947ec720c56f238ddd195e6975133b90e296b glibc-langpack-en-2.34-168.el9_6.20.x86_64.rpm 37591d729f3a9c1cf460c9b28542e357f2fb7cecd82e10addb325ba1d5c80ae5 glibc-langpack-nl-2.34-168.el9_6.20.x86_64.rpm 3795a82de23f04dc22d8bdafe71a1697bc6e8dd6c8d3fc8b7d4a1080cc23690f glibc-langpack-sa-2.34-168.el9_6.20.x86_64.rpm 37f6031c90f1406133556d7c867cc8befd1d78d9cfd43d1735d91f18b29a82d9 glibc-langpack-wo-2.34-168.el9_6.20.x86_64.rpm 3a4d8d7484da8e1a99214062c98b645964ec1b1b55a71e1d87e59acfdc5ddc73 glibc-langpack-mai-2.34-168.el9_6.20.x86_64.rpm 3a84593bc4140febb8fc609006a878fe311e7c5e88927a0f92b0d7e97b448fc5 glibc-langpack-pap-2.34-168.el9_6.20.x86_64.rpm 3accab915dd1a966a20dbf8d42d2472a866a18760efa9c06305a953d4c6cbaf7 glibc-langpack-tpi-2.34-168.el9_6.20.x86_64.rpm 3bdebfabdda557c743df1dc2011daa29bd38b4f407971620c8105d205c520ef8 glibc-langpack-byn-2.34-168.el9_6.20.x86_64.rpm 41ab52ce5a8d2903cd3892ec84002b377cec3ac593c1ebb9c42069d1f60e32b5 glibc-langpack-xh-2.34-168.el9_6.20.x86_64.rpm 42446868bfc63d6433ab8981aad54517b71b5fe8c8b809e8dc2888387afc32bb glibc-langpack-dz-2.34-168.el9_6.20.x86_64.rpm 44a35e63bf9ca778dc9ce3d26c6588ca934cdefff5b1c1aafe75ead1b7e84885 libnsl-2.34-168.el9_6.20.i686.rpm 45b79994497721f8bacfbf2edd5a4aaafb05505f4535bf459f86564dd49a151d glibc-langpack-da-2.34-168.el9_6.20.x86_64.rpm 45bc3ffe8180a5b0afef9958d07fbdd78e672d6f43a90a31626a8fff836beac8 glibc-langpack-bho-2.34-168.el9_6.20.x86_64.rpm 4690195cd25cace174534c36d29260bb961f8197341aa5909d6fb8119c18082d glibc-langpack-he-2.34-168.el9_6.20.x86_64.rpm 469569b80536b61f30f1053de72945235a52bd35fdc0f0f5f68e5633f4553ad3 glibc-langpack-sr-2.34-168.el9_6.20.x86_64.rpm 47628e4863dc3fe944fc667f996eb6d97f3e18ab2fce6c663217a09eac68aca2 glibc-langpack-om-2.34-168.el9_6.20.x86_64.rpm 48cbad74c6fa0eaadf80d1d38d9b178241f87689c282204086997b65776ed950 glibc-langpack-mi-2.34-168.el9_6.20.x86_64.rpm 4afdb10e45089bf99e322d0b27ffe8f07d9552c0d7a6f5e59b31b616f26eaabb glibc-langpack-ur-2.34-168.el9_6.20.x86_64.rpm 4cafebda1b556190058ce0a095de1fffc2b9693af6f29bcd32ab3c3263de955b glibc-langpack-be-2.34-168.el9_6.20.x86_64.rpm 4cb22eb6324e81f7489a41461b2eb6e3dbfce38d4bc9091977731790781d9c95 glibc-langpack-ug-2.34-168.el9_6.20.x86_64.rpm 550e635ae963d3ea6b19da8c029a988ae11211d29bd0c3c11aa4a2a0788ec425 glibc-langpack-ml-2.34-168.el9_6.20.x86_64.rpm 5639e1874d4efff4db41848b01b72452523950f27c4ab477f55d76cf10ca5984 glibc-langpack-sv-2.34-168.el9_6.20.x86_64.rpm 569af091f25b88b68f603e2fe2df3e92b3be6fba17475086527a435c1e1972fb glibc-langpack-bo-2.34-168.el9_6.20.x86_64.rpm 58286ab6af51391e1e5dfc117d96ffa62a2c046ead527beb5737c362685eb107 glibc-langpack-ku-2.34-168.el9_6.20.x86_64.rpm 5831032276d473f5fad8c8da53e518fcf69cd2246aef649719d9a08844c11086 glibc-langpack-yue-2.34-168.el9_6.20.x86_64.rpm 583afb76e73b120841554d8d4c046b954b5ec57c92ed01ba9c0926f842bb392b glibc-langpack-is-2.34-168.el9_6.20.x86_64.rpm 58a4b0ded7f188d5080bb57168d420e2dba84856b0bae42d28be1dd435df040d glibc-langpack-ro-2.34-168.el9_6.20.x86_64.rpm 5ab590bdcb69a307e6a27388b5254f66a6dc4af957ace9ea0fc7ef74384d805c glibc-langpack-af-2.34-168.el9_6.20.x86_64.rpm 5ba6e7397b07a1d5964255fab709079539a3655b7251d57cd3cc377269299e70 glibc-langpack-tcy-2.34-168.el9_6.20.x86_64.rpm 6279ad42391679e6514958f7e544051450c5f95058c5af35663cbf8ba9304f30 glibc-langpack-ks-2.34-168.el9_6.20.x86_64.rpm 63842c4cc1319932597f839a6352e5f4242c142df47b011b9f2669674e5f329d glibc-langpack-hr-2.34-168.el9_6.20.x86_64.rpm 651b5d897ead44de4d4011b4fbfb7128ce86eff310d41562ae9ac21d63e9d204 glibc-langpack-te-2.34-168.el9_6.20.x86_64.rpm 673571d51d6b1f14f31401647f273f58ead2050f9aa3da7ce76e241ae7eaa80d glibc-langpack-shs-2.34-168.el9_6.20.x86_64.rpm 673d3fe1039f148fd2c26219c5af3c6d9e5d6d9b7732e77122e1638eab9dacd6 glibc-langpack-wal-2.34-168.el9_6.20.x86_64.rpm 67ba4b5af4c1d81bbef518c424993d6949b68563be9efdbff8e2c5512a23f790 glibc-langpack-mk-2.34-168.el9_6.20.x86_64.rpm 680fc0129b8cafd5dc96356f0ce1e0d448f4f22b364b5dc873c31b3794868a9d glibc-gconv-extra-2.34-168.el9_6.20.x86_64.rpm 68b9965a40473aaea30f4f925716c435b5401fd350bc14c7ab04d3ab6f0b6cf9 glibc-langpack-hak-2.34-168.el9_6.20.x86_64.rpm 6aaf166fe385cb3af148fd84f76f4c550f4f2967a55019e4ba34bd5709548d09 glibc-langpack-kl-2.34-168.el9_6.20.x86_64.rpm 6c1009cf1346edc38ec81ca5b94e88123cf9aac1b2939d28dd86f9433e1af1ba glibc-langpack-as-2.34-168.el9_6.20.x86_64.rpm 6cabcffd94c824d12737e5581ac2f2627f7ef05042dbcf728d442c612c9bdea3 glibc-langpack-nb-2.34-168.el9_6.20.x86_64.rpm 6d01e5ad3555e046cd9569ea020bee35571191732c5ae8c6134118a71cdaf146 glibc-langpack-km-2.34-168.el9_6.20.x86_64.rpm 6d1d29654b659a28383e788f6e17b8e910522c805b8916a3744198913e1ad7a1 glibc-langpack-ve-2.34-168.el9_6.20.x86_64.rpm 6d9748d174ee1744bb082b32d1def4bb0916fd70649ed828532fc45c5b4374ef glibc-langpack-fil-2.34-168.el9_6.20.x86_64.rpm 6f2ebacca008a7012da8f90a6398fc12772cdbdbfad34483363c82006c08bbe3 glibc-langpack-mnw-2.34-168.el9_6.20.x86_64.rpm 7132f84b39a383cdb50eb7cf0829dfdc7e82df7597745deeb9347eb7a6f5080b glibc-langpack-sk-2.34-168.el9_6.20.x86_64.rpm 74ace1118abfbe6bb27587aa1953f92978c77b418945d16665e90fba08055f2d glibc-langpack-nan-2.34-168.el9_6.20.x86_64.rpm 759ea5b6267efb8ed541755621ca0fe1c45383f5842a22608f689fb54b38c26c glibc-langpack-vi-2.34-168.el9_6.20.x86_64.rpm 76d8fe67f74976367d7a4c65fbd4572c38f8a46daf421ea9ebd8156684772570 glibc-langpack-ja-2.34-168.el9_6.20.x86_64.rpm 774e43d961e80b4be2c87128c4caaa3d5e6567c1f9f0606d05c89b6717eaae80 glibc-langpack-es-2.34-168.el9_6.20.x86_64.rpm 79b747e352ab983f0adb38ef17db9ad6bdacfdda9f49496f24d3e0b93173e37f glibc-langpack-bhb-2.34-168.el9_6.20.x86_64.rpm 7aeaaf044649820bc343ca920f961a93ce481f24a359797e9fa146ace8f97b5a glibc-langpack-rw-2.34-168.el9_6.20.x86_64.rpm 7b0795c94e5a3c8b452efc769f85928fdb20aadc73050efd9744c1a01f2e5768 glibc-langpack-ce-2.34-168.el9_6.20.x86_64.rpm 7b7101b8ddd98e20a8ce5cb6f5f3c753c76f6ccdf243d3431097a26d19e0c5c1 glibc-langpack-bs-2.34-168.el9_6.20.x86_64.rpm 7c2fb16e782abb2d4b7f92b462d1531d68bcc572baecfb3470ff6a1f9214f6e1 glibc-langpack-mag-2.34-168.el9_6.20.x86_64.rpm 7c8718518d6b4958221f0d1979be51a0f47071951e85e288b706b35e4b9a96f6 glibc-langpack-tk-2.34-168.el9_6.20.x86_64.rpm 7db617389bb3a7ae1af32009f7291fedca38a5fe54966b5eb78d70f01e70b946 glibc-langpack-kn-2.34-168.el9_6.20.x86_64.rpm 7e359fd6300393ec3e3591345b097b84029d7a0671355a9d21773b98038ebc25 glibc-langpack-ca-2.34-168.el9_6.20.x86_64.rpm 7e8c6e2e512e04a612d9479c0eafed9736cd361dba3e1b8e7503d3587ed9a7d5 glibc-langpack-ln-2.34-168.el9_6.20.x86_64.rpm 7e9f370dd41e74dfebdf68aa572085ae6f2f72b02167ff672b5fd14f1d079cdd glibc-langpack-ht-2.34-168.el9_6.20.x86_64.rpm 7f41fd2c80af8fae5d03eb5b0c547d1d6cc69120b9076a41475294795ee37668 glibc-langpack-sl-2.34-168.el9_6.20.x86_64.rpm 822025597f275453c972a97774c4924486a2e7776423deb90a2a06af9caa38a1 glibc-langpack-lv-2.34-168.el9_6.20.x86_64.rpm 8255fb18a38fc42ed63ef40bdb85762eef930ecef5262f8ef63c4af43503ae33 glibc-langpack-pt-2.34-168.el9_6.20.x86_64.rpm 8520724364a40588ba14cd07b0476e7d4203e074a22fdcb1639b068b77e8700a glibc-langpack-sq-2.34-168.el9_6.20.x86_64.rpm 86359d5323193ca823b3243b13755aff6101a682f7649c9f6b0c630f36ee15a9 glibc-langpack-mni-2.34-168.el9_6.20.x86_64.rpm 87322ef5ffd42340fd83500169c00ded167c0fea9c6cb9359541f8ceffc89f9f nscd-2.34-168.el9_6.20.x86_64.rpm 89aa1a9ffa9f55a5827d7abd1f3f0ea085e1a1682d19f632ebae68f9bb563cdf glibc-langpack-dsb-2.34-168.el9_6.20.x86_64.rpm 89d6e53344d4ef90696422ba559475c89d982c45a68131ae34ffc2caf3cc4ea1 glibc-langpack-sc-2.34-168.el9_6.20.x86_64.rpm 8be86912a1395e96cc419ba598d0f450cc3b1f50d15354fbf8768c1b724a77ad glibc-langpack-hy-2.34-168.el9_6.20.x86_64.rpm 8ca1ee5fd55f18f36e06645117d2010f571492a357c82661285071fbd46e3ed2 glibc-langpack-hsb-2.34-168.el9_6.20.x86_64.rpm 8e680335960cbbf9985031817bb3b882ca24c7df47308d3049802f8c80c0c385 glibc-langpack-br-2.34-168.el9_6.20.x86_64.rpm 907cdebeea1cc49d4aa4f05ab6d8faebb6ebebab8652b85503666370d5289826 glibc-langpack-ne-2.34-168.el9_6.20.x86_64.rpm 9258f9563cc6a98f44c442841c8a254c246e06974d4dbec84a424dfb064e4296 glibc-langpack-it-2.34-168.el9_6.20.x86_64.rpm 93bb8bfa58f12a956df2feb27897b04bcf67154496821516be72425afec162d5 glibc-langpack-wa-2.34-168.el9_6.20.x86_64.rpm 9502c8a8358006db0ff68c7fa3e72bdb413e5a80ae0f3337fc6e7939d0c1586d glibc-langpack-miq-2.34-168.el9_6.20.x86_64.rpm 95e81aeab5aa0fb234183c2778366445dea17bed334f1306e2d642d86acc9273 glibc-langpack-ts-2.34-168.el9_6.20.x86_64.rpm 9893a37d723ba5244c0c8737875e23a2ff134f2457d64d8f433167117cb4cb53 glibc-langpack-os-2.34-168.el9_6.20.x86_64.rpm 992bb5b5b026e12b6cf31643935a35aa60e05fb78b8d560f08ea5554d07cff26 glibc-langpack-fur-2.34-168.el9_6.20.x86_64.rpm 997ed9fb54216cb3fd727942386d8946215426f245217ecc287afaad1a033d88 glibc-langpack-lg-2.34-168.el9_6.20.x86_64.rpm 99f59cb08625406f673809df4d44723ff7074a06e3b1dd45aa11ae23119eb407 glibc-langpack-zh-2.34-168.el9_6.20.x86_64.rpm 9ab7b9549318c7d944ffa58878bf762a97845acd3c3fd18d09f77d5ee9616d1e glibc-langpack-nso-2.34-168.el9_6.20.x86_64.rpm 9eee55c5ef06bf77441aa433a1dfc16cd9fd1cbb3f09c449878aaf848fd610b4 glibc-langpack-ber-2.34-168.el9_6.20.x86_64.rpm a05ed95c42e66a366caf2cbb0f67c6f2b2083b581affbdba9b85b21679b3d07b glibc-langpack-kk-2.34-168.el9_6.20.x86_64.rpm a0abc68f363fd6a18028aa05bb1e212e88ed74aec7a58809037e46fddce84423 glibc-langpack-ms-2.34-168.el9_6.20.x86_64.rpm a17efc9aa00f4d110c0fd459c04ed16d7b8e6c94a4438849ce22a94ed009127b glibc-langpack-tt-2.34-168.el9_6.20.x86_64.rpm a42b8f18d5b057138fea71ee2acce0f0eb6dac8fbbffc2edae60a40ea8ab67b1 glibc-langpack-zu-2.34-168.el9_6.20.x86_64.rpm a4dda5a2463c1a0ef2d39cab9b22c6f2b70e713637f028c0835989ae01392d21 glibc-langpack-hi-2.34-168.el9_6.20.x86_64.rpm a4e475a6583d52e6a04f4b61e2ce1cc02bfadc1d2129546e2a16894fb3bd4959 glibc-langpack-mhr-2.34-168.el9_6.20.x86_64.rpm a6773eee873cf232c03042f632b51b9aefaf37cfdcf41d70dbc0e643c254ae2b glibc-langpack-nn-2.34-168.el9_6.20.x86_64.rpm a70afa4d6eae5dd5a654b22ed1852d7b5c350a36bf482e27246e39c61960e2c4 glibc-langpack-crh-2.34-168.el9_6.20.x86_64.rpm a8f9b691280b2458a5a3512bb522f86898a2feb886714f17d66ff3ca087fae37 glibc-langpack-dv-2.34-168.el9_6.20.x86_64.rpm abc93ad46da88e9741f8655400a257bd40b889d62aeecf262462ba368ef99796 glibc-langpack-az-2.34-168.el9_6.20.x86_64.rpm abed65eb8dcd0c2664194495ad421b7aac1859a409ae37006375398805105d96 glibc-langpack-am-2.34-168.el9_6.20.x86_64.rpm ac5c5a68ff792b1088151ad64a5a5f9ba85942d374ed74f1dfdf245d2cf82019 glibc-langpack-tig-2.34-168.el9_6.20.x86_64.rpm acbf5bd4694f826b16d135e35164772e755fe0c30ab154896c5d7af3e256b626 glibc-langpack-ti-2.34-168.el9_6.20.x86_64.rpm ad5fc389606532c928ddf66e3dfba8990054ce833e40248fb334e58583101280 glibc-langpack-ik-2.34-168.el9_6.20.x86_64.rpm ae0c4c4aa7968d948831bc61454f9d04f0ac321f2bbe3dd9791697676874897d glibc-langpack-uz-2.34-168.el9_6.20.x86_64.rpm af1468eb6b743343197e1913c98e48da39b4ffafa9da6276546f484fac840287 glibc-langpack-agr-2.34-168.el9_6.20.x86_64.rpm b18dfc9e816081829089572fc58a8a94a6dd910c1b4298e411f6007de820075e glibc-langpack-ko-2.34-168.el9_6.20.x86_64.rpm b22e8904275cd1867f89ef8559a14afc130f9596af050847ba95605190b1daf3 glibc-langpack-an-2.34-168.el9_6.20.x86_64.rpm b2764a16465c5872885cc25c9c08afb7766b012ad98206fabddb804310d53018 glibc-langpack-unm-2.34-168.el9_6.20.x86_64.rpm b28df60f349d2225e3b470b425cfc752ef7dc4b1534498736865be2e0b0f8754 glibc-langpack-quz-2.34-168.el9_6.20.x86_64.rpm b2b672e16927f50a6565aae840ce6b0631b76c72d68a3544daf31be3dadbb798 glibc-langpack-lt-2.34-168.el9_6.20.x86_64.rpm b3645fcdcf91d437731ac993ccf17110528c014c822cb7092b02f4ac3900520e glibc-langpack-eu-2.34-168.el9_6.20.x86_64.rpm b46c26485c297c75ebbfa181847c967d0784cc8f834b3c682ddbac85dd1eab8c glibc-langpack-yo-2.34-168.el9_6.20.x86_64.rpm b522a929437ee2dc380fe71283ee471381943999c07921342cc7693e41aa642b glibc-langpack-brx-2.34-168.el9_6.20.x86_64.rpm ba643de4e20ea68550f3ec77b9d77424378b01ff3fb680e96b62ac518de42c52 glibc-langpack-cmn-2.34-168.el9_6.20.x86_64.rpm ba6d64b4f6b719d889cf8025186548634c5719f76b890dea0f081aaf21341bd1 glibc-langpack-yuw-2.34-168.el9_6.20.x86_64.rpm bb9b8c04071d9a9ff0eec736cc229a01d940b65a57ba71a4ccce729e27c88c3e glibc-2.34-168.el9_6.20.i686.rpm bca0e91401b93ac250108449616dd06b1d970111dffd8e00237c642f1fac711a glibc-langpack-ia-2.34-168.el9_6.20.x86_64.rpm c0b4d1c88ced7a7fb72ba300581f70b92615ff389b41a58978f3b6b38d233b18 glibc-langpack-tn-2.34-168.el9_6.20.x86_64.rpm c0dad435d4add8fd7c4c7de873bba3885ef233e675212f3e3e7a1078ecf326c0 glibc-langpack-kok-2.34-168.el9_6.20.x86_64.rpm c2fc7e579c41484929155a67fafcd01ce664d9ee54bfb79095f9ace62204e016 glibc-langpack-wae-2.34-168.el9_6.20.x86_64.rpm c35a3d23d3d14aa22b402c3feeb88824a205d1fd4f88fb4a6a1d12390d4d30fd glibc-langpack-tr-2.34-168.el9_6.20.x86_64.rpm c35d40cf8f982f739d8529deeb6a2e6a6b8acc36a2b7b2eac01f21f34de393ca glibc-langpack-ky-2.34-168.el9_6.20.x86_64.rpm c416cc2709e3343c051f3f9357ac63fa4919d9e007b6ef363d20606934c64cca glibc-langpack-ka-2.34-168.el9_6.20.x86_64.rpm c4ef72c8eefa565318080829ee1a3ba6745326861b09d600c19593acecdaa5c8 glibc-langpack-cv-2.34-168.el9_6.20.x86_64.rpm c6d0fad5c504d4c7f90230fad7639d1ea7949e3fd9bc93d9dcbc6b5fe8586c29 glibc-langpack-ar-2.34-168.el9_6.20.x86_64.rpm c9a11edc6cb2a25b2f70501fad0fdaed358f3444caf132b8bef04a321592e959 glibc-langpack-bg-2.34-168.el9_6.20.x86_64.rpm ca38e31256fb6bbf0fb6a562fbfc55f47c89e2a8af10088315da59a4351055ba glibc-langpack-so-2.34-168.el9_6.20.x86_64.rpm cb1b5b84b68e99eb76a43c5f793250b6621fb42a90424b129fc1d471260f9638 glibc-langpack-lb-2.34-168.el9_6.20.x86_64.rpm cc29ca86a482cd273c5f071bb01abf128f6d1edf31583abbf56fb650173dee9e glibc-langpack-sgs-2.34-168.el9_6.20.x86_64.rpm cd86b48d2f69ea4fb12d76d303bdd3a4f1fbdf7ea9f97a0f13d92d41e265e5c1 glibc-langpack-el-2.34-168.el9_6.20.x86_64.rpm cfb10d92c216e74c44ca850c53a01cd94abc52d135edee95386a8ffd7b3f1f3c libnsl-2.34-168.el9_6.20.x86_64.rpm cfbbdf1352fec1ffe773b86871f9164caea2911aa25f093d6fabe76cb91a2a10 glibc-langpack-pa-2.34-168.el9_6.20.x86_64.rpm d2804c40aa7844462f20eb5113a44f93785329a772526810be507ffa8203d612 glibc-langpack-ss-2.34-168.el9_6.20.x86_64.rpm d38555119ecc755dd2d7fc9def0d2dbb55f5195d3f11cc8b42303e02d624d4a4 glibc-langpack-lij-2.34-168.el9_6.20.x86_64.rpm d4df8d8df07efe98585d4b31dc98f1fe611803af875bdc2433d1c905f719fffc glibc-langpack-my-2.34-168.el9_6.20.x86_64.rpm d5044256ff94e68bd4400fe379473b267709dd779ff728169557051792eee703 glibc-langpack-th-2.34-168.el9_6.20.x86_64.rpm d60ea5f78c8664d5288041bff45c5f1ecb9b0ceef0f4409cd9e02f5aa5d5313e glibc-langpack-sah-2.34-168.el9_6.20.x86_64.rpm dad913e270969d098f0b9c93c1167dd21cb2f3db9d09e6e584fcdef8f08fa00c glibc-langpack-gu-2.34-168.el9_6.20.x86_64.rpm db054ae5f0a40e86e69092a4c1e83b0241d8224dfa3872fc6e79134996a60a80 glibc-langpack-anp-2.34-168.el9_6.20.x86_64.rpm dd5bafb19eabbe27091eea0a9c55fc0744f40a1c243da8a09e24ad2511cedee7 glibc-langpack-hne-2.34-168.el9_6.20.x86_64.rpm e067d87cb31c9c0d63b4592acf190ca76b6c9499318ad54b64f4026ba3b8dea6 glibc-langpack-mjw-2.34-168.el9_6.20.x86_64.rpm e2b28e2da4cb8db9574219fced87c9aff73dc18c2923a76fcc5ae7dfa3d45c81 glibc-langpack-nhn-2.34-168.el9_6.20.x86_64.rpm e451e11c803f82a2a62649b59bdb7dd12bd553de43bf59da6c7ff7bcfa0f207a glibc-langpack-to-2.34-168.el9_6.20.x86_64.rpm e49177c31d0a62a9aaea0c5755d0f56ed221583f504032dd18c5ca00dff67039 glibc-langpack-sat-2.34-168.el9_6.20.x86_64.rpm e73a8956a75096dd45b011d9273d5c9b49cf6058e37c6b6dcc10de693d6525dc glibc-langpack-sd-2.34-168.el9_6.20.x86_64.rpm e7636e127ea68abc650485c4ebdaebaf05a6908657fb60938742547d134b8b62 glibc-langpack-fi-2.34-168.el9_6.20.x86_64.rpm e8ee4ef73445e09d54baba9c266ac887577ea4ef07a2d4cd3ab740fcd5c2cd7d glibc-langpack-mt-2.34-168.el9_6.20.x86_64.rpm e975cf66675b59397de85ea77af7467c64c3a35ca42e5040f9c0e922f769d69a glibc-langpack-nr-2.34-168.el9_6.20.x86_64.rpm e9c343f9bd7e35da856b0ac7c41c017c8d03b06de0e9f5d209b7aefb7559bbdd glibc-langpack-mg-2.34-168.el9_6.20.x86_64.rpm e9da98abcc51ddf8fd2a448f3a65bd2befce002e87c6625ab26f5fd0eabbb9ad glibc-langpack-sm-2.34-168.el9_6.20.x86_64.rpm ea4f0f9fce7f0fce016f8cf0593e7ce4c8e72bc96723cf69ceec61d6aec5ba1e glibc-langpack-the-2.34-168.el9_6.20.x86_64.rpm eb1f934f77fedaf4f7677d446adce3046907a193049b90c05425e28dd7f8790a glibc-langpack-raj-2.34-168.el9_6.20.x86_64.rpm eb5d73a0816b0558f0676205745b5e0f47d45cdf02ebb132e2f5663b8131059b glibc-langpack-fa-2.34-168.el9_6.20.x86_64.rpm ec40a23a1bb9c7c7b78db4878c488362cf3a21634bc6447b46f98c7721aa152d glibc-langpack-li-2.34-168.el9_6.20.x86_64.rpm ec580878a06048fb4a60e637073f3a7c0ad3a145423b430148ba879cdfd5ce6c glibc-langpack-oc-2.34-168.el9_6.20.x86_64.rpm ed13b10bb4183e38c70370aac4989b5ef3fce5737aa73d750386df6c056cd4c9 glibc-langpack-ig-2.34-168.el9_6.20.x86_64.rpm eda7c5a88f2e50eb290d17a6a94fb4797d50e560e3d1c36d9b36388909fdbd2e glibc-langpack-csb-2.34-168.el9_6.20.x86_64.rpm f145b2ea09de004e8865237ba9e1b3699546f9abfb5f498f8826a13c2e7174db glibc-langpack-shn-2.34-168.el9_6.20.x86_64.rpm f26982bff3f1a152b5d2e18121749684f5256eaa11f6ac1202e2218f0b854472 glibc-langpack-szl-2.34-168.el9_6.20.x86_64.rpm f40262fdb9dcf747eef95241dfa8922370a6e2e669fdad97812cc40f565a1728 glibc-langpack-ayc-2.34-168.el9_6.20.x86_64.rpm f4a425631edca8f338404727cde8bdeaad8a3e5a56d879f192a348db1d3df54b glibc-common-2.34-168.el9_6.20.x86_64.rpm f9e290f62f950ec32d7d07171c130b5caa118b091d990656d4c7045f907f7cb2 glibc-langpack-doi-2.34-168.el9_6.20.x86_64.rpm fdeb5641774d1dac5a50e66f72376f11d84ea595452028ebe5ee376f372a766c glibc-langpack-et-2.34-168.el9_6.20.x86_64.rpm fff632acdd115a81cf8b09362d79f1f47e2585a9526ebc6fd65d0aba1e2b36a3 ALSA-2025:9880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default kernel-debug-uki-virt-5.14.0-570.24.1.el9_6.x86_64.rpm 04b57f72de572f2b5ef12d93fd06106cf3723d654e14b7b7b890754615f60417 kernel-5.14.0-570.24.1.el9_6.x86_64.rpm 17a639d1f43c1f84d7edba7b71e977a2989de6b27fb6cc42c9d312083adad1f0 kernel-debug-modules-extra-5.14.0-570.24.1.el9_6.x86_64.rpm 1b3c9a5ef29ae4e86021736bd06937fe44589dce1e30ee83eeec07813f863abe kernel-abi-stablelists-5.14.0-570.24.1.el9_6.noarch.rpm 2de9e23988ed650f9199c4b39516bf30afab3666b92bfc2056ca13deb8b8bed0 kernel-debug-core-5.14.0-570.24.1.el9_6.x86_64.rpm 36a912e174b007bf65dbca86cb3ddb9393d8bc0405fc8e69a8cc031d384498ee kernel-debug-modules-core-5.14.0-570.24.1.el9_6.x86_64.rpm 3c8315b251925157117078c9b9dfa98bf60f2769edd7991f0cd667fa914f6731 kernel-modules-extra-5.14.0-570.24.1.el9_6.x86_64.rpm 40a773c85d95f58bf1dea5ed3aae196339443746967d9a3ee7ddb81ce3ba334b kernel-modules-core-5.14.0-570.24.1.el9_6.x86_64.rpm 419a32c4049eab841c1cad945787540790f61cb57ae013b7660d044ac7b36c7e kernel-modules-5.14.0-570.24.1.el9_6.x86_64.rpm 555a048f55b86332300cf431301e636d3d3377ea7808792a0537cb08c46cbeaa kernel-uki-virt-5.14.0-570.24.1.el9_6.x86_64.rpm 60c3682c371725fd9be1cef0f8d7da35332354ef0ebf91d023530602bc67d203 kernel-tools-libs-5.14.0-570.24.1.el9_6.x86_64.rpm 70113a0000ca4b9ec8d11696871c145b8105e7b52771da412d711c0b3dbdeade kernel-tools-5.14.0-570.24.1.el9_6.x86_64.rpm 739a67e11638880d79b0f69e6bd1d3bc8f6d75496a5d91e66da126ee8e55064b kernel-core-5.14.0-570.24.1.el9_6.x86_64.rpm 7934478bfde50ca4d4f68d52d3a98cb308b2fa6fcd110046faada95cb8c4ead2 kernel-debug-5.14.0-570.24.1.el9_6.x86_64.rpm c3e1bbc12f1ccfc8d627de9aeeecaa5cf59a629a271a8676985e78d069813f39 kernel-uki-virt-addons-5.14.0-570.24.1.el9_6.x86_64.rpm e6c00b7e2a4746659067879fffcf01212228601c341cb2589be594c743ca32f3 kernel-debug-modules-5.14.0-570.24.1.el9_6.x86_64.rpm f83d180d1dafd90e47b28ef9afc7749d8e10642aaabf0c9c7a56da20da1e20a7 ALSA-2025:9978 Copyright 2025 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: LPE via host option (CVE-2025-32462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_6_default sudo-1.9.5p2-10.el9_6.1.x86_64.rpm d8a03c48b4c43c57e5f107c79a4c26ac3afb9f95fd6d78bc867712f58f9997f9 ALSA-2026:0067 Copyright 2026 AlmaLinux OS 0 1 Moderate

tar security update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal (CVE-2025-45582) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default tar-1.34-9.el9_7.x86_64.rpm 2d88eac67ca5662614c7d8bff429b83044527ddb2adb26527325b4936699b543 ALSA-2026:0238 Copyright 2026 AlmaLinux OS 0 1 Important

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libpng-1.6.37-12.el9_7.1.x86_64.rpm 2613a520b6d7a2059bfcec4180700fece217280aca309338cb6d547c2595119c libpng-1.6.37-12.el9_7.1.i686.rpm d7f3129b8eb4a493b4e4b5987d1f349c8daf68d2c13434e4301b8da70d0be054 ALSA-2026:0312 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915) * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default cups-libs-2.3.3op2-34.el9_7.2.i686.rpm 56c6949bfe32bca51324851b182ded032f16f202bb40ef86f6a5fe2f1087ce08 cups-libs-2.3.3op2-34.el9_7.2.x86_64.rpm a27582104482f2e859935ffddeb5137a76785d3d6d8e50b151c14eed4f38bd22 ALSA-2026:0445 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806) * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-modules-5.14.0-611.20.1.el9_7.x86_64.rpm 0f3fe52f747c973677f4d4f25ae641c7d2f9aeaaa549c6de15f3906ee6da3e68 kernel-modules-extra-5.14.0-611.20.1.el9_7.x86_64.rpm 266f03bb4562b31557be19934b1b2cccee2aaecc4141a322b5ae7004800a57f7 kernel-core-5.14.0-611.20.1.el9_7.x86_64.rpm 3138ca6db74d59a33d3ed69df570b2d0b3d15ba9ff53b3f05ac2455cd09c0073 kernel-debug-modules-extra-5.14.0-611.20.1.el9_7.x86_64.rpm 316fb57a86770a2eeb2fe92b9c7dd383e2e43643f3b89599e0362f94817377b7 kernel-tools-5.14.0-611.20.1.el9_7.x86_64.rpm 35584df3386fc7f8c4bd76e3de26dd98deb5d8c2d6ff9ab6fefc9853204a5e53 kernel-modules-5.14.0-611.20.1.el9_7.x86_64.rpm 43e2cc1f92cf452260b7a02574ef5cff36171423ea2289121a1855f552920b11 kernel-abi-stablelists-5.14.0-611.20.1.el9_7.noarch.rpm 5d3c5c07b5ded1d8aa5c42f6636833835ff5bfbcaca14b0bacd3514d89cbd246 kernel-tools-libs-5.14.0-611.20.1.el9_7.x86_64.rpm 6ddf25e92ebe41b396d2e68f957fa913e1d92c4f3e151543840cd10b3dedadc7 kernel-uki-virt-addons-5.14.0-611.20.1.el9_7.x86_64.rpm 95d7af60feb13ae785f92ee6333d62af69c85953e29fdfc79f70cc99db0250ef kernel-debug-5.14.0-611.20.1.el9_7.x86_64.rpm 97cace1293de3aa14fb591646e5dc217070830beda93eec21a9fcbb6fe7579e0 kernel-debug-modules-core-5.14.0-611.20.1.el9_7.x86_64.rpm a34daad39b47c94e6734cdba8bd987c7af3ca20c453ebafaf7932bd5407311e7 kernel-modules-core-5.14.0-611.20.1.el9_7.x86_64.rpm b06c4aa8726354550d95a8fd2b09c30b194b6b633a4ee616ae3bfecc8a236850 kernel-5.14.0-611.20.1.el9_7.x86_64.rpm b1a1752104243fe6970e8fc80257dde7d9a9218f17929780a5967b23c998eb86 kernel-debug-uki-virt-5.14.0-611.20.1.el9_7.x86_64.rpm c56dcfeb34c202252da72e51ff582049013dc05f700a3c262124d8540e9d25d5 kernel-debug-core-5.14.0-611.20.1.el9_7.x86_64.rpm da7543df1a386aba26a2b706e77bd5f02ba65cb6768073f963129d5e50708944 kernel-uki-virt-5.14.0-611.20.1.el9_7.x86_64.rpm fdff2bd2f3366a611540bed4f32453045637febfb4e49ab600c3f90bffbe5c5c ALSA-2026:0719 Copyright 2026 AlmaLinux OS 0 1 Important

gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fix(es): * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default gnupg2-2.3.3-5.el9_7.x86_64.rpm fe27a1d9d51eff193083ef9028c9dfcfa5104e4bb772b31600bf3b03e91cca0f ALSA-2026:0793 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277) * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-modules-extra-5.14.0-611.24.1.el9_7.x86_64.rpm 04971f212a48aaa3f75b098486063eab0a3150ed331cf76a844a894ffb19f407 kernel-modules-extra-5.14.0-611.24.1.el9_7.x86_64.rpm 27c8e6951f7f4ae168e16d9e9a93f0461f685bf671d6075fd92ee3944bac1fa0 kernel-core-5.14.0-611.24.1.el9_7.x86_64.rpm 2d140eb8edbc13bf15f8c2b8c9592b3b880a55e335362b6e87e6cf71485b99ec kernel-tools-5.14.0-611.24.1.el9_7.x86_64.rpm 35128e4c83582634c7e46b80310754edb5daba895ec17e95d71bcce7f2697d49 kernel-abi-stablelists-5.14.0-611.24.1.el9_7.noarch.rpm 408f0b9b8cc70c93fccf501aa480ffc63725311bc4c75929f836fc3fd95ccc57 kernel-debug-core-5.14.0-611.24.1.el9_7.x86_64.rpm 5b4eb7523baf6d237501b04e16926c44feccbcec20a33a2436384ddeb9a017dd kernel-debug-uki-virt-5.14.0-611.24.1.el9_7.x86_64.rpm 5c95f041328d81dc7a1a8818a382d046e52796ce68756ab936017e18e8bc8902 kernel-uki-virt-addons-5.14.0-611.24.1.el9_7.x86_64.rpm 5ee1b35c972bb5112c27745c14f81d4a921fab81754b5a0425965016831a190b kernel-uki-virt-5.14.0-611.24.1.el9_7.x86_64.rpm 741005c9d46642e48ef03c1cbd17c497b2be765810c1efbb0540200fedfc4ae9 kernel-debug-5.14.0-611.24.1.el9_7.x86_64.rpm 979e612c1d52f0fca7c144be361937c0ee0dfdeb940385eb7b0c1fc54acfed67 kernel-debug-modules-5.14.0-611.24.1.el9_7.x86_64.rpm 9a0224f20b397838627b1de40f819ad808a01069c7941f748f3cac019e054082 kernel-modules-core-5.14.0-611.24.1.el9_7.x86_64.rpm ce58346fca530bb3ad5c1f2bd1f04f9e9035b0d8ab4f488590a90a8362c7de33 kernel-5.14.0-611.24.1.el9_7.x86_64.rpm d3cb9ab8ebca273a96ebc523d9754f319469ea1ce0fa49b19e43a46404137116 kernel-modules-5.14.0-611.24.1.el9_7.x86_64.rpm da7442f21de318a0e71833fd7b9de87f18ffd56add1385fa27dbb7349c3dad65 kernel-debug-modules-core-5.14.0-611.24.1.el9_7.x86_64.rpm ec94513edc936abd2f9e761e2a8619594a91f754c0f2e675db07c054c95a4120 kernel-tools-libs-5.14.0-611.24.1.el9_7.x86_64.rpm f27f96f447072f067ead729edbc2c78c426124532d4154c3b95252a2462403bc ALSA-2026:0936 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default glib2-2.68.4-18.el9_7.1.i686.rpm 33d1f4ff1baa55ceb58081a78e0eee29d2c6a7568621d05e00ccefdfddf39a56 glib2-2.68.4-18.el9_7.1.x86_64.rpm 44d08ef9136b8a242c166814f2a9e69b776bd3d393a50abd907621691c7c89b4 ALSA-2026:1087 Copyright 2026 AlmaLinux OS 0 1 Important

python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default python3-urllib3-1.26.5-6.el9_7.1.noarch.rpm 1f6a57fe55bf2a7398b564c473af5496d51cc020729d76ea54ee7decbe6750a1 ALSA-2026:10949 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default python3-libs-3.9.25-3.el9_7.3.x86_64.rpm 330e696a8bcf3c97763ab1229237f43c9cd9ec199880b99ea24959ddeb3a5b65 python3-3.9.25-3.el9_7.3.x86_64.rpm 42a70c41484134154b8a59f0f4a4327f4e247353af8387abc2bdda510cc9de74 python3-libs-3.9.25-3.el9_7.3.i686.rpm 9df5b7867729f59b878b5db479489c2a9ba5282f0db35e450a64adae0fb896e6 ALSA-2026:1143 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141) * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349) * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731) * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248) * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258) * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-uki-virt-addons-5.14.0-611.26.1.el9_7.x86_64.rpm 102964951edbc7a4f2c863fc450e10f6d552a1fa56afbfe8d85c621601de909a kernel-modules-5.14.0-611.26.1.el9_7.x86_64.rpm 1277d1e43fc8682e7fbc1204810d59e850fbfd31276b971538b27be473af1908 kernel-5.14.0-611.26.1.el9_7.x86_64.rpm 2a8fd07d833238dee353581c8b6f9f222404284cf139df1ef994bbe38a6e1cd1 kernel-debug-5.14.0-611.26.1.el9_7.x86_64.rpm 3b0fe73bb617931bb9ceab7ef08d74123b4a0b36bab6226f8017bf754d343707 kernel-tools-5.14.0-611.26.1.el9_7.x86_64.rpm 4a6f781a9a125bdc8de80f4cbc0f321c7e4be7a3fa20629723d5d7a4120ce444 kernel-debug-modules-5.14.0-611.26.1.el9_7.x86_64.rpm 5f7e82274060282b8acb444fc675b64f455363d9356fa3312ed4624182d52a10 kernel-debug-uki-virt-5.14.0-611.26.1.el9_7.x86_64.rpm 61e600ef796f1a4c2a3878dc2a765a1a8bee166ded0115df1d536e22281bbe74 kernel-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm 61fe732f9172329a3363647a4f66b8ef7eeebe5c28d8d3b1b77423e4b71de56f kernel-debug-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm 6224ef391d2c5200fa95d073f3ef94148e105784dfdc866e79556a48ee4c16e0 kernel-uki-virt-5.14.0-611.26.1.el9_7.x86_64.rpm 8763452df66e692281f03517431bbd66fe72ad82a51cde054fdbd9b00ea9ccac kernel-abi-stablelists-5.14.0-611.26.1.el9_7.noarch.rpm 9b2e129a76d5a2257c2d4b3b745e7baaf89d68c6a4a186a59590d123ba328644 kernel-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm a4d4601690b36d1652ec5a59aaa37071ea9e2af23206e7086629ffccbfef769a kernel-debug-core-5.14.0-611.26.1.el9_7.x86_64.rpm d1ea48d68a4420f2c589696298324db2bc0d0418def8cfe43cc4e45bbe669789 kernel-core-5.14.0-611.26.1.el9_7.x86_64.rpm eb3963c8f3d519f23ae27a8daff8d3235bbec345060c23b94906dba1c5983770 kernel-tools-libs-5.14.0-611.26.1.el9_7.x86_64.rpm eb8fbd51b63a19b9a00e78a34c0ecb793979f93b0d8ea93ca3cdad5dd8b58e71 kernel-debug-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm ed04e7807b23858a3661c060082d44d4c9a1fdf4aca44e2f7bae5b1666e71d1a ALSA-2026:11510 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default vim-filesystem-8.2.2637-23.el9_7.3.noarch.rpm 01729bdb451fe8df4c89a3c22cfecc04b41c8a409a867619b99e2c8007d68a2f vim-minimal-8.2.2637-23.el9_7.3.x86_64.rpm 707c658cdf0332fe68e6b697049821fb1bd31aa2c627b67424bc890094c9acc7 ALSA-2026:12310 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default sudo-1.9.5p2-15.el9_7.x86_64.rpm c499b093f08d5444e7a06f8f4ec6e4a2fe28e94937a36acfaeda359f95c761fb ALSA-2026:12441 Copyright 2026 AlmaLinux OS 0 1 Important

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libcap-2.48-10.el9_7.1.x86_64.rpm a3f13a2d002ce0af61c8cae0a3e06166e55d9f42c8b52d90db5853efcaddda5a libcap-2.48-10.el9_7.1.i686.rpm e39d335c485e1320ee204508da69db825aaa44f7b54db5a1778bb4373d869ead ALSA-2026:13381 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default openssh-8.7p1-49.el9_7.alma.1.x86_64.rpm 1e92d1e58bb190cdc2d321467dd8f5641728303fd6783fb8c2fd725110e5835c openssh-server-8.7p1-49.el9_7.alma.1.x86_64.rpm 2afc7371931379f3a9cfe7911e5992ddf7ed286a9f106c103ce057c254979054 openssh-clients-8.7p1-49.el9_7.alma.1.x86_64.rpm 610abac0d9880178c985de8f68d0754c8cff2b51092af3c33bfb2ac2b3748e3f openssh-keycat-8.7p1-49.el9_7.alma.1.x86_64.rpm aa6d63951a6f6c6f7ca57867aafdede5dd370149b1cfbcce283a73b3dfaad2dc ALSA-2026:1350 Copyright 2026 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default curl-7.76.1-35.el9_7.3.x86_64.rpm 0172ca153204bdab203a621f4b7d5d6d40d6b3a2d385ab3d65ec5ace5b939d8c libcurl-7.76.1-35.el9_7.3.x86_64.rpm 6bb973188cdd21d8dcc42f337236972c622dc5f2006667b654a22bfce6b7b5b3 libcurl-minimal-7.76.1-35.el9_7.3.i686.rpm 6e9693f95de4ce36ba673b9dc813272859324b110693f57819e646bcfd03f7e9 curl-minimal-7.76.1-35.el9_7.3.x86_64.rpm 8ab2cf75a801649d861dc8ef38d33a511888b8a67d77507076927a6c27859335 libcurl-7.76.1-35.el9_7.3.i686.rpm a6c8693d194eba4aec389fa4db4e51f1877a458ad4c1e862004cfabda722b201 libcurl-minimal-7.76.1-35.el9_7.3.x86_64.rpm e0ae1aa8e0957376843c734c78fccd59cd7454eb62705b76d5479b7a3cc62cdd ALSA-2026:13565 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-uki-virt-5.14.0-611.54.1.el9_7.x86_64.rpm 1078894fbbc084a218341c8243994fcc87ac0fe74e91dff7ea323a4ed11ea50c kernel-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm 15165d9c488252350885d9a9a96bb34a482059523b8dfba8623d245ecaf115f8 kernel-abi-stablelists-5.14.0-611.54.1.el9_7.noarch.rpm 1a2354da934c7dd41a84a6a3665a03a6e078be291001fdfc761c46ddd4a09aef kernel-tools-5.14.0-611.54.1.el9_7.x86_64.rpm 228bb7ea2516275518c4cb13dba37e52fefa8cb6bc51277d3ef5f0d360f547ff kernel-core-5.14.0-611.54.1.el9_7.x86_64.rpm 6bc8a5360d5f94b10fa2df04d8172f8c4bb7ea5f8dd8841d14abf7c49220b2e1 kernel-uki-virt-5.14.0-611.54.1.el9_7.x86_64.rpm 7d4124a6f49de048eeb032ca2a2ceecef89d894a15fb724f55bb540100aff380 kernel-debug-5.14.0-611.54.1.el9_7.x86_64.rpm 8144d5cc8b2c340896ecc54d4ab67d9c0c7666d2edbdc8fa98c22fb9df3ceb6c kernel-5.14.0-611.54.1.el9_7.x86_64.rpm 84535eff8f92ccd727d209f5d30eb537fa267dbddc64b7b016c80d755fc3d61f kernel-modules-5.14.0-611.54.1.el9_7.x86_64.rpm 88f6b1e6be18c165035a531196b42a635d5361af96eea57ac5ffad43b8234004 kernel-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm 901f5283dfeb4213a98342c6c8183573d402aae4f8cbe41acbb1c37b039ea289 kernel-debug-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm 9fe6df2d8f241f0ef3a63d16fa39449b1608a4d532ffe0834090ae2d298f8478 kernel-debug-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm a617e36104ac97665744d3aea0a4605b5db46feff09cb6d4a88682aefb3aed09 kernel-debug-modules-5.14.0-611.54.1.el9_7.x86_64.rpm a66140a39eef74abb53c0d648cf45e56a95a4971276d138b906f63729fbabfa4 kernel-tools-libs-5.14.0-611.54.1.el9_7.x86_64.rpm b7cdaed52c788247b099628a57f5cd6bcface40664091543296c740cbd00335e kernel-debug-core-5.14.0-611.54.1.el9_7.x86_64.rpm c7d705ba80e4f36ea419c3bc3a7b9d83e13796ff59c6fa2779427a800bf2643a kernel-uki-virt-addons-5.14.0-611.54.1.el9_7.x86_64.rpm d92ad88107be7504d7c2785942ef73502e62c0e041c70c661ff5706572403780 ALSA-2026:13677 Copyright 2026 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default systemd-resolved-252-55.el9_7.9.alma.1.x86_64.rpm 20736f0aa307cc3bc813c95615894d49b475080f7b9338802dc7dad3d4e959ef systemd-252-55.el9_7.9.alma.1.x86_64.rpm 64980474f0bad7f2aded1021855bb05d2ceed9925376491aec3389ac92885203 systemd-libs-252-55.el9_7.9.alma.1.x86_64.rpm 6d51403b3e5d20ad76c5b02a00bf5439e425ceb6d1f2fca4d88a73d83e5be7f7 rhel-net-naming-sysattrs-252-55.el9_7.9.alma.1.noarch.rpm 7d209f52bfd401e6ddb7dbdbbd022a5f0e650cb14dc3df5420f1b00fe4c921e8 systemd-rpm-macros-252-55.el9_7.9.alma.1.noarch.rpm 8ab20c4557d90755ea3020b890c972b9dc9fe0a973c24148fced6dcbd02c3830 systemd-container-252-55.el9_7.9.alma.1.i686.rpm ab0dfdfb230fc71f22af67eecfa405eb8fb2e0ea1df1c9eb591dc9cda9bc2b97 systemd-252-55.el9_7.9.alma.1.i686.rpm b792a3fd7f31570add9b567dcd37dae9e81d8ad04ebd82009186a41e57b93768 systemd-udev-252-55.el9_7.9.alma.1.x86_64.rpm c63ace3b0675da751593c41e871437705e943ffdf8d85078d568406e1f32f69c systemd-pam-252-55.el9_7.9.alma.1.x86_64.rpm e1fbbb7ef3c711e22098755e98a563f41b1c44e2ddf467010c6fb080daa9bb16 systemd-oomd-252-55.el9_7.9.alma.1.x86_64.rpm e4b69670b623cd417f3e79ab4bd26952422303a031c0298b65249edf38389517 systemd-libs-252-55.el9_7.9.alma.1.i686.rpm e9d71f1218cd3046d704e2843cfbe4a096837cc09cca06801c9f8427767d49e2 systemd-container-252-55.el9_7.9.alma.1.x86_64.rpm ffe52299012a6185f3c59fa16c9eaa06446721f8a074ddccc01d54e2103aea0d ALSA-2026:1473 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187) * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467) * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468) * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469) * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199) * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160) * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418) * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421) * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420) * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795) * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default openssl-libs-3.5.1-7.el9_7.i686.rpm 254e3e799bd3b2823acab88629fd4fc206e8414fb2606f71e3e1742ab3113db7 openssl-libs-3.5.1-7.el9_7.x86_64.rpm ee20515b9d11b141d70460dbedad0985875c1dc1aa4806dc5d0e28f7bcb97759 openssl-3.5.1-7.el9_7.x86_64.rpm efe416d967799f801b1505df7a6def2e855b600024939f384093ae17beaf530f ALSA-2026:1478 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default python3-3.9.25-3.el9_7.x86_64.rpm 072002414d52b59230e1d11a3dae7445b2f79ffb9790fd962221c1315fa21469 python3-libs-3.9.25-3.el9_7.x86_64.rpm 95e4af3dd24ee2384ff018bd14d7ef5a6dc4a55f4615cb6f32605f3593252f75 python3-libs-3.9.25-3.el9_7.i686.rpm ba4c6b709234b1f8867fb7290c4d60f83a7e2493b2c5dfedfa0011eaed391330 ALSA-2026:14791 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libpng-1.6.37-12.el9_7.3.i686.rpm 5ee8bc18bd1e625ac4e8660b73283a4dd6be9b1cdf9f6269176a6c371801d4d7 libpng-1.6.37-12.el9_7.3.x86_64.rpm 9a5e95e9dbec5ef91d12bd8b6a91c8b86e15076c1fa92b0e3b06feb6e6a1b9a4 ALSA-2026:15971 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default glib2-2.68.4-18.el9_7.2.i686.rpm 9814eacb854f55c699c868369c618f456609d1084db36caa8d89cf6c0b0abb96 glib2-2.68.4-18.el9_7.2.x86_64.rpm db78f794ee4cf9a10f7a9b2dc96bfb29d1b492db24830e964c6e65f60169896e ALSA-2026:1617 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568) * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154) * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-5.14.0-611.27.1.el9_7.x86_64.rpm 1dc3ee24ac31759a783300524aed10b8c7c324757f5a0e7d17cc297b1977d960 kernel-abi-stablelists-5.14.0-611.27.1.el9_7.noarch.rpm 237f99e0bd7c92de963630678a17869cc50e5eb606049b1c4aeb5bb2490b8cb5 kernel-debug-uki-virt-5.14.0-611.27.1.el9_7.x86_64.rpm 2e7f326ba646b55bc3ce15a4e6f89d45e25f3d8516ee6d6b7a9c6a29f110d4c8 kernel-core-5.14.0-611.27.1.el9_7.x86_64.rpm 3fc6737a0a9b3feb7c762b1684a6822929786330375424a58d1822d61bb03333 kernel-debug-modules-5.14.0-611.27.1.el9_7.x86_64.rpm 48f96d8b04fdf85ccc09b1c4dfffab6230fd6d5b3bd3f652e8f2fc9c23b07270 kernel-uki-virt-5.14.0-611.27.1.el9_7.x86_64.rpm 53a66a7b80392f5a6ff480d573651973034c1a4cfd734a36c77b470e22ebc43a kernel-uki-virt-addons-5.14.0-611.27.1.el9_7.x86_64.rpm 66ade06ac333f3d93461e1718c0229aa919f858009223e480a6f3ce74b374eff kernel-debug-5.14.0-611.27.1.el9_7.x86_64.rpm 673654bfc2aca8547a29053f5e3c0ef4d6d5921eb9352c966e0a4c8e1e4746f8 kernel-tools-5.14.0-611.27.1.el9_7.x86_64.rpm 68181a76d5274afc7445fb783e9eb8282910004097888b0517c05746af10e462 kernel-tools-libs-5.14.0-611.27.1.el9_7.x86_64.rpm 71d328a963e0a4f89d1aac25a2b19724169b1f5878186f4b39f97f1652c6979c kernel-debug-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm 7d27a2f60f2135e1fe91cafb9a9ce26de3128fbb6b50e157bc25809cf55fa5fa kernel-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm 7e02d10124d22a17ca8db055af6cc65ed92356696b78ca2be0f26092d4d12705 kernel-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm 87a8c6a39caca8eefcab6fa7554c09fa3e3e03e4ad2a7aca1982194e70847d83 kernel-debug-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm 92bdef35b40989e286e6a41f3bdbf12c6e4697101a8bc40999ae328577c7ccc4 kernel-modules-5.14.0-611.27.1.el9_7.x86_64.rpm 958eca624e009222e64731c875afc47ba3be258bed664bb7e7e39b9c9bed23e2 kernel-debug-core-5.14.0-611.27.1.el9_7.x86_64.rpm cc29fda0d48c773b69589eef1f5eb1bd7b43b9559bc1b1eb72e996b04db84a62 ALSA-2026:16206 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-5.14.0-611.55.1.el9_7.x86_64.rpm 471efe94ae0ba90ee8fd3328477ae50f52f9f214b0baf16330f5da0f5b53d7d1 kernel-abi-stablelists-5.14.0-611.55.1.el9_7.noarch.rpm 55eaf2c811be58c786b4871f0cec68d955ff46038e53201e986993c2ef5cef9d kernel-debug-uki-virt-5.14.0-611.55.1.el9_7.x86_64.rpm 55f15105aa7f9046544ceb9ec36fb416d12c0eaf689f884025dee3cfede59286 kernel-uki-virt-5.14.0-611.55.1.el9_7.x86_64.rpm 733ff46af4846aae558f4de13a73d19091613210011978dc3ad28266ba1966cd kernel-tools-libs-5.14.0-611.55.1.el9_7.x86_64.rpm 81aabe57386446b2f82fc62d0de4154942c023365307d9a9975d6bda50651eef kernel-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm 889c824aec35cdd12274a2797bb077f64be3ec1c3b4f081da298758933fced40 kernel-debug-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm 9abd1b6a17698361ec5e6e5c983591bbb5290d632e1458f8aa5573224e530be2 kernel-debug-5.14.0-611.55.1.el9_7.x86_64.rpm 9c0532fbfacb68bafcb0e8e89650f250b2a33e0808139c503a8863f7066da0f9 kernel-debug-modules-5.14.0-611.55.1.el9_7.x86_64.rpm 9dec6643246bdcfeddbdf2f73d77149d0e16fbae5d6ba218873420521bfcf1cd kernel-debug-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm ab0e9b721e8c825666d4a21626fc84657d5a33b45ff75a41e1cf431d12c87db0 kernel-debug-core-5.14.0-611.55.1.el9_7.x86_64.rpm bfdd0ca76a848faa081c59d5e1f09cc5ff55757ffefec4f8ab5dd43dd3583d95 kernel-uki-virt-addons-5.14.0-611.55.1.el9_7.x86_64.rpm c5939a0b037edc5c2b0b91167bb769b0e81e106884f9796bfa5159d986542314 kernel-modules-5.14.0-611.55.1.el9_7.x86_64.rpm ce0e18a5e4a55c4c82c023b669883298006957d136db592d425dfa5e61f43416 kernel-core-5.14.0-611.55.1.el9_7.x86_64.rpm d1f83e13893caf8d10b0dc8264aad13da31bb2755a10273d0a25bf484ebb2cd9 kernel-tools-5.14.0-611.55.1.el9_7.x86_64.rpm e0d515a935bab4f7e0b78d731f5883a0b979be851b597717e0cf88d93c5ac0a2 kernel-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm e316eb0ee6d91ac6c1c13cb43b73ca57fc71b7626e236f25b434441f467a4e6a ALSA-2026:16693 Copyright 2026 AlmaLinux OS 0 1 Important

jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fix(es): * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979) * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default jq-1.6-19.el9_7.0.2.i686.rpm 38391f044dd07933211413a6a489330ffb60556d742e312790947b0ef91eb0db jq-1.6-19.el9_7.0.2.x86_64.rpm fccd662c91d30a9fe9ace6364728dc339400c3ff1104851c3cc142f3b0ca75db ALSA-2026:18028 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libpng-1.6.37-12.el9_7.4.i686.rpm b0bde90bfe67a1e8512b2f1bd61b8e589521fe68fbd2d15afe16e231421b2be8 libpng-1.6.37-12.el9_7.4.x86_64.rpm d5cd1e6b0b2bfa0b66025b1ad790235af1169e02749eabff6839a3f35d2a109e ALSA-2026:18587 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-5.14.0-687.5.1.el9_8.x86_64.rpm 02dafd8e3cf6d6c9425750729bbbdbd75419f08ceb242983a7a17b10b08e7caa kernel-debug-5.14.0-687.5.1.el9_8.x86_64.rpm 0fe22635206dec41f241db541792b3d9a4f03da9186e985a4b1bd5fca2fbfaaf kernel-core-5.14.0-687.5.1.el9_8.x86_64.rpm 3fd9b191d01449b6e55fbd35d99cde90334a9c29ae9cb8e88cd39a850b43fa77 kernel-modules-core-5.14.0-687.5.1.el9_8.x86_64.rpm 427f8bb9ae511a822559555d7e7a2d27a105bf4ddfd85551eed9036f31bef24b kernel-modules-extra-5.14.0-687.5.1.el9_8.x86_64.rpm 43529e71460c9be950453ff1c3eb7208d2b761fa0d705a6d6e818f89a2feff80 kernel-debug-modules-extra-5.14.0-687.5.1.el9_8.x86_64.rpm 536d4e8974fc23bd6d254c06ce8e8a9b5d30017b59f721d832dd6aed46bf4faa kernel-debug-uki-virt-5.14.0-687.5.1.el9_8.x86_64.rpm 59823b80d57093cc377799cca966be99a842f0154d0c60d165ec1a23eb35d92e kernel-debug-modules-core-5.14.0-687.5.1.el9_8.x86_64.rpm 6036c5aad12d0491ca592a180652216575af790a0b20755deeef9d34fc7c3f70 kernel-uki-virt-addons-5.14.0-687.5.1.el9_8.x86_64.rpm 643a7f9a23b9b7bd7422048ebe8167bb12c99734a757103d2f38cb0700923e68 kernel-debug-core-5.14.0-687.5.1.el9_8.x86_64.rpm 64ff5ba071c16d212f7986b814af0b831a414364dde98fdc53fe99d6c4741467 kernel-tools-5.14.0-687.5.1.el9_8.x86_64.rpm 679c3b7da7bad4c1f6dcb6d155a67c0aaeb4ea61585e25ed18cee6927ac0bcaf kernel-5.14.0-687.5.1.el9_8.x86_64.rpm 726e4634a128ef4e223327ee9bc504006ea9b62fa7331fb12d675c2be73f4bd9 kernel-abi-stablelists-5.14.0-687.5.1.el9_8.noarch.rpm 7cc6ba668fe84b65be6c6546f2d8607dfc2a0b0e8648796abd22babb6b360301 kernel-uki-virt-5.14.0-687.5.1.el9_8.x86_64.rpm a7dd947811a81a6b3cefddfe650a4bb51ca8a8063e0a5552e25a58d330c65c68 kernel-modules-5.14.0-687.5.1.el9_8.x86_64.rpm beb587eb337d1e41920ffd23e3994f39d673569c629cb681203c3a68235ed8ac kernel-tools-libs-5.14.0-687.5.1.el9_8.x86_64.rpm ec68c8a445cde898ca39b485f5974ba719f605470eb85c1d374216c8d580e3f3 ALSA-2026:18597 Copyright 2026 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * networkmanagr: NetworkManager File Access (CVE-2025-9615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default NetworkManager-wwan-1.54.3-2.el9.x86_64.rpm 094ab48f1f1077a11b21149a21bcbb10e10aaa2e663f0422b9e370d91a1465bb NetworkManager-adsl-1.54.3-2.el9.x86_64.rpm 0ca679489f2eb1cecbc937b12b79ce904064a1c4a98ce044fbd6c730b397e453 NetworkManager-team-1.54.3-2.el9.x86_64.rpm 165344c99a7793f46b5a0dc23e74136de164816ea542a78ad02843dcf0b8ee08 NetworkManager-initscripts-updown-1.54.3-2.el9.noarch.rpm 33ee26cd9a7199d20f69a5d553d58500d18d989ff2310fd4325dd39ca949d077 NetworkManager-1.54.3-2.el9.x86_64.rpm 5571b81e16f75b27de70598db15f7f5e4213cb58831e1906e948bd811f0d33fb NetworkManager-libnm-1.54.3-2.el9.i686.rpm 607f64069a7bff80b338d87e2fbf1ce038aa1996e131159791d292842f6f2fa5 NetworkManager-libnm-1.54.3-2.el9.x86_64.rpm 61ca3ac99dbba84ffd84b1f4a659e8e3a0f8e287ac134701ffc65c44539ecdb2 NetworkManager-tui-1.54.3-2.el9.x86_64.rpm 9d5b22d4ef9abbcafb5c00c3c87a8e4738d96dd3ad0111f8cc47444dbe89e70a NetworkManager-wifi-1.54.3-2.el9.x86_64.rpm a13be5d0b4178637eba7a7e873588257c046c7a135320cb58a6bd53149a12a18 NetworkManager-config-server-1.54.3-2.el9.noarch.rpm e1021afed802f593f8ae449517087d5823e1e1fdc9fbed3858053718b055130a NetworkManager-bluetooth-1.54.3-2.el9.x86_64.rpm fa11854030e7d0733bb33e9cf419311127355d3ac3ff460fa94551c2258201c9 ALSA-2026:18599 Copyright 2026 AlmaLinux OS 0 1 Moderate

p11-kit security update

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default p11-kit-0.26.2-1.el9.i686.rpm b3d20f8f452da2f142f0effce0eee931aaff7ee5d6edffc06d685220413fbc5e p11-kit-trust-0.26.2-1.el9.x86_64.rpm b95356ea8fa149b354871c09b5b38d2bb9f711a6326bbcd91262baf763153b30 p11-kit-trust-0.26.2-1.el9.i686.rpm ca9814c66069a4fc6b615608d8246c55c9ff77b09fdc366130d78fe2dedccf9d p11-kit-0.26.2-1.el9.x86_64.rpm e946f999fcb8aaa45a81dca2a8049e583fd51fa5a2999c83fa73a78aa79b80f3 p11-kit-client-0.26.2-1.el9.x86_64.rpm ea6a1da0df76949038c65ba54130de54c0baf265727e8b984bdb2173ddfb2683 ALSA-2026:18683 Copyright 2026 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351) * libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878) * libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877) * libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114) * libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277) * libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964) * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965) * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967) * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libssh-0.10.4-18.el9.i686.rpm 13095e4f8ada0c6a3f6eaf6ae7ff6407838daeac25d4c4760fe0475f188b5226 libssh-0.10.4-18.el9.x86_64.rpm 5f932919a42d87de5fa7ce38d53d31eceb6e7fcc5f93e02cff28dce406fafc5c libssh-config-0.10.4-18.el9.noarch.rpm 7330cdae173ed5151e36fa6a59a51ccf183102daa3bb599f1b37e35a090bbe48 ALSA-2026:1913 Copyright 2026 AlmaLinux OS 0 1 Moderate

util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fix(es): * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default util-linux-user-2.37.4-21.el9_7.x86_64.rpm 1f5fc6345a1eb5bb0611fe9fd4e07a41080fc3ee155fa09081348bfaf88fbda3 util-linux-core-2.37.4-21.el9_7.x86_64.rpm 3148f943f57e6b5e879e4e2c7840ffc8fdf03064eac55e3c3a2aa2fdebbdea5d libsmartcols-2.37.4-21.el9_7.x86_64.rpm 48b14ca79a500bb79544f11cee2b1d9eec1546d3ce5228b3c6d9f71e78fb100f libsmartcols-2.37.4-21.el9_7.i686.rpm 4f183483c1f6d1f4a6e7bea504d792b214ca7e676fffc90cf6f80de619420c09 libmount-2.37.4-21.el9_7.x86_64.rpm 5acf23dd43dfa7f9697518430d6b7fd2fc86d568ac592d85f3666474279d4881 libuuid-2.37.4-21.el9_7.x86_64.rpm 64ab80ca9881503d1c586b503ae9397d5981ed3c42d128894e1696ad3829f6e2 util-linux-2.37.4-21.el9_7.x86_64.rpm 668a4ec0ce9348a0165e2dc21f2437467b122c3e08234977d535a650ac3edac8 libmount-2.37.4-21.el9_7.i686.rpm 6e0f13f012307e5db6f73d41b3079b665e6df77ac60a91532fc128074ea2d565 libblkid-2.37.4-21.el9_7.i686.rpm 9f31e1501f4b32e3f1f17538cc37d1fbb8bb0648a175baf71ca23d469d3c7577 libfdisk-2.37.4-21.el9_7.i686.rpm badcdb3a5689eeb625c4062a74b71157d53b0b9d0afcb79681793ab2b42aee02 libuuid-2.37.4-21.el9_7.i686.rpm cb73bc8e9e454c75a8a862258f02a7453bb7906eef92dbcc35514ff2130f8321 libfdisk-2.37.4-21.el9_7.x86_64.rpm dc688ee19dacc25de512fda208db1c8b4ba08a0e846868593c767dfc14be4153 libblkid-2.37.4-21.el9_7.x86_64.rpm f350afe491bebc8a44304fce538cceef42d5080cede8d2e4366fc53afd0b3d5f ALSA-2026:19213 Copyright 2026 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default systemd-udev-252-67.el9_8.2.alma.1.x86_64.rpm 37ebe23e32b0e0d95f034081e1b1da8989d5a19eaa97cbbab25f82cab2e9848d systemd-rpm-macros-252-67.el9_8.2.alma.1.noarch.rpm 45ae149910a729b3be6057ad61b329e8cf0e38cce1bfd1de92686341a93e350d systemd-container-252-67.el9_8.2.alma.1.x86_64.rpm 50186f476e29b8fccb4a01885db6102fff33926f76c286f288d8188faaff8597 systemd-resolved-252-67.el9_8.2.alma.1.x86_64.rpm 537a09cba9609c63ebfbd9e791892a6b291b861a6c3119093abf956e3c2a39c7 systemd-pam-252-67.el9_8.2.alma.1.x86_64.rpm 83fb271b71a47564f8af082eb8f5ba6e21f0840c6eb400da575e4390c3a4cc46 rhel-net-naming-sysattrs-252-67.el9_8.2.alma.1.noarch.rpm 8a3cc315ecce4c74c19ecf7b437b6f02d225824a5414773c847fdd1773c6f72f systemd-252-67.el9_8.2.alma.1.i686.rpm 8c23cac4c00cfb9b665541e890ef82e575a1accbc5836d405c6b3d39d54dd855 systemd-252-67.el9_8.2.alma.1.x86_64.rpm 9d804e74dd2cd5a09d238baf29bdcbc72aa828e7ab7e661a9d6d0f9c70b0ea30 systemd-libs-252-67.el9_8.2.alma.1.i686.rpm aef5264adb3151e673462897160df87cf4edb2bddba18518a29b6d59dffe15f9 systemd-oomd-252-67.el9_8.2.alma.1.x86_64.rpm b5ea9743b5f878bf0b061a84ea6f0c08cc7f95f61ded12c4801bff7c2b3f29dc systemd-libs-252-67.el9_8.2.alma.1.x86_64.rpm e60c4b82403b2239bfc995bf59bc8772fcaeb9ce274bd17b4dfeae98030922b8 systemd-container-252-67.el9_8.2.alma.1.i686.rpm ec85896e445d7483e9f11d4ec7d0da7dd1fab2c029e302e0fd68010aead9cf13 ALSA-2026:19216 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-3.9.25-7.el9_8.x86_64.rpm 2e44f100eab3284e2f77ced7d80c6a4fb9859add64a6223e30d3fd0af5bf2983 python3-libs-3.9.25-7.el9_8.i686.rpm 860886c00c08724052cd871ad641e1abcbaaad9fa29d9e3ffb9208d17128002a python3-libs-3.9.25-7.el9_8.x86_64.rpm b21a2d6f17b3e85ac65f11dc42a1d8e575e3cd5b51d821c19d9ddb6d915eca45 ALSA-2026:19218 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssl-libs-3.5.5-2.el9_8.i686.rpm 6568aa41204dac3c6535a1f26ca053ba2fea62fa3316ca1a6706fd7cab9013f0 openssl-3.5.5-2.el9_8.x86_64.rpm 736b39e3653337dbde11fc4bc109f1c1babfe2135ae205b831ebcc81667ee0df openssl-libs-3.5.5-2.el9_8.x86_64.rpm 9b5909bf7e79c22d5be0098a1a05b051793aa47f75e0d552b823ba08395f91ac ALSA-2026:19219 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssh-keycat-9.9p1-7.el9_8.alma.1.x86_64.rpm 2209490cd1c6521f903c53708003c2289722f78f261db9f53e4967256692df5e openssh-9.9p1-7.el9_8.alma.1.x86_64.rpm 2f7aa09e8a7d02758d9f51f6f5ca459a7116f113a0a9cf84afe0257aa39134cd openssh-server-9.9p1-7.el9_8.alma.1.x86_64.rpm 5ccb61ade9692194135ddd59c7b4c998cf543231269a49f55e8be7148c2f5869 openssh-clients-9.9p1-7.el9_8.alma.1.x86_64.rpm e0bac831003b2a73431e0164500a6574c3fb0db7c608134323d7ac333132d4fa ALSA-2026:19220 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default sudo-1.9.17p2-3.el9_8.x86_64.rpm 65fe06c5434e4911e440663f9a510a988d4ee718dcc1c84b616f9a8bb731e5ba ALSA-2026:19224 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-minimal-8.2.2637-26.el9_8.4.x86_64.rpm 48bfc015bd682c8988e922f0aa5ce2b8a92388d34dc60c5a46ec3204046641b4 vim-filesystem-8.2.2637-26.el9_8.4.noarch.rpm 6d54175bf2d77c57d7a78a801befbf053dd262d364310e6ee783b983f3697ac2 ALSA-2026:19225 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-uki-virt-5.14.0-687.5.3.el9_8.x86_64.rpm 07e8beba24a36b2f08b2ccf8975c876c765f5ccd4d3904435694ebaec25da7e1 kernel-5.14.0-687.5.3.el9_8.x86_64.rpm 17620c448138630b903898a8fa1112d2eb1662358414f4062e270addcfaafcdb kernel-debug-modules-core-5.14.0-687.5.3.el9_8.x86_64.rpm 39d186c5ddabfee96211008f730250fe3d0b552a76ca869e9dfb138ab71c4aeb kernel-tools-libs-5.14.0-687.5.3.el9_8.x86_64.rpm 4640dc2fa1c0f56147c5eb9ce5c19f570841bf8852b5ab2f95c67a36285af3cb kernel-modules-extra-5.14.0-687.5.3.el9_8.x86_64.rpm 5490edb20be84885ef40970f42d5b3cf8ccced8042913afbb700c0c2903a643b kernel-debug-5.14.0-687.5.3.el9_8.x86_64.rpm 59a28642356c74bcf462e2d5c29b2cf651bb141e302dfe41d7ab023e55281f7d kernel-debug-modules-5.14.0-687.5.3.el9_8.x86_64.rpm 65afd4329a37887e18ad775cb1db603300d6bf3d0b4b59bcf20b4249d1922e7a kernel-core-5.14.0-687.5.3.el9_8.x86_64.rpm 71b0ff56ba1c4e66ce1de9022035dc2860af0785da6bbf94015d5db5bfa4c8e1 kernel-debug-modules-extra-5.14.0-687.5.3.el9_8.x86_64.rpm 8601d222266152f740194b8fa13c0c42a182f75ea8f46d98c85af740e0cdb7f7 kernel-uki-virt-5.14.0-687.5.3.el9_8.x86_64.rpm 972c4d18e992235d83cf7b7465cb7f06931ccbc790fae55309a944cf3e3a497e kernel-debug-core-5.14.0-687.5.3.el9_8.x86_64.rpm 9737e027a752edc10b7a1117de71ddb1e980731565a6c98cc17effc52a98a564 kernel-modules-core-5.14.0-687.5.3.el9_8.x86_64.rpm 9c9def7daeba024a0cac21fc2b400eb7f588766004d3ff867b9a57d32d528c5b kernel-uki-virt-addons-5.14.0-687.5.3.el9_8.x86_64.rpm c45e5ca6fe82c01d1085a36af161e7f33d94114cf7fdd09dae0125d492f40498 kernel-modules-5.14.0-687.5.3.el9_8.x86_64.rpm d4815f9b7ecc985c49c06cf5c8221a88f7e350f3e54eca9f52eb277061d9a7c9 kernel-tools-5.14.0-687.5.3.el9_8.x86_64.rpm ed4b027c2558247e4c462d55988318968f89c2184f1b598ad1336c54ab02de08 kernel-abi-stablelists-5.14.0-687.5.3.el9_8.noarch.rpm fbcce39b19f8b3cb06e110eb9d1cdb32e6f9b6ba8334b35b7456bc3a64f895a2 ALSA-2026:19346 Copyright 2026 AlmaLinux OS 0 1 Important

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libcap-2.48-10.el9_8.1.x86_64.rpm 181aa6162425218650d98a850e594acc99d258ef6e4f92d58ea853816414b931 libcap-2.48-10.el9_8.1.i686.rpm dd0da64f27ec444a1bc766298ef27b5aedeea5bc0349ba75708a14282454e523 ALSA-2026:19357 Copyright 2026 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356) * krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default krb5-pkinit-1.21.1-10.el9_8.i686.rpm 2f8d7414dd6a94ef12f14e0c7b835b99efa4dd572088ad981400b7595eb55ab0 krb5-server-ldap-1.21.1-10.el9_8.x86_64.rpm 349b35295d8362dcd6ad05b6266fe25adf3a733fc9519b1499fe8dc1ac255495 libkadm5-1.21.1-10.el9_8.i686.rpm 3515081ab0c56018d5808f848f8ab2d0bd595ea4ea9b6756552ccabe2c086f12 krb5-workstation-1.21.1-10.el9_8.x86_64.rpm 3dc9e8a78b7b10bb17e0857907e703b86c38c1e84146aabee261230fec6b5f43 libkadm5-1.21.1-10.el9_8.x86_64.rpm 52c46b3bd8f6f87b71a5a287aa609617c778b5da0dae13d504d704aa8b00f26c krb5-xrealmauthz-1.21.1-10.el9_8.i686.rpm 580819b565dc02312e9fa2837aa98b21f879d98046ea1e23aae175537e638d62 krb5-libs-1.21.1-10.el9_8.x86_64.rpm 64ee4ce9b42a4d05270a55226366ef979c861efae070a4f6997f1aab2d7fd287 krb5-server-ldap-1.21.1-10.el9_8.i686.rpm 6ca49201f51d65d055ab85e0904fb9d2032adb0ec45d971a2ba8f11cf8539136 krb5-server-1.21.1-10.el9_8.x86_64.rpm 7612f61833795704350287c7c6d76d460621493b57441dc8e1cc327e995170f1 krb5-xrealmauthz-1.21.1-10.el9_8.x86_64.rpm 85e3a6b01073bb214300d276df70ece70ac3149e69cc950f59e0a7477704f7e9 krb5-libs-1.21.1-10.el9_8.i686.rpm 9d9bdd04722f1b320f9abb978a25249dc96a065097df040d2d5c21fc6042164d krb5-server-1.21.1-10.el9_8.i686.rpm a265977acc53082d9ad2642c51cbf813938d37b8ad8a36332ec59abede380399 krb5-pkinit-1.21.1-10.el9_8.x86_64.rpm aad641194035d777bf9393f2dced57267ff9c08359d82246b3c58b6a1a6a4e01 ALSA-2026:19361 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glib2-2.68.4-19.el9_8.1.i686.rpm 675fcabca0807d9510d4201cfedf09fc1b84e3658e962b435193565a4efa90d6 glib2-2.68.4-19.el9_8.1.x86_64.rpm 96af1eb3aba0f5f8bb5c7bb27bdc1d544f52404de50ba61732d57e47eba7ca85 ALSA-2026:19365 Copyright 2026 AlmaLinux OS 0 1 Important

jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fix(es): * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979) * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default jq-1.6-19.el9_8.2.i686.rpm 1f4dd7e661abd0dda2eb1ff439cd33586e9b0e4cd49303d4516524c135bde7a7 jq-1.6-19.el9_8.2.x86_64.rpm 395b58a720a57f5f5981e3c3b48f3fde6f48f337413d917999c86d57b39287aa ALSA-2026:19366 Copyright 2026 AlmaLinux OS 0 1 Important

python-markdown security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-markdown: denial of service via malformed HTML-like sequences (CVE-2025-69534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-markdown-3.3.4-4.el9_8.2.noarch.rpm 6d7fce102aa881ee7f4b1e0fbeb5057d46061f86d09d619b540a3f1e0bcf2cb2 ALSA-2026:19368 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync server leaks arbitrary client files (CVE-2024-12086) * rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default rsync-3.2.5-7.el9_8.x86_64.rpm bbd76bb45a6258dba42f2077af370f2f81b509140d36cd39c1a3a64697a09076 ALSA-2026:19568 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-uki-virt-5.14.0-687.10.1.el9_8.x86_64.rpm 052d0e8582421d46f6bc25479905a0533cc1cb126634af56761d96920bf0983d kernel-debug-modules-5.14.0-687.10.1.el9_8.x86_64.rpm 09e38db833f36d0c0ce18c21f1951446eaa11e0e326bdc3882ed55ea3c679ebf kernel-modules-core-5.14.0-687.10.1.el9_8.x86_64.rpm 24cf85d09250258ee137f348bf3851ba5f76ca8c42d99f3a67844b4132cf5c9f kernel-debug-modules-extra-5.14.0-687.10.1.el9_8.x86_64.rpm 30d0d149bafeba06cbbe8691ca068dc3d3b0a44902bef7279b47244616103628 kernel-uki-virt-addons-5.14.0-687.10.1.el9_8.x86_64.rpm 5300c7767e2af38303baf44f3f259075c41a5d2627c2f67d87d3daa1e6dffce6 kernel-debug-core-5.14.0-687.10.1.el9_8.x86_64.rpm 9314caa8a6c551023eccb13a331b0e6fef74b3daac183979af7488ff664d7e35 kernel-abi-stablelists-5.14.0-687.10.1.el9_8.noarch.rpm 97399d0b1f56831833d413c3ab516ca4b75b8d2dbe5713d825e7f218537e53f2 kernel-5.14.0-687.10.1.el9_8.x86_64.rpm 994270da4e8c691f5efd1eddd11f291a7f0dd434b19e569771a776a8f33d001b kernel-tools-5.14.0-687.10.1.el9_8.x86_64.rpm cd6044895d089f19a979f67fc46656383ed1b2b609bc9898b87c9d3d52904edb kernel-modules-5.14.0-687.10.1.el9_8.x86_64.rpm dbd0d1167a442b66981f0823d71f1d45fc30536bb0ad647ef78475479b541b8d kernel-debug-modules-core-5.14.0-687.10.1.el9_8.x86_64.rpm de1b3e731995aef26880f21234fb519f27b0386e30a2ca3bda46210719d999d0 kernel-tools-libs-5.14.0-687.10.1.el9_8.x86_64.rpm e231303d47ca345122791d2dc61340d833a72e87d4f5a847ba6bcaaa66e7beb5 kernel-debug-uki-virt-5.14.0-687.10.1.el9_8.x86_64.rpm ec3cae625715825bff53500c5583a8f351458a85e82f67a12cb1eeefffb64ae2 kernel-modules-extra-5.14.0-687.10.1.el9_8.x86_64.rpm eca3c69eecb2128cd4d21d8f2f90dea667484d720fab12095b6631a7badad725 kernel-debug-5.14.0-687.10.1.el9_8.x86_64.rpm f354a6068f26d99c2515ff64cd13e5b20b0d97dd2aebb6160916ede0098f09b8 kernel-core-5.14.0-687.10.1.el9_8.x86_64.rpm f911bba8ae16b9bdb87178711a185cc127b4fbfa9634a524da4bbd7756e41a40 ALSA-2026:2042 Copyright 2026 AlmaLinux OS 0 1 Important

brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libbrotli-1.0.9-9.el9_7.x86_64.rpm 3d24c430a1edb4d196bbec70cd59e3580421f91c8ad0c25451b9cc7130cfe66a libbrotli-1.0.9-9.el9_7.i686.rpm 9b81a6e8876a3bd59028563b52e95601641555839be8b5247efd0f9749a0ad78 ALSA-2026:20597 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437) * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438) * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glibc-langpack-tig-2.34-270.el9_8.x86_64.rpm 006229a761f70dc66e0f45d25ac9b7c21d75b468e93689db7a37b19fc6ebccfb glibc-langpack-az-2.34-270.el9_8.x86_64.rpm 00c4be0e90c692e7201d2bd505754681958193e5f76b0fc81219cfd3cae6eedf glibc-langpack-se-2.34-270.el9_8.x86_64.rpm 00ed75856316f675a17d29efadd5e0e934943c8eb3f282f85cc4937e8f8a2dfa glibc-langpack-wae-2.34-270.el9_8.x86_64.rpm 012b8e25396aedf331073eca32d9f329847aa47f5e4911753ce1fcf07d1ab391 glibc-langpack-sk-2.34-270.el9_8.x86_64.rpm 01a71c65393dbd750da0eef72ec70a808d267e81f07ad00a0c530c4a7a4a43f3 glibc-langpack-chr-2.34-270.el9_8.x86_64.rpm 02572e90a6b7247a6720e65f26810ac9c7546e4d397a4557e3e038d607d8ae6a glibc-langpack-lg-2.34-270.el9_8.x86_64.rpm 0500537d35c530b20544f96f90902e069cd88b5a9d205ac21905fe23b71ad9fd glibc-langpack-tn-2.34-270.el9_8.x86_64.rpm 073e74ae51eb43527eec9bfaf30cf176f59303bd0b200414b9b408e061fc8095 glibc-langpack-lb-2.34-270.el9_8.x86_64.rpm 07dc53269de31923e88a3da6460fea70bac2e2919853ec716dea578e5491956e glibc-langpack-ky-2.34-270.el9_8.x86_64.rpm 080a17973d30a4825ed103bc312e3500617b14eb947231898d75f8cee5928d21 glibc-langpack-or-2.34-270.el9_8.x86_64.rpm 09a13d3b89dcea0a70a7fa36fcc112526ddc4ccc05bd3f673f3eea6e5d38bb63 glibc-langpack-dv-2.34-270.el9_8.x86_64.rpm 09d9f65ee5640c4a29ac182e67d997fc268fc59ac61ab161956e898ce480421c glibc-langpack-ve-2.34-270.el9_8.x86_64.rpm 0b821f699a79298861b6d04d176b45ad6fe73d87984da28565829e7b14d64775 glibc-langpack-tr-2.34-270.el9_8.x86_64.rpm 0c60bc7e77f617eb8f83261ece63ee0bf0999a1dd6aa314a7cfe1e43eb200843 glibc-langpack-ti-2.34-270.el9_8.x86_64.rpm 0d0970be9beb8df9eb0de7f33a915323b332c90993fc24ea837a5aa48ad4b952 glibc-langpack-sah-2.34-270.el9_8.x86_64.rpm 0da09fcd96180ac4a28e2e947c638abdd82449aaf4c3fa38723dfc66fb2c5348 glibc-langpack-oc-2.34-270.el9_8.x86_64.rpm 0dd2f546ee0a6c0cf87696f2e6e6d6916fb99c9e2db5e14726afa8f8cb2c754f glibc-langpack-sgs-2.34-270.el9_8.x86_64.rpm 0eb5da9358299ffd909556e83a1f5b325d440efd19a38f625efdbe527dbb05bc glibc-langpack-xh-2.34-270.el9_8.x86_64.rpm 1132d5525957db7eb6bad6b3243e9c82adf0e7a460c3f1bf750c6d51ac0ce1e2 glibc-langpack-mi-2.34-270.el9_8.x86_64.rpm 1221eebfcc4685e1c74fe4a74a5d8efb8c1707f1754c691233982da1dc597e50 glibc-langpack-bho-2.34-270.el9_8.x86_64.rpm 13021b24020e807e7a10cd526f608c774e70bd699dd35462375fa47a5b579dc8 glibc-langpack-ta-2.34-270.el9_8.x86_64.rpm 1383bb25c8004f5f063867364522140f170aac1a01c9b88d058700393070b76b glibc-langpack-et-2.34-270.el9_8.x86_64.rpm 146d305fda066860cd7411f3a616059787356d631bb04a9b2af3185c88984ddd glibc-langpack-ckb-2.34-270.el9_8.x86_64.rpm 166f9c1349e39cd13a67dfe13126d9e97d38aa6cdbc6d8fe187f7375d83c59eb glibc-langpack-raj-2.34-270.el9_8.x86_64.rpm 18563dbbc03f6c9c49dc6594e22fee9bcd618f1bc83c87f3720100c7bd5250ec glibc-langpack-mt-2.34-270.el9_8.x86_64.rpm 190733b96e336e669aad2b63cbe90f70f80f01585d100c39089bff4189219b06 glibc-langpack-mag-2.34-270.el9_8.x86_64.rpm 1add5d9ae36ee3c14fdc09254721b03f7f70284de32afb35cc80d4e44430b9e6 glibc-langpack-to-2.34-270.el9_8.x86_64.rpm 1b4fe24a7f517c3b61e6c874407ea80211fca1347d791f8e67717a5c08949051 glibc-langpack-nl-2.34-270.el9_8.x86_64.rpm 1c9034e7a96ea32d9b53a50449f9bac2f5e0bbe98f617e853b4673f8d2cd8c32 glibc-langpack-da-2.34-270.el9_8.x86_64.rpm 1ec50cdf976aad45b755af5186eba60492e92522339569b25b8a052b14d2c841 glibc-langpack-kab-2.34-270.el9_8.x86_64.rpm 1f630053ef458a4c18b172ae7ecc194034d700611aef3120b90e02085a695d24 glibc-langpack-pa-2.34-270.el9_8.x86_64.rpm 204d129e0f65d06e27cfd57f73c3e4ea2421fca07aadc1f2a9d84797468d0abe glibc-langpack-sv-2.34-270.el9_8.x86_64.rpm 25831bc6491b56c6969a1ceba39352dc2692f23336dfbed29421373d87e954cd glibc-langpack-fr-2.34-270.el9_8.x86_64.rpm 259fc42f5ab5c6bc2529390319958d7760157a91d5b974fdd49e2506a0912fc4 glibc-langpack-si-2.34-270.el9_8.x86_64.rpm 28098dd4e7b888333b3a50cc944b309d613980c293770535b4842342d51d5e74 glibc-langpack-rw-2.34-270.el9_8.x86_64.rpm 288c8bdeb5d5158bcc7456fe7cd482ed4605d58f443e81ef683e1e47040bca27 glibc-langpack-de-2.34-270.el9_8.x86_64.rpm 2a858f0edd3a6c369b683e1f9f7c586f6c7c4e3b2c3591d53e778ff0be1cbb7e glibc-gconv-extra-2.34-270.el9_8.i686.rpm 2d278b7fce490aec38ad608c5adfb6682a6252a33220bc860240d85a286fb5a8 glibc-langpack-ml-2.34-270.el9_8.x86_64.rpm 2fff49557d9f8c34579c771d2515d3817a5f97879e8a02062e3e73e06aa7d70e glibc-langpack-my-2.34-270.el9_8.x86_64.rpm 30a91c4e14c7c76bc2885216d90789ed2f8173d99cbc031d4003b27299d21cdd glibc-langpack-kok-2.34-270.el9_8.x86_64.rpm 30ab9a549dd9e45175fea80e5a0d38823a02ee970bc2f723ecf700657381e5e7 glibc-langpack-bem-2.34-270.el9_8.x86_64.rpm 31039bc8e9dcf10c3c4e14c84ca67dbd3e8f96e0fda638ffecb6824ff406069c glibc-langpack-ast-2.34-270.el9_8.x86_64.rpm 31573dd193b9b2b04ad53603b89907a3288c5319dd6a160ecb89199fede7b9be glibc-langpack-sl-2.34-270.el9_8.x86_64.rpm 349c5c09d395668640c33289f51095a64117c68ae3b034b4bec013fa2639484a glibc-langpack-sa-2.34-270.el9_8.x86_64.rpm 35afd2bcb25b3c1998da9d8a4760d6a6883acaeb56740a6b8c5c9ec9ab95017a glibc-langpack-mni-2.34-270.el9_8.x86_64.rpm 35ec6dfc1c89619e6eb31fd5b24f0e584c48d885b0d1147a45288e886a47a46f glibc-langpack-te-2.34-270.el9_8.x86_64.rpm 37f4ed9d8d60a576cb3fbd88ca4840f5453dbca1f0b35c05390c3f67e5938e9b glibc-langpack-wal-2.34-270.el9_8.x86_64.rpm 38a30f2a2f132dd7990129c36d118f8de65bae5fd082a425887c828e948ee04b glibc-langpack-gl-2.34-270.el9_8.x86_64.rpm 396ea269550c70121dc5f615c3cabdcfa7ad1d83a12c390a743e68f7b016a3f2 glibc-langpack-ug-2.34-270.el9_8.x86_64.rpm 39d32d121cfcbe8e07ef7d8969abcfb24f693c6b6f77ddf542dc4fab817fc6d0 glibc-langpack-kn-2.34-270.el9_8.x86_64.rpm 3a7bebef3f52952d1b946a81f2db99d26949633bf4582ff129b40baf50ed662c glibc-langpack-byn-2.34-270.el9_8.x86_64.rpm 3ce3ef96d3cc0bb08cda54bb5f9a44b3162c96c24cab07779ab7843676728119 glibc-langpack-mg-2.34-270.el9_8.x86_64.rpm 3e3e55137c801eabbdb99e0c5bc97db5b4bf78a0f53d152a3a35a96009d54c90 glibc-langpack-fy-2.34-270.el9_8.x86_64.rpm 3e743e214be843e2eada41f8ad3c1b8eb19f7a69ea5c4ecddb82403637e42941 glibc-gconv-extra-2.34-270.el9_8.x86_64.rpm 427775c21fd0eafc7f2ec5966370addeeff6fd26d219d78221a63948073d077f glibc-langpack-ts-2.34-270.el9_8.x86_64.rpm 43ab8c9eeee853121ed201bbb6cba7cddce2fc6f41addab35b06d1489050df66 glibc-langpack-bo-2.34-270.el9_8.x86_64.rpm 44b76543bc859a270da332c2fcba39fd3dcf883c3f7b66201a46de51d909a308 glibc-langpack-ia-2.34-270.el9_8.x86_64.rpm 44f3039b6b4d224a7141a5de5d2a908f0e834251bbde0eab30c373ed20d41c5a glibc-langpack-csb-2.34-270.el9_8.x86_64.rpm 44f4c01b47d25a03fdaef5d98a14c7b5241bfdf09a6239ca5a8637ebeecb3664 glibc-langpack-ur-2.34-270.el9_8.x86_64.rpm 456d1824834aed2370a671b04ae9ebe943992b7e60473a266b96b62901097e6f glibc-minimal-langpack-2.34-270.el9_8.x86_64.rpm 45946f5533416d5c4c9d16e3bc177627573a5a2ee3f06becc9837777d2134ae0 glibc-langpack-bhb-2.34-270.el9_8.x86_64.rpm 490e775364c4c8cd57959399ad75539506cd9872f725103991476fb05a2b74d3 glibc-langpack-mr-2.34-270.el9_8.x86_64.rpm 4a7ede2932fe8701fc2674fdde02ce2eb115be02eaae1a8111b71fba9cb40f61 glibc-langpack-ar-2.34-270.el9_8.x86_64.rpm 4b43bddc3f2c154a13dc2c8fc23cd53739929d4d98948384a49fa42535ad2001 glibc-langpack-hif-2.34-270.el9_8.x86_64.rpm 4ceb71d99ab2ca2bebee7b3d39e6d2e972448b60269187a256e15d7fd384e271 glibc-langpack-mk-2.34-270.el9_8.x86_64.rpm 4f83fdfaa31d1f8e6f618247286fb5cbeda6af24205730942f283fad955fde34 glibc-langpack-ga-2.34-270.el9_8.x86_64.rpm 50d212d52b12cd8feeeb646ad11efe6e4e62321b3c139eba00b0ba498bb21d0d glibc-langpack-st-2.34-270.el9_8.x86_64.rpm 560ff469faf09a10f5bfc9be2c05a7d12d17b3dc4dce79dba1ee40eb3a82400b glibc-langpack-unm-2.34-270.el9_8.x86_64.rpm 56d38582c85ba184cbe60245bcf1275840d34b25b5c3b21f1359d8307e4547c8 glibc-langpack-ss-2.34-270.el9_8.x86_64.rpm 57ff204a5a931f2536632ad7e76bc78128ca707a88c2120643d300a73ead6fc2 glibc-langpack-nn-2.34-270.el9_8.x86_64.rpm 58d8c291454a719ca68f7f930507cdf2151239432f266dd2eafb4aa8eab4876c glibc-langpack-sm-2.34-270.el9_8.x86_64.rpm 5c81c5df34b97fd26f187af4890da420087f43c3011a1e22ff38a57dbdb47289 glibc-langpack-ca-2.34-270.el9_8.x86_64.rpm 5d8f5247834d4f69f5b00b9ad0c613d91386e162941583c7db824483fb4a696a glibc-langpack-gez-2.34-270.el9_8.x86_64.rpm 5d9133f9256a7fc8fb02d18cc0cf0858cb7c41dffde9f15784d47437b74d1bd8 glibc-langpack-bn-2.34-270.el9_8.x86_64.rpm 5dccf04287422b1c76cffed068a0da4a052384fb28a6e42dd7f88f45008843e3 glibc-langpack-af-2.34-270.el9_8.x86_64.rpm 5ef020596e1227044b2c7a36dbe05d284e28134332d8b8fe6298f22f3e471e79 glibc-langpack-lij-2.34-270.el9_8.x86_64.rpm 6243590df1fa14709908d92a71ae8a4880bbe9928eaaf1cc457b302d00b29521 glibc-langpack-ku-2.34-270.el9_8.x86_64.rpm 6299f55d52571247a391f4a3137d0ad60010f9a2460bd940e0c7214764a6b169 glibc-langpack-pl-2.34-270.el9_8.x86_64.rpm 62fee28a0912b5a59322a3d254f5ea662937bb9836ab0ba73ec3520b4a04315d glibc-langpack-lt-2.34-270.el9_8.x86_64.rpm 639b219d9688cfac60a1dfb70b4af2ac42667b7d9d774f2bb1c7189dd96e3488 glibc-common-2.34-270.el9_8.x86_64.rpm 662a51bc4fa86ca18c6e8b2c2df836ebf13fe0f745b704b3e5313765d4c446fa glibc-langpack-ak-2.34-270.el9_8.x86_64.rpm 677536984f6b8e7a2e2c964671b9995b1066c255d760f9a4f2925d6dccd969b2 glibc-langpack-hr-2.34-270.el9_8.x86_64.rpm 67badd1d0c82a113b58d91f0d05777d9530fafb45e4527f1e10632f082257cc9 glibc-langpack-cv-2.34-270.el9_8.x86_64.rpm 69c405140b9e64135f2e920b1ca681b3c8510f9670f619f2b5506a5aef04c835 glibc-langpack-fa-2.34-270.el9_8.x86_64.rpm 6a008a9af3c8db3b9ab942247f0ded998bf64ef47b625b08c9365be020e4506c glibc-langpack-yi-2.34-270.el9_8.x86_64.rpm 6afd2c21644dd89da06586d7f3c47de803237d1f75ae421ff2af82dbe6d46d74 glibc-langpack-ks-2.34-270.el9_8.x86_64.rpm 6ef0cdf7cd0562ea4e70566ecaedbafbc51d7f93b959a38b791b0bbca5674ab0 glibc-langpack-hi-2.34-270.el9_8.x86_64.rpm 700f9b64af595faeaa5291432621f482bc769d7bce2e12db4e67515fbfbfd028 glibc-langpack-nds-2.34-270.el9_8.x86_64.rpm 7245f96cfb142fc934067f8ee1e0e975f817e605c54d03f030aaff1b8e4538b9 glibc-langpack-niu-2.34-270.el9_8.x86_64.rpm 75f941869f09940d130db7036885bd8f58d1c759b61d8e261479263a12d67eaf glibc-langpack-brx-2.34-270.el9_8.x86_64.rpm 76188803b0a18d09eb52d8486810013d90fcc6133a47ba27fe5d18a2099fe89a glibc-langpack-nan-2.34-270.el9_8.x86_64.rpm 78aeae7eb002cc7808c448331102aeca5ad3a274d3504a6c23c4754ce0ecdb10 glibc-langpack-ne-2.34-270.el9_8.x86_64.rpm 7c24518aaeeeee91bad77fb19b5f6cb85e66fc209db14cd3a7fbc7544feaf3e6 glibc-langpack-sid-2.34-270.el9_8.x86_64.rpm 7c9ddd42fbb1722ebaf3be5ca10814bcd7d0f6c5a339cf2028d156695210acf7 glibc-langpack-ps-2.34-270.el9_8.x86_64.rpm 7d5a63ec97a38e46c3684f1475880a0d41a5ec6e9979e7a964e42b4d75eb5381 glibc-langpack-kl-2.34-270.el9_8.x86_64.rpm 7eec7e357cf6b40835a2f5c3697ee622cd2d61a187532fa78e238e0bfb3f4bdc glibc-langpack-nhn-2.34-270.el9_8.x86_64.rpm 7f7b609838d75bfb124d6a49ae35dbaac8dbaeb159ff2b9f856b9dc2c66c1012 glibc-langpack-bs-2.34-270.el9_8.x86_64.rpm 7fc2ea4dc51edaeb8647359f89215172e64c2dda4c9c2d98032eb741e49d665f glibc-langpack-miq-2.34-270.el9_8.x86_64.rpm 80d775941212350e0b2fa7a52806f3cb50c0eaa6a8618fda4ca5d6b4964ee4b7 glibc-langpack-om-2.34-270.el9_8.x86_64.rpm 80d858aae695a93019c3f3c674b71037e70f4e5c848a1b40cb4c6f0ea2f48e46 glibc-langpack-li-2.34-270.el9_8.x86_64.rpm 82744413030e97b1dd269fd182c7f8650ab4510c0e566fbbe457411adabe5819 glibc-langpack-yuw-2.34-270.el9_8.x86_64.rpm 88f24b7adf1d0a4d449dc02c336541139d0869e6c2768bf31ad831bf7051a16f glibc-langpack-pt-2.34-270.el9_8.x86_64.rpm 8946a436ce64905675512f488d88bc1319e0c24695cea3b3242891847b3b24e6 glibc-langpack-ka-2.34-270.el9_8.x86_64.rpm 8bf76198de25ac8be01126ba2300ea125fada0633bc344555c35ef75b1d6f350 glibc-langpack-bi-2.34-270.el9_8.x86_64.rpm 8c6cb326413fae28de614c30d2c0f37f79f7768532b3a961fea2fb5a75a42811 glibc-langpack-agr-2.34-270.el9_8.x86_64.rpm 8cdd23a219fc8fdc9d52925053f452f71793d9e6a5eddb75e59c87ae1168d1d4 glibc-langpack-uk-2.34-270.el9_8.x86_64.rpm 8f279d1c04806bf784fc208fa1cf4fad48a9e8a0b8b3507ca63e4fe5eeb8c829 glibc-langpack-anp-2.34-270.el9_8.x86_64.rpm 90143bdba03e2b23268ca64c0c6ba6f41c9e16b5e9fd9202df2244544c2cd1e3 glibc-langpack-km-2.34-270.el9_8.x86_64.rpm 906fc357bc45316893d11252755721cadea3b520f707ee176cc6948ecf23df64 glibc-langpack-hu-2.34-270.el9_8.x86_64.rpm 92b32d518c5a37d1e48300021318891f992889c1f7ec3d9217f354b86e7349d0 glibc-langpack-mai-2.34-270.el9_8.x86_64.rpm 93bef35bbd76ec01c81db90f1716cd4883f26b152a239a83f923553cf0457fef glibc-langpack-ht-2.34-270.el9_8.x86_64.rpm 93ec09e683b9719138a5dc9d66fe2b99549afddf7f23f8d59658de55ca7f0d9f glibc-langpack-sd-2.34-270.el9_8.x86_64.rpm 94c41d47d46fe960496cfe29daf7505c7850d7752c5ba3f5801dd25ae217b73b glibc-langpack-mjw-2.34-270.el9_8.x86_64.rpm 94e7136e5e9a63adf7338d067affb348a931e8088f0545fdf603f6b9d65c90da glibc-2.34-270.el9_8.i686.rpm 970b0ade8aa673e3d0c01ba0c1c8c6159269c5262dffef4c3b1a21c275751b9b glibc-langpack-en-2.34-270.el9_8.x86_64.rpm 990fbb8253725bd37607b5220a0e782136ba8465155735b6f302e6d37686bc8f glibc-langpack-hak-2.34-270.el9_8.x86_64.rpm 9ab3db45cc486be7d277f952e1d3d81b880d6812a1178f50dc43b4a62bbbe7c6 glibc-langpack-es-2.34-270.el9_8.x86_64.rpm 9d23efb347bb06362078c598c96997d6e00dde5df56018f12fd2e44a3b80f5cf glibc-langpack-uz-2.34-270.el9_8.x86_64.rpm 9e3dd56e58eb18ff59e46b67a8407c349cfc340bcbb01131840d96860a45cff8 glibc-langpack-he-2.34-270.el9_8.x86_64.rpm 9ee792400ea77147b33c68727c6127349778ec8b283ed02714101c6cf7c9931c glibc-langpack-nso-2.34-270.el9_8.x86_64.rpm 9f301509a15f0a2397b6b10d4271aab8e2350357a0ebcdb8993c546eebf1f193 glibc-langpack-mnw-2.34-270.el9_8.x86_64.rpm a0ab570694e4667a19e121c51cb89e8fc1eea239627273e4d815c2a907414f79 glibc-langpack-sw-2.34-270.el9_8.x86_64.rpm a112aaaf93b304953d5070030103174b4bc2f45dcc0f5bdd9d64b41e4ad49e50 glibc-langpack-ms-2.34-270.el9_8.x86_64.rpm a19fe4745c732b2b6a153599b59192d8b41a5edba653b79478180ad3c9427da0 glibc-langpack-an-2.34-270.el9_8.x86_64.rpm a1f88c47551042d41774e0e02b42558883936f1f075432498f7bea74c77d0056 glibc-langpack-lv-2.34-270.el9_8.x86_64.rpm a22aa34fa4a38e2e7c2c50a936dda40adb16219caba0a3623f75e3efff1d2526 glibc-langpack-the-2.34-270.el9_8.x86_64.rpm a3a485079821a18a9b5e8ce20779a275e9328e239eba91516166365444c9fd98 glibc-langpack-ig-2.34-270.el9_8.x86_64.rpm a57279b7c56783a3e5b2f6fc4e31bd8e71a06a930a24b650ea2e841a324e42eb glibc-langpack-br-2.34-270.el9_8.x86_64.rpm a58311fa50350408d660f926172fb3a14550816f4297281a6a0492f4aa03ac4f glibc-langpack-vi-2.34-270.el9_8.x86_64.rpm a5fc8d8ab383f10eac2f5f37ba80b34595aa2cea086d9fc1866b4de2f8641e5f glibc-langpack-kk-2.34-270.el9_8.x86_64.rpm a79f5ee9f233c4094bf87bf646c2d55b22e94e23d2aae0404df11c9877f1bc69 glibc-langpack-mhr-2.34-270.el9_8.x86_64.rpm a7f7d90dc81ca2914f0ebec9706dce588981c1ee51f08c75913e97aef7a8baa3 glibc-langpack-hne-2.34-270.el9_8.x86_64.rpm a898fdbf77deaa8f35bac67d370b25238e43d51e37504029abe1d6b2aed1c383 glibc-langpack-tcy-2.34-270.el9_8.x86_64.rpm aa24d5b532a9056a205b98c64fd953a8e50391791a844be05a05d145840c7b81 glibc-langpack-sr-2.34-270.el9_8.x86_64.rpm aa7bf305eec53ee4da987777e6bf31ec0ab8aa016e3cc8c958625c9f70edd484 glibc-langpack-shn-2.34-270.el9_8.x86_64.rpm aaf8d4b0bb7eca304bd8e2b79aa54900716ff3154075dcf636b1339922fd4e86 glibc-langpack-shs-2.34-270.el9_8.x86_64.rpm aafc6c7801a8e5aac1595ef7b1fd3023c32fb158366468ae16dfd4d16c4cb3ab glibc-langpack-dsb-2.34-270.el9_8.x86_64.rpm ac9fdb597f9d3b46c0f3d40d1f42e9d08fe0bc2e881993e04e43c84450c9ce58 glibc-langpack-ayc-2.34-270.el9_8.x86_64.rpm ad0ec6e1cb42533bbc6e0aff2753f4a9577bd6bc39eb63ca07b37fcdcc452176 glibc-langpack-it-2.34-270.el9_8.x86_64.rpm b063f8cff08f9157d0b4aa38306f10c3cb1ca7a4011921af793268068c1f34a6 glibc-langpack-fil-2.34-270.el9_8.x86_64.rpm b1a97df768de9f3515d123c93e8110d9bf3a86fe59bed60aeeb8833b2a73c706 glibc-langpack-zu-2.34-270.el9_8.x86_64.rpm b246119d61ffcc2e6ccbb953177deead4e2124971daeb3da5ba23767db363f82 glibc-langpack-aa-2.34-270.el9_8.x86_64.rpm b46a23ba9c8056c03a8dd10f07d196c5d4347350d7ece1cd4c6e3a503da17620 glibc-langpack-so-2.34-270.el9_8.x86_64.rpm b54a2737a94dfe5c458cc0a2f5cf18c741af029f80a4a28dfcb5ca378c01a4a8 glibc-langpack-ha-2.34-270.el9_8.x86_64.rpm b562b2dffec940b391eacf77715a8e34e717cd4d9cb63b4a280a7ba2be046f03 glibc-langpack-tk-2.34-270.el9_8.x86_64.rpm b5a6689dc251a3e3fcb55be08d4608b0e63641fc553324799c2c6f04eb0f5982 glibc-langpack-wo-2.34-270.el9_8.x86_64.rpm b6316478de6c4f81d598fbad286acc58839b7c622816d6a5dc90f4af0af808f0 glibc-langpack-eo-2.34-270.el9_8.x86_64.rpm b64e13be9d096610b522b293a82b91823e315b0410ddcc571a9aacef1186c298 glibc-langpack-ff-2.34-270.el9_8.x86_64.rpm b7461497e9ac72d8e5f8ebdadd71a106ba9deb5c8b71563ef1cd1363f8b967ad glibc-langpack-id-2.34-270.el9_8.x86_64.rpm b9b835fc3c7c16e421b3f91addbb48c6eb7c670ff35bdb0188321d8180e9bc66 glibc-langpack-cy-2.34-270.el9_8.x86_64.rpm bb1b198b167122751d6a9c23ae2d7f4bf3752ab54fded4ff99a2639163240b30 glibc-langpack-crh-2.34-270.el9_8.x86_64.rpm bbed802faae153893abfe311f327d33cd83ce59edf8d897a1f49916e033ea7c0 glibc-langpack-dz-2.34-270.el9_8.x86_64.rpm bbf3d7a5fb56e3a8c183f93381c5cf1d0f20d9176f04dc1dc0574dad3668bbf0 glibc-langpack-tpi-2.34-270.el9_8.x86_64.rpm bcdad915f3c32cbff77842d0442b0c2844b62304aa7e5d5b9bb06bdae105d6a6 libnsl-2.34-270.el9_8.x86_64.rpm c055cce2919726a6b7707cc7c1809c525176c0f9cc1a1dcc715670fff61005fc glibc-langpack-fur-2.34-270.el9_8.x86_64.rpm c192a0b4372db57094b7ea7551c873d3614105363226feb3aa4194e82b418a5e glibc-langpack-zh-2.34-270.el9_8.x86_64.rpm c44607ffcac40d4d89b308a6b2b4b1f876f26b7b4172072c4b3c4b78694fcf9a glibc-langpack-nb-2.34-270.el9_8.x86_64.rpm c6cc88a810639d4f24046070f7316d1b50bad7d7403447d7b3b2f6c4dc2278f7 glibc-langpack-cs-2.34-270.el9_8.x86_64.rpm c731aae209ea1768ae652f7cb9e3b2163557567f7d7743125dcbe99410536f9d glibc-langpack-el-2.34-270.el9_8.x86_64.rpm c92e9759993577d011f2826036dec34fce2f84f2b24efb5748f80c409c8293f9 glibc-langpack-tg-2.34-270.el9_8.x86_64.rpm c9b8a83df2f11e967a2f973f2b1a1cb1d6342feb2b2c100d344bb0c149b250ed glibc-langpack-yo-2.34-270.el9_8.x86_64.rpm c9fadc7c25af88a76ad8266fcc9497e366dfdca227841441d4a5290c8cac2f7f glibc-langpack-nr-2.34-270.el9_8.x86_64.rpm ca795fcb43650c79d638d3fc04a3820905a485b46bf7ffb4759676a78f030df6 glibc-langpack-ja-2.34-270.el9_8.x86_64.rpm cb14d25db3d42b77eda5a58d7f24b131b8ad5d0d394d5d838da7c5409892b302 nscd-2.34-270.el9_8.x86_64.rpm cb2f42713db98a27f24b3cc1b93ebc06a112cd72434167c3b46ea8bd50626027 glibc-langpack-os-2.34-270.el9_8.x86_64.rpm ce3dcc91fab18df1554fb48fd6ac7adb8d7f75f72aca043954e1995ed8d09ca9 glibc-langpack-eu-2.34-270.el9_8.x86_64.rpm cf1a6a58279ff54b29c8a8536b86c95b4b1fbc1896b277a744d4a7da4c4050cc glibc-langpack-cmn-2.34-270.el9_8.x86_64.rpm cf44db5f964bca0d8f5bb20e40cbe0ea0b37a576a37046b4438a1f9b48c060e6 glibc-langpack-szl-2.34-270.el9_8.x86_64.rpm cf7f2b7b17268b1640ce7d1f238a14de1e94121fa86a72e35303eb6cfecb9bae glibc-langpack-wa-2.34-270.el9_8.x86_64.rpm d0ccfcb597d46db15cf5aa2d0a2ed085d2f1aa95f67aeaa70b6d2d133a14565c glibc-langpack-sq-2.34-270.el9_8.x86_64.rpm d11d91aebc064380fc1be979de5d98a639191bc959addcfe619845e655e94b07 glibc-langpack-mfe-2.34-270.el9_8.x86_64.rpm d142c771d83efc14682a281bb08c7b0be8d01063d338a3b5f4896d43b8fca646 glibc-langpack-hy-2.34-270.el9_8.x86_64.rpm d28ce55a968d533d10804c5d9a3e30b66effdf6b4bda5077bd73a6b0ce2275ad glibc-langpack-ce-2.34-270.el9_8.x86_64.rpm d376298c8033112c27ed13ced0cfe24eb23f6f91bc93eb72033a76d565ece6fa glibc-langpack-ro-2.34-270.el9_8.x86_64.rpm d4f876e35d7d97964fe1f902d708f71aedaab85c390bf17ca52e75309e8f7287 glibc-langpack-bg-2.34-270.el9_8.x86_64.rpm d5c9aac4e767f68665419d2e4740f0a25788aad3a6b7abde9f80fbbaccf5e761 glibc-langpack-gd-2.34-270.el9_8.x86_64.rpm d74439b8d03b5df8412e260512942a597181557ed392ee08acc5b09b49fe07da glibc-langpack-ln-2.34-270.el9_8.x86_64.rpm d7f0d6986e15c0fce4a0ff91ce02aeeb7fd01d532f8ee0ab6a8f8d53b4b6242e glibc-langpack-pap-2.34-270.el9_8.x86_64.rpm dabf148be07c42d1019548621ca154129275b77f61f7ee8518201f9710b98e42 glibc-langpack-tl-2.34-270.el9_8.x86_64.rpm dd5f046e679c6e78ebea8a06ecb55d8c49a85663d58dfb3554c69d9a535f136a glibc-langpack-mn-2.34-270.el9_8.x86_64.rpm df7b616db569e1bf5acbbf93200e3e7c44aa35dfbbf4c259f6a9244a147ab8d8 glibc-langpack-hsb-2.34-270.el9_8.x86_64.rpm dfd328b6481f597f211637e31c32228a2b5856c6cd58860d0f95c7e6dde4cac6 glibc-all-langpacks-2.34-270.el9_8.x86_64.rpm e0f465a9e97383a4a7461abd2801530f73b9c28063299700f2d81c663c381f6e glibc-langpack-iu-2.34-270.el9_8.x86_64.rpm e1fb4fea98f8b952bd8dc0b66556eafaf6ac3607c16fe2e547182e6fd9db7e00 glibc-langpack-sat-2.34-270.el9_8.x86_64.rpm e3754cf05edef34a8507ca8a37baf254be5a488fe8f76e955cf56817d89ce318 glibc-langpack-lzh-2.34-270.el9_8.x86_64.rpm e6cff87489c038155de534cc5e2abd8abb363379fb4c437ac05625e611764d2b glibc-langpack-sc-2.34-270.el9_8.x86_64.rpm e72ec59dbc682fefe09025d19afa40d5cca246e7eb65139b3883ef389271c89e glibc-langpack-fi-2.34-270.el9_8.x86_64.rpm e9875b7de871248d422cc5059a0ec25216fc01d243d2222d5422dedd12ec7762 glibc-langpack-quz-2.34-270.el9_8.x86_64.rpm ea283a5eee4af46c2bd3aca944a09bbb441c603d107634ae0ab485272e3a8583 glibc-langpack-doi-2.34-270.el9_8.x86_64.rpm eced1b13e8c55865134a338072a0b87535feccc8577537549962b222d6b08042 glibc-langpack-yue-2.34-270.el9_8.x86_64.rpm eed303940856a80e9bcc78172047baeac3634815cfa132f92a8e290633f10aff glibc-langpack-ik-2.34-270.el9_8.x86_64.rpm ef1a053dcf4a0df3b150c68e78eba740b0e57fde1d72c300be766303f2294fab glibc-langpack-th-2.34-270.el9_8.x86_64.rpm f0813821413252303f8567bd3718470abcf40b0ba74a35db67eaccbaec9d1dcb glibc-langpack-ru-2.34-270.el9_8.x86_64.rpm f0ad10e6212b6167b396e9bb123e0a7814d630f19592da06e1ef43e76a21a290 glibc-langpack-gu-2.34-270.el9_8.x86_64.rpm f0c2759a1f26539280d5883351f1cec2651756d4232879257561477f2b9ddd66 glibc-langpack-tt-2.34-270.el9_8.x86_64.rpm f36d41c7e1e14404ba45d30bf647217fa5647dbb1bf7b04bcae4d8fe24bd24f2 glibc-langpack-am-2.34-270.el9_8.x86_64.rpm f4c4739010e51dfd2e15b18386321d5721420e858b5480ad1c116bf5849aa46d glibc-langpack-ko-2.34-270.el9_8.x86_64.rpm f4e0d0a0bb5890d2749e1d2bd321906164419e3107c8533116170d2beefd4624 glibc-langpack-kw-2.34-270.el9_8.x86_64.rpm f7be9dd3806b8686d51956ab843af3778fe77e487dc8336e51b0fb10c3450ee9 glibc-langpack-ber-2.34-270.el9_8.x86_64.rpm f7d8fbdbdd1af2094c36471fa50ba22a4db569359eba84c76c174d977d528e94 glibc-langpack-be-2.34-270.el9_8.x86_64.rpm f80dfb110a1e66464bf48152cb75686d60130b0f2957469bdcfbdaab334302c2 glibc-langpack-as-2.34-270.el9_8.x86_64.rpm f9937497f64d1b677137b9193aca99063f2bbe9127a3f0062fb0bdee63b1a492 glibc-langpack-fo-2.34-270.el9_8.x86_64.rpm fa8fc07ff033fd1194158116319bd5f7adad345e3290c9cd72b8b83bf2da26c1 glibc-langpack-is-2.34-270.el9_8.x86_64.rpm faf9da4d8b902249e7e3d458ad058359f08c48c55ad77f7a74186f5959a06ede glibc-langpack-lo-2.34-270.el9_8.x86_64.rpm fc1ae998c6467a140dc3a09ae995e650cd4429b00c8c6c695a6862bfbc97374e libnsl-2.34-270.el9_8.i686.rpm fdbce249dfd662ccbc1044426f881b64e597524aa7c9ea7fe58032d626026386 glibc-langpack-gv-2.34-270.el9_8.x86_64.rpm fe49b87ebbf959bb549c01924f89a467610b7f2600a24419ef02fb43f12af726 glibc-2.34-270.el9_8.x86_64.rpm feac3e6838796c57c5ef8787f30a05137755cfd7292ccaea0e7e88a2f61cc752 ALSA-2026:20612 Copyright 2026 AlmaLinux OS 0 1 Important

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009) * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845) * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010) * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833) * gnutls: Fix intersecting empty name constraints (CVE-2026-42011) * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default gnutls-3.8.10-4.el9_8.x86_64.rpm 39b87fb04566ff4930e5ec06495f614ab9071502801834fac0c0d327ef152377 gnutls-3.8.10-4.el9_8.i686.rpm a07367358c321ebb714d95f9f7a5a2805a55a910908541277240b5a064f2ff2e ALSA-2026:21468 Copyright 2026 AlmaLinux OS 0 1 Important

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI (CVE-2026-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default cockpit-system-356.2-1.el9_8.noarch.rpm 32eb8395ea33394cd76f313ef1e883287aa2a400cd18cf677ce252283e21f698 cockpit-ws-356.2-1.el9_8.x86_64.rpm 60d98f81a31bd02c996bae7cf122f095603761b3eb97d11f75b8c87f8c3fcf7d cockpit-doc-356.2-1.el9_8.noarch.rpm a13363c2a782acbc9c9499ec95b56218995e4abf1ee3bd64f4a12c094a0034d5 cockpit-356.2-1.el9_8.x86_64.rpm bd642beae9da9dd40a94b34852c5169aedf02891927b2abb0b6b012b28fcd500 cockpit-ws-selinux-356.2-1.el9_8.x86_64.rpm bf532a1b4055e8dd1d6a0e4baaea0b8636ec7990b40c8940fc36c4bda693a010 cockpit-bridge-356.2-1.el9_8.noarch.rpm d810871229062ae0bb8d717a464a152bc99967c3fb8bfb5f6c848b8c0d2718a5 ALSA-2026:21556 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64.rpm 03ccbe71097a82a543cee8f8849649e36ca8e5f7ead5c3d5dbf766ec0c0bc802 kernel-5.14.0-687.12.1.el9_8.x86_64.rpm 04e8682cdb5af401a7e9de5c13e713ac507b8f7d6550b8bf4ff5d158f61912c8 kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64.rpm 089d0548e1b217439e6ea3721328827230e707f17caf35a0f0240cd31d47d91c kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64.rpm 169a728d66ff4c0c15e25bc887a20d311654d1c5bd6e93defc0149c1e13d8ab0 kernel-debug-5.14.0-687.12.1.el9_8.x86_64.rpm 40143158ae0fdc073a13407482b270c1a50121fd0dec7fcb4a1f74cde8922570 kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64.rpm 4f7b26ecba4068a8ee8ebe5d8aeb285617e6f5d5b784042923d821f0c290740f kernel-modules-5.14.0-687.12.1.el9_8.x86_64.rpm 52bedfa21652424051c738e568340dab26477ccd6925feb30e2a7f432505e18d kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64.rpm 58fd5f2f16ac3e545d5f3fdfa1c2443832d62a2c1a7d610de37cf13a3363d44c kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64.rpm 5a54e2c9ac33f62da972d793432489c2a37fc079b4a94d8457c4e6d06f1ba6d1 kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64.rpm 6a96b3c3470471ea6906e3e8621f5fa864dae91d8e40af0508e35d6dc06ab15b kernel-core-5.14.0-687.12.1.el9_8.x86_64.rpm 94dc83a5fbc0fbb414eb94fd4e1ac2bebe988e7625b4a275e1ae925eaefb5428 kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64.rpm 9f77e999cd6521a5792d81f6c7db407e4caabb9c0ed91fa598d513638c618a1b kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64.rpm aaab3209a4f7a936940a641c085ccbae3b5628479049c685ab75609e7b813969 kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64.rpm d55b784d892f01f98afacb13b3e0299f1bcd3696197d8eb71d52baf475ee7d4f kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch.rpm e7fa545268b24f15dcf013ec7c4a06a45fc6e1b390d85329fb1d555333325ad0 kernel-tools-5.14.0-687.12.1.el9_8.x86_64.rpm fa7e4ab9f98b35fcd9345da9404c312df0aa51e332aa493841723993c1d1faf5 ALSA-2026:2212 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789) * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819) * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022) * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415) * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403) * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459) * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730) * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760) * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141) * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271) * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269) * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-uki-virt-5.14.0-611.30.1.el9_7.x86_64.rpm 10e382dde25407193399f7f1396757dc7fbf8e0f638cbee0479ede8d8f29599c kernel-modules-5.14.0-611.30.1.el9_7.x86_64.rpm 22d91920f738d068b5945a3b4bb0b6b362c5d107d9d30f69bae7a79fab81a840 kernel-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm 3e9e15603fed774acf4901c80380ab2057822298941b7bb0d7e8218ebab65287 kernel-abi-stablelists-5.14.0-611.30.1.el9_7.noarch.rpm 4d52218cd8b8cbf5bb6aa626071650d97ab81d01c4f9be4423cce7a88093c86f kernel-debug-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm 56407b2c2539208046bc3c6abd987f1e1027a87d1fdf95c334f421064d5a9fe2 kernel-debug-modules-5.14.0-611.30.1.el9_7.x86_64.rpm 6390da1843b65afa6b263de5fd978536b7d69477fb07b5587bc37f8c1d09a479 kernel-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm 72d8652a59aaf9041dd7e861fd775b79ee70718c3e19c6ca47c36ba0918ccbbe kernel-core-5.14.0-611.30.1.el9_7.x86_64.rpm 748be7f577b463601c3a378d4bf18c746c479bd861ac4c55f89d3a76190d2de5 kernel-debug-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm 998089a4b46a8832bdc5fc45be11d0eecd35a39798c1bd2b4f2cc53811add31f kernel-debug-core-5.14.0-611.30.1.el9_7.x86_64.rpm 9ce701e57b315bbb1c922c606b1056d41371fe6a0200a2d3b8bd48d5e534485b kernel-uki-virt-addons-5.14.0-611.30.1.el9_7.x86_64.rpm a10b99d84bd8e5ff1d67c796694f864308906d62419e6e2b3cd88ff10d5fc25e kernel-tools-libs-5.14.0-611.30.1.el9_7.x86_64.rpm c85629056d9bb0cc255b5a33c86ad6f18deaafe373c45a9422e0cb22ad722b9f kernel-tools-5.14.0-611.30.1.el9_7.x86_64.rpm d8fdfec12bee878c90e866818be1ba48ca2100d0b55017c183523ed500b32e93 kernel-debug-5.14.0-611.30.1.el9_7.x86_64.rpm ec22509cc7f7b5ed73a29234f9f50e64bb3e4a894c7aca465d4b21ef7dbe5bb1 kernel-5.14.0-611.30.1.el9_7.x86_64.rpm f5e9d66be369ee390a211b897bd08681e00faf47e642d9a8debdbcdd0d39197e kernel-debug-uki-virt-5.14.0-611.30.1.el9_7.x86_64.rpm f81903d0cfb88a8042032e7b8f441218b2f81d781a19f05593fcf0ed3b1f4ec7 ALSA-2026:22312 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssl-3.5.5-3.el9_8.x86_64.rpm 06417a30871fac9082ea692c28779a31014190b5849f8a789f4ab4f03656263d openssl-libs-3.5.5-3.el9_8.x86_64.rpm 5360b68fda7fda21841063d098326e23409069fac14fb90a114ce41980aee46c openssl-libs-3.5.5-3.el9_8.i686.rpm 84896f84caf16f590aaf100762326fa894d0675b2976a2b243f22670797e7ec8 ALSA-2026:22717 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-filesystem-8.2.2637-26.el9_8.5.noarch.rpm 0d0c554dc6f8a09f2160aee3c03ad5745b9aa4e380d2a4c0c2fdd085cc4dd966 vim-minimal-8.2.2637-26.el9_8.5.x86_64.rpm 8b2dd34df602515d4a1660db206577535cd34d4fb692e27957075c5601b1cc05 ALSA-2026:23230 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: denial of service via crafted XML input (CVE-2026-45186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default expat-2.5.0-6.el9_8.1.x86_64.rpm 3fce81e63c89c696780d4b2854347fd786dc867dacc19b80ab72a3ce63ed3e10 expat-2.5.0-6.el9_8.1.i686.rpm 970cc12828600a1d703a7d263714304c5a49808ccbf375581174a7fbb7d1c5b9 ALSA-2026:24369 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944) * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959) * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default unbound-libs-1.24.2-3.el9_8.1.i686.rpm 22138ffb77930a8c5ca873589e61d36f34aac1c120e67ebae0f87dff4863c321 unbound-libs-1.24.2-3.el9_8.1.x86_64.rpm 2f1b1456334de6232f773a253cce790f003a365b6f450ef5fa999fdad3ac6716 unbound-dracut-1.24.2-3.el9_8.1.x86_64.rpm 360a86ecb10b6463aa5205ba4c534d51168eacf4803667a56957a75fded04fe9 unbound-1.24.2-3.el9_8.1.x86_64.rpm ba9c6755106e891076ea22cdee5219c4ceef8720cc0a2b906f9661eaedc6bf0f ALSA-2026:24381 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-5.14.0-687.13.1.el9_8.x86_64.rpm 09fff308d15896dfea91a361ec2f424fa6a4230ee68af061be0a02b9d22fdb2c kernel-debug-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm 1123724e3f4d885fb06781278f7820b62fdb80e8ab77ab4d72801593c594e1a9 kernel-uki-virt-addons-5.14.0-687.13.1.el9_8.x86_64.rpm 29f599a4857ac5e13e882d38399b5658e857d298eed676fa69e9744cabf09424 kernel-debug-5.14.0-687.13.1.el9_8.x86_64.rpm 38db2499f00f961e0fe87a3f4dadd95bf3a94ecf2c7bfaa7bc9201670300d318 kernel-core-5.14.0-687.13.1.el9_8.x86_64.rpm 4214c4595e8e1c302e492cdf5fe093b1375aabe2268f42b708a38f59f4d31b81 kernel-abi-stablelists-5.14.0-687.13.1.el9_8.noarch.rpm 5431935cdaba4c362eb47584d3d059e2da4159f7be4e664ec98000c988ea138c kernel-debug-uki-virt-5.14.0-687.13.1.el9_8.x86_64.rpm 62858c23a66bfba79a170bbf3fe70f8b472b94733eaa02d33f26498ffd787a71 kernel-uki-virt-5.14.0-687.13.1.el9_8.x86_64.rpm 6cc5dded0a1ea8689037c4f7712307343ade1090ad44ff13a8e974ba57067e63 kernel-tools-5.14.0-687.13.1.el9_8.x86_64.rpm 7bed0e35fea53719def494ee3d01ee2f201d4352e92561987b2c7970025f896c kernel-debug-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm 801b304c0a652dfda9228ca4cf0c36835b1418a08d1f6bf07284c831139c418e kernel-tools-libs-5.14.0-687.13.1.el9_8.x86_64.rpm 90f7487b9fb8fe0327972f7d8c72c71163e0cac684f205f5fe39af4785db8ae6 kernel-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm a13e418881de7d70ab668e37a59d0c56e3d893c09093b6d25565b42a7cb38446 kernel-5.14.0-687.13.1.el9_8.x86_64.rpm beaf6da82257f715e77b56b35ca5ea1ef8b05c4ee17a87387a0eeff5b95ef900 kernel-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm c39f8a2468493f9f02ac7e2a6eed20a9f342569f733404b4869a2c4caa50e404 kernel-debug-core-5.14.0-687.13.1.el9_8.x86_64.rpm e7a53f20204950d20729329295aaed97e2de33e16f5f19fb3613d89fff1a5534 kernel-debug-modules-5.14.0-687.13.1.el9_8.x86_64.rpm fc0a9959ce2886ff2fc05354de00ece8746f6619b961e7d60f4027a7b7998e80 ALSA-2026:25049 Copyright 2026 AlmaLinux OS 0 1 Critical

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default samba-common-libs-4.23.5-10.el9_8.i686.rpm 0104396112d83551de720cd2a8de5f8bf79ba4df1f1963080aec0714db15927e libldb-4.23.5-10.el9_8.x86_64.rpm 01f23a3050011d7a79cffced0944115330f835fd04a635c4f555e315e82a7249 samba-ldb-ldap-modules-4.23.5-10.el9_8.x86_64.rpm 02eb00d5b85d9da89a5495db0419fc3bebdac584b66c41812b5708133cb6b312 samba-winbind-modules-4.23.5-10.el9_8.x86_64.rpm 0dbee6a303ab57469dd615f858beb8ba90bf305abd6a0d03864ad11591568549 ldb-tools-4.23.5-10.el9_8.x86_64.rpm 14935aaac29eb3439942d7e457b27142c8378a95365e2016d85bfe848f13b12e samba-tools-4.23.5-10.el9_8.x86_64.rpm 1823d28604f8dcdbfa94dec305e7171e4ae84d8276fc5ba5ea2dcd510c6d4f62 samba-winbind-modules-4.23.5-10.el9_8.i686.rpm 1b042bee80e5adbee006471e598194ec40b5198766078331cc6f46ce7c79c98e python3-samba-4.23.5-10.el9_8.x86_64.rpm 28f01a0c063886ad24649a7b3934301b226b97ef1e494819057e70d364e677c9 samba-libs-4.23.5-10.el9_8.x86_64.rpm 2bf999dcf8b5dde258e82a8eab85fd66544f004504fc9e9d6747f3c7313ef6dc samba-dc-libs-4.23.5-10.el9_8.x86_64.rpm 355e98c27526db6ad6e54197f181d05522124dba2faba4db63728d6c56c9962c libwbclient-4.23.5-10.el9_8.i686.rpm 358869971524e3317cbc818033080f5aab6e140b87457e622e317c8b60c52154 samba-client-libs-4.23.5-10.el9_8.i686.rpm 48cffa419fba45da0bb36a94025468ef2f36d5df0bd8d6317558720335188860 samba-winbind-4.23.5-10.el9_8.x86_64.rpm 50263e548dfbb43f6928873326bdfe9b95a34e90964883cc5f74fdaeb87883ce samba-client-libs-4.23.5-10.el9_8.x86_64.rpm 52abc14142a9d9559ca350f8c09e89ba9164f78dc270c36db65f5bb37fdfeb25 samba-common-libs-4.23.5-10.el9_8.x86_64.rpm 647dada45eea09a72d4e4638c89510dc19347954d25ddec5204e2ee1e0d00c62 samba-common-4.23.5-10.el9_8.noarch.rpm 7bd6b22cace4dabe2cac9d0f17735484b6ddbc82b584997c2e3ed4b69fabac21 python3-ldb-4.23.5-10.el9_8.i686.rpm 7c1a58ba6587bcaf8089b002c7bb0ef498a846c90d6c1f15a2a4f79238d2a761 libldb-4.23.5-10.el9_8.i686.rpm 850372ff7b7a16105b191a3f2c686406dcf23d1dbfde35b5c1c11347cab64afc samba-dcerpc-4.23.5-10.el9_8.x86_64.rpm 8cc15f22fe54dd4dbf28eb26d5bcbce4d8c2dad74de26cdb46e4154955e6edf1 libnetapi-4.23.5-10.el9_8.x86_64.rpm 8dff38485dc7f8e1d0108218d3878b75795c37eb58193b5cb393bcc36e042f21 libwbclient-4.23.5-10.el9_8.x86_64.rpm a1b63e138930926795d3a5d104a850eab340840e50925faf049afb1843f261a1 python3-samba-dc-4.23.5-10.el9_8.x86_64.rpm b9ba6097f877844f153d7765c70f2daecac02615fc5d55c29c62f6b73f9be617 libsmbclient-4.23.5-10.el9_8.x86_64.rpm c2c1023008c1dc3db6312fb70a01af89ccc3c48aeab0e6c8bd8ac271d0d6dd23 python3-samba-4.23.5-10.el9_8.i686.rpm cf6031dde0ea70639c0bbca6ee56ed7a1b28d0e267f876424eac97844e9b23f0 samba-dc-libs-4.23.5-10.el9_8.i686.rpm cfc9f0686d5c821d8c7f9aa95c7a7d92ef9969f7cfbcbc6e3612c6138cd628c1 libnetapi-4.23.5-10.el9_8.i686.rpm dc033535f288decf5a7d4378f6fb2985eae9f44453a182cda85b3161d9c6aa69 samba-libs-4.23.5-10.el9_8.i686.rpm ddcd7f6cc00afb4df9a3a01ad5b312e9475f1fb17fdbd65be5bf0bbed10f607b samba-usershares-4.23.5-10.el9_8.noarch.rpm e9288d23b9cb7ec68c84ac5c7117c46a00af0b431607118f4bd1a8d4daf2b1ac python3-ldb-4.23.5-10.el9_8.x86_64.rpm f01958f9fa7cbcb45a27cb22fa9ef81f03877fdf7923dfb79fa45b9316839178 samba-4.23.5-10.el9_8.x86_64.rpm f24c725a2e1678e0488e1b340d1fd76075521ecb47742b3c8075df3a3b365fb3 samba-common-tools-4.23.5-10.el9_8.x86_64.rpm f4dbe287a43caf8ba752f1e02230d26e1ffe2aaadb7f3e95492dfccfff11afeb libsmbclient-4.23.5-10.el9_8.i686.rpm f65c9316e2ce2adc727d3ef7b2990a70e3005c942ae3724b841d2f31aa5210bd ALSA-2026:25217 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-5.14.0-687.15.1.el9_8.x86_64.rpm 2bc17b40fbd8b91a884c4a0ad4ef5db000b363ad48e16f74268bf753d2ef6252 kernel-debug-core-5.14.0-687.15.1.el9_8.x86_64.rpm 2bce365bc1e60e9bfaf380810c6d38e478d24523ab0dbae7d194ae9437e17764 kernel-modules-extra-5.14.0-687.15.1.el9_8.x86_64.rpm 31d2e16bbc3b3ffe37eb2df28120fe02c03a4d8b51a822c76a48eed0328bd1b2 kernel-5.14.0-687.15.1.el9_8.x86_64.rpm 365931f1f869772352807325358ca7c0b66e48b5f548a91c775753d3f9835530 kernel-tools-libs-5.14.0-687.15.1.el9_8.x86_64.rpm 466ee9d17c95472026fac03f46d5191a3b816aa05b0225de4a56e430f13fa3e2 kernel-core-5.14.0-687.15.1.el9_8.x86_64.rpm 4f6bfb22be4ce1c9207b006d067d80f5df3724d88e18460e3e99ae0bcc74dd16 kernel-modules-core-5.14.0-687.15.1.el9_8.x86_64.rpm 5172d6aac076cf84e8ca34e02f775fbece675461c87982b27db7870e89e23001 kernel-debug-modules-extra-5.14.0-687.15.1.el9_8.x86_64.rpm 6fd36584bbbe683f1780b239896d70f42fba7e71b95bfd892ef9a04743d7e3d2 kernel-debug-modules-core-5.14.0-687.15.1.el9_8.x86_64.rpm 7777cf7aa5cb98c622d7decb8343425abe67d5e68877136a2c8f2659c508eea0 kernel-debug-uki-virt-5.14.0-687.15.1.el9_8.x86_64.rpm 78cdad7be1a967f042e7818226f5997c9691e9ef3bbacee28fdf9b4990ff2268 kernel-uki-virt-5.14.0-687.15.1.el9_8.x86_64.rpm 8512ed31307df05a5b4d9d3d2292211d70f8a5b87aced9dd503fd8bf0d41d697 kernel-modules-5.14.0-687.15.1.el9_8.x86_64.rpm 8f7c60c4f767846521ecc177223284d4ae664dbd8101c6920491565b77f5ff2e kernel-debug-modules-5.14.0-687.15.1.el9_8.x86_64.rpm a8dfe1cc83bd7040fdbcd5b89c6029ebdffb6ab0fe8c41c961312e18708bd670 kernel-tools-5.14.0-687.15.1.el9_8.x86_64.rpm c5ee6cfbee4db7a7f30d29b457436ba2c4971038895837d09095a80521860377 kernel-uki-virt-addons-5.14.0-687.15.1.el9_8.x86_64.rpm f17677d11008a865b7e7eae79eab0ce1b795d3e7b76b98e51e8d94f562685cf0 kernel-abi-stablelists-5.14.0-687.15.1.el9_8.noarch.rpm f633a4198ebfffa7fd0f82f3f7b4af9bb5d50268a088339d475c27dfccaa02ab ALSA-2026:25239 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383) * openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076) * openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180) * openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181) * openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182) * openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183) * openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764) * openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766) * openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767) * openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768) * openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769) * openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770) * openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445) * openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446) * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssl-libs-3.5.5-4.el9_8.i686.rpm 3cb8f57419f4677d72e87293196556786f6c7f0eb4f1690afc339549f646b41f openssl-3.5.5-4.el9_8.x86_64.rpm c94e1203a0e1811c4d5279becfc00aa66bc1548c45fde7c076bc0856d65426a3 openssl-libs-3.5.5-4.el9_8.x86_64.rpm e0ddf24705aa89e5ca19b3743ebc2441e262bdf2f7a897ce1349d1abd8d85a26 ALSA-2026:26410 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding (CVE-2026-43618) * rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. (CVE-2026-29518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default rsync-3.2.5-7.el9_8.2.x86_64.rpm a6a100edb043d719aec23dbfa6b489c1a82ba1114430fe95f41dad8df6392ad8 ALSA-2026:26533 Copyright 2026 AlmaLinux OS 0 1 Important

dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default dracut-057-115.git20260527.el9_8.x86_64.rpm 4182740620fb38de46cd9a2086b8ee98b092b2f831bc4028ad6d0273ddd7bc40 dracut-network-057-115.git20260527.el9_8.x86_64.rpm 4da228d2467330848739073ca410399af849e272b49bd6c8a1cb8dfe62e824e1 dracut-squash-057-115.git20260527.el9_8.x86_64.rpm 7ceddd7a4a0d000ae331f497db07479b9026e87e2fe2a32adc72db60642315f1 dracut-config-rescue-057-115.git20260527.el9_8.x86_64.rpm a597e097474f164be8619966232199c6363288aa88f99d97038d9d1052686e15 dracut-config-generic-057-115.git20260527.el9_8.x86_64.rpm c375e1564f38c4ed62d3366ce1271d1ccf744c8f9fdff864867e305f690605a8 dracut-tools-057-115.git20260527.el9_8.x86_64.rpm ca87c544e0b69eac679f763149b4ad343a017005cecda54ebe803c58afe9b9b0 ALSA-2026:2722 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034) * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304) * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322) * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349) * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811) * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-abi-stablelists-5.14.0-611.34.1.el9_7.noarch.rpm 276e88c0ad0da46d7a7b9e172bffc4b15861ed06d1b1bb1ab44754678898a815 kernel-modules-5.14.0-611.34.1.el9_7.x86_64.rpm 288dc1a69524f2447ce64d449f0194c326cc75e1c20a0dc5b7c68ec7cc9d1614 kernel-uki-virt-5.14.0-611.34.1.el9_7.x86_64.rpm 2abb266e7eefb1ee31144c68639a8c595fecef8c6f2764ef98441ede7ecc17b3 kernel-debug-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm 2b19ff55ff8b6b994c6d625f0beaada6a2634d82f8c21df9d06e4b28f14edf86 kernel-debug-5.14.0-611.34.1.el9_7.x86_64.rpm 2d99b4db00b703dc4299799052ca21967cb206f4ffef7641d89cde8f1c5e223d kernel-debug-uki-virt-5.14.0-611.34.1.el9_7.x86_64.rpm 2e4e94d4f06619db2fc02ff1f60617e9b53f3cb058d0ae7a4f6e1d76a8c6e438 kernel-debug-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpm 3a8948e711101c4c8941116573a7073fbae6e65b506dbfbe62a9ffa7f03d32e5 kernel-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm 530ac9a91e9e15716e82ef77418be4d61dc0a34ebc017075c120bfbfd7fd9feb kernel-5.14.0-611.34.1.el9_7.x86_64.rpm 61cd0ec3c9e1bba14476484e2e5457ee480f7a0058ea06383f5e8a16698c1ff3 kernel-debug-modules-5.14.0-611.34.1.el9_7.x86_64.rpm 714367d42d24addf18490572b5e45f576404da86b031d73da14ba592f4a5585d kernel-tools-5.14.0-611.34.1.el9_7.x86_64.rpm 7304c58d6279964ccad3e1ae79c88b07196d42ce935c6459b9d08f4fc69dcd6e kernel-uki-virt-addons-5.14.0-611.34.1.el9_7.x86_64.rpm 89dcbace75f2b90d502fedcd0627e301c7dea792469e387414f7b64435c8f20a kernel-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpm bd522a9aa287096973fbe229aa0c143676e9af27227c6e9399ddf63062d40eea kernel-debug-core-5.14.0-611.34.1.el9_7.x86_64.rpm dcda3204b16da603c3108b0f3ff4988d9438de37f40c0d3ab0440014d2a5d76a kernel-core-5.14.0-611.34.1.el9_7.x86_64.rpm e1341a7442ca8d831d47266b1a4dfe15e9378c602dea1a954be4654c8462f27a kernel-tools-libs-5.14.0-611.34.1.el9_7.x86_64.rpm ed87574107af6e47e307089874919f78f3cdf12ed6856663b7515c151b9f95fd ALSA-2026:27789 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048) * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699) * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820) * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823) * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308) * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-abi-stablelists-5.14.0-687.17.1.el9_8.noarch.rpm 0cd2b21fee38f236364fb81b384d8f99e79af2d458555920afebfac27ae1e9a9 kernel-modules-extra-5.14.0-687.17.1.el9_8.x86_64.rpm 0ff4c1122fb021a806344feed10b24d32d8cb5cfe2b2f72a57a668c90b1dbbce kernel-debug-5.14.0-687.17.1.el9_8.x86_64.rpm 360e70f7473fe756d9e722214517cc5c65d80b79d7a20e49af1170100656f45f kernel-core-5.14.0-687.17.1.el9_8.x86_64.rpm 3ebb25352457ec2262210e0ff6a756ccd9c4b1c9005e508c94eb85d8d3a3dcfe kernel-debug-uki-virt-5.14.0-687.17.1.el9_8.x86_64.rpm 4aff19d124845fb3edd31ad9d2c09750547402400288e974dd00ad1298ea5b7c kernel-tools-libs-5.14.0-687.17.1.el9_8.x86_64.rpm 53351f456857d991c2275dff79f7a76d072c8d50a8bd7874cb705e7be9d6f82c kernel-modules-5.14.0-687.17.1.el9_8.x86_64.rpm 561f49bb303f969a8a6b413c1ee11883bec8078ae55d5dc0d394426b689c1852 kernel-debug-modules-extra-5.14.0-687.17.1.el9_8.x86_64.rpm 5dd465a601c7d0cd767429e9626fc4447b1a903ec2ff6bd497bbb5755e4b2138 kernel-uki-virt-addons-5.14.0-687.17.1.el9_8.x86_64.rpm 5ea829b54972e37d325c13ddf5c9de8143af2e3c4049346728f06b3d40a72209 kernel-debug-core-5.14.0-687.17.1.el9_8.x86_64.rpm 671253cd65bc128e44adab54f3d188b4006ebe17c58abd84d69fd14bf6cbe435 kernel-modules-core-5.14.0-687.17.1.el9_8.x86_64.rpm 8d55ab90077012d321a61b4b1b40f3257629369c993dbdc69f86250941db8d68 kernel-debug-modules-core-5.14.0-687.17.1.el9_8.x86_64.rpm 8edafd457caeef18d28c42dcca7a4ff34322a0ee2429793f84bd7f36ed79705a kernel-tools-5.14.0-687.17.1.el9_8.x86_64.rpm 904512e5a9dcc0f728d5b8cf4e340b7d3bb3267c4f40ee6154b4b0d255328116 kernel-debug-modules-5.14.0-687.17.1.el9_8.x86_64.rpm a5c082638d838197831e9b58b7230a32e56048c53e0c723d22a07bed28444b6a kernel-5.14.0-687.17.1.el9_8.x86_64.rpm ae6dd5b58b11c1866bf6dd483d2ea5d01068a1cf62835c0c534c1386f775ba8c kernel-uki-virt-5.14.0-687.17.1.el9_8.x86_64.rpm bfa247ff0fc920fd4f3ba09ee56be67470c5f48b9f9e626423816999b4d36d4a ALSA-2026:2786 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861) * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915) * glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory (CVE-2025-15281) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default glibc-langpack-mhr-2.34-231.el9_7.10.x86_64.rpm 01055669391cfc59b83d2b2efa867f9a77aed2558808eed17198a950d32b0109 glibc-langpack-he-2.34-231.el9_7.10.x86_64.rpm 010d3f41d66cb0a9c6002729921cca57dc6e7ae3a6f0950e22bb7b41ed728953 glibc-langpack-quz-2.34-231.el9_7.10.x86_64.rpm 0258916d52747b840fc28381f50bb956e6347693a50830e2da04890108ff8b77 glibc-langpack-nan-2.34-231.el9_7.10.x86_64.rpm 02abd6ed7ace4cad41157e6531385f17409aabe1b44e5ef54a8254b1983d840b glibc-langpack-gv-2.34-231.el9_7.10.x86_64.rpm 02c567172767bf49ba76abf3c52aa2ba23355ed435d046828bfe8befaea819ac glibc-langpack-yuw-2.34-231.el9_7.10.x86_64.rpm 02da6b3e18d72c5284bfdf9ff3c6c15f51e53fe469cc4d488270ff720346ca48 glibc-langpack-ku-2.34-231.el9_7.10.x86_64.rpm 03618778cea5f9d83355de3fdce23c2c0df4526cf316eee307be454efe784e33 glibc-2.34-231.el9_7.10.i686.rpm 0658db5041b44e14d8df0bbc4bf056c2e7e1c06a5869c867f8d229deecd24273 glibc-langpack-hu-2.34-231.el9_7.10.x86_64.rpm 069031b20c51210753ef6601090eacaa740ef069557290cec078dcbc31f44c6b glibc-langpack-chr-2.34-231.el9_7.10.x86_64.rpm 073b566bf0f16c12468b5a89a18221e55527383ed44003f9d5858f3a2b434a33 glibc-langpack-tig-2.34-231.el9_7.10.x86_64.rpm 084faea9f48f184917afcab0919ee54a622bed9d230df526098317b44cfdbd93 glibc-langpack-to-2.34-231.el9_7.10.x86_64.rpm 088fceb40b823503f95ce0e06d8e68e5a0edad58192fd2f34cdc27cb1ebc435a glibc-langpack-anp-2.34-231.el9_7.10.x86_64.rpm 0b1968c1249832b1943879fd2d1d329643d50dfcf16b9d93df0278aef9877ce3 glibc-langpack-hr-2.34-231.el9_7.10.x86_64.rpm 0d3c700569fb5346804f71ef48120343076b675d7ec8175201bea0d6ae8584b4 glibc-langpack-ps-2.34-231.el9_7.10.x86_64.rpm 0edf7f6f7281065c7d2d49142b1ddfbb8402281bfb5693a2db054d9e1de5bf33 glibc-langpack-lt-2.34-231.el9_7.10.x86_64.rpm 0fd28abeb214327a9165f2be0826f06dbbd1f2f3f9faf53f187a9fc886d169b4 glibc-langpack-sl-2.34-231.el9_7.10.x86_64.rpm 1429a696ebd803220ce431b7083975b33512cd51060733db136b01aee33f6e5f glibc-langpack-tk-2.34-231.el9_7.10.x86_64.rpm 14bdfd31e53f684249e50d01fe18e58e6e284eae72c00706de304fc6aadad0d1 glibc-langpack-ne-2.34-231.el9_7.10.x86_64.rpm 16f37a162820f95d44f12d1caa65076d847ab388960c8a2972507ea9f682c397 glibc-langpack-shn-2.34-231.el9_7.10.x86_64.rpm 17a76df9f6b19d9d0c1d3f1edc8044924c25fae1341b2fe45c580df7e8f91265 glibc-langpack-ast-2.34-231.el9_7.10.x86_64.rpm 17e3c2f8f407a9f98a0b7bffb723d81d22aca252dc04876009c97f9ce147ebb2 glibc-langpack-li-2.34-231.el9_7.10.x86_64.rpm 19679a7830a15ea6c657a18f67d2dbbba437e9c6bafc60177361a610c162727f glibc-langpack-bn-2.34-231.el9_7.10.x86_64.rpm 1db9a92654f51faa340a892b7e0e2abe7ee0d96e19c0b653fc2e48cce73b6306 glibc-langpack-wal-2.34-231.el9_7.10.x86_64.rpm 1dbc723095d805bb0d8fdf20066aa2a1202a56577e21c654d8ef37827c7748f3 glibc-langpack-dsb-2.34-231.el9_7.10.x86_64.rpm 1fd480cff03307ef0206444f51df923034e367d20309ab48cb637258e251533b glibc-langpack-sah-2.34-231.el9_7.10.x86_64.rpm 2325931eb98c1963a092f10cd64e39170b3060adcf973a392633a8491100701d glibc-langpack-tn-2.34-231.el9_7.10.x86_64.rpm 23c3068e84e6a51f6da04f544c96b93d2039fb837c084438526994989ec27ea8 glibc-langpack-ti-2.34-231.el9_7.10.x86_64.rpm 23c51dfcb5a00c568184f9ee660a73772e68fb70ea04f551b8d5012c92794984 glibc-langpack-fil-2.34-231.el9_7.10.x86_64.rpm 25a9b7ed0ad1ee9ed9109cde5df551bf1d5758bbb5e6eda8e8dbdd310c55a376 glibc-langpack-nds-2.34-231.el9_7.10.x86_64.rpm 25b7f9402a36a822ba819aeb0aeb35a9bd5d83222ae39b0a693fb52422494ab3 glibc-langpack-om-2.34-231.el9_7.10.x86_64.rpm 260c8ed25df080fba3c5dbbce6f015a2b86e02eb0d322d2ed3390aa56e7b1dc6 glibc-langpack-an-2.34-231.el9_7.10.x86_64.rpm 2657ff2ca3a27592925451967029fd4cf79123f9fd637ffc4e07b37b68a45422 glibc-langpack-oc-2.34-231.el9_7.10.x86_64.rpm 287b927252d635933656e7a496764e4c9a55f46c218ec532a1e8d690a516ebed glibc-langpack-dz-2.34-231.el9_7.10.x86_64.rpm 29dca32ac1a0e31b1775d0d65a49c3fe0685a17f347e760d99c82a1015fb1564 glibc-langpack-kl-2.34-231.el9_7.10.x86_64.rpm 2b8b426eab4fccf6283562d49e79282c6d8e972e08172f31b9d703c8f165e775 glibc-langpack-be-2.34-231.el9_7.10.x86_64.rpm 2fa1a9bd577f128d80dd13d3412c4a8507c539de2cc1eecb8e47829d1fc4528a glibc-langpack-niu-2.34-231.el9_7.10.x86_64.rpm 30e6574cf54a2926a1d9e2b2db0c422ea4cc343401cafdfd9deb5fcbe995083e glibc-langpack-ia-2.34-231.el9_7.10.x86_64.rpm 313543b68a1bb3bf0b9dc01e5fb5f41553f7da546b2c316ccfec97dfef97d293 glibc-langpack-ky-2.34-231.el9_7.10.x86_64.rpm 32a6705ba68aa28883c6f8cb27791c5642dd557947c590019a35074181c13703 glibc-langpack-th-2.34-231.el9_7.10.x86_64.rpm 33851ce625ba77b2c27f22bf95b4136d38d4ca763398173c74b091cb7274e654 glibc-langpack-shs-2.34-231.el9_7.10.x86_64.rpm 33dfba2b0171d104864353e1102d782e27ee3fc56f3491934d9ad707302acd70 glibc-langpack-kn-2.34-231.el9_7.10.x86_64.rpm 360e8594399a5d785cbde2eb17c02b4c039cc3d090c4684d737e2d85d9ca235b glibc-minimal-langpack-2.34-231.el9_7.10.x86_64.rpm 379fd63acd52c8af28c4fadc466565b695113e5a9a0debde7b94b03fc9c25992 glibc-langpack-ks-2.34-231.el9_7.10.x86_64.rpm 37f7f1f6c38904add5e800122848cb35d886211619cd0191c06269a8ba927b04 glibc-langpack-kw-2.34-231.el9_7.10.x86_64.rpm 3883d9e42848c2053b83cd188f5f197a6c6526ae63fead3f13c276eb18c6e813 glibc-langpack-ar-2.34-231.el9_7.10.x86_64.rpm 3c3a8dce8da01b71ded1762256ad412c0c885675efa8f7b7ee4c3d81ea8b4064 glibc-langpack-hy-2.34-231.el9_7.10.x86_64.rpm 3ce7ec3feeb5fd8cec672177ab0874e107f3b8fe44199fdb531f30dbbaf2b19c glibc-langpack-sat-2.34-231.el9_7.10.x86_64.rpm 3d75caa2c84624679a0b18ff01e23a55fda803d55829b103384f538e5a0003b5 glibc-langpack-bs-2.34-231.el9_7.10.x86_64.rpm 3de3670c7e6254b7f464f02252b07075380077eed6e1f0226e02f61c1e7a4574 glibc-langpack-bo-2.34-231.el9_7.10.x86_64.rpm 3e087441be5fca197deb7ae9a16ba12d80ef3cf7e3679c9722d4c20f10f39dfc glibc-langpack-fur-2.34-231.el9_7.10.x86_64.rpm 3e53618c0b096abdbd5d365397b7afab14076fbebd2d61780747965702c0819c glibc-langpack-sv-2.34-231.el9_7.10.x86_64.rpm 3e7acfb78bbe91c683990d16bd52cdffe00ef4b5df6caa5df881df975069a4b7 glibc-langpack-fy-2.34-231.el9_7.10.x86_64.rpm 3f09fa8e45bdc2217a1398071f9e49186a7c4ec13270caa0ba443dc54877525c glibc-langpack-ta-2.34-231.el9_7.10.x86_64.rpm 3ff1240f54d89ac487ad1d380034f834a9bbb9deb7a5ccddaaaaabd02453e421 glibc-langpack-hsb-2.34-231.el9_7.10.x86_64.rpm 42f7af9dbda7f829af432ab38343f7a9968e511566242905f0956eff97df38af glibc-langpack-lv-2.34-231.el9_7.10.x86_64.rpm 42fbb7d6de6979e4a12ef362cfbde6e2e1737f32f3a04d87977c62110c570cd6 glibc-langpack-tt-2.34-231.el9_7.10.x86_64.rpm 437414a7d7800d8b9372b829ab5ea3a3fd8e2d4ab1e9ba5edfbcae8056d04286 glibc-langpack-mni-2.34-231.el9_7.10.x86_64.rpm 4377c0f5a18fe98d1669a92c307c40dd132874803dec1928c98ae1bbcf6c2a26 glibc-langpack-mi-2.34-231.el9_7.10.x86_64.rpm 43a498bc3225e401c6dacd9323450e2365d254f0c7ef16411359391d1b64db24 glibc-langpack-yo-2.34-231.el9_7.10.x86_64.rpm 4437dc65fadc5ecebdc2fa775b28c6643e82ed502cd8b248861db08d340ef2c7 glibc-langpack-ka-2.34-231.el9_7.10.x86_64.rpm 4451902a7fb5d55bbf5711e3c3c29b52dfb3bab694e96b92205bd6052bf67a17 glibc-langpack-tr-2.34-231.el9_7.10.x86_64.rpm 48d8945d6bb5d3a569cd9a35c06bf386c4633d5952326b19eab8fa0884d85819 glibc-langpack-sq-2.34-231.el9_7.10.x86_64.rpm 499fd47767239de089918fd5311a7520c22b6335bfdc45a06e34810e35452784 glibc-langpack-ht-2.34-231.el9_7.10.x86_64.rpm 4a25f3101dd4e4f3421b6e2f893fcbfa1310322698c676688726bfc7ec5823a6 glibc-langpack-af-2.34-231.el9_7.10.x86_64.rpm 4a270000ef3f2915a522100f13591cb6ba97f3c3a52ad1a4fa8ff8be7ae3c546 glibc-langpack-zu-2.34-231.el9_7.10.x86_64.rpm 4c6e258ed6cd412aeb5d15c345ceb0921bee4f721013ef9e70d598228e55dc94 glibc-langpack-mjw-2.34-231.el9_7.10.x86_64.rpm 4d29bf89c1f4a7f45af9d09f2549f1a3f3a5d3a627f6f9acbdffbc3506bc0f8e glibc-all-langpacks-2.34-231.el9_7.10.x86_64.rpm 4d342523fb660c2f4e9a6443af213caf559672235fd330e70763595120c07491 glibc-2.34-231.el9_7.10.x86_64.rpm 4e094332fb17564474aa5c12d8f799ad694e5db66400eb580cf37fccf0c931d4 glibc-langpack-te-2.34-231.el9_7.10.x86_64.rpm 4facbf3b2b642a13abd45d75a596496bf9018340855dbd636adcc787576f5b8f glibc-langpack-si-2.34-231.el9_7.10.x86_64.rpm 508def4b6fb1c2e4fa62a81a8bacd76bf30da10b81bcbc65b2a06af142cf5116 glibc-langpack-sm-2.34-231.el9_7.10.x86_64.rpm 528ebaf44da9a0174570e76c221ae7146863ebbf7da12d0feed5635feef8fcb1 glibc-langpack-az-2.34-231.el9_7.10.x86_64.rpm 535cba425f308d2a0b6d45bd038ad5f79bc1049552b594657f9209d2492003c2 glibc-langpack-ik-2.34-231.el9_7.10.x86_64.rpm 53a44794c9a91a1c29b374378b3730be04ca4172b85badad410146d5d7944cd2 glibc-langpack-hif-2.34-231.el9_7.10.x86_64.rpm 56889e968f030cf09e0f148de190bfd1a28feda4bec3a146836b897b9cfcbc84 glibc-langpack-wa-2.34-231.el9_7.10.x86_64.rpm 5a8a1d93efe11504f8e4f72525b97d4e54f2804c6ef725436db396f8ccda612d glibc-langpack-or-2.34-231.el9_7.10.x86_64.rpm 5a8da805f45e708028dec57d9357472b7ff823784012b6f67dd04c0bc2d26fb7 glibc-langpack-ce-2.34-231.el9_7.10.x86_64.rpm 5b25951aa53f9ded41cd14817a73556c5fd5fc35e61539c3bc8d43fd77242b80 glibc-langpack-fo-2.34-231.el9_7.10.x86_64.rpm 5b37b5c97472f2c86fa78ee246211f86ee8fc11c58c829847d8a028dbdf8cd68 glibc-langpack-eo-2.34-231.el9_7.10.x86_64.rpm 61b1995c00b6e5f0dab41b79ae9fd9988c059126084759c32737a71be3bfdc70 glibc-langpack-hne-2.34-231.el9_7.10.x86_64.rpm 61c7c182cad796cbc8c3b35f6117a043bc08b9d225d52712fe78f791369b3fff glibc-langpack-os-2.34-231.el9_7.10.x86_64.rpm 62d4c39fe1c5ff7c594d7c4332033a2d83b8e4a95f9b218bc83956de86acbc25 glibc-langpack-se-2.34-231.el9_7.10.x86_64.rpm 6314fbcbf5a23e721a202bc360e511814abd8cb06f2c6d13890554f997cef32c glibc-langpack-ur-2.34-231.el9_7.10.x86_64.rpm 64b41163f910ec6b20ce4c924a9273d65adb39e43958fa11c4b175ec19fe8a20 glibc-langpack-my-2.34-231.el9_7.10.x86_64.rpm 6667358d59b35476cfc1cc0233333d7df3ecac815a8a4d4867f0a6ae03d32028 glibc-langpack-unm-2.34-231.el9_7.10.x86_64.rpm 67b7118115e9e38413d8ea8bfee028e5f211b7febfe4c761a1e175a364c67d47 glibc-langpack-gez-2.34-231.el9_7.10.x86_64.rpm 6854d1cecfc02c7babae97aa6f2abc50be6592a9b7d970ac8ac2fa8e3eb46a94 glibc-langpack-lo-2.34-231.el9_7.10.x86_64.rpm 68f22eb2b247d88338da8e43f3c5fa3909f0b2089f82e850c56653ecce33a486 glibc-langpack-nn-2.34-231.el9_7.10.x86_64.rpm 6bdbc2718284ec3f22ba244bdbcff084a45b2dcab7df66ddb8018452eaf0b4a5 glibc-langpack-bi-2.34-231.el9_7.10.x86_64.rpm 6c3a93363aab70ab8de5e872943b981159dd69a0c3c23804c9b4b673c0c5506b glibc-langpack-mk-2.34-231.el9_7.10.x86_64.rpm 6c611edf2dea848ab872dfaad08e89d258f3d1a082c17d2a85653a449b2cea3e glibc-langpack-cs-2.34-231.el9_7.10.x86_64.rpm 6ddc5d25213ef78b35941764a363cc188423f3a6c21d03b3ec54dfaead1746ee glibc-langpack-eu-2.34-231.el9_7.10.x86_64.rpm 70887c968e9f0f1c67625a58ea38b0d7f6c6e6f7226ed70f8cc3728318e9ee0d glibc-langpack-ln-2.34-231.el9_7.10.x86_64.rpm 7328f5379a9831b636cc9a8eb0059aa63e1d5c3bcb0e0b83fb8857abb89ec2ef glibc-langpack-pl-2.34-231.el9_7.10.x86_64.rpm 74d1785ee6a66ecfcbff0ee5c3fe1ead808b794738cf209cd34bb597ddec532c glibc-langpack-nso-2.34-231.el9_7.10.x86_64.rpm 75c7548795414a868e9039783b6ec41f48d3645563fbc744e725208de51ec2df glibc-langpack-tg-2.34-231.el9_7.10.x86_64.rpm 76c01dad3088dd599875ea7fc121faf55c1792880a5c79ea10b3110ea6d08675 glibc-langpack-csb-2.34-231.el9_7.10.x86_64.rpm 76d6642e63fb6b0d8b40e8b0648f34251fa3a81dc42286f96f3cad8ac2079a89 glibc-langpack-sid-2.34-231.el9_7.10.x86_64.rpm 7747c456394b53f238134a921821fdca1eec779563324d4853ffee4e160ff8a6 glibc-langpack-st-2.34-231.el9_7.10.x86_64.rpm 77e65be882f43256c0ab7acdb3886b5e113c35c11a9d3d445e28bd2e190ef11b glibc-langpack-sgs-2.34-231.el9_7.10.x86_64.rpm 787da2264c89968408ed105f26b2f6434e53dc26599fdbdc6d7cabd75f98e6ea glibc-langpack-wae-2.34-231.el9_7.10.x86_64.rpm 78e931365642ad02b1db0a52d570adcb8bb9fcb5a8171a17f598b223747df22e glibc-langpack-en-2.34-231.el9_7.10.x86_64.rpm 7a84c9edb02735e898e3204866fb6f1a9de21e5bfb0e1a56d85329baa91ae2a1 glibc-langpack-lb-2.34-231.el9_7.10.x86_64.rpm 7b09a8e4f56e70bdea9a49bdd442c3b2ecc1b5100a9f8322459de506f4d51236 glibc-langpack-ff-2.34-231.el9_7.10.x86_64.rpm 7b9240810029d466300fa6bf3ebe5f822fdc2174adef462972a5bf2cb2683319 glibc-langpack-nb-2.34-231.el9_7.10.x86_64.rpm 7c0bb7dc9837ffdff81e1402ccbab42b867e6a21a4ce623dac5ba27fb271cc0a glibc-langpack-ms-2.34-231.el9_7.10.x86_64.rpm 7cb613fc8b1071b51c23ec30405c0f24504045666ae2a02ad512adb427aa1de6 glibc-langpack-fr-2.34-231.el9_7.10.x86_64.rpm 7cd40e30f4b11d581833bde686b4b9f54c5ed0809230ffcf0396fca70152acff glibc-langpack-mt-2.34-231.el9_7.10.x86_64.rpm 7dd0462caa30477cd6863260f599b9615c820e03c8b0c440d48690ed3bf2fae8 glibc-langpack-ve-2.34-231.el9_7.10.x86_64.rpm 7e04faf81b6ba0777f11c5e7d9b1332d8c7698b7b469990cd6e57a5691e4caae glibc-langpack-sk-2.34-231.el9_7.10.x86_64.rpm 7e223c7f6cc09021b562c4c143e1a39150b49ad53e53989dc2ec6b13a7c7285d libnsl-2.34-231.el9_7.10.i686.rpm 7e36ee2eaf44fed4b46e992c5f40451eb4128feb155db388f012344b46cbea86 glibc-langpack-sr-2.34-231.el9_7.10.x86_64.rpm 7f63ec0c4e9ba6892f2317ca4757d5ef7a7122cb64f4f694bed6e1149766179f glibc-langpack-cy-2.34-231.el9_7.10.x86_64.rpm 80f7d817495003f0a5919fa18fa99fce32ada76c46d98dbc0f13153b42c580e8 glibc-langpack-yi-2.34-231.el9_7.10.x86_64.rpm 81c35eaee2d890743e3adaec9e975fa40f8d788475bd7f6fb8f944a111e5ce93 glibc-langpack-xh-2.34-231.el9_7.10.x86_64.rpm 82c870ac5b0b8e1c6c294610434bf7797d6b5b36354d199d616f0c9121c3b710 glibc-langpack-kok-2.34-231.el9_7.10.x86_64.rpm 879d61cae4c0fa73aa30da594b4ccf770bcdb1f62b473d9b8208329a75cbbeec glibc-langpack-de-2.34-231.el9_7.10.x86_64.rpm 87c7cffc65b1043e23d75f47b3a53ad8c977f24265e8ea533d2b207742334277 glibc-langpack-rw-2.34-231.el9_7.10.x86_64.rpm 88271599834d1d62050abe5432a1af7a80544c66b951f7972213eab415cb675f glibc-langpack-kab-2.34-231.el9_7.10.x86_64.rpm 8927bf886cebf29063b3cd3ec055259e1401df9e8cb74b0797ddb31a9f367e75 glibc-langpack-mn-2.34-231.el9_7.10.x86_64.rpm 895bf271eb2055eb561611e877340c9963a4d2015746ae4bf517230def44babe glibc-langpack-gu-2.34-231.el9_7.10.x86_64.rpm 8f55c2f2349b3d15fedf81755809e41e05ea14ea5d68920309230b78ba7f10d4 glibc-langpack-gl-2.34-231.el9_7.10.x86_64.rpm 8fa56a70a342c6315626919eee11f2c7a05dc67a1a2f36df0eda2a8ac05808f8 glibc-langpack-kk-2.34-231.el9_7.10.x86_64.rpm 901b1467005ed59a3eb624dafdb57a95324cc63ceae8b2aaececb4fc2ccd7232 glibc-langpack-hi-2.34-231.el9_7.10.x86_64.rpm 9508d1a2f582989eb3f5ca28db6c38ec8239df993d00ba76fb0e447456b96e22 glibc-common-2.34-231.el9_7.10.x86_64.rpm 9558f54abd5abf4da6a61216773152027bf2902dba9e012662140a96a6a111f9 glibc-langpack-raj-2.34-231.el9_7.10.x86_64.rpm 967c1e9aaf88e491d53f3422ad3038257d7a42a4edf4e040409d23d5aa69619f glibc-langpack-id-2.34-231.el9_7.10.x86_64.rpm 97c41302f8a0fcab1815a53d2d01c673b949e518a7e2ea4535067ecd7acc3911 glibc-langpack-fa-2.34-231.el9_7.10.x86_64.rpm 97c82970ec784c035f18947374902663af00d60a52878a1be1b63638dcec22dd glibc-langpack-uz-2.34-231.el9_7.10.x86_64.rpm 98c50a5898262c9be503593c7cbd426978506f8a497f5c2ad0ba45e15f320b59 glibc-langpack-pap-2.34-231.el9_7.10.x86_64.rpm 98ca005933b6006f883db2e3a707139106d7f080d46bb2af6731a191ae15a231 glibc-langpack-ug-2.34-231.el9_7.10.x86_64.rpm 98d1c05b8310caa7bddcecba315763e7b902ca45a18142f1adea9266a020b4c2 glibc-langpack-ro-2.34-231.el9_7.10.x86_64.rpm 997b4168175dab030b6b0f49bb71790cdea52d052faeacb6253a8284fa19b1fb glibc-langpack-mfe-2.34-231.el9_7.10.x86_64.rpm 9a1fc703b98573a949590e9bba5a681767e8d8d387ba59b9269d1dc8aa039a6c glibc-gconv-extra-2.34-231.el9_7.10.i686.rpm 9b7788c9dd4d52d920e46c661a1824353bf7ab853bbef117c4f7117702a0aed3 glibc-langpack-ko-2.34-231.el9_7.10.x86_64.rpm 9b930d019951eac3bf35c38cba6a0a7bca4e93165a2920b6b0971b6c1766303b glibc-langpack-mai-2.34-231.el9_7.10.x86_64.rpm 9d676586daf371e1f25d99821ac9c3f057aebf52e867bdbc3c0a2f5f73a810ab glibc-langpack-as-2.34-231.el9_7.10.x86_64.rpm 9ef58c8d924af6d09f6e5abc36dd256672afb033b3cbffa0dc35b1e87f4ebdda glibc-langpack-nhn-2.34-231.el9_7.10.x86_64.rpm a16818da2d78531acc91868740d99bba8c3960ef31963ea8e6bf1c99f8f5e0a1 glibc-langpack-ber-2.34-231.el9_7.10.x86_64.rpm a19f8e732056aa5243a3fa249a7a900a45d86caabe75d5a10353bc77d0bdb466 glibc-langpack-nr-2.34-231.el9_7.10.x86_64.rpm a1af4192aedda7d63bec7d9c1d8a8b2b07fdce7e66706bdd8f9f35c370c0b1aa glibc-langpack-lij-2.34-231.el9_7.10.x86_64.rpm a23e252327958bd067b0570c0b191f58a9629d8566bd1a411f423ccfda77c47f glibc-langpack-aa-2.34-231.el9_7.10.x86_64.rpm a243a61b4eee57e8fc6b0a58514bc15739571374f0bd7cacaaf49b7f7512cb91 glibc-langpack-br-2.34-231.el9_7.10.x86_64.rpm a620e2dd290154b39677a5a7564e9d2f34efc6097cfa6e88f403609fc5b8a911 glibc-langpack-ss-2.34-231.el9_7.10.x86_64.rpm a6c5ada02d8dd0caf84c741b5e358568d7ccb31751a68458e92b1513efe505ad glibc-langpack-ga-2.34-231.el9_7.10.x86_64.rpm a7f8efc303b0bed02f21686a277af76f4f42c885303253cd5edd92406d457aed glibc-langpack-pt-2.34-231.el9_7.10.x86_64.rpm a84e6443d83df078904ea9fe52c0bde5afb66b80568ea209587a641740891279 glibc-langpack-it-2.34-231.el9_7.10.x86_64.rpm a84f8c3b3fb85ba38e8c218761fba4210741f50db71c5c53d2d9be7d11e13c72 nscd-2.34-231.el9_7.10.x86_64.rpm ab9c0b721efd2e89574e3b73ada8a79d29b48d5517cca78983fef9b898386766 glibc-langpack-nl-2.34-231.el9_7.10.x86_64.rpm ace0fe9da2642284d804042f0378b2d65adfeaa2177bcdfa806cf5c25b5b5259 glibc-langpack-is-2.34-231.el9_7.10.x86_64.rpm adb65584613040c42f70e2c10de912234500bd23dc3076847641bc213fb08927 glibc-langpack-dv-2.34-231.el9_7.10.x86_64.rpm afe3ba2cbbd597da577ef0b66f437d86174b0dc90ccc6f3f0cca0979e64f0257 glibc-langpack-el-2.34-231.el9_7.10.x86_64.rpm b0cd2fcb4630274dc02a2446de0985a34b494f42d8152d17d610abf266ff15b8 glibc-langpack-sw-2.34-231.el9_7.10.x86_64.rpm b2125378755d5cf49c9bcc56ee1df1b77d709695f29089c5e720d57cd5f5e822 glibc-gconv-extra-2.34-231.el9_7.10.x86_64.rpm b29ad609540b769b48ec15be496a4d8bbea250e3da29934d6531f3118b43e29b glibc-langpack-pa-2.34-231.el9_7.10.x86_64.rpm b75c89dde82a1b7d61ae56d9cf3838cbb241d4f550222f384a10ed0c5935f2bb glibc-langpack-lzh-2.34-231.el9_7.10.x86_64.rpm b8020ef782400b7a6471e5e31492d339ab342a72695d443b7bd667c157a6a315 glibc-langpack-fi-2.34-231.el9_7.10.x86_64.rpm b955199585d270a8eb6df139af494a2b6996ca3aa9cd6812a810e7030e1fb715 glibc-langpack-szl-2.34-231.el9_7.10.x86_64.rpm b97ca8261cd83d608522b83b6884e484e75771a219fc1310201515fd01a57cac glibc-langpack-bhb-2.34-231.el9_7.10.x86_64.rpm b9e330cadf102b3e353ec1f25df578f3d660fa2ef11857475af144437b04717c glibc-langpack-sc-2.34-231.el9_7.10.x86_64.rpm baa6c7cb2ed826da5de181d4b69834f7128e2b7b07e75665b2acd1769d653b35 glibc-langpack-bho-2.34-231.el9_7.10.x86_64.rpm bce00120df9d670f152d746b0e90cd74a088663946a88c0e2f242756f3919970 glibc-langpack-vi-2.34-231.el9_7.10.x86_64.rpm bcf6ca68c1fda14544ee3e4407b466177597c03039dcef2433f613760a80ceec glibc-langpack-mg-2.34-231.el9_7.10.x86_64.rpm bd9f7bf5426b36e1b4ebfe43dc25380a0abdb37edc6e20e7da4889b3232209be glibc-langpack-byn-2.34-231.el9_7.10.x86_64.rpm c383cba6a2f04eaa589bc0b6178df49ceb2e1692b739917dff9e0f65494e9c6c glibc-langpack-wo-2.34-231.el9_7.10.x86_64.rpm c3f58f73f6f53844884beabf9e8deff95ed71705f956c56ebfe050788d2d9e40 glibc-langpack-bg-2.34-231.el9_7.10.x86_64.rpm c4a87ff00ee0063c4ea7b00edef78f76e5d8e669e264a1c20f119f8ae4dc6b67 glibc-langpack-uk-2.34-231.el9_7.10.x86_64.rpm c703133f0160a77ece1e1503b6d86b464171ad652e14dac7924705839b5200d8 glibc-langpack-zh-2.34-231.el9_7.10.x86_64.rpm c8671239352f89b211591f58ba5482f7fcfeb7907b3ad7ce8f13366b36b1d738 glibc-langpack-ru-2.34-231.el9_7.10.x86_64.rpm c88e71747f68b6beb9820361b5b571b3ecd82bb4b92ec8d729e50c854c25aeda glibc-langpack-mnw-2.34-231.el9_7.10.x86_64.rpm c9c071cae09e0f0eae6877e17f6ab36ff57d684ebd1fa2bc7561b69931fe8999 glibc-langpack-miq-2.34-231.el9_7.10.x86_64.rpm c9d8554300c852b19c15ab7b29343b22a6d4a064e5e92cc3b1507d719cb59e14 glibc-langpack-da-2.34-231.el9_7.10.x86_64.rpm ce23b7072b79b4c3180b120a287a808f76f62591cd5b65ceb75fa1e2c4cef312 glibc-langpack-tpi-2.34-231.el9_7.10.x86_64.rpm cf2ae2afd8e60650e129372a938821dee4e12e268f915c29557995545c3db492 glibc-langpack-sd-2.34-231.el9_7.10.x86_64.rpm cf5d28f116b64e8b42ee28a5c6e1e35a062a63ed71f9b86af49ef475673aff22 glibc-langpack-ca-2.34-231.el9_7.10.x86_64.rpm d1713db90fecece8e696b3cfd05f3bbbfdac45ad330c2b6bcbfbb8ffba48c062 glibc-langpack-tcy-2.34-231.el9_7.10.x86_64.rpm d1deb44bed1d8098104a449fc58a7c187e2aa91135f3b7bc3c44c720dc1f2654 glibc-langpack-ts-2.34-231.el9_7.10.x86_64.rpm d2b8da6e302fe7bb3ca303f8f0a3db147ff049f496844f173ee7d61f7d3f91ba glibc-langpack-ayc-2.34-231.el9_7.10.x86_64.rpm d55da71f287151a1cdd63b1a5e2606d57ac512ead5e2eb9aa910aa9c7c2bfcb3 glibc-langpack-ig-2.34-231.el9_7.10.x86_64.rpm d8390b740ae03cf1ab0fa519422d018a7133897f7d7045b00b7e07eff3f6a1a1 glibc-langpack-mr-2.34-231.el9_7.10.x86_64.rpm d97f2a747c2aa16ca01e9b0bc63d21db7d1fb345a3f0cddb899d7c9263846146 glibc-langpack-km-2.34-231.el9_7.10.x86_64.rpm dc3f0cce7f507f67372f2b59eb2fe355b77522b6c50c870a3c807659b20fc58e glibc-langpack-so-2.34-231.el9_7.10.x86_64.rpm ddd19cbc4d5063293ed40ff58c9853b116d9a47e409457b394d9b0baf65dee44 glibc-langpack-mag-2.34-231.el9_7.10.x86_64.rpm e0868e49050273af6f302bfa5f6eb2ab411e22a1aeef6253d67727cb8271dd14 libnsl-2.34-231.el9_7.10.x86_64.rpm e14210884b6919a794f75ca1c7416b6c759c9ce5547b727a1686a0748939253c glibc-langpack-brx-2.34-231.el9_7.10.x86_64.rpm e1a89d07bf20f553144ff91d849d8dbf91cde3c9e985a621b9622430bef0ad7b glibc-langpack-doi-2.34-231.el9_7.10.x86_64.rpm e1dee95b3da5b88154f784cd9497b23414bc3dfeffd20be454cfac30b4aab741 glibc-langpack-ha-2.34-231.el9_7.10.x86_64.rpm e2be742937103c991478b88a0c2badd1ed9e7f0178fe46471880ccd04fcbffdc glibc-langpack-agr-2.34-231.el9_7.10.x86_64.rpm e3056c40add9e7b02fb1bac3a4dd2ba25b5c4f133cdd679c1a0c21691d50dfb3 glibc-langpack-ja-2.34-231.el9_7.10.x86_64.rpm e40a422a60951c76c7149a1ff29ffb316b20a9102b6482318535c84eb7c92cbe glibc-langpack-am-2.34-231.el9_7.10.x86_64.rpm e4a816e9b3779f569f408e9cc820d1b1b07e99c2ddb2cdfb6cadf51a7cab57fd glibc-langpack-hak-2.34-231.el9_7.10.x86_64.rpm e67a179efc0a273ad64cc91fa42974a7df2591fd285554bca487e4cab850d447 glibc-langpack-cv-2.34-231.el9_7.10.x86_64.rpm e6c0d6a48151e6498ff4aa0d8472b0c5de3c87270324cefb24c0d3884a43f3e1 glibc-langpack-iu-2.34-231.el9_7.10.x86_64.rpm e7a1adb95ca3b73ec7f4034857f941d9e38497ce47c950545140f3353fb5a920 glibc-langpack-tl-2.34-231.el9_7.10.x86_64.rpm e86675aa15e7fc334537cbf896f17d9635d26d29d509076f88cba6788a7b4317 glibc-langpack-yue-2.34-231.el9_7.10.x86_64.rpm e9c3eec3c9e552c7523ef8768e82f8283c08a78dd232770b5f679958803df289 glibc-langpack-the-2.34-231.el9_7.10.x86_64.rpm ec96146e0ca6dc46074ecf303cd873936e6f9bf35bc01977eb2640d61aa1085f glibc-langpack-es-2.34-231.el9_7.10.x86_64.rpm f088c62aa421557735c3d37b5ff005782afb3dd9f84567d10b5ad4753dcf2761 glibc-langpack-sa-2.34-231.el9_7.10.x86_64.rpm f0a9b3a1a4354629cd1646bd99547cdcf5fd2a2627d60d4081da8aac40517302 glibc-langpack-cmn-2.34-231.el9_7.10.x86_64.rpm f1151a11a03fb32594d745c7add2b60722532a5aa72088d891546b47b7047456 glibc-langpack-ml-2.34-231.el9_7.10.x86_64.rpm f3b2b8338c0b8f5da32124b2570c2371895d9e41de9356eeda13cdec9b949cf6 glibc-langpack-bem-2.34-231.el9_7.10.x86_64.rpm f4d8f5b01df1318461205376ade04d7e441deb255fcc56b0462f8e94c427b7c5 glibc-langpack-ak-2.34-231.el9_7.10.x86_64.rpm f5526052db5893923f85dc23231059e103dbf4a185ce2436beaa5284c0b8044c glibc-langpack-et-2.34-231.el9_7.10.x86_64.rpm f93eff675dc1db42ad1e3116b2e19822cba65a4693199c98384ef955865d8706 glibc-langpack-lg-2.34-231.el9_7.10.x86_64.rpm f9cd103076097bb27416c45ebe13e110d0857113dfcaa90c4694496abb2fdc4d glibc-langpack-crh-2.34-231.el9_7.10.x86_64.rpm fcf371c30caa51c90957069d2184c205dc65848e4a8a5f05fa97d2b504e65a74 glibc-langpack-gd-2.34-231.el9_7.10.x86_64.rpm ff3cf3c4285b1f5b580f1376a5055e78f522b76d69dad025b72c22d7969d860e glibc-langpack-ckb-2.34-231.el9_7.10.x86_64.rpm ff8e664107ed49d690afef56b074eb475929c8b86c302605bde1a5d2ca0d78ad ALSA-2026:28158 Copyright 2026 AlmaLinux OS 0 1 Important

python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432) * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-urllib3-1.26.5-8.el9_8.noarch.rpm ff9c2c263a5590bfc92171e261ae56c5086ed3083c5f80374a43811bca8ba53a ALSA-2026:28209 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-filesystem-8.2.2637-26.el9_8.6.noarch.rpm 0e1c9d31cacdf2cd9465bbfcb0beb2814f2c5798eedab1ec5d2eab46a7bf0994 ALSA-2026:28253 Copyright 2026 AlmaLinux OS 0 1 Low

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libtasn1-4.16.0-10.el9_8.x86_64.rpm 79f36c8373d7b02a90ca9ca111ee68aed8eb0e9960651b8e42cca0b21b063af8 libtasn1-4.16.0-10.el9_8.i686.rpm c03552a559edfa4a9c4420d6dc7dc79e1821ea9d3aa9bd4db5562fbc7ded3811 ALSA-2026:28254 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libxml2-2.9.13-14.el9_8.1.x86_64.rpm 3250dde07e4b7c15b673c68030986f82d57b2594d13842b9c899c7c647044c7d libxml2-2.9.13-14.el9_8.1.x86_64.rpm 92721d3c54b045fec59d28d98a40b0c88d24d748c74f136f3f752e3a80f8ce92 libxml2-2.9.13-14.el9_8.1.i686.rpm d1e777c84b774046df7b3df0cac90e7f33401b320add11b584933cbc52e7e76b ALSA-2026:28255 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libpng-1.6.37-15.el9_8.2.i686.rpm 897e0e88bf76a826af48bf1d697af0643c35707073230e8819ad0d285e965a43 libpng-1.6.37-15.el9_8.2.x86_64.rpm b50c9af737a243e6a3c644ecb26f9f2c2a0d214385b0b06102858fea68ae760e ALSA-2026:28256 Copyright 2026 AlmaLinux OS 0 1 Moderate

opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): * openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default opencryptoki-icsftok-3.26.0-2.el9_8.2.x86_64.rpm 074b2739fe0cafd087d865370caf140bd9ab79ff72d1db4b363e48e55a998c0c opencryptoki-swtok-3.26.0-2.el9_8.2.x86_64.rpm 19d1f966c87dafc6468fabc252c1e0bb3ffcee69451a4ff20f135cad09d41762 opencryptoki-libs-3.26.0-2.el9_8.2.i686.rpm 8d41f5e08fbb7b155044e82ebc1392421394d66fb17da2bf22702af0b319a655 opencryptoki-libs-3.26.0-2.el9_8.2.x86_64.rpm 982d777e1596230e7a6702cce34b1352d5733f9885a23824241073e29e449688 opencryptoki-ccatok-3.26.0-2.el9_8.2.x86_64.rpm 9b06aea8567659a2bc822dd198351b6a86ba2816cc405f44f20ddcdcc0791d76 opencryptoki-3.26.0-2.el9_8.2.x86_64.rpm e7ded1dc407bea6dc249eedf835d90395058a0963a25f29ef581e562eceaff37 ALSA-2026:28911 Copyright 2026 AlmaLinux OS 0 1 Moderate

coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification (CVE-2025-5278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default coreutils-common-8.32-41.el9_8.x86_64.rpm 0d700cb46719fbbceb1355f60d45dfaa4b4c703def51bdc353127f0903facad9 coreutils-8.32-41.el9_8.x86_64.rpm 8a74ea8a1cbd1e9070bd52e420a5f5ebcdd563700cb8f71288ac51f2cf56a83a coreutils-single-8.32-41.el9_8.x86_64.rpm d56e2bec3e67abd158217dcf1d6ae71f4d325d58d0284cb71dd629d6aa4dcf74 ALSA-2026:3066 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129) * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-modules-5.14.0-611.35.1.el9_7.x86_64.rpm 0400f2b59a65cbfba66a5286d2e2fd60b32f2c3c59f12b9b411425ae9a0340fa kernel-debug-modules-5.14.0-611.35.1.el9_7.x86_64.rpm 13b0789f88731eac174409e4ec3ddeaf5c6538d1159db0d914914140db8484e0 kernel-5.14.0-611.35.1.el9_7.x86_64.rpm 1575849734b82f0e6f21378ef4cc8c27bc2f9feefd3b8ecbf27fc867dea5f3ee kernel-uki-virt-5.14.0-611.35.1.el9_7.x86_64.rpm 230a6cd35fa03edc79f7d7784ed73f526904e82b310df562d035ac402179882e kernel-debug-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm 25545fef0aeaf08f1dd33556fdd5d80e1a12608962daeba6be398fefb317e3bf kernel-core-5.14.0-611.35.1.el9_7.x86_64.rpm 562dc6be4f8b62f9340bd39bd48fbc98bc19dec63cd22373700ee07e772c7821 kernel-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm 631089241a7b4f9539f2619b6330c42694f029925db9d888e15b9505e897da50 kernel-debug-5.14.0-611.35.1.el9_7.x86_64.rpm 67ca13321f88b1d89780541705c3ee67fc0f41305c211b090508ff6b2cf7a0c0 kernel-tools-5.14.0-611.35.1.el9_7.x86_64.rpm 79b4716d1fae9ae037b5f3a6aa31618d5a2f31452262c2296c959cc9498b8a46 kernel-uki-virt-addons-5.14.0-611.35.1.el9_7.x86_64.rpm 99c787336a95ba5486f7ee2cc8f708fafb67008dae029681c6f0a01257c9b5a8 kernel-tools-libs-5.14.0-611.35.1.el9_7.x86_64.rpm ae5c7de5a24a9fc70cfd9956f6494de91c6468df0c1a7c4ba0c4f66ff642b97c kernel-debug-uki-virt-5.14.0-611.35.1.el9_7.x86_64.rpm d36cc0ccf6e84ca1c7592b94c4e776347fef446cb2e04fef7a61304d636317e5 kernel-debug-core-5.14.0-611.35.1.el9_7.x86_64.rpm d8b530f11a02cc9617fa16f26c2da1058f5e0865e38bb30b424d7d6131b52417 kernel-abi-stablelists-5.14.0-611.35.1.el9_7.noarch.rpm e2626b5620745be0455728651419e4ea1b3f4d9ef515f3226b5372a42800d2b3 kernel-debug-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm f8da61467ac495a748e608d673b49852e83a7a54bce106e0be60dce40cb31c95 kernel-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm fecc02f8ccdcaecb6104c26646a6ab70724d797602266d335e93938dcad43834 ALSA-2026:30848 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057) * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993) * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273) * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776) * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-core-5.14.0-687.19.1.el9_8.x86_64.rpm 07499fc1c11ae3bd923d4c06d8fae5f2f960677483d2cabbff996ab0280e2319 kernel-debug-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm 12b444dcce8b3374351d47bd13f132a519e31a03ed4a020444cb218c1d2c3cbd kernel-core-5.14.0-687.19.1.el9_8.x86_64.rpm 17b0c2f3167c3b813ba0dce93b09436d3b5c50a019b8348b1e8143aa1586b0dd kernel-modules-5.14.0-687.19.1.el9_8.x86_64.rpm 33ec8af03c89db75e5936e6fcb5fe5077921827507c0f9aeb1956024fb81f55c kernel-5.14.0-687.19.1.el9_8.x86_64.rpm 5b91e7a02357b092258bed27389ce83fa8392373163b028d93efac4e6450f459 kernel-debug-modules-5.14.0-687.19.1.el9_8.x86_64.rpm 5c505ec39210c359f303745ae53d2e3473ca96976d74ab8a744aafd8a81ed7bb kernel-debug-5.14.0-687.19.1.el9_8.x86_64.rpm 75f0b634f918653be7dead2b7705f269769c865830b5ef79810e16c7d0eb8a29 kernel-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm 7c6ae5bd2ad0d09fbe7c3d91cb9d2405e350ca929b133e9797039daaabe5a653 kernel-uki-virt-addons-5.14.0-687.19.1.el9_8.x86_64.rpm 7d8137b6fa0bbf6030d8173bb9d516917541905a22dd8f2937fbcbc4b5e67972 kernel-tools-libs-5.14.0-687.19.1.el9_8.x86_64.rpm 7e4a66c4a5f50ebea91fd5ae30f90654748e9441dcb7737e6ddde694e6f4c42e kernel-debug-uki-virt-5.14.0-687.19.1.el9_8.x86_64.rpm 845ab7d30844e02b7d6b6cd277dde6eb8c855e203d96b1f514bde31aefe8ec49 kernel-debug-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm 92e11a76ed207d3169e9cb572f778dbf60ec7ab379992418198dc19732ce411e kernel-uki-virt-5.14.0-687.19.1.el9_8.x86_64.rpm d01369a11dc5bf16bec63b251f8045da0861c21882306f321fddb902a156148f kernel-tools-5.14.0-687.19.1.el9_8.x86_64.rpm d2ea8ac838a63fb7765080a2154cecec2308be805fe12d2c0fd69af2085cc1c1 kernel-abi-stablelists-5.14.0-687.19.1.el9_8.noarch.rpm d52b3922c7cdc2dbfd575d9177dd8acc69dedb58570300c3697fcb5b82dcfbc2 kernel-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm f896475c299dd747ad82abde569601a3458346c01c76f55795c708f94fc9dd32 ALSA-2026:33226 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): * glibc: counter overflow in __wcsmbs_clone_conv if setlocale is called (JIRA:AlmaLinux-145156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glibc-langpack-da-2.34-272.el9_8.x86_64.rpm 0255ef770a08bd9e062516378b44af7cdadf08bd3d43bbadeb1eaa4ed3d83090 glibc-langpack-tn-2.34-272.el9_8.x86_64.rpm 025833c799a9eaec8fbfba7af96e836cf3769af3d72dfae9f3d73864f59f419c glibc-langpack-lij-2.34-272.el9_8.x86_64.rpm 03d17eaae589e2cae70f93c7d41367d03b259500d1a691d60361435688c8d390 glibc-langpack-ka-2.34-272.el9_8.x86_64.rpm 04fdada76ff131ee3865d6430ab9cb5fc64aacdbd64ee0ea55dc4e4cb655f6f0 glibc-langpack-uz-2.34-272.el9_8.x86_64.rpm 053cae0690879d81651ef855b775c8584be6253b51f07480bf8e0cd2e3b99fe1 glibc-langpack-mk-2.34-272.el9_8.x86_64.rpm 057ddb4befe1c9a3acd2fe78d304a6ce8780e299059d238e19cbbe7e47908905 glibc-langpack-yue-2.34-272.el9_8.x86_64.rpm 06f239524059b45691e6ac5aba93bea1304e4f203d517bcef1ce90391f152ec0 glibc-langpack-pap-2.34-272.el9_8.x86_64.rpm 07331eff753249eb19b5142797774046f1fba8983e777e2e6e91f321b4f87489 glibc-langpack-wo-2.34-272.el9_8.x86_64.rpm 07aac196de77583238ba0fa4ab8fb7d1b6eb191cd9349e968ab4385ab9fbcd2f glibc-langpack-iu-2.34-272.el9_8.x86_64.rpm 0acccebe16bef5e467409f6a00a2e67ff35c0b6cf6bf2517f9ab35f824422b4c glibc-langpack-ug-2.34-272.el9_8.x86_64.rpm 0cf7d7fc39e9b842d11f0d50a918cfd439e048350d7592d7786a0fb1cbd28dd3 glibc-langpack-pt-2.34-272.el9_8.x86_64.rpm 101b69a393c4ad75088ebdaae2f3a48341fe20a6b2a868ebe6b0949db33a8de6 glibc-langpack-sd-2.34-272.el9_8.x86_64.rpm 10b609386136ac297fec9fee7f3e70b061053768c03372a0fa53e28aa2f481e7 glibc-langpack-lt-2.34-272.el9_8.x86_64.rpm 118e9edc47f2c150c58b0ce9e6d9c42062744c5c127847f5c499a0e719b241f1 glibc-langpack-fil-2.34-272.el9_8.x86_64.rpm 12284b295564d4afc585f1d723061a2fc79f77d51165a51b818de55f8be12e5f glibc-langpack-li-2.34-272.el9_8.x86_64.rpm 13ed23b8583db4e31c18f2b762d33e8325ff3bd4bbb65d9f54531b126ec8a8f4 glibc-langpack-ro-2.34-272.el9_8.x86_64.rpm 14bd08904cc5e2af92df173668a11fd89b28ae2ac8d63d93314f6826ad6aa49a glibc-langpack-ik-2.34-272.el9_8.x86_64.rpm 15955839738cf460c51714908033fd7dc3bc81cd95e14d1c009ed7a5ef1b2fa0 glibc-langpack-sr-2.34-272.el9_8.x86_64.rpm 17a4b59709ef0511a1d18ed8a5fe943b5550765e79702422c602c008f4607628 glibc-langpack-sid-2.34-272.el9_8.x86_64.rpm 18a82f945ae4e69fdeae9fdb585717dba30bd2d20590fa6a50aab28c29e6fc7f glibc-langpack-sc-2.34-272.el9_8.x86_64.rpm 1904f120e0b672c70036bab1442e2a9ac5fe4e2e9db8ec614eca38c71da7598b glibc-langpack-shs-2.34-272.el9_8.x86_64.rpm 19927e68afa5e8dfb6a8532f0cfd33379ff8e2b22dc5cf14f73a7d9e4db8b0b4 glibc-langpack-ne-2.34-272.el9_8.x86_64.rpm 19cfd3887fee4b635474f5fd3f1c6a29a541d922e1099d1a430b46c689be89c7 glibc-langpack-ber-2.34-272.el9_8.x86_64.rpm 1a3e160b97f58d088330f24631d4d725d95b962510da30975d1ada5e406c38f6 glibc-gconv-extra-2.34-272.el9_8.x86_64.rpm 1c3d8d97ba1da4c93df14b2173a897264faa603d8c9999b470e2463e406c855f glibc-langpack-fy-2.34-272.el9_8.x86_64.rpm 1d362cc87bfdec9636fe25d5073a27576ac7f547a5058cf389aaea702fd83e96 glibc-langpack-dsb-2.34-272.el9_8.x86_64.rpm 1ecf8c65dc141e8d8cf0203a05fbc2ae74c8aca412be9710964cb9a372e3551a glibc-langpack-wal-2.34-272.el9_8.x86_64.rpm 1f13e742d89cb495521d4d8a6bbaf83e91f1ea41124fec929ef92e43ad8bb33c glibc-langpack-eo-2.34-272.el9_8.x86_64.rpm 220da955a36840f8769c0358e3d5f16c69084ad93c14c2bb4852548ff10288ee glibc-langpack-he-2.34-272.el9_8.x86_64.rpm 2435a2be275d3dd632b8b2bc381ee02707817806fe35070fb7eccfd665006975 glibc-langpack-wae-2.34-272.el9_8.x86_64.rpm 2619c994418ee6b18e934c5aa13cbd2c80a312d39a1c008e7775dcdf846793df glibc-langpack-bn-2.34-272.el9_8.x86_64.rpm 2a6bb424a5dd43d2891c5166a9fa7d1755439118eddc7f90b1396ac5ea64ddcd glibc-langpack-bem-2.34-272.el9_8.x86_64.rpm 2d04fc0e9b09adce560b2b7b954033db24496a1977f1e1927b53cf7f469b89ce glibc-langpack-ast-2.34-272.el9_8.x86_64.rpm 2d8f9b051fe21342abc71af934c7ac531191fb550cb00e5ebba3c50ad158ac63 glibc-langpack-tpi-2.34-272.el9_8.x86_64.rpm 319426696500c29bae0324326522b9bd03c22295565c5e5148aa5ec7fbc9de0a glibc-langpack-br-2.34-272.el9_8.x86_64.rpm 31f709cd85f72fff3373b60fa276612a42e0620cb72015cfc46acd2f93a7a4bd glibc-langpack-kk-2.34-272.el9_8.x86_64.rpm 3521ea9ae06b192c41129147d1522df425b0b3e06110803c2e509ea8cffb1ce7 glibc-langpack-gv-2.34-272.el9_8.x86_64.rpm 35ae9ee3ca6d5889f0aa4b444e8300986b673ace005fe89fd0275c678cf37beb glibc-2.34-272.el9_8.x86_64.rpm 36484bb9e30ef0feaa06b4b1bd09cdabd98b0d99eb3adfed788d7f9cca4800f4 glibc-langpack-ve-2.34-272.el9_8.x86_64.rpm 36e00ed5573ccaaee8146ff3f09f0d57556b87a3e78a4d796c9527915b11f547 glibc-langpack-ky-2.34-272.el9_8.x86_64.rpm 382ee0d4ce9042a9e84853697e9f70c4bc23ca152e1c3843b15bdb914f630c4f glibc-langpack-th-2.34-272.el9_8.x86_64.rpm 39e5d8d8d5dfca57bc9933a0be70e7109ddc0b306b8e609bb1bdad389c31b433 glibc-langpack-mi-2.34-272.el9_8.x86_64.rpm 3ac27288fe2fa9f98252517c71c414caa20c67d6a1a3b3617f3d70d6d73721e4 glibc-langpack-hy-2.34-272.el9_8.x86_64.rpm 3acd9572290f90da8aa8fca0312453059ceafb24979e4c52cca9b0a87fde3901 glibc-langpack-ln-2.34-272.el9_8.x86_64.rpm 3de0244e487687972e0e36e0035cb8f19ed4fc196a60d7598fc379de509464c5 nscd-2.34-272.el9_8.x86_64.rpm 4391039c375c06e1a00f17b778091ce8690d53baa3c8f4d3a6a8bde2007f9010 libnsl-2.34-272.el9_8.i686.rpm 4470cab79f156891864e23272d868d42243d61c91ccd2d11b1eef14f214a1600 glibc-langpack-vi-2.34-272.el9_8.x86_64.rpm 463b90bdd382f094a6185f6878d05501682bae75ca0cdf175c4c9ae25408b427 glibc-langpack-ckb-2.34-272.el9_8.x86_64.rpm 46f66d570fc52db230a2c2f57f9fa2563140fe073d43511c7a77e9a6e0d6f8a2 glibc-langpack-es-2.34-272.el9_8.x86_64.rpm 486d3e57770b3c649b5abf45d3cc738fa067036c0c3e95dc9e2397f01f951ea8 glibc-langpack-to-2.34-272.el9_8.x86_64.rpm 49c7f838c6742045d0375712e41e11ff2d803c428ab5729805400c73e203ce6a glibc-langpack-bi-2.34-272.el9_8.x86_64.rpm 4a355ca6551b5045059ff29ff7658ee692aa7e5d071e9eef785a43488b75708d glibc-langpack-sk-2.34-272.el9_8.x86_64.rpm 4d2e15430a4d4d107f1218c55744317e98360e110a63d3dd56ba9c6c31b60051 glibc-langpack-so-2.34-272.el9_8.x86_64.rpm 50a71685401e869d859e790da5f7a2c4d0bda02960249a474e6e6320bbc457a4 glibc-langpack-ca-2.34-272.el9_8.x86_64.rpm 5520a93f03d00fe67c57aed9c2cd8142b17174bcae1be339fcfcec52f9cf4b92 glibc-langpack-os-2.34-272.el9_8.x86_64.rpm 55968a9833ab5106e5a8076069f070f925bbbcc8904d4879b4f4d3f36cf908db glibc-langpack-ak-2.34-272.el9_8.x86_64.rpm 5605af512b22ad097319dc5905ed9ee5db183e00633db44ffe8c741b58916ad8 glibc-langpack-lv-2.34-272.el9_8.x86_64.rpm 572af73f03c0772d1c7aaeb73558e04c81720265112b75c5bf293e32f4bffa69 glibc-langpack-ml-2.34-272.el9_8.x86_64.rpm 57fa7ac54569266df0466b5415517dcce39681c957c35994ad7f05aebd3e252c glibc-langpack-be-2.34-272.el9_8.x86_64.rpm 5836fff4c2702e4f5e71b30c20ba15b842dad3962bff7d5376d5de006a5a9a13 glibc-langpack-zh-2.34-272.el9_8.x86_64.rpm 5869724f18670b863ede2501a36e1bc705616f2c114a8e0a329a8a8ec5f6364b glibc-langpack-fi-2.34-272.el9_8.x86_64.rpm 5b0b6f8f704fbcf2af2bfdcccb68588b84be903f42077f0a15660049947d7d95 glibc-langpack-se-2.34-272.el9_8.x86_64.rpm 5b7be8bffcd6f7f99859dd01a7e8c6dbd93c66b475c70e1adc9dcdd882781062 glibc-langpack-fa-2.34-272.el9_8.x86_64.rpm 5d03f23c0df2d7d03ceb4a24f623b8f9ca0ba2da62e5ccd11c8a8440766d9359 glibc-langpack-cs-2.34-272.el9_8.x86_64.rpm 5e73bd02e9d1364bffa1aec2f8e250e83e3eec0c6e2a6e5f30774bf59d3f1dbb glibc-langpack-km-2.34-272.el9_8.x86_64.rpm 5edcc0e383598c7ec8976d5b983d7e29cbbf1e0223e45ec40b5e55340d4138c1 glibc-langpack-shn-2.34-272.el9_8.x86_64.rpm 5f24e3cba69a01c19df68d0810057947ea46bda7d53619d4522e9fdd5300dd79 glibc-langpack-ff-2.34-272.el9_8.x86_64.rpm 5f493d8b598b989f44eb669480e83db28ae22db24e9fb23e330998020853fcc9 glibc-langpack-ja-2.34-272.el9_8.x86_64.rpm 5f7fb6c94ad9b7917fe8a893ba6db44f396198bd1e60157361f971e7f92269e3 glibc-langpack-raj-2.34-272.el9_8.x86_64.rpm 633b7ed49bc6f0fcd85f204e6957e83badc37dccad4595ea08f00a5b0542b342 glibc-langpack-el-2.34-272.el9_8.x86_64.rpm 6350713997f81ae51ef55367c56185eaa6599d19413c3dcd7927ef35f522be40 glibc-langpack-mg-2.34-272.el9_8.x86_64.rpm 6452d0aad138dbde25f52da8ccd848611888cbae346a86500a78e34213436156 glibc-langpack-gu-2.34-272.el9_8.x86_64.rpm 64bc2658c03b0b63583a23ddb9b85ce5f2f2c386fbc59c9514313d9462aa1d9d glibc-langpack-kab-2.34-272.el9_8.x86_64.rpm 65cfb671f5991b45f1976d47f8e4d7a001b574fc9a87160f4c500100d6ca57c4 glibc-common-2.34-272.el9_8.x86_64.rpm 65f5e8c0361ef4b4fa574cb23872409883c66e0f58919c409c8fd2ed423f8a70 glibc-langpack-mag-2.34-272.el9_8.x86_64.rpm 664b4183b617bb13c388689814316d20f4ab9436b33253321174ccd611a9f8b2 glibc-langpack-tg-2.34-272.el9_8.x86_64.rpm 6763e9fffc74628a44029e8d72d5e7e3e1fdeee7208e2cbd37595be5c1a498c7 glibc-langpack-sv-2.34-272.el9_8.x86_64.rpm 695af3911841726ba84388edd7153697a513541740733d218cd01916c1d71dba glibc-langpack-sah-2.34-272.el9_8.x86_64.rpm 69b2fe11478a055f9e325f4493035756ccb206cee139cd6ce6e2eee2bfc72215 glibc-langpack-mhr-2.34-272.el9_8.x86_64.rpm 6bfa5b84a667f7e519d181d0b331ba3c1a9eccad009a73d1d060f8550d5c9080 glibc-langpack-crh-2.34-272.el9_8.x86_64.rpm 6c053299072ebb1d41a0046072127109af597db4c2fcc72534178df0ccb95298 glibc-langpack-ko-2.34-272.el9_8.x86_64.rpm 6c7b857b42728bbc4756e4398a384cacc04d8a906ed85d032fc7e9acf5f0f23f glibc-langpack-szl-2.34-272.el9_8.x86_64.rpm 6c7c7250905b7bfc47177e90acd51c064dd435a9ffa67fef3052b310eb07e069 glibc-langpack-tig-2.34-272.el9_8.x86_64.rpm 6d9b9bef3b845d2f4c927c0654e30b8f154419add5ae6937d8c5051d8c841d7b glibc-langpack-de-2.34-272.el9_8.x86_64.rpm 6dd0a6e18e3ea2d2e67afbb0a131d2d5824425499594c7fa508a385c9c5e3836 glibc-langpack-as-2.34-272.el9_8.x86_64.rpm 70939280b1d5d32a3d13e7c9cd3fcf7d1c956aa06f04dbd121c87d488881ced0 glibc-langpack-bo-2.34-272.el9_8.x86_64.rpm 72fc8f586e5ecf9f6264c5578c7646da18eb37932223a2e1a2e0d44355b1b8c8 glibc-langpack-ar-2.34-272.el9_8.x86_64.rpm 73ddd5ee45b38f5ede0dabe3afe288561bcbc8a87f1778d4aaa7ee9c1addee21 glibc-langpack-ur-2.34-272.el9_8.x86_64.rpm 74598325cba7c13b686284a058536ecc3e73e01692fca19e3cb66004698674ac glibc-langpack-kok-2.34-272.el9_8.x86_64.rpm 74a2d8a8ec464fc84ee19c8bf26ecc7dc05a48a8f6d5a30f7a5dbe5102b71c6b glibc-langpack-ta-2.34-272.el9_8.x86_64.rpm 74c497cbf1c154d8719d551597fa9bd9a90b5274fe40b65af87d0ebb4d6f1a33 glibc-langpack-id-2.34-272.el9_8.x86_64.rpm 764713dba3f53f04a5fe5f1bce88a54b430d1f4ef511fc73d0c95efa43004dde glibc-langpack-mr-2.34-272.el9_8.x86_64.rpm 77401683db93db8ab2aeb984c8cc118da787c5328ba0ce079ef8fc862ba76941 glibc-langpack-si-2.34-272.el9_8.x86_64.rpm 77546843bb131bc04869d997d9b476140550a68d9cdd2f4a5f37f0057ebf789f glibc-langpack-ks-2.34-272.el9_8.x86_64.rpm 78d626d9500a124e670c6b3c1c65d60a8b7d17123be249aede584d7393eecf5d glibc-langpack-en-2.34-272.el9_8.x86_64.rpm 7a99885d97c94f337f4d9b9b4782fa645b28af7b3b5f2257e04b5f527cfa7af2 glibc-langpack-is-2.34-272.el9_8.x86_64.rpm 7acee719f364ec8ef87b09434f0b8e785e6b894ddaf3688f8d5b2d621fcefd09 glibc-langpack-it-2.34-272.el9_8.x86_64.rpm 7b03f3d7325e16da71c69e7ae765e061b3a42d5e6913e16bd2d42e58c7ac5aaf glibc-langpack-my-2.34-272.el9_8.x86_64.rpm 7bff5a5d88a95f755b842401705f9a5d37a0b05a6059df32a9af5fbf72d3673a glibc-langpack-ts-2.34-272.el9_8.x86_64.rpm 7ec9eeed018475218760d8d0d588f092665ee71c85563f38201d3f7d197bbb42 glibc-langpack-mn-2.34-272.el9_8.x86_64.rpm 7f616e6b609509c7c52f9b5d5916887b4e770ee49cb26e8e96042c4df6aab58c glibc-langpack-doi-2.34-272.el9_8.x86_64.rpm 8056c42f37cae61aefec7abcfd541d039e3492c41d6935ae66ed3969a8d45635 glibc-langpack-gez-2.34-272.el9_8.x86_64.rpm 82361b25813bdfd8dd7de42dc27bb8e0a8e7ad2d627d9035b14e57aeb9f2797f glibc-langpack-byn-2.34-272.el9_8.x86_64.rpm 83e323502c46459b0b8d24766c2effa070bcb08fae4d702e73d4bfe1336013a9 glibc-langpack-sq-2.34-272.el9_8.x86_64.rpm 83fe9f65b3e1e8c1cceb8783ef9d6502457858794cc1e616d31df77cc7c8e96c glibc-langpack-kl-2.34-272.el9_8.x86_64.rpm 84a4ac60e160598c3cfff3402f590456425222ac80ffc14dca5e94c29e78f074 glibc-langpack-et-2.34-272.el9_8.x86_64.rpm 84c2c01d212aff47aaf36d778776dc59262373a7069b23ccfa8e87873df9e9dd glibc-langpack-ms-2.34-272.el9_8.x86_64.rpm 8712cf373947a4611672b8a75610676f22064e9dc44fdf966e885d993be147aa glibc-langpack-nso-2.34-272.el9_8.x86_64.rpm 87445eaca0b769f4941b5a6a0cb7aab38b6995f0b4aa59e15ed09eeb9b2ca18d glibc-langpack-tr-2.34-272.el9_8.x86_64.rpm 8747d98a26b984d3a16bf8b7effea6caf6980aee95c0899716489e150331da55 glibc-langpack-the-2.34-272.el9_8.x86_64.rpm 88a5999ff0fd65941e7e7cd4b4b93b98917a73caccbe09ff8b9d29a33457f7a4 glibc-langpack-nds-2.34-272.el9_8.x86_64.rpm 89e0abdf9132981b14b073a2c5ca77623412210e6510475e9cea90a407df0731 glibc-langpack-mt-2.34-272.el9_8.x86_64.rpm 8a48eea6f63726b08fe1a1bdcc02d3edba1704cbef6aa285d3e6121c18868051 glibc-langpack-unm-2.34-272.el9_8.x86_64.rpm 8b90cb82d0a816262c9c9de833afa6a9308c80b1630d75140536a438fcb97c51 glibc-langpack-hr-2.34-272.el9_8.x86_64.rpm 8c2684228749e3a6433e0a05acb881b036abee5438aba2784be60eaf19df3730 glibc-langpack-bg-2.34-272.el9_8.x86_64.rpm 907d1d86493425baf58645387f0165d4e51bcaffbed2a72f664c24c27223c0f2 glibc-langpack-or-2.34-272.el9_8.x86_64.rpm 9207281a94e7600bfa197937b443fc77554dd22bafa5d50db82452c427297df2 glibc-langpack-ig-2.34-272.el9_8.x86_64.rpm 9429782e748fba1ef9027f9205d6d4b3d731aba7fe6ec7d755b8215e3077ddf8 glibc-langpack-nan-2.34-272.el9_8.x86_64.rpm 98a38fbf2566471a0e35eebba2374975242a4d0bae2cd709ff1c3a8d2b442a42 glibc-langpack-agr-2.34-272.el9_8.x86_64.rpm 999f8156267eefa0d6b4376a0760d9ff40b98746eb4a06a6792f037b966cca25 glibc-langpack-xh-2.34-272.el9_8.x86_64.rpm 9aca2e5f4673c0e7256c59d4e289212f9dfd9224e4932a6ccc8ab9694574d3d5 glibc-langpack-te-2.34-272.el9_8.x86_64.rpm 9ae7f746832925ddf3695267df75c3ab3dbb561e0a94f49aa44b3e481e50dd31 glibc-langpack-hif-2.34-272.el9_8.x86_64.rpm 9b25fff6c35cd614e0707b6a6067b4dac6641cddc356e88493696d4c6110d7d1 glibc-all-langpacks-2.34-272.el9_8.x86_64.rpm 9e11d276c6e6ac88781a6346f607a63ba8617bfc4c8cf1efdf77d759f4c2e707 glibc-langpack-ku-2.34-272.el9_8.x86_64.rpm 9fe0d80400bba761271e8df958aef40201233d315fcd763c9ade77cc26703f87 glibc-langpack-nhn-2.34-272.el9_8.x86_64.rpm a08265a18cfc1eb18cab1cd41057e94a1f31f3fa63f7a769f2f464c422bf0e32 glibc-langpack-nr-2.34-272.el9_8.x86_64.rpm a0a1793909ac51ee666fd23488a7cab8910e3750996083411321f12b4e2ffe54 glibc-langpack-ht-2.34-272.el9_8.x86_64.rpm a0b0d7b8247e701acee1ab6884bd428ad464a18499dc62a7baf4bf2074bbca46 glibc-langpack-ps-2.34-272.el9_8.x86_64.rpm a1c6d122158ab9eed653db7d3d47a2183e10451f053b92a2ebe101c1238e6c72 glibc-langpack-bhb-2.34-272.el9_8.x86_64.rpm a3b0fc62e530634b6aac3c9b141f5dba3641b8af040aed336183dd034122908c glibc-gconv-extra-2.34-272.el9_8.i686.rpm a55dea4830fc648b9406c80a28ace4e300896e737096a488d2bf54a293f05c49 glibc-langpack-bs-2.34-272.el9_8.x86_64.rpm a5ee42c0fc0d48b558a8d98b0a0c33be126c00df45706490be409efbd321ca82 glibc-2.34-272.el9_8.i686.rpm a9e7f44c9630f793ebb333e9ec140f70c7788e95423cfb62fb98ce59356621ce glibc-langpack-yi-2.34-272.el9_8.x86_64.rpm ab5b4b42bbf842518cc04cda008df56c802390f877327e05d4c83f676cba3f40 glibc-langpack-az-2.34-272.el9_8.x86_64.rpm ab726de9e1bc64076090bf47d36484edf06e31d20dad879113fec487eb7e4f90 glibc-langpack-yo-2.34-272.el9_8.x86_64.rpm ab810d6319eb239ea5945f2944aa34169f4b87e0f4b9ef4a9ba0f5e9f43d3a4a glibc-langpack-lo-2.34-272.el9_8.x86_64.rpm acb27eadd837bf711a673247c8b1d68d2bbc242bd58ae283cd64a099cb442dff glibc-langpack-ga-2.34-272.el9_8.x86_64.rpm ad136d5c1a1fffb7a952b84d44e85930f7045d00691a771b3eac8160b31af069 glibc-langpack-cmn-2.34-272.el9_8.x86_64.rpm ada66d77295969e9194b403e751ea40dd104ff9f84c38e86b6f7b3332507a7fb libnsl-2.34-272.el9_8.x86_64.rpm adcfda1119f844ba5f324f500c47082b5ad435e41d17714262aa2355706d61e0 glibc-langpack-om-2.34-272.el9_8.x86_64.rpm b08f4ff913b4537e7a6c528ac69bb2a6d9395058ec9027e069e212c3f16880f1 glibc-langpack-fur-2.34-272.el9_8.x86_64.rpm b0f563a0530f107ac04c9c5bec6ead1ac6a7a2a4e61661a9909c2ce2ed8ae7a6 glibc-langpack-mai-2.34-272.el9_8.x86_64.rpm b11b13b1f9b76f9a4aa7675d96d9c6979b2c13f146519b9a77f75f5947fef5d6 glibc-langpack-ru-2.34-272.el9_8.x86_64.rpm b2f328e15000e9bfdd6129d8eee907cfd71374556153f4b0999ba0b5bad8bf9c glibc-langpack-tk-2.34-272.el9_8.x86_64.rpm b395838648f8c9524a2fefee24080b36e5b963d47040332d27430f0ccbd9579a glibc-langpack-ha-2.34-272.el9_8.x86_64.rpm b694a64146d770e1d46f49572e0ffb1f5ee38ed566e1e8fc34e696cba2358f6b glibc-langpack-wa-2.34-272.el9_8.x86_64.rpm b87643520aa61919c8130181bcaba4a0f11edfa34651a9ca917633660a58c36e glibc-langpack-lzh-2.34-272.el9_8.x86_64.rpm b963f06299f018785c58f480da54110e74606122c9ced3f3e8a0d6229b7503c7 glibc-langpack-oc-2.34-272.el9_8.x86_64.rpm baeaf3abddf9dff52f05d9f15a63052f9143219fb221dabcd2ec8ce40d54f888 glibc-langpack-quz-2.34-272.el9_8.x86_64.rpm bc37c580c6285cc65b5bb9efdf8f3e15d0c38414edea7047f43da7b01d8ce213 glibc-langpack-ce-2.34-272.el9_8.x86_64.rpm bddaf5b22a3ee5c9844ccfdcbe22f98155972008ae703d9aab086004bff1522d glibc-langpack-an-2.34-272.el9_8.x86_64.rpm c0c7cfbff3926b7d7f58174a6ec39da456e3dd159abbbb5b98f50959c11ded81 glibc-langpack-hu-2.34-272.el9_8.x86_64.rpm c10e2aa15d2ea8cb86776e29a276d2b8dc735041d8d6199e34c12d57ec78771b glibc-langpack-ss-2.34-272.el9_8.x86_64.rpm c3ba5969832e2a3d8f9826f9c204b02518fdd5fa3eec82f761e4ba39675e8c45 glibc-langpack-kw-2.34-272.el9_8.x86_64.rpm c5fbbe8ae2e7dba85da04ab32f3570092d9d9538fe5a2920661c3c22df0846e9 glibc-langpack-dz-2.34-272.el9_8.x86_64.rpm c7edcd08794df46d11b03953c17558b5416aed4df1647e202fe6554b9ad41368 glibc-langpack-lg-2.34-272.el9_8.x86_64.rpm c902878387ffa19d34511104ea157e76037997fe6de30b7cee16ed8de5299c8c glibc-langpack-mni-2.34-272.el9_8.x86_64.rpm cbc7e45750607511e6c0393b7f0b081bf565402307186aeb59bfc5d63b78b9c1 glibc-langpack-mjw-2.34-272.el9_8.x86_64.rpm cc016f38f9d0c7b6a217a825c7bcc4979de1a1a7f37c8959010c2530560b5ee8 glibc-langpack-tt-2.34-272.el9_8.x86_64.rpm cd9c786e69ffcaa7a3b8a838f27a0d69ca9f630402ac6ca6c6092503389a1927 glibc-langpack-hi-2.34-272.el9_8.x86_64.rpm cdd57fa48af9edf7bf700ff12b0ef272dcbffabb4383cc7f4acf03e33d3bda2a glibc-langpack-uk-2.34-272.el9_8.x86_64.rpm ce1ac845c01b9509a689ec1a522dfa192b97b4136f11f84281af6b82a026b9e7 glibc-langpack-af-2.34-272.el9_8.x86_64.rpm ce507157d001b825138a5bd24701100ee7c5eb2f888513869d1c44b83a07b636 glibc-langpack-tl-2.34-272.el9_8.x86_64.rpm cf7cc4a1320fa804ae7e8b4269612708b7d50b18d82f1f602df3050688f66c69 glibc-langpack-csb-2.34-272.el9_8.x86_64.rpm d04a46b470f5896720f79ff02f8995287b34db8adb354172686e6fe831823060 glibc-langpack-sgs-2.34-272.el9_8.x86_64.rpm d1a31be9e84c5ebf2a056a9eb8ce4d8f69a70186010050e4075cf2cfbbff1e55 glibc-langpack-miq-2.34-272.el9_8.x86_64.rpm d23dd639420f7f20973678644facc00744c7b343c12687852a201596fed953fd glibc-langpack-nn-2.34-272.el9_8.x86_64.rpm d31c6cffb3a904680e3b0a0ad6d4639fb31dd0fefb3a8f370cb56e6ba4600ebc glibc-langpack-cy-2.34-272.el9_8.x86_64.rpm d3d5a7072a985af275aeb54c8172d09c6f78b14279dbe145c7059541dd79c7fb glibc-langpack-dv-2.34-272.el9_8.x86_64.rpm d5610cbd96b1861c018e37618a324edc1d7c1576e1f346567380e8455f96a813 glibc-langpack-ti-2.34-272.el9_8.x86_64.rpm d5d44a035bc405c94ce6e7bd2249e9e87a1b58cab7604477a03ce4f2f32a5f2a glibc-langpack-rw-2.34-272.el9_8.x86_64.rpm d77eb298c0f3d446baec10f7938403d9a0b06c55ca43ce3e9d4bb93f51ece3eb glibc-langpack-ayc-2.34-272.el9_8.x86_64.rpm d7b7932018f252ecb700f88f4a01e817addde4fbed409d14409ca04e50a729f2 glibc-langpack-gd-2.34-272.el9_8.x86_64.rpm d91e51618994065d0d7f3248c5f958bc48b5df33bdc20e1543ee7f1ce2670647 glibc-langpack-gl-2.34-272.el9_8.x86_64.rpm dc3688fdda490ec0858b7146178687f0b6698ddbff392675b71a69797b1deb20 glibc-langpack-mnw-2.34-272.el9_8.x86_64.rpm de85b28df9acc9f3cf96b42b211866801c48771a3105608c7e07c2ddf4f56c05 glibc-langpack-fr-2.34-272.el9_8.x86_64.rpm de9413c1a9b6ebe2ec182829e2571fedd1a7ee6890978aef5b65a05507eda128 glibc-langpack-brx-2.34-272.el9_8.x86_64.rpm dfed3c80090e18d416158a94d09130b70bdb3c3d937857737eb323c39538981d glibc-langpack-chr-2.34-272.el9_8.x86_64.rpm e1516ac461bd0f44054069078ce4d9d1587385763f37fd0e55896de9019b079b glibc-langpack-bho-2.34-272.el9_8.x86_64.rpm e1e57c5df476dcd4371446f0b68d8a6d3802dfe7ba8cd0104305f29428c18034 glibc-langpack-st-2.34-272.el9_8.x86_64.rpm e1eefaa815eff648fdf62cdb73be3c8f8ad685ff3f27034671051d86cbe4c075 glibc-langpack-nb-2.34-272.el9_8.x86_64.rpm e20b5d722ab366bd80ba3ce6a78ae8b5739569dda1d24d67612173e3bdaaa039 glibc-langpack-cv-2.34-272.el9_8.x86_64.rpm e63a378eeb810646db1c797d45fe7140bb857637c7d7a80fdf7eaf5ee9e8f976 glibc-langpack-zu-2.34-272.el9_8.x86_64.rpm e63a8c8a83352bc726129f0346a1bb5238d6631a55bac3c1867d251edc791f29 glibc-langpack-tcy-2.34-272.el9_8.x86_64.rpm e689c9f588833bf3f2fd27e95560df8f554be0ffee45483e5a4744c858035d31 glibc-langpack-hak-2.34-272.el9_8.x86_64.rpm e746d9c4065f71aa0073fc392a3c237c4b515bbbbad0a394dcd171f3fd2bed37 glibc-langpack-fo-2.34-272.el9_8.x86_64.rpm e75db3a8713305812455d3efc2d4483a82df294decde9c6296c97e41da3fabbc glibc-langpack-anp-2.34-272.el9_8.x86_64.rpm e7a5fbd27940dc0fbfe0321d8ae3e41c0cb5de766df046eaa95e97facdde72e5 glibc-langpack-kn-2.34-272.el9_8.x86_64.rpm e844cfc99c763b804f4d13accd31f964a6ca76d214a0f9be458e0857e7503a42 glibc-langpack-sa-2.34-272.el9_8.x86_64.rpm e9a238573a8c94c393593a99d3e7d14cfa30807997264d5fea21828130c503a2 glibc-langpack-ia-2.34-272.el9_8.x86_64.rpm e9cfe7d052a840858ac597aad85652860ba9b225a2ab89f24d4f1e303f6b7ac3 glibc-langpack-eu-2.34-272.el9_8.x86_64.rpm ead93955c8c7cbc779f53b146e0ebeb00791609198516aa3e6696c7f286147af glibc-langpack-mfe-2.34-272.el9_8.x86_64.rpm ecd3a0391e4ee342cab60d416cd012dabf5fe6aaa66672a9c1bac6a7f944fe5e glibc-langpack-pl-2.34-272.el9_8.x86_64.rpm efcc1412c15e1e468ec8367b5ff7bc813f7e58bd79eb25357deaf326b2d85b36 glibc-langpack-sl-2.34-272.el9_8.x86_64.rpm f1cc6baca2311a79f7da8f14659415a927809bb9cd26e0bd3fa2d4ee241f81ae glibc-langpack-yuw-2.34-272.el9_8.x86_64.rpm f1e01f8b1a745bc5f3189ed37a20f72d2084575399ce86a7725157b1b3e1adde glibc-langpack-niu-2.34-272.el9_8.x86_64.rpm f2207a01df42d0f3d1c1b99e66ddf447c16c10ec87aebfa6febf929e3cb64ce4 glibc-langpack-nl-2.34-272.el9_8.x86_64.rpm f4198e81d7f61e7da72bc6c0aec6b2268c70e545b2aed3dbb3bcb8d3b6bcb1c6 glibc-langpack-am-2.34-272.el9_8.x86_64.rpm f44039d56d799401646f1ca7cb187a172c698d930eaf5d29064e0b3594384d0d glibc-langpack-aa-2.34-272.el9_8.x86_64.rpm f6674755ece69e9dd9afd589a33e2c0938f2a98f9462dac09607c970928e8e68 glibc-langpack-lb-2.34-272.el9_8.x86_64.rpm f6c1c4c1a5376de8aa8aeffb2c5120ad580cba32f1d29ae4ca88fb28debfa05c glibc-langpack-hsb-2.34-272.el9_8.x86_64.rpm f8b7ebe260e16b03deb82df9b3a350b0a723a114f77d196b6bc8bbe6031c8b85 glibc-langpack-sw-2.34-272.el9_8.x86_64.rpm fa193c731308f3cc1fde7e7f51eb40aca6ca6284ecc5f29d3cc5e48b48cc9a9f glibc-langpack-sm-2.34-272.el9_8.x86_64.rpm fa33323d0a468f27d520c3d71ebdcd126006a97da2292b48dc5d84433e7163d4 glibc-minimal-langpack-2.34-272.el9_8.x86_64.rpm fa91c455ace3a70ec84d6e37477da897928f762cafd88bb0a9ee014847bbbd81 glibc-langpack-sat-2.34-272.el9_8.x86_64.rpm fb03e77c241afa78ae8eb6538f5ad93ac77e8189cc56944fb46d6b72d0be2621 glibc-langpack-hne-2.34-272.el9_8.x86_64.rpm fbd9e2a693c76f0ca9694a65220fa1a10c07806530f964bc793b128a8bcd6149 glibc-langpack-pa-2.34-272.el9_8.x86_64.rpm feb3e023b09c95c0e19ca8c85835b60cb31d114e28f26e221bd3844f493ad53a ALSA-2026:33285 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886) * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540) * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm 05013c048b256e046e034e5547aaea93ffa5592bdaeb463851d071268c654fe7 kernel-debug-5.14.0-687.20.1.el9_8.x86_64.rpm 093a8be68ff63b1fc722a06a6f2501f3b15a58fce6e3a87b152dbc6ea3bfb73e kernel-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm 1af1461eaa01f0095900e0492431978aa910c0dbded00dcb4e11dc20f7e2a405 kernel-core-5.14.0-687.20.1.el9_8.x86_64.rpm 1ed7b34c4fa0be48720284a00b11a2c4482527c43b73c99725554e0d270759ed kernel-tools-libs-5.14.0-687.20.1.el9_8.x86_64.rpm 27de0eb48747ebeb4fe831e3c4db3839640540b14ec0cba5fa02a861b8b7d66d kernel-abi-stablelists-5.14.0-687.20.1.el9_8.noarch.rpm 31605fc43bb0ec1fe8af467fc13e789e3c69758e540d043822fc62225d950896 kernel-debug-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm 39e9407d0f927642dba3352da4e2a04e1ef2fc3c0abce9a9b5c90136ce7a30f3 kernel-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm 5870d25a2f179ee3ef12c494668415ec329838206e56e1ccb60d0171bd20d23e kernel-5.14.0-687.20.1.el9_8.x86_64.rpm 887cf6e235aa483ce6f5907734335c83ccb3c6f1c63b22190e96fe452a08166f kernel-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm 8c556dcf71c8f01ac8a5ad27e6b3546d2e5adf9cc82684d1e5e1ac6ba0d52275 kernel-tools-5.14.0-687.20.1.el9_8.x86_64.rpm 8f8f27f4c76dff6cbc692210e8bb2f42d80e76cfd5bd3f94327c1d3fb0a7e1cc kernel-debug-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm aad45ccd961a8b9eef1e13d38985046e5924658e0a8b07b99672990b7ea540e3 kernel-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm c9939d9ee47f2d109c6e30657faa376a38bfdf1abe44c321c2b02739f633a92a kernel-uki-virt-addons-5.14.0-687.20.1.el9_8.x86_64.rpm e7355baab1d76835effc46b76b9dca814c6068161bde080655100bdb3ea79c7a kernel-modules-5.14.0-687.20.1.el9_8.x86_64.rpm fac1f6b0c93c3403b40d99da2d64ba3fae498492331953e2cf35c9f3518c38ba kernel-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm faee4e7d4a6ffff9e6c18f72e552e50b219f1a792ecfe6c024ced7eb0e3237b8 ALSA-2026:3405 Copyright 2026 AlmaLinux OS 0 1 Important

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801) * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695) * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libpng-1.6.37-12.el9_7.2.x86_64.rpm 0091dcf5df650a127f06d364c152b36dbde38a417d88372511ddd92ffffdee6a libpng-1.6.37-12.el9_7.2.i686.rpm d79a53dd492239df6285e3118c5e3c57417e2738e06183d45cbd9be968fc408b ALSA-2026:3488 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168) * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm 018eb8e04e0705ab7fdebe6df6decaeba76f88cae6af3ac697a00a486e40a4b9 kernel-debug-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm 0553b4ee5292a325e8ce2817a7d7f1a0f0cf86b715e09895d42d1e7feba75fbb kernel-debug-uki-virt-5.14.0-611.36.1.el9_7.x86_64.rpm 0d6fd1bdd8a0c2dc5a3365d0a33d65004ea9ad1bad8b46a64afbb4198cd4daa9 kernel-tools-5.14.0-611.36.1.el9_7.x86_64.rpm 0f7960717dcebb42a20ff775895b1d796b1ed1024db95120d690b436ecf548e0 kernel-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm 2e2c4ab4c1a5207d9cd9f9dc228fd23f09ff8da6f262ac8085386d4b1b3fb376 kernel-uki-virt-addons-5.14.0-611.36.1.el9_7.x86_64.rpm 438456280d947dd245fb549a660c2e22ee47f871b0e3584a07c4af3f8df01973 kernel-uki-virt-5.14.0-611.36.1.el9_7.x86_64.rpm 5d3f768f2cf2fe2f758848492939298a5f02053c109d26541edd177911b5effc kernel-debug-modules-5.14.0-611.36.1.el9_7.x86_64.rpm 8ce1601b460cd525114849ef187127ddd6f91293fe91b2c7116d269199d6587f kernel-modules-5.14.0-611.36.1.el9_7.x86_64.rpm 8ff8060636ca925190d8dc5a98b4d416791c98d376ac932951b877921e0c52f2 kernel-core-5.14.0-611.36.1.el9_7.x86_64.rpm a4b087caf044fe3c518416c4ae6ddfd3712ae26892de37744ab6438d41b14cca kernel-5.14.0-611.36.1.el9_7.x86_64.rpm a99a42c8f306769885daf2983e4aba2fad84c5226ffee3e017c89401331d75b4 kernel-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm ad11ff14fc83665cd72db888e90adf95ff82af39de14a52e3547502d91445e75 kernel-tools-libs-5.14.0-611.36.1.el9_7.x86_64.rpm b82001ebf8b7a38b292b0d733faa2cf6b6d91060cf28857d365978b167ab20b9 kernel-debug-5.14.0-611.36.1.el9_7.x86_64.rpm c1023c65991eb3b09867ca7e61d790b7144031c0443371704af084350a10d585 kernel-debug-core-5.14.0-611.36.1.el9_7.x86_64.rpm cbfcd6fce171f5d541c9af558bc23c5d9e30817952f527afb672fd1e285ed46a kernel-abi-stablelists-5.14.0-611.36.1.el9_7.noarch.rpm fc03987d3254cde4badf54ae82a6e7b9c94120c3d0827d8a883124bcb648ad1a ALSA-2026:36018 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-uki-virt-5.14.0-687.22.1.el9_8.x86_64.rpm 0229f447790348487693e2ca65cc5213ee82ca0c6e54cd67234896f86420628d kernel-modules-5.14.0-687.22.1.el9_8.x86_64.rpm 1b45a2e2b7b4075c0d4507967e73806a7de63bb542357088f66519855b905c7a kernel-tools-5.14.0-687.22.1.el9_8.x86_64.rpm 2d842220162750cbe8561828743d81e96c80687f554c11afa423b237ade04ebe kernel-uki-virt-addons-5.14.0-687.22.1.el9_8.x86_64.rpm 3a1cd636ef8f03598d33074363c33963e2d590d2c7b5b28ecdb115e59193ede5 kernel-tools-libs-5.14.0-687.22.1.el9_8.x86_64.rpm 61ec1fe640cb4b165efdef601569888745f8df4f85bf2374a4644640caaaa536 kernel-modules-core-5.14.0-687.22.1.el9_8.x86_64.rpm 6da145cdf4e92fedae7a2451f5778569a581311bd93f5fdf8daf87ef4822f91f kernel-core-5.14.0-687.22.1.el9_8.x86_64.rpm 997b5f240f4f57115bd6a4df476f9d6484096ce5aa3f6fc612606f9bf6b80058 kernel-debug-modules-core-5.14.0-687.22.1.el9_8.x86_64.rpm a24ca690a09a3764ebcf90e3a3dafb95a91efc444f3594416e8e043133728adb kernel-debug-uki-virt-5.14.0-687.22.1.el9_8.x86_64.rpm a787668b2dd750dfb0e9d7801a82e1766103da1608a155eb452e68f89bc5780f kernel-modules-extra-5.14.0-687.22.1.el9_8.x86_64.rpm a7b12f7176293e72daafd5d2be3b7d89609a7c5476e8ac36a455524936223b78 kernel-debug-modules-5.14.0-687.22.1.el9_8.x86_64.rpm bc617c1969ffbc069ac884b03a18ff4bf4544b8a01196e29cd073995d6eb189a kernel-debug-5.14.0-687.22.1.el9_8.x86_64.rpm c15a9ad1235cae25ad6c207bc252e152e37a8208e86a2f1c3ff971dca97a7242 kernel-5.14.0-687.22.1.el9_8.x86_64.rpm c43fd605bcb9786f3ae7e03b5e8b4220e29e4c88d10c02a2bd047bf25baa365d kernel-debug-modules-extra-5.14.0-687.22.1.el9_8.x86_64.rpm d2cf7817e609ac103eb8895fb4e56ef025eccc92a63e4e81df8f5f614215c294 kernel-debug-core-5.14.0-687.22.1.el9_8.x86_64.rpm e468e5ef3b9f45f21e8482fbc3372f40f0e0f2b54ada585a4f5757b29bd6e299 kernel-abi-stablelists-5.14.0-687.22.1.el9_8.noarch.rpm effe00d30869f04c3e371817148512aa1b59fa9ef12d9542b6593c9583e8af5b ALSA-2026:36645 Copyright 2026 AlmaLinux OS 0 1 Important

kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) Bug Fix(es) and Enhancement(s): * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344) * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm 0a3fe383bf45ba176267ed2c6beb417b65d40def18630da70051549cac929f4f kernel-modules-5.14.0-687.23.1.el9_8.x86_64.rpm 12e9ba5491c3537ea3aac9ca0fd0ee50fcc8733b80e649cf9681b1d55f0d056e kernel-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm 141d7981246e495ec0285b367868138a0b07eb2f4b0ae84db497893ca096eb9f kernel-debug-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm 1e786b267d0a407a7cce90b46481e8f6e4d060e33d4b4ec4da3b4b159afce048 kernel-5.14.0-687.23.1.el9_8.x86_64.rpm 2221a2d196216d6004799fddee9436fc780c44185f7458f0b167a12616f5ce41 kernel-abi-stablelists-5.14.0-687.23.1.el9_8.noarch.rpm 238c421dbf5ee5a35dc24135030e3f299b0baebf875929cb81329f634ed9f9fa kernel-tools-5.14.0-687.23.1.el9_8.x86_64.rpm 3220aa15a0a9a75aec5acf369c0a376adc160d1d16f355c2ec52a849347b89f9 kernel-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm 46aa31945ffaddb4684bb8d5998adf777d5e81daa85ff3c19af760f8f015c689 kernel-core-5.14.0-687.23.1.el9_8.x86_64.rpm 5d3a8a718bcd2ce4f66bcd2d53fee5bb5728844c469fe41b641a44c4f70a34ec kernel-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm 60956c095b3beb72520d6f680758a1bda3ea2bf751e6af3789964ed3f82dfab9 kernel-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm 6e6c7de53581d65918926ee3e80123f01feaab2115ecdd9f181fa8289a995a31 kernel-uki-virt-addons-5.14.0-687.23.1.el9_8.x86_64.rpm 9cbaa2b4e2c25d189b388778b9bc9153032d5d3bc80264cd7bd8f98671e160ee kernel-debug-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm a240d6183509c36cae0f44636c07a849db6a33f20a69560e1c68edfd4516ce13 kernel-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm ab87d6d2098ea9a5ff86e74f543a98666b280546a59c064b81f1eeafa69317f4 kernel-tools-libs-5.14.0-687.23.1.el9_8.x86_64.rpm d9a1cc13d102af949ae3d98b8533ebda84a7a634d69e74139f5c72a234060017 kernel-debug-5.14.0-687.23.1.el9_8.x86_64.rpm fb7e83961ff98ce98e0930c46e0cb569a46cd46c9808f1f65c2d2b526d20edaa ALSA-2026:36777 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292) * unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622) * unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390) * unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default unbound-libs-1.24.2-3.el9_8.2.i686.rpm 48cc80caa9e995510ab8a454a7fb6f02a35851451114ead47eb0b0e79049ac75 unbound-dracut-1.24.2-3.el9_8.2.x86_64.rpm bc771cf8f33d3807e14e2ed1019b85a7679f753a9d62c5edeaae6b42d58b9246 unbound-libs-1.24.2-3.el9_8.2.x86_64.rpm e03730a14bd0749dacacc8ec5233871b0ad00cf7e2e18489d9b9c03743e8b60f unbound-1.24.2-3.el9_8.2.x86_64.rpm e68d297863fc0358bc1a3c16e4d6ac0edd83622b8f380c6bc4a7b8437f7e7516 ALSA-2026:36957 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-tools-5.14.0-687.24.1.el9_8.x86_64.rpm 44a0f2691dab510516570561925414ec3bddd9326e8283ec7f3a5263680af7be kernel-debug-core-5.14.0-687.24.1.el9_8.x86_64.rpm 4cbb97b574cf1753be233d7e13a33939ec18332f6420b17630bec4fca1610e61 kernel-5.14.0-687.24.1.el9_8.x86_64.rpm 589c3b63dcc9d8804503e6a94d9f5a62f2cccb67ffa4c9de1d1fd3ed4b5ed57f kernel-debug-modules-5.14.0-687.24.1.el9_8.x86_64.rpm 60481711ff7b33688074b5ebca0dc48d304b32bc0e9437225d8c179390b6cc0f kernel-modules-5.14.0-687.24.1.el9_8.x86_64.rpm 670323464967dc1749d13f9c725f7a81525af04255681fe13d3e7172296e4708 kernel-debug-uki-virt-5.14.0-687.24.1.el9_8.x86_64.rpm 6d4bc5489cd05095131ffe14b11b2161b7e55cca98946f7535c270ddf2db6bb8 kernel-tools-libs-5.14.0-687.24.1.el9_8.x86_64.rpm 789741b60f48e385923e5c5e465334c5183195fb95c504a2fcde0f52382d8536 kernel-debug-modules-extra-5.14.0-687.24.1.el9_8.x86_64.rpm 7a056b6e2003205b57f27e29a75d634250a1486ab1fd3653d3e874438333d8e5 kernel-debug-5.14.0-687.24.1.el9_8.x86_64.rpm 946734cc5606a237519809c23d170f64e908dc586a6cdcb672bca83b0209cadd kernel-abi-stablelists-5.14.0-687.24.1.el9_8.noarch.rpm b74ce763bd48475a47a9d2858146f8903411a028422939b8fe94b4ae5cf99f56 kernel-uki-virt-addons-5.14.0-687.24.1.el9_8.x86_64.rpm c4e28cb0100ebf937863a880b8c05ffac47473807c176417e36b1a57f1b7ddb2 kernel-core-5.14.0-687.24.1.el9_8.x86_64.rpm ca106882d3af6ed915970005b087f2d08b013eb83563fd10329269e176a526cc kernel-debug-modules-core-5.14.0-687.24.1.el9_8.x86_64.rpm ca9d6fcc417817ab26c35632fb8d3feabb4c2a4705ffb5a62185281a8fcae015 kernel-modules-extra-5.14.0-687.24.1.el9_8.x86_64.rpm d621c31946909d4cefcdbcce389c3ab66c98950868c90eb5c5652a2b779e3f17 kernel-uki-virt-5.14.0-687.24.1.el9_8.x86_64.rpm d98409923774ae8a18a98268cfec2a2c47c9a2a45c6157c0746aa68938b2ccfa kernel-modules-core-5.14.0-687.24.1.el9_8.x86_64.rpm f774350b186e3e1ea79d4f21f1f5a234b23b919cefdefe8ae56e7f5cbe8b176b ALSA-2026:38491 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-5.14.0-687.25.1.el9_8.x86_64.rpm 089b5d8643c0dc356ef918dcaf6085ad7ed68bcd8b4d43f0f3bb974d3a2cde29 kernel-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpm 31525e5ad7d029f0ffd931abce050d50d71459d7ff6059b27ba6b958777912fb kernel-uki-virt-addons-5.14.0-687.25.1.el9_8.x86_64.rpm 3be3d6cde53c27206d140a1d8556b930b17a197cb843531c09e0e90cbb45f08c kernel-tools-5.14.0-687.25.1.el9_8.x86_64.rpm 42b06acb85cd1c7352ad778908f1067029fc6fe684925abd412f85e6d17758c1 kernel-debug-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm 5de2a87791dd617108884e4198dddbacde4f0fbb2a4d96eb2954c81ec696c2da kernel-debug-modules-5.14.0-687.25.1.el9_8.x86_64.rpm 62d515f35339848b020625c91538ec79cca6111e8f89cc76657c0eb0674a54db kernel-modules-5.14.0-687.25.1.el9_8.x86_64.rpm 6b03252c4cd95874e391ba780852901150316e4f6f8b748d0e167167520501a4 kernel-debug-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm 8b93388250d115f54b6ff31fc2c4e04349e5ec1d4ac2c6428413e31756f9788e kernel-tools-libs-5.14.0-687.25.1.el9_8.x86_64.rpm 9d9130a253900b45f183afb713c1b23d6533bb46c059fe5318870f2677fa7874 kernel-5.14.0-687.25.1.el9_8.x86_64.rpm a7efb332624fa88062915536d151e89213cef1bec5a998b38a2c78f9e2d7f5e2 kernel-abi-stablelists-5.14.0-687.25.1.el9_8.noarch.rpm a8127da393233bcaf023d83cd084d2fc98bf4d88030ef915c031a316b1d5d781 kernel-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpm b2f5d300a87344b0c6f7ef5817a3245d82f0ec284a3b9aaf7d9ed7896092685a kernel-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm b59f35ebff628b81ae1a33eaafe6a1a81b5ee6c07d19d626c9ade779e40efce6 kernel-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm da818a3fb0e4c1628fb9f71e58c7b4fef70db4b087a995a9a62f3d837de36cbf kernel-core-5.14.0-687.25.1.el9_8.x86_64.rpm dc24b11bf04781f2af2e8d7044408c71f75eaa4de27ceb0ac019d23a2ae63b06 kernel-debug-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpm fae6ead59b30fe4a830de4833ecbaed3c7cd5226af2566f96c769204175a1394 ALSA-2026:38511 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858) * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-minimal-8.2.2637-26.el9_8.10.x86_64.rpm 2988cd6064a9578b1589e81b7b692dd17024b8176e9b33182b81aea528c63f14 vim-filesystem-8.2.2637-26.el9_8.10.noarch.rpm 916817f918ac9f2a580b5eefa4db0d7da59817a9c7e07e5100b20d526e93d0dd ALSA-2026:39315 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libsolv-0.7.24-6.el9_8.i686.rpm 0c15ee1f12d0c2338fa697397eca369b71026ee055c98308577165cefae22bad libsolv-0.7.24-6.el9_8.x86_64.rpm 517e1f1689e3cc259c5e7d3551b0f6df7b0fc265d6d7ed2f2631ead3b91496a3 ALSA-2026:39316 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (CVE-2026-34980) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default cups-libs-2.3.3op2-39.el9_8.x86_64.rpm 7a4acf310f6bba0f815f45d848df953b07350491f0fb40bd4d9382d1c5fa1aff cups-libs-2.3.3op2-39.el9_8.i686.rpm 9f7d0b3d68c15e23e3abd82312ccc132b232f7a3b37e3ae879a85a8b370a3f9c ALSA-2026:39317 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libxml2-2.9.13-14.el9_8.2.x86_64.rpm 5a2ca97dfc0676e595ac7c786b69c6fe6ec9d4855ac30151b3d0e5c59007c40d libxml2-2.9.13-14.el9_8.2.x86_64.rpm 64e185714f959c92350ae352e548f99842c4bb8394c657a22cf76d7934c0a80f libxml2-2.9.13-14.el9_8.2.i686.rpm eb211876c4ce5d7abc161a50418c9b7224c181b339a7746ef49ec154e276ea38 ALSA-2026:3940 Copyright 2026 AlmaLinux OS 0 1 Moderate

nfs-utils security update

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Security Fix(es): * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libnfsidmap-2.5.4-38.el9_7.3.i686.rpm 244b0050e6d46668bcbfc4445a6cb577e08009f2d81d98f1aa6ebab951994e70 libnfsidmap-2.5.4-38.el9_7.3.x86_64.rpm 6b553a3bf0ec0373c1b9d9b9e7d51a02f3b7b8d847acc1a84fe93fcdb0897b28 nfs-utils-2.5.4-38.el9_7.3.x86_64.rpm b0c7bfa096cf101f4e9cb68eeb3d55feb3d7d9cfa1615bf0e8735990729a0de6 ALSA-2026:39576 Copyright 2026 AlmaLinux OS 0 1 Important

cifs-utils security, bug fix, and enhancement update

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system. Security Fix(es): * cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505) Bug Fix(es) and Enhancement(s): * cifs-utils: regression with kerberos mount [almalinux-9.8.z] (JIRA:AlmaLinux-192982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default cifs-utils-7.6-2.el9_8.x86_64.rpm be23536d7e3e31e0ea4ca3eed6bbf6e6d710171c887868fa252534fb7db5d577 ALSA-2026:3966 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106) * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-abi-stablelists-5.14.0-611.38.1.el9_7.noarch.rpm 05d8c9e377882086a6973dc7ed9f7f74113af72d63ea8459ce56fc4c057ff6ee kernel-debug-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpm 0943c7a92903d537a21c195ee7853d146868c0568bf177b49a95e028461399e4 kernel-modules-5.14.0-611.38.1.el9_7.x86_64.rpm 3a8947fe85c2bfebd3415c6444a2894d2f66442d04e9c3f05d88d7ecd5c1bd82 kernel-uki-virt-5.14.0-611.38.1.el9_7.x86_64.rpm 53d43e807eb43bb78d1f47bb206caf480ee309dcf2c8e2c5e917058e62fca54d kernel-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm 57d2ce664412df5ba82b6525cc10b4a7c898d39f03e3f52ba5e96e139166d2dd kernel-tools-libs-5.14.0-611.38.1.el9_7.x86_64.rpm 5b0abbb2dddcd8f528e783ed1653b84cb7b0053a8b33fbe4d0e83cd185d69c7b kernel-debug-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm 635b29d5c2c82768f8c1df853db69a27ac404efadb99fb9186f7f101a80a29c8 kernel-tools-5.14.0-611.38.1.el9_7.x86_64.rpm 67edbe4998766ff4885d7663dec7c928f3b05cbb1397785bf4286d5a34de94f9 kernel-debug-modules-5.14.0-611.38.1.el9_7.x86_64.rpm 6ce819dee18425aa6ba9ece7310e7fbbb5fc7ce739ab5e5cf401b6ecc9bf9c93 kernel-debug-uki-virt-5.14.0-611.38.1.el9_7.x86_64.rpm 98a7a0e1ce8678bb349266c14a99b005b44e66f5fe0bb013f7798e7f0f5e46ae kernel-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpm 99af00c06ce2a4e1ab9606e6a80df87c34133aa9daa8cd61ec6b13ad96a2b120 kernel-5.14.0-611.38.1.el9_7.x86_64.rpm 9d70191d5fde54970ba983f66a58341284c05341c0330124ca16a847488087b1 kernel-uki-virt-addons-5.14.0-611.38.1.el9_7.x86_64.rpm d1f8fac4552907580544147d817ae8a6acdf937a548b0a92418498645fbb2bb1 kernel-core-5.14.0-611.38.1.el9_7.x86_64.rpm dc5fa6a3e71e46a1032c2ae20d32546145ecad59d58e3d796bbde5dbecb11ae7 kernel-debug-core-5.14.0-611.38.1.el9_7.x86_64.rpm ed86589035e47551a1211730571f6fc836824fa7b07870e64aab4055747eea92 kernel-debug-5.14.0-611.38.1.el9_7.x86_64.rpm f4814c8aaa5bc16999bbce4b015b41a3a9147bfe5f0fc0b46012dbf9f48afbb7 ALSA-2026:39798 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) Bug Fix(es) and Enhancement(s): * python3.9 test_ssl fails ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192) [almalinux-9.8.z] (JIRA:AlmaLinux-194207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libs-3.9.25-7.el9_8.2.i686.rpm 094a4acec51cb0ff482443af8832786c079d9bb073dfbd6e63755a2ad5d955bd python3-libs-3.9.25-7.el9_8.2.x86_64.rpm d6e2ebd7cf6e6b6db0967bdbaaeaddbc216e21df4b2600fcb62f04da5d8c9af3 python3-3.9.25-7.el9_8.2.x86_64.rpm df12510c09b1820c84fac450f1c548637c8b5ec9d2ef1aac6248b7321e0fd3fa ALSA-2026:4168 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default python3-3.9.25-3.el9_7.1.x86_64.rpm 1297d107a5f7c4f33708e93ca240031bc69f4df2fcbd6bd9e656ba8a0a8d87c3 python3-libs-3.9.25-3.el9_7.1.x86_64.rpm 7b0757ed5032b18462bc849a7e46f7e8890ab8e9d657bd4b9dc79d7f22e76ac9 python3-libs-3.9.25-3.el9_7.1.i686.rpm ed0044ef2a83ffc6235deac9a9f0a021efa8dd1eff06cef08e83c4aa5612de56 ALSA-2026:4188 Copyright 2026 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820) * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default gnutls-3.8.3-10.el9_7.i686.rpm 2753534be5c8510ec8a87328d8996bcab1f6a410d693837f801c2f30b42fc7f8 gnutls-3.8.3-10.el9_7.x86_64.rpm 6b2d5262c9d2ecb780ac4f674d207552d0ec72c4665d529698cf91de2953ba03 ALSA-2026:42089 Copyright 2026 AlmaLinux OS 0 1 Important

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glib2-2.68.4-19.el9_8.2.x86_64.rpm 7783219dda9afd1577a18283249cfbfc4382752e5f2e1ea335596e3b559ca9ce glib2-2.68.4-19.el9_8.2.i686.rpm c5ec262c2636c22adaf1a0d77be48afebcf34ef980b7b94d4f2763c1027e4918 ALSA-2026:42122 Copyright 2026 AlmaLinux OS 0 1 Important

sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474) * sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libipa_hbac-2.9.8-4.el9_8.1.x86_64.rpm 051a66d2c230c3102b9cad29162bde4e48f9dde4f0113f76d2967606a1ed683a libsss_simpleifp-2.9.8-4.el9_8.1.x86_64.rpm 0bdd1c1028f5aaaa7d628c935608d571c61a0839ac56fb4e97482143a8a6c65d sssd-common-2.9.8-4.el9_8.1.x86_64.rpm 166281ccc0320033bfe39d6053274dc46072112c36126da57f654e8f21a6803f sssd-common-pac-2.9.8-4.el9_8.1.x86_64.rpm 26146e6141c3e8dbad300ae1c4a800bfa27329bca29d644fb5ec4ecec69c9fc1 python3-sssdconfig-2.9.8-4.el9_8.1.noarch.rpm 28b26073151db0e1c5e86bf07621e25e15336fbce03424532426a208a66f1da2 python3-libsss_nss_idmap-2.9.8-4.el9_8.1.x86_64.rpm 2a36afd6eb070452e7bb519ba1a585cc5250770852b71708b15d0680cf5bbaa1 sssd-krb5-common-2.9.8-4.el9_8.1.x86_64.rpm 2c6005326c07ae6932ec8cdd450e9146ddad15959578feab81f62129405fe1b8 sssd-ipa-2.9.8-4.el9_8.1.x86_64.rpm 33b346d2e8231dce44369efebab1b83c896f66e615749fb1a6bef546adee1a4d sssd-ad-2.9.8-4.el9_8.1.x86_64.rpm 47f06ef23701a062a144a3834f025fbe09db0c1158eb0c7573bf8e2ef2ec88c6 libsss_sudo-2.9.8-4.el9_8.1.x86_64.rpm 492b34ecbf0e7a6169a59096acd40bb97de457b6bb4c147fbc3eb10058ea284c libsss_nss_idmap-2.9.8-4.el9_8.1.i686.rpm 4cf36ce09a02ee8f764e38cef2e8fb92e1d5af0314146d5e36d660c2abc86d57 python3-sss-murmur-2.9.8-4.el9_8.1.x86_64.rpm 578df39f08eb77fb31f7a42d2bbf7deaef5eaac64cd6882a432411bcf4819862 libsss_nss_idmap-2.9.8-4.el9_8.1.x86_64.rpm 666e05a2c382c7068aec5980c358941441771741bee5214b7957776528a854bd libsss_certmap-2.9.8-4.el9_8.1.i686.rpm 7782c2dcca1448a19f0e5362dc1a3def9daf1a9f69feb5e7e14fdeeb8af3c22d libsss_idmap-2.9.8-4.el9_8.1.i686.rpm 81ad74422ef05dad7aa758f55e2ff35a6eff5cd8aad895837824dc11bd8ab5b8 sssd-client-2.9.8-4.el9_8.1.i686.rpm 8da589d79751a88488954907723ee2a303071e1c5e32437632701900055ab2ee sssd-client-2.9.8-4.el9_8.1.x86_64.rpm 96fd88d0a2223b2cd35463c843dcb2d2fa3bb520b2b891da7cb53b36c006b9df libsss_certmap-2.9.8-4.el9_8.1.x86_64.rpm 9b025324ee38ea380afeea0bdb808f60357553e2d277c0d66bf94553e25f3ddb sssd-2.9.8-4.el9_8.1.x86_64.rpm 9bac472a2a44fcb3898041ec48aa2df60192e008150a6374f448bda904c2a2f8 libsss_autofs-2.9.8-4.el9_8.1.x86_64.rpm 9e58a797993bbbdf48ea8e4aafbb659ae54388d7db37eb16268d291ae597f61c sssd-dbus-2.9.8-4.el9_8.1.x86_64.rpm a6e3fa2fd5c077714859aa56ba738fbb27d23228c76e05349c101d507ba8015e sssd-krb5-2.9.8-4.el9_8.1.x86_64.rpm afceabad78e2201155da86094f9d27e7e67bc8cdfd8832f43885d7b2bf1bb352 libipa_hbac-2.9.8-4.el9_8.1.i686.rpm b8dfde5d9520b66f82aad08f7209b444da29909e76cb1349479396e7edca5686 sssd-ldap-2.9.8-4.el9_8.1.x86_64.rpm bd8dce73fb58502e8290e463442d5f02d334ccd918c2263128dc928b61a0890a python3-libipa_hbac-2.9.8-4.el9_8.1.x86_64.rpm c04f7ca050a76ab4f8dfecd44f6c09fb0ceba94561db652646b2a4e2833c227b libsss_simpleifp-2.9.8-4.el9_8.1.i686.rpm c99663d1221d80be8026d6db756a910ab1d6c2d90c3d98aa738c6fd6f3fafedb python3-sss-2.9.8-4.el9_8.1.x86_64.rpm d28b6d921c30c1987969171fe49cccd676d567c7891b501d962f2e094e3da9ff sssd-kcm-2.9.8-4.el9_8.1.x86_64.rpm d46bf5bc8206602d17337af3e3a5a276c7916b189cccb1ea27f4b54953e61e87 sssd-nfs-idmap-2.9.8-4.el9_8.1.x86_64.rpm df336ea1d6d3ae1cedf66d6a37d96c9f8f5bee08da3afa4299fad2b272d8f298 libsss_idmap-2.9.8-4.el9_8.1.x86_64.rpm f14bfd70e8505de641443fde1b55c0889a22a202f4d25ec1b3e25d38b26f254f ALSA-2026:42736 Copyright 2026 AlmaLinux OS 0 1 Important

acl security update

Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): * acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) * acl: TOCTOU Symlink Traversal via getfacl/setfacl (CVE-2026-54370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default acl-2.4.0-1.el9_8.x86_64.rpm 832d7505a48aebc994f89d77fa70f78550b3a75316536dc2fb83ab29296d4fc4 libacl-2.4.0-1.el9_8.i686.rpm 8a1285057f65f164204102ce65365cfc315c29728c2e34a039309897f012d0e7 libacl-2.4.0-1.el9_8.x86_64.rpm 9a010dfc957f608db1f479b96de850fbff887ec10f7ee916bbbba4691bd76034 ALSA-2026:42952 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928) * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435) * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glibc-langpack-sa-2.34-274.el9_8.x86_64.rpm 014013e3587c3af90d366499c30e1a5e52fd44828dfcfaabd10f14df08a085ba glibc-langpack-ss-2.34-274.el9_8.x86_64.rpm 01705cc8e662fbb77313cde26e509cd601e5140017487843325674c577dcab12 glibc-langpack-nl-2.34-274.el9_8.x86_64.rpm 02285585f326b88a71045d237235b6687b35c30f6c1f99ad40ac1bef145570e8 glibc-langpack-dz-2.34-274.el9_8.x86_64.rpm 0290395110ecab50096d8a41fdfad17c82413289a825c0ba73deab5c09c0cc3a libnsl-2.34-274.el9_8.i686.rpm 02ad476ece00d9fbfbb27ef5d5b488810bf5dc92b70e1bbc24acc13e17ab5576 glibc-langpack-ml-2.34-274.el9_8.x86_64.rpm 042ed285d42ad300bb028567813398484980dad7598cc8c5c59db0a96f0860bf glibc-langpack-niu-2.34-274.el9_8.x86_64.rpm 063f0b2794facbb3996cc3ef75cfb81a0a9b984ea2bdb2fdf857c8e71970c05f glibc-langpack-ur-2.34-274.el9_8.x86_64.rpm 06432ad5a7c8d5c185af9eba37462ccac1562038da1609cf20d6dfec13c22f28 glibc-langpack-cs-2.34-274.el9_8.x86_64.rpm 06712e034a003c5d539c97c59826899ad5b5d5027a2289e5cc8f21189da79bc0 glibc-langpack-ta-2.34-274.el9_8.x86_64.rpm 0718728ae5eb6280139cb85da8a6064acd4356cf2bf3db75538e60846dec23b4 glibc-langpack-tig-2.34-274.el9_8.x86_64.rpm 0790a949703e21a18af1d0fd4e7b234d5043e7a6f7863f42318d7a84f1590de2 glibc-langpack-om-2.34-274.el9_8.x86_64.rpm 080cb1e729c7a6f86ce483d304cd85845b386fdd3ffe18d395e546d12f0289fe glibc-langpack-raj-2.34-274.el9_8.x86_64.rpm 0a691f635b6c1fe06ecaa341e50b7b69b91a68b1fa6e0c0e092dfb3f461dd3ce glibc-langpack-fy-2.34-274.el9_8.x86_64.rpm 0a9620f11d30de36faeb3e58beddaffc300ffd1ad700a42294fe9c17e4716158 glibc-langpack-yue-2.34-274.el9_8.x86_64.rpm 0c3b8228031389daaf0cd946e03f33f49df3c9c33075071a8677eb86d63a60cd glibc-langpack-he-2.34-274.el9_8.x86_64.rpm 0cd603dd70e5996098fd676c6390e7af930dfdc753e79090b897e6baac257ce5 glibc-langpack-so-2.34-274.el9_8.x86_64.rpm 0fb6add580cf61d1e53aaf9e581ee543f630727a0ad2e29ccd1d1e488393f25d glibc-langpack-kok-2.34-274.el9_8.x86_64.rpm 101d73470993b8873d71ef13720e8b789e1ce7b2d85a7e13b84d664c9c4288e3 glibc-langpack-kl-2.34-274.el9_8.x86_64.rpm 11a24ccb3219241570db91d085f940c8a3d314b490324a0bc98cd797c21ec5e9 glibc-langpack-gl-2.34-274.el9_8.x86_64.rpm 1273a630feaf202cbac7c201ad9f933a0b9663bce0933e3d581380b4acac1833 glibc-langpack-ht-2.34-274.el9_8.x86_64.rpm 130255e55b356d432030b7fc14a54c5337825b44ebdb4bc48f522750b960c847 glibc-langpack-ia-2.34-274.el9_8.x86_64.rpm 1605b965ebebc69ec8e12b5de9f307088256363708f901b87b9415841c668d6d glibc-langpack-bo-2.34-274.el9_8.x86_64.rpm 17bb52c9616b85cf23523b8fbceeac9a8c0bffc4a67bd9ff070deaf986f80288 glibc-langpack-hy-2.34-274.el9_8.x86_64.rpm 18197884e2db2b4a24e3ed1d876beaa4ac2e915125fcdfd182ac6bad921e042c glibc-langpack-wa-2.34-274.el9_8.x86_64.rpm 1917e1e3ac3b5be3ff53df84fb0114630857579f45e45e977b3d88390ee6299a glibc-langpack-mg-2.34-274.el9_8.x86_64.rpm 193019f68d2653959c4b5e3dca75e757338db19b2c98cdecba1f01683c367740 glibc-langpack-nds-2.34-274.el9_8.x86_64.rpm 1a8f4e6fb4e151a1442e58a556fb6a69773c3429fb3b8183f5d23bdc26e30d55 glibc-langpack-ps-2.34-274.el9_8.x86_64.rpm 1bbc30a627f7e29f856ac3d2c7e76c4a3640b997bfdcd33693b7a23d296512dc glibc-langpack-yuw-2.34-274.el9_8.x86_64.rpm 1cdfd8cd8c77a363882f0a04fa65c7a0766c6a2cfc75d7b9d88780bf0eb65342 glibc-langpack-to-2.34-274.el9_8.x86_64.rpm 1d3c0bd5e2ae242b0dfaf2260c1d62e4462a6b3d1cd44e2ab596d101b06acc07 glibc-langpack-sr-2.34-274.el9_8.x86_64.rpm 1f53d54269b94118f18834c2bb831d601ea894f121da5cd20f55517730848462 glibc-langpack-es-2.34-274.el9_8.x86_64.rpm 22ca2dfdc137d44466724fcd8aa63fce2a70a21da02486646c7455277e66360f glibc-langpack-mag-2.34-274.el9_8.x86_64.rpm 244a0bf3c3c17b82771ef47af688a8f9f9d4a26e9160fc318ca7bf46704b9569 glibc-langpack-as-2.34-274.el9_8.x86_64.rpm 26f56b6507607d1a2df08eb0fea3a122511ef326fccc158d4fd5a5eccfd27c15 glibc-langpack-ig-2.34-274.el9_8.x86_64.rpm 28e3ba7b2b67d1450f8cbc6adccd0ac6117792365bc7a83988e961c16fa11f60 glibc-langpack-mfe-2.34-274.el9_8.x86_64.rpm 318ca7fb185c228e5700927a9c358761e4484002ae291bea2b14d0d89ea4c553 glibc-langpack-miq-2.34-274.el9_8.x86_64.rpm 3206a7fc3e862183b474a9485af4f36a9c264a5571ab98fc8f521a126bafc0be glibc-langpack-lij-2.34-274.el9_8.x86_64.rpm 32098c6501f4153c1bad04097f15d3c4e833e8af7f632483e0840c4d2af881bd glibc-langpack-de-2.34-274.el9_8.x86_64.rpm 336ee5e3f2b3d6fd71a6aa2841ee7b5f300b137795b38109c33ce853f83e305b glibc-langpack-iu-2.34-274.el9_8.x86_64.rpm 3414cf68e2c3fbf564f84c31c19183a1344f53f68f9f9ca60a56e7ac4ddf9cd9 glibc-langpack-ckb-2.34-274.el9_8.x86_64.rpm 347b30227aa4917e5cfed585d5b2eed9938dd50d6538bd422f7ce43dbe33709c glibc-langpack-uz-2.34-274.el9_8.x86_64.rpm 35f81f247ed421347a12e45b3021c9ab19d2612cf2511dc8a7dedd319c8cc420 glibc-langpack-el-2.34-274.el9_8.x86_64.rpm 370edb9156e2f95bae7e81e98d74786f570190f55c6e97ae8db83c760b1a225b glibc-langpack-eu-2.34-274.el9_8.x86_64.rpm 3acc41be281ef37c4765134fbfb47ea1304be4f959fd09ec2b50c256a4a3aba9 glibc-langpack-pl-2.34-274.el9_8.x86_64.rpm 3b479288478e2a7c8dc2eadbbb71648309716440922aabdb7f2db2a2c626ef75 glibc-langpack-ak-2.34-274.el9_8.x86_64.rpm 3e61fd63efb09d5d84818795c2a33d4b392becddbd59013678f2b49c3310b00a glibc-langpack-ro-2.34-274.el9_8.x86_64.rpm 3f3ffda808c347f8c316b577da8ae3a90f0df9eb7f790e7d012064e4843b4f16 glibc-langpack-ast-2.34-274.el9_8.x86_64.rpm 40d1775a2cbcf09e4b0874179ecaf51a90ae7b2a900815170f849f9938e0dbac glibc-langpack-gd-2.34-274.el9_8.x86_64.rpm 40f944a30990a0c3e537bdd729275671deaa1791f9e2c3e9a5645691f4879d4b glibc-langpack-shn-2.34-274.el9_8.x86_64.rpm 416e7a618a1d74f501e264cc610bd09c3a031352d8ae838064b0d3fa4b2fa4f6 glibc-langpack-ug-2.34-274.el9_8.x86_64.rpm 41cc885772ebd911808696f9237478298661ac79ce20e99ee821fcda12f5c00a glibc-langpack-pt-2.34-274.el9_8.x86_64.rpm 42426bc8367e29c9250fa3e241f9c7f4da001dbd1fe1a9f106fe938e772e8ad3 glibc-langpack-se-2.34-274.el9_8.x86_64.rpm 450fc1a634b022202eda28c9de96f5790f610163958769c8b8b5dcb89509666d glibc-langpack-da-2.34-274.el9_8.x86_64.rpm 462d94edd83160ff84e9bb80cd1aa182e3468b05bd14ea61de241ee3dba8a885 glibc-langpack-chr-2.34-274.el9_8.x86_64.rpm 475527703bee9b763005a32629c45cec5f563e5e1b39b4d3028ae6377d2a6042 glibc-langpack-the-2.34-274.el9_8.x86_64.rpm 483c3ba6538af8073a7a2a93500bc1fc38a3408a8daa938eeff7bd8c3a266f8f glibc-langpack-gv-2.34-274.el9_8.x86_64.rpm 485ae07f2c64ce582169e249ab79c2c83937aaeab6d65c8ebc31f5b5d1e45816 glibc-langpack-mt-2.34-274.el9_8.x86_64.rpm 4b732843e0b1419a69a4b0b1075af6f1f8a604970c9565668e8114c77ed811ca nscd-2.34-274.el9_8.x86_64.rpm 4c0c1a05891a00956cea3eceda4655b8c7f3959802cee70457f3b728d66d30b1 glibc-langpack-mk-2.34-274.el9_8.x86_64.rpm 4c3690308770e14ce19570c5ec1a10dc0787a70444e1fd69265cc6ad351438e2 glibc-langpack-ayc-2.34-274.el9_8.x86_64.rpm 4cf05677144280e51dbf3a44fffe31b0ebb191438a83b34c6da190cb79911f62 glibc-langpack-fi-2.34-274.el9_8.x86_64.rpm 4e5db753de808610b94bb162241d79d4c609579c7d653f2117a50b6dc0b5ec9e glibc-langpack-anp-2.34-274.el9_8.x86_64.rpm 4e939c80984f06a3a8985e1c0eefadd876350167b688e4514dd2dbcba542a966 glibc-langpack-wal-2.34-274.el9_8.x86_64.rpm 51c24f04a7c37dd49a7735030ebf94160d5642185574d42d8192141b23635b6c glibc-langpack-mhr-2.34-274.el9_8.x86_64.rpm 52f903c618ead609f9627eaddee48e35d5b7999e3924430b7c69682f21141998 glibc-langpack-tl-2.34-274.el9_8.x86_64.rpm 5325d41175e6cbd50b8ea42fc4eb3d158604c92e490bbb06082f50108f53a9db glibc-langpack-mr-2.34-274.el9_8.x86_64.rpm 569db7b50ed005aa90f26a3d078ceeaa8beb820194a4cbec194c608c0f3a158f glibc-langpack-ff-2.34-274.el9_8.x86_64.rpm 56b7da35e54e863c46dbc17ea7a78dff3f4d26a6903a35bcea482d1c362040d4 glibc-langpack-an-2.34-274.el9_8.x86_64.rpm 5a9d6fba9669627d3d4384e9fa7a24e30f0f3f289f3ba05e8961ee8a3be78f70 glibc-langpack-gu-2.34-274.el9_8.x86_64.rpm 5d1bc000d8e2abe13268f38a5188e27c581fd5a85696cf8b780204864aa45eae glibc-langpack-vi-2.34-274.el9_8.x86_64.rpm 5e7899ccc4d32defa66ea934ab1fa9d67e32600fe0ccf00366c4e67e3a8f4dea glibc-langpack-ky-2.34-274.el9_8.x86_64.rpm 5eea87f06c033ebf2006bfaf4901cb78ec1865e6da6a17912178715cac712313 glibc-langpack-yo-2.34-274.el9_8.x86_64.rpm 60769f3948faacdbe287b51abda8709c892d6834059051a5110cd15d3f827614 glibc-langpack-ko-2.34-274.el9_8.x86_64.rpm 613a74baf7019e08110149b6b391c2a0efcd1161ca856e11d95b95ff3e9afdf8 glibc-langpack-nhn-2.34-274.el9_8.x86_64.rpm 61bf3e6f0edb59caa189422621a5142bb40ebc8939c68ae738c65b479009133a glibc-langpack-sq-2.34-274.el9_8.x86_64.rpm 634c5c1b28a19c43457c7e1cb0323b4010c0ff0d1b9b63fd43de121bf48382f5 glibc-langpack-ti-2.34-274.el9_8.x86_64.rpm 63d773e9c3f165bf8d77b86c8498d85dabe06f20669dcda649b87e42bbd43ae9 glibc-langpack-sm-2.34-274.el9_8.x86_64.rpm 647b9526847a9717fc00fe405f50c072cb4f8c9807cc3c1031dbb301c38ed0f9 glibc-langpack-tk-2.34-274.el9_8.x86_64.rpm 64e7903957399ae77f268ff4ef5b9e850c46105579580e660d0307651b557517 glibc-langpack-bhb-2.34-274.el9_8.x86_64.rpm 64f023815c68b3683dd207ea754bf8daee959382534586c22864712a296bf103 glibc-langpack-lo-2.34-274.el9_8.x86_64.rpm 674458cda609c2d80ba9aa660d6ac59286e1080cc75346045b7ce1ad210fde10 glibc-langpack-xh-2.34-274.el9_8.x86_64.rpm 6b955fecc3820bcbeb98dee3544ac65a1a27a4b718088f8eaa363ffea78c5de9 glibc-langpack-bn-2.34-274.el9_8.x86_64.rpm 6c8235c839b5d08f5d9df6590427b3789d9eb4f363ad841de8ae60eb99cee7df glibc-langpack-ar-2.34-274.el9_8.x86_64.rpm 6ce750351d7d93feda6bed507ea7af083b2e10c2f9e90547280ecd6ba2365d6f glibc-langpack-lzh-2.34-274.el9_8.x86_64.rpm 6eda1c19306b6ec0cf8875ea04af33d75636ff2fd9026b33f87af587eb206f48 glibc-langpack-bs-2.34-274.el9_8.x86_64.rpm 6f568aec287c7b5504fc7d58d07c81d5b0f62967216b128564a99620a9fc5432 glibc-langpack-tpi-2.34-274.el9_8.x86_64.rpm 6f6c551c5b6fdc007937883e9febd0aee9d35dc7924dbabd5e7bf9be685135b7 glibc-langpack-fr-2.34-274.el9_8.x86_64.rpm 6fec9daaade3010864d70a1e989de1a71ffb66e9b284b0dcdfd6318cbffd9faa glibc-langpack-bg-2.34-274.el9_8.x86_64.rpm 709be489d5e84b170f0086bea353d0c8d5dbdc57b089bd19241935e8e77d2943 glibc-langpack-bi-2.34-274.el9_8.x86_64.rpm 71b9a63e695df933d19a272bd8d003201aaf6b161ee5f3110bb49a94c4058235 glibc-langpack-byn-2.34-274.el9_8.x86_64.rpm 72bbaa751f98dd1c2ff0060b85da25d9250cfb0e024c070364848ca79683c485 glibc-langpack-unm-2.34-274.el9_8.x86_64.rpm 72c1d45a94b4a8a5b50987a2d8ede29f9bd8b9d0a216f84bfb4e52bfb2c2bb39 glibc-langpack-nso-2.34-274.el9_8.x86_64.rpm 73231ef92c3d8ffd7bdd3471f88d802061565e661393513420ee14089d0c4767 glibc-langpack-lt-2.34-274.el9_8.x86_64.rpm 7938367538802f1af989ef4a8c507e205db6107c4dc2ce848657c5fdcd011bca glibc-langpack-eo-2.34-274.el9_8.x86_64.rpm 7c8390527e25b9f025eff5fd7097e4d0066eca7b36df7893192cde015878c366 glibc-langpack-crh-2.34-274.el9_8.x86_64.rpm 7d2699609ad4d90c296cdbfc3de2789ed07c4eb066b5d890f4b89ec35f3d65bb glibc-langpack-az-2.34-274.el9_8.x86_64.rpm 7d94277f5ba5f7808855de47a307bd16de26efe7c600e9cb982240ae3c547b8d glibc-minimal-langpack-2.34-274.el9_8.x86_64.rpm 7de0c2af82440f5d83c84cf99b043c2c495de715282497e5d5b5bfc8043e6e7f glibc-langpack-ce-2.34-274.el9_8.x86_64.rpm 7e5ba5d11df2eb6a5a4ed7df48c1ca1f2d30c5753015c4c580f3989b6078a004 glibc-langpack-st-2.34-274.el9_8.x86_64.rpm 7f238143194d88427bde27754c12df079b8ea673efbc21eaaa5921fb55e9de4b glibc-langpack-rw-2.34-274.el9_8.x86_64.rpm 80d032ccd7739ffa7923568efbbe1e08a8ce5a6771ef64ad9a5f2aa723cc219f glibc-langpack-dv-2.34-274.el9_8.x86_64.rpm 812f19998d9fdda964bd23712757bca40b3a24df67b3522670b933a4607a34e7 glibc-langpack-cmn-2.34-274.el9_8.x86_64.rpm 8166c69207592c39079408e99ee536ebb1672952b8966c173acbbdf2ee4c7432 glibc-gconv-extra-2.34-274.el9_8.i686.rpm 827494f0b783fd31c6e16af45fdd14a47f0a3cae612489cce002ee83a0b864be glibc-langpack-be-2.34-274.el9_8.x86_64.rpm 83796607ab2830cd69c237a686450865916405d77402ece5c2e804cdd3561747 glibc-2.34-274.el9_8.i686.rpm 83899edbce7328a3baad9d1e4e95bdb8ebf69f73327789b44d3779e62722167c glibc-langpack-bem-2.34-274.el9_8.x86_64.rpm 83b22de71ce86fe27c827ce5c1a9ac9450081ebb8697fdd48aacbb0234521f64 glibc-langpack-it-2.34-274.el9_8.x86_64.rpm 83d856af2250080d7d7350b30be26c03b0f643162e4b20e8729992c3c7e18808 glibc-langpack-lv-2.34-274.el9_8.x86_64.rpm 8672852974b4a14e276477398a79f89fb5c882bd00062faaa1829bce0f039309 glibc-langpack-kk-2.34-274.el9_8.x86_64.rpm 8908b27765a02db8cdcaa5fc7eeea5fd7d96dd533df31869a17aa29f140eb9ab glibc-langpack-sc-2.34-274.el9_8.x86_64.rpm 897890f2ab58e101ce624c7ac81d8d3622a0244a9349e2317dd90dc164514cf3 glibc-langpack-id-2.34-274.el9_8.x86_64.rpm 8979ef0a11f249f16399665008ca2c314a40b39581c4609b3c3263f54469189e glibc-langpack-hsb-2.34-274.el9_8.x86_64.rpm 8be3a63fe04c3014725a037cc3e6b67975fbda2435390ecbdba82de034b7f25b glibc-langpack-km-2.34-274.el9_8.x86_64.rpm 8f1576127a14eb6d0c01483186546c05552b800216632da6ecd3f4eb2313e528 glibc-langpack-brx-2.34-274.el9_8.x86_64.rpm 8f380735172c47fb6f231c50485e02b1be867cb04b38e9191ffba9b7006b1296 glibc-langpack-nn-2.34-274.el9_8.x86_64.rpm 8f68bab3f45bad5e4a467f886795b79b1f20e1d225269f78f8dee23d2f2f8fe3 glibc-langpack-ln-2.34-274.el9_8.x86_64.rpm 90db044b8b0ac1b317ec5627a0939dc6ed0dcffc1aabb00ea54974c884e94cbb glibc-langpack-tg-2.34-274.el9_8.x86_64.rpm 91eebfff66ccb2cbe0292ec746b95650e3e11b451084c8ddd32b35ccd682d4e5 glibc-langpack-mni-2.34-274.el9_8.x86_64.rpm 94b2267d27fcab66d22c42839839a7b5a1c192917a77633647bf36e9242e4317 glibc-langpack-zh-2.34-274.el9_8.x86_64.rpm 96b760312913effdf2b69ab44ad1b1710e78d68bb1d259d4c7d1c481d5eb6767 glibc-langpack-hi-2.34-274.el9_8.x86_64.rpm 974654793cbc142795633157687d56a3a8d0ef8dd1bd00165c57e991b91fc7e5 glibc-langpack-br-2.34-274.el9_8.x86_64.rpm 99d221eaf5f3eb00741a82ef3168777ceaaa16f4ed751297e14dd888928ad0db glibc-langpack-ga-2.34-274.el9_8.x86_64.rpm 9a548421ca6299664b7360d15858a6069a3b8cefdbb1b2753d4a6998689b1510 glibc-langpack-mi-2.34-274.el9_8.x86_64.rpm 9e5fd5484bd727f009f6aa5ee64d7dd0c875b8f9555790d1ce828e76995ee721 glibc-langpack-th-2.34-274.el9_8.x86_64.rpm 9f277b74a157d6abd95ce9e2da47c7867ee974225b0798b381142b841ca33387 glibc-langpack-nr-2.34-274.el9_8.x86_64.rpm a09c4c72c84e3d5f0d163b0ccaf52c0b436c9c4eaa2f80cb73ec7e783aca5775 glibc-langpack-ka-2.34-274.el9_8.x86_64.rpm a2a8e076cd728ac7ae28e5cc7069e5f2079aeab58cf2a05eac62114e5d587507 glibc-langpack-ru-2.34-274.el9_8.x86_64.rpm a774d47046946236490153451414ed5a3f9ba7fece1c6330dac8ce6b36f77045 glibc-langpack-cy-2.34-274.el9_8.x86_64.rpm a82eb4fbd631065533d6b6888d8462e85ca96f8d11214e202aa796dd83a14fad glibc-langpack-nb-2.34-274.el9_8.x86_64.rpm a8f1927941c00138aea3cd62262bcf68b06ea7b5db859277aabd9a8376b457d3 glibc-langpack-cv-2.34-274.el9_8.x86_64.rpm aaa9e2e904ebf8f8ed7b59f4609c8ccefc94802d547d36a10f35ea35e25f877b glibc-langpack-ha-2.34-274.el9_8.x86_64.rpm abfb2b0a2e71d5adf8c3167b0c54627ee95a8f35ab132972355820f65b38bc96 glibc-langpack-or-2.34-274.el9_8.x86_64.rpm ac2b59005e4fd76a998f6bef3f27ea710c8358d68cb83153f87d23cef5d71bcc glibc-langpack-sah-2.34-274.el9_8.x86_64.rpm ad29f8d84a55df59c2f8fd5712dba5d7a97ae433581a7d733758549748b534b1 glibc-langpack-ku-2.34-274.el9_8.x86_64.rpm ada51a7ae7f0ec5caab1f295b9a3c1ad44dfbbcc083bee7a0433deb8ca9da8d5 glibc-langpack-csb-2.34-274.el9_8.x86_64.rpm b4f040db5d18fcd398873d346519138a806e6e49e384a44ff0d3f3ccaba0c787 glibc-langpack-sat-2.34-274.el9_8.x86_64.rpm b5ef3ab96bb04d45f35b6e993279f96b78337224ca9a355a9c4a3f33c4288084 glibc-langpack-mjw-2.34-274.el9_8.x86_64.rpm b6f24ab8f1cf2b8471a76bdb67d1a2fcbeb024c6ecff94ef368451810cac5221 glibc-langpack-hif-2.34-274.el9_8.x86_64.rpm b7188d7e6f07e313868c45b7afb61b0b94a79515a3a3b3d972f305f850c91222 glibc-langpack-zu-2.34-274.el9_8.x86_64.rpm b74257071e6cd7ac050827775563751df4f9dab5470835f77b9bd29ae46ca896 glibc-langpack-doi-2.34-274.el9_8.x86_64.rpm b924cc3b7f4296f987e85afae530d8154c01eec6192351a5f34696a333f3625e glibc-langpack-szl-2.34-274.el9_8.x86_64.rpm bb23944d6757021f3fb187263fad1d2bd348e5d54a139468a8186e91c8197741 glibc-langpack-tn-2.34-274.el9_8.x86_64.rpm bbd6822a151ca7af39d8cadb48a71e7f1683e63ff5d8958af5532321667996e2 libnsl-2.34-274.el9_8.x86_64.rpm bcbe61c197a7d143f912dd9a0bd4df29651b5b6307de2c66d396b8f4ba783c04 glibc-langpack-agr-2.34-274.el9_8.x86_64.rpm bdf94459dff7c3c0d8cdd7c58c15d21263a48ffcead01497b85123fd9162c892 glibc-langpack-pap-2.34-274.el9_8.x86_64.rpm be4ca9fbe837baf9708a2eedc64a0fec4ab2e914d1ec224d606d9a8d6bcd3b52 glibc-langpack-wo-2.34-274.el9_8.x86_64.rpm c160788916d824f17d7274cb31448ac3850b29654d3eb36fb41e5121c2dbd305 glibc-all-langpacks-2.34-274.el9_8.x86_64.rpm c3f675015eaef78b9bf18eb0abda9fb329aadc54addf9fd5c0c0cd41145ed5c7 glibc-langpack-sd-2.34-274.el9_8.x86_64.rpm c577da5deed0dd3a316d046f12fc0e6751f2af4fb5629e2217c3b39f0ff03c32 glibc-langpack-tcy-2.34-274.el9_8.x86_64.rpm c5780c3509684f1c89539c0357633e3a4e677d037c52af3e16c02a57c6610b4e glibc-langpack-bho-2.34-274.el9_8.x86_64.rpm c6a62dcc61b38b23b5f57c3798d999bb1830509d06939e730359adf9d2306cf3 glibc-langpack-fo-2.34-274.el9_8.x86_64.rpm c7d1a8850383cafdbddb0f784b426acf55eff44f92a15a77c9373d24f7edd5b5 glibc-langpack-hr-2.34-274.el9_8.x86_64.rpm c814d4dd993059566b35fe63777205e5f609b661df70a4e9b12ef841a67f2acf glibc-langpack-wae-2.34-274.el9_8.x86_64.rpm c88232c7c06679cc250a0dfb4705e60906ad804ce2abfa70dcb1ca819e2348c9 glibc-langpack-sk-2.34-274.el9_8.x86_64.rpm c9a28ada8d84b39b3c801ec718d9ea1c5f9e62333afc03f6782409f82e833b86 glibc-langpack-tr-2.34-274.el9_8.x86_64.rpm c9ded58135e768e29316edbe775cd08ce7451182c7a44570918b49c76a746f09 glibc-langpack-kw-2.34-274.el9_8.x86_64.rpm cb70b8d348eabcbe39475aee3ead506742ecd2c0168637ed7b9406bd407080d3 glibc-langpack-lg-2.34-274.el9_8.x86_64.rpm cb83a93dc8a36a19ccafb39f6ef6be9ab687bc459fa95ed91cf9a1c4d9dffa3b glibc-langpack-fur-2.34-274.el9_8.x86_64.rpm ccdfc5492b2d0a242029ec108fd57948c5bd10c10330b57c17345b88150e30ca glibc-langpack-ks-2.34-274.el9_8.x86_64.rpm cd396698c11dbb4bdc1dbd85d7fa1132537d382f05adee836037e255292a311f glibc-langpack-sgs-2.34-274.el9_8.x86_64.rpm ce6d3fc371abb84d12fa996b9b0aa5d600ee8d2f0bb246c0d2d697481375b021 glibc-langpack-os-2.34-274.el9_8.x86_64.rpm cff612c31d09ed0eab1ab7a127c46988de752373c51f36e5d2deb1610e821f8e glibc-langpack-li-2.34-274.el9_8.x86_64.rpm d056c26929859c22b156010cb4126b6c20a3d1777978a99700ad7d56297ce1a3 glibc-langpack-sid-2.34-274.el9_8.x86_64.rpm d12fe6b7cca9c350fd13230602ea9fe571de54cce0fd77220e55473c3daa0b4b glibc-langpack-sw-2.34-274.el9_8.x86_64.rpm d39100db069b3880928acf1ca0d066feb55a0a14746d55c68f23d51c0fca196a glibc-langpack-oc-2.34-274.el9_8.x86_64.rpm d5a959aea30ada4b0d39f5f94b527d4957df3d55e1a5bd342085e956277a0033 glibc-langpack-et-2.34-274.el9_8.x86_64.rpm d612614ceb94184c107ce71327ce90d005538881f36269e26584fe1414deae86 glibc-langpack-ts-2.34-274.el9_8.x86_64.rpm d69d066bf41923bba777530d401491128483d83eb30e0d71ecd26a2cac0f9937 glibc-langpack-kn-2.34-274.el9_8.x86_64.rpm d70f90acba8d4fb17d6679b66742df1df184ee4c7baa053033cfb6e41879eff7 glibc-2.34-274.el9_8.x86_64.rpm d8bbca8b248dd91cb18cc54cd76f59c14f36e2b9038b96e43bc126781d63f0f3 glibc-langpack-gez-2.34-274.el9_8.x86_64.rpm dabad5780319cba511593d176961bee24c6e583c14f191a8ddd58768049b61e3 glibc-langpack-pa-2.34-274.el9_8.x86_64.rpm db087eedd14053b83fdff91dfdd298dcc32678ed5b4f880fe1032ca4444faa16 glibc-langpack-ne-2.34-274.el9_8.x86_64.rpm dd202538cc6515bc112ba405a206509d9e85c9031e4c8edcc65be1ebf0029178 glibc-langpack-tt-2.34-274.el9_8.x86_64.rpm deea04a9b31ee0c85ffdd6d41912206f30d88f1cdc8e2ac30928770edb1bf563 glibc-langpack-yi-2.34-274.el9_8.x86_64.rpm dff214c0382214383e295add68ee7d4705a3b80419301049260211b15986a37c glibc-langpack-si-2.34-274.el9_8.x86_64.rpm e077c6a201e387fea2f90038cde55de0b0ff25b4ab989a97d4640894c487ad3d glibc-langpack-ik-2.34-274.el9_8.x86_64.rpm e0abd662c48653a49adaeadc33bed31fceca2f73a9e7ad5d46767cc5cf29df2b glibc-langpack-am-2.34-274.el9_8.x86_64.rpm e2c5281f87a78b2d004f1417da56f8760d193f23d72e8d781280a1f888cf7f99 glibc-langpack-aa-2.34-274.el9_8.x86_64.rpm e2d5fdd4c3db23080cb92ab70ef48968a38208a3891e19f2ef2c1c463aad4599 glibc-langpack-uk-2.34-274.el9_8.x86_64.rpm e36e4cb31d105ca99e9087cc908c9e44faac663d58c3875c7538f316f3184e3b glibc-langpack-en-2.34-274.el9_8.x86_64.rpm e3f52cc442be75cfda4d280fe55cc875f551f8334986d4585345d49b48da47d4 glibc-langpack-ber-2.34-274.el9_8.x86_64.rpm e5b2ed168b6134df41fabbd19762e78921e0d060304f23527ff8194626cb8a37 glibc-langpack-shs-2.34-274.el9_8.x86_64.rpm e5e3dbd1ba7ea039fc39b8e3b1166e5ed53a5297d349d917c41476db31a0ed84 glibc-langpack-my-2.34-274.el9_8.x86_64.rpm e66f6debdd91e13eae87cf67e6e451bae552bcb6fa81bf636e875056e720244d glibc-langpack-af-2.34-274.el9_8.x86_64.rpm e6c70d6bd8ed54f859dc17cd971ec33b9f3edf8fbcef1ea059498aeb9fe34d8c glibc-langpack-dsb-2.34-274.el9_8.x86_64.rpm e844bb6fdb53328a2a2e7f56fd5f917dc63af67e464afba189b3770da67e4547 glibc-langpack-hu-2.34-274.el9_8.x86_64.rpm e939b72814be82a58a0f8581a59eaac1bd81fd29478512fdda43d1ac03b4b9a1 glibc-common-2.34-274.el9_8.x86_64.rpm e94b8c415d0e4dfa0fba6e85636c06f4591735e851dbcb2f648fe99bcf96e6c2 glibc-langpack-lb-2.34-274.el9_8.x86_64.rpm ea842d689920410d96513504824e08491b84afe86dadeac4e3b14ad45972ba12 glibc-langpack-mn-2.34-274.el9_8.x86_64.rpm eb03bd43a3972e96431502c316bb44fb4dde881aaccf38492fc5d7bd28aab294 glibc-langpack-ca-2.34-274.el9_8.x86_64.rpm eb6fd0152b9ae43c83488a49a2430992a3e2cc4e925a48d331fbb7671c6215e9 glibc-langpack-kab-2.34-274.el9_8.x86_64.rpm eb9382bb7a6702aa703cef291784f49f90bffa0c3886f3b67a3c50b9f4183862 glibc-langpack-fil-2.34-274.el9_8.x86_64.rpm ec321f05b6605c8c8852d5cc1f5fc49d212d3d9dc395b5d7acc64a4cd926589e glibc-langpack-ms-2.34-274.el9_8.x86_64.rpm ed38023e25784223333468a77bd7271f7c8d87377b1fe5b51b59f672cfb8bca3 glibc-langpack-nan-2.34-274.el9_8.x86_64.rpm ef400a1a80a910be2c0f8a9a49cbe80828569ac30d031c2a5a48d832145c30b1 glibc-langpack-is-2.34-274.el9_8.x86_64.rpm ef9e218e3983d65436cacd3aab4355e5e7c5119a0618ea604cf226b74951d4b6 glibc-langpack-quz-2.34-274.el9_8.x86_64.rpm f3431fbd087b1a3cedeb97ddfdea8d398f1cae7499b7e26c11291c41417309eb glibc-langpack-ja-2.34-274.el9_8.x86_64.rpm f4b9141f3b0d362f670e704ff34dc8531db2109e5e244dc0aa1deb099cccef4c glibc-langpack-fa-2.34-274.el9_8.x86_64.rpm f4f74cb6b69cbb3548aa4a8a70a7b5e53e4218071547bcdd051c2cd3553b16f0 glibc-gconv-extra-2.34-274.el9_8.x86_64.rpm f57f5a8bf83e85a237ce94e68fdc29c33aafd855d54d847b8cd4f9f444845b4b glibc-langpack-mnw-2.34-274.el9_8.x86_64.rpm f848c0dfddcb2e38dd4438db78b6d73c51a1b7785d3048d008530afa5442cc49 glibc-langpack-sv-2.34-274.el9_8.x86_64.rpm f8db129c670e7b7e539542cf24c53a56ef3754e023034d90eed76f887c9250fe glibc-langpack-ve-2.34-274.el9_8.x86_64.rpm f92c6930c4a8051f7e245a787dfc526124c34eaf34835bd6fd9cbe4b6477a436 glibc-langpack-mai-2.34-274.el9_8.x86_64.rpm fa23aebe6858a6a7f6e280c97a81642dfbe69249af63e4e7d74933fd6322b128 glibc-langpack-hak-2.34-274.el9_8.x86_64.rpm fbd7fc9de19e26a383873cab65a87a1a432e0d435744797dc33da7feda88f5b4 glibc-langpack-sl-2.34-274.el9_8.x86_64.rpm fc335f945c88f613d73e4141815af17753350b05b1230481fdc90e0a5b1d5832 glibc-langpack-te-2.34-274.el9_8.x86_64.rpm fef6de4f5b96032124e22361265b98ce56f14b3688f7399133ed9fed26addb87 glibc-langpack-hne-2.34-274.el9_8.x86_64.rpm ffce0cd88101350c63a5d5a2dd4673a74471921478f7e9c81238035bc935bb89 ALSA-2026:43307 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980) * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-5.14.0-687.29.1.el9_8.x86_64.rpm 1aba2d166910d12313a1c9d260586e640bf8dd02caa3088dd4f38e04264d40eb kernel-debug-5.14.0-687.29.1.el9_8.x86_64.rpm 1ef63157181ff40ffdfcdd03894f90e6ac0de35ca7ffc5092f455c3f25a93f10 kernel-debug-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm 2f6312b7331c06a6fea31d29f8d81d2ea176f9f42f4339a1924b5c880cd05c8f kernel-debug-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm 420d2a0ec7b6266fcaa61406049f0b718941978109393e8bfc498a7ac3433e6f kernel-debug-core-5.14.0-687.29.1.el9_8.x86_64.rpm 4a99427545325e7fbe8d55d9c91b7cdf005f95f518196461b0bd770787f2cc80 kernel-abi-stablelists-5.14.0-687.29.1.el9_8.noarch.rpm 56e625caf91c0ee587ef39ae39b9b7c5f2306573ba21bf90507ea1985fcdd49d kernel-tools-5.14.0-687.29.1.el9_8.x86_64.rpm 6ace252797a28cf1e9a1c411be08485382e346064a5376a0dd40314ff6f1b6e9 kernel-debug-modules-5.14.0-687.29.1.el9_8.x86_64.rpm 6cd92f06e86786516693f183de721e9930257dc52e9b5491b651f2d7ad9c0145 kernel-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm 7b662568da140e57c5a89bbe349af20f98ee12997364e020fb8384ef332d96d9 kernel-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm 83a8c594f843f735b905d297ce3a133fdfbc2d5d0b834a180aa3dd32be967414 kernel-debug-uki-virt-5.14.0-687.29.1.el9_8.x86_64.rpm 8b660d0d7cabdc4dd3af094cdd4795ab9e10bbc3b7856c3d96950dd801e369cc kernel-tools-libs-5.14.0-687.29.1.el9_8.x86_64.rpm 8f992cc6343502f98795c9f89cd0934a3e5d79e88bb64b4413e089bc7f45c679 kernel-modules-5.14.0-687.29.1.el9_8.x86_64.rpm b5a78333d7808b7db6a60d6dbd882fc87ea9d0aa2a7eab7be24473802fb54269 kernel-core-5.14.0-687.29.1.el9_8.x86_64.rpm c3f21370be97e12f577d3e4ee1dc66283d735df0faf60f5c7a647757ba2c3ab4 kernel-uki-virt-addons-5.14.0-687.29.1.el9_8.x86_64.rpm cbb2911d37f429576c9140da5efe9df45e6b34454c53052b4e96ff2dd44e7dec kernel-uki-virt-5.14.0-687.29.1.el9_8.x86_64.rpm f037c96da5d4c9cfe35beb31bccf86eede39e23ed4e2051b2bcc79285016941a ALSA-2026:45192 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) Bug Fix(es) and Enhancement(s): * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412) * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm 0f195cb5ebae7ef84deaeb76823ce674f15545bc11a7fb000a74b680b3d717b1 kernel-debug-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm 14e8adf5c66619b6452beabd350ef4215d7eb5d5e6ae0c2e47a622f59afca7c5 kernel-core-5.14.0-687.30.1.el9_8.x86_64.rpm 16bb3c177529f537b669d892f03d114af13e0912a020ea1eda5ea9825739ea85 kernel-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm 323e1e1fb756d7ece56979a587b8209b1a7b37dcfcec5c065d450a94fab889de kernel-debug-5.14.0-687.30.1.el9_8.x86_64.rpm 3ac27fa920a4d1484b518697e4dd54c0119692f7a598e185fad455a7d2a92f10 kernel-debug-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpm 3b7e52770fd9fafb5391014fbdeded364da8606b4311cf7c0a17326680d06090 kernel-tools-libs-5.14.0-687.30.1.el9_8.x86_64.rpm 4e2b8d8627d75358dcc017fd04df29199d8ca305af1840b0e0824537baeffe31 kernel-debug-modules-5.14.0-687.30.1.el9_8.x86_64.rpm 510eecc8e682e42aee7d38c2a45d1b64d3ebe998717aed5aa9a19e69f7b83273 kernel-abi-stablelists-5.14.0-687.30.1.el9_8.noarch.rpm 690b3817eda0deafd547bf0332dae3a83fc06c4c1900e37e5f78a02e2c6e5ed3 kernel-5.14.0-687.30.1.el9_8.x86_64.rpm 715479cda841f2808da06d97d7c03b7f0d51b32684c56f57ab7165ded9773522 kernel-uki-virt-addons-5.14.0-687.30.1.el9_8.x86_64.rpm 79b2af8ce1a02c5e0b8fd7968fc7bb5310cf061e1a089d81b222667257d6f8a2 kernel-modules-5.14.0-687.30.1.el9_8.x86_64.rpm 862fc162a9683e08480de484bd01a85cee4f126f1c0157bc4acfced4ab1f6d48 kernel-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpm c623b5532fa59b794c7ed3ff44abc76fe0a09952998a1561995e2ac63dc949fb kernel-debug-core-5.14.0-687.30.1.el9_8.x86_64.rpm c6482dea92288725e23b665c1226627c83d36c66240efcb6b5bab0afb229614c kernel-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm cac36beb0be493c9dfdc45b2071df44508dcdff2e390a90d95d413ab69ab60ed kernel-tools-5.14.0-687.30.1.el9_8.x86_64.rpm ce22e3f2c7ddab0a85289bd043d7796fdd1d407b685f85671f97bb3a91ddd151 ALSA-2026:47040 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797) * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) Bug Fix(es) and Enhancement(s): * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257) * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-5.14.0-687.31.1.el9_8.x86_64.rpm 15a205ee3415414dd9b121553c0e97c000e12598ae75b83d2cb92e57bc7a5dc5 kernel-modules-5.14.0-687.31.1.el9_8.x86_64.rpm 167e6b1762b8861569fc4064aae33aa726e97f84e25619e2a15e7ba3cce69fce kernel-debug-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpm 486116f6d2f650fd48a08794a21cacec12b96b2132a78f1373df7ddec05659f1 kernel-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpm 59972b8e7cd4262dd5e46832bcda8284b2e464599eeddc3d7cbf9dc86b682f31 kernel-uki-virt-addons-5.14.0-687.31.1.el9_8.x86_64.rpm 5c12d58415c39a7e6904c3299f6a798c4da56a66b17f465d42f96f15201557c6 kernel-debug-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpm 5d53c0bc9e556982f1db7cde9f3355e34a6e122b7823063a379e9839c3abe1ed kernel-debug-5.14.0-687.31.1.el9_8.x86_64.rpm 6a3413df72399069105dbee5d5385ac30463459b1ed1714564779ad537329f42 kernel-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm 87d2f27642f0ec03087aa766b52ff581fa39fbae2a47009a5bf5315294cb4538 kernel-debug-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm 8c2818bf5428afaf7f69201ae2b283db62dae5e21b1d0e49ea367bca8d320bb3 kernel-5.14.0-687.31.1.el9_8.x86_64.rpm a2728728070193d104d79e42075188d11fc1f62d9907499a3e59180fe790a956 kernel-core-5.14.0-687.31.1.el9_8.x86_64.rpm ae627f716ed285759e67e58898cb6d3cf06b8ab9ed06a8bd31cf7463053e9743 kernel-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpm e37b43db7fc3138655bed0dbdeef16d4f80f0557e32384d792845afc37923847 kernel-abi-stablelists-5.14.0-687.31.1.el9_8.noarch.rpm e67981a9974c32791a171949c25e5ec756eb1a6a5f99946ea843951567dba6af kernel-tools-5.14.0-687.31.1.el9_8.x86_64.rpm eb76d62bee3a09c1816d2a7b1b03838da98a15303a6aa99723d19c73eb6af26b kernel-tools-libs-5.14.0-687.31.1.el9_8.x86_64.rpm f9f839ad24f749850d2044a4c49fdc89293113a8a8590f4e273fb6daca35f89a kernel-debug-core-5.14.0-687.31.1.el9_8.x86_64.rpm fbb9581cf6c5bc52eea3507b3468e6df695c8fcd1d9380cad1abc4d2a37d77e5 ALSA-2026:4759 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818) * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-modules-extra-5.14.0-611.41.1.el9_7.x86_64.rpm 0437d4e46cd7c71f1ecda6be165b4b360fcb6f07124f972a9f7bbf11760f86d1 kernel-modules-5.14.0-611.41.1.el9_7.x86_64.rpm 088c117a3989c03c11b6cd274598d3b1bd17db3524d671269aa4a428ffe09700 kernel-tools-libs-5.14.0-611.41.1.el9_7.x86_64.rpm 2001429cc208917228905edfe4f8d22a61d7cb801e198181436cc5aaa7b8b795 kernel-core-5.14.0-611.41.1.el9_7.x86_64.rpm 314739290768937d6f22f1be8892d81e298d4636b0c1355ecfb765cf62f66989 kernel-abi-stablelists-5.14.0-611.41.1.el9_7.noarch.rpm 37e98c49472b9e1d34ae368727ba027212274c4bd986b63f6555a915ba64bcc7 kernel-debug-core-5.14.0-611.41.1.el9_7.x86_64.rpm 3a8db1b770767433b69845f033d5b7b17e7e68372ce244d9d84d177f27ec9a1d kernel-debug-modules-extra-5.14.0-611.41.1.el9_7.x86_64.rpm 4c398e3a8834b174b328f781e58ea78cc8aca5fd3bc178c155db1385f067b154 kernel-debug-5.14.0-611.41.1.el9_7.x86_64.rpm 5e9f3caf1beae64554e8923a0240b7d58f2666a3140ea8e2e91e62344b87de1a kernel-uki-virt-5.14.0-611.41.1.el9_7.x86_64.rpm 71e02776e1758d06471e1f84adf708c6faccd51ccb6cd1384ca734ac03a6cd64 kernel-5.14.0-611.41.1.el9_7.x86_64.rpm 8263fd9143ee08ef7a7f82ae52d62fd33a63137e336e070badef7e50becd858e kernel-uki-virt-addons-5.14.0-611.41.1.el9_7.x86_64.rpm 93399a50912b2b3f4327bab2f23a46cedc73350134d1b60996cd794c69d5c498 kernel-modules-core-5.14.0-611.41.1.el9_7.x86_64.rpm aab79e2fa2b181de3393e104de47f29cd02e521b6143ad16d149b9898eb22caf kernel-debug-modules-core-5.14.0-611.41.1.el9_7.x86_64.rpm c367334dfbe78fefc77158351f0751d9f6572c0160bc1236c5aa2a4d11cf3c63 kernel-tools-5.14.0-611.41.1.el9_7.x86_64.rpm c5eb4136067c24bca5ae63eb225a429b9b8308c035fe8eb64a09120eb6bf42e8 kernel-debug-modules-5.14.0-611.41.1.el9_7.x86_64.rpm dc34bd49541c794dd6e04e17f5df1df56122c1e89fa51fbafd369fdddd84958f kernel-debug-uki-virt-5.14.0-611.41.1.el9_7.x86_64.rpm eddbb4ebed35513baa842e3da3698656e355218c433602488da0c8f27142c203 ALSA-2026:4760 Copyright 2026 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default grub2-tools-extra-2.06-114.el9_7.1.alma.1.x86_64.rpm 04944a480840d6b871d4d404ae2078282db1a7ee24a7125e230b2873c808d049 grub2-pc-modules-2.06-114.el9_7.1.alma.1.noarch.rpm 07f3c4d11cfb3c9c18de75619310901be03ba88b91860f6af22eee5435cd9eb2 grub2-efi-x64-modules-2.06-114.el9_7.1.alma.1.noarch.rpm 095a388a5ddc5bd4cf2750f29ee309dca75040c15cecc33c941e1dc070c1531a grub2-tools-minimal-2.06-114.el9_7.1.alma.1.x86_64.rpm 1bde92085aefe6b64ea8aa8204ff127ca6f0d2cede622daf7b8e4b4fd3669b7e grub2-efi-x64-cdboot-2.06-114.el9_7.1.alma.1.x86_64.rpm 3a8be44d0c1d87c3510c6c60f7d04739869afe3f56d1507fd706f95287c83657 grub2-tools-efi-2.06-114.el9_7.1.alma.1.x86_64.rpm 43ab615700f66a0387109b293ee4f4d6d7aece8d509ada9dda0c1dfd15fc47fc grub2-pc-2.06-114.el9_7.1.alma.1.x86_64.rpm 513642f6fc88f25d2859dcc53a09c2d693bb42685e0584226937cd10083f88e3 grub2-common-2.06-114.el9_7.1.alma.1.noarch.rpm 5787f986552c5cf8080b4712a8853e3c6fade305847d56c463ff18e640988b48 grub2-efi-aa64-modules-2.06-114.el9_7.1.alma.1.noarch.rpm 725215de90d8f0da4350416562fbde92758da167fb9e88dc51c568dbc6ea42a9 grub2-efi-x64-2.06-114.el9_7.1.alma.1.x86_64.rpm 90c1dbee63faa2920dc9f8d075d2637c2640488a952dfb40423269a76a1f3654 grub2-tools-2.06-114.el9_7.1.alma.1.x86_64.rpm a97a89104f5de6271e3b24bea3773e274c73bdcc07ce3b5b6800269264f4b535 grub2-ppc64le-modules-2.06-114.el9_7.1.alma.1.noarch.rpm f13ce2aa16994df090d24fe542a11bf1c5539259be2a796e549043bab49b5613 ALSA-2026:47756 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654) * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002) * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssh-9.9p1-9.el9_8.alma.1.x86_64.rpm 96d48b2a631313caf89453e36e677f54aa0d59c964f82d7aa84a0bd281c6ad37 openssh-keycat-9.9p1-9.el9_8.alma.1.x86_64.rpm c678556e12b9010285264fe17de3d1dc87376ce3e3e44b9a3ca977b9bb97e7f1 openssh-clients-9.9p1-9.el9_8.alma.1.x86_64.rpm e1e9916c61a6f7b38e72381da08e4fe57d89d9d5e7be0d8b90a41562cc75489c openssh-server-9.9p1-9.el9_8.alma.1.x86_64.rpm e49751e6b3d49648038243d5d6a3b1fe2bd3a146dd2d02fb69a62c2d34c89aeb ALSA-2026:47982 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455) * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456) * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693) * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856) * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-minimal-8.2.2637-26.el9_8.13.x86_64.rpm 18a72424b5b9cac5e27a824349c1d6dc5bc7f7967693fd02f08e6e85aa3aedf3 vim-filesystem-8.2.2637-26.el9_8.13.noarch.rpm 1dce4bf19fab1f7744521428e9e7318704d0264b3f6f15609608cbc8630aff78 ALSA-2026:49212 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-5.14.0-687.33.1.el9_8.x86_64.rpm 05bc78831f7efac34ff97037289b1202fddfec5f3f40974c41d9ab6038b8d6bc kernel-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm 21c5818d0432042eaffbb27ab2270aed0433fa8b4ecc5dbd2d2e99e4b877e3af kernel-debug-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpm 2a6be1886f99af2b828b785e158004778740ebcc58833cc7d8ae813367ef8fdb kernel-tools-libs-5.14.0-687.33.1.el9_8.x86_64.rpm 4fa24094a22db5d3d4a81640eab02b6f14c15d5152227212997e34e7e8ef6f5d kernel-debug-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm 7afe7406b5f996937b2179c5fb7b65a3692f22460b3e139971a3b3fe961e4757 kernel-debug-core-5.14.0-687.33.1.el9_8.x86_64.rpm 7d1c2ee64c698c0a48387f3bb52c7d6d101cae30404a7b5d31fd20640db63cae kernel-core-5.14.0-687.33.1.el9_8.x86_64.rpm 949b2b2c5542e73dcbee10b6a90ef901330f90996a5316f121958f72aec01d69 kernel-5.14.0-687.33.1.el9_8.x86_64.rpm 9925c385951937f17d4df1d81930a8a96063438ce03ee79a93968986d6f5a35f kernel-debug-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm 9cb3bc46cecb45b1ea7675af95653e18834699aa7f26c95a7d85763bd10b5559 kernel-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm 9dbf1c45604d6400637793d5d445194159f92904a1765453dff82e6ff8cc89bc kernel-debug-5.14.0-687.33.1.el9_8.x86_64.rpm c92aa38ee95e5111bac5ffe95ba01ce362c8e91bf0840984e6b2713111341674 kernel-uki-virt-addons-5.14.0-687.33.1.el9_8.x86_64.rpm cad461c3b3b6c7013dd4292caa41bfe7ba66960aae4f205d60902045db4c6464 kernel-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpm db7f020f4b46d1b08dfaad46791e3d9384ccd60089add517eb78805f6da96c85 kernel-abi-stablelists-5.14.0-687.33.1.el9_8.noarch.rpm e4fbd5c2b2f15de80eb703be6f33f54838b5895f178d97c0856e2d4819d78939 kernel-tools-5.14.0-687.33.1.el9_8.x86_64.rpm f05ad215532b69f2bdbf43d719988e71948801ae56636918ab988cb7f749adf1 kernel-debug-modules-5.14.0-687.33.1.el9_8.x86_64.rpm f14b360fb47841499bfe44796ebc8741888b14c2207314e8c1aa5aa3d1f3d0fe ALSA-2026:49667 Copyright 2026 AlmaLinux OS 0 1 Moderate

p11-kit security update

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default p11-kit-trust-0.26.4-1.el9_8.x86_64.rpm 7d5b5a1df2c5bf68eae627e3407ad6158129f8f3971e3abd7da8803511b1f21e p11-kit-client-0.26.4-1.el9_8.x86_64.rpm 8398349a1b46ce4705c1adaac43366eb236dfe126ab9bc69dd56fab443ef4dc1 p11-kit-0.26.4-1.el9_8.i686.rpm bda14fe3f0c812ce5829f24c58050a3bd60e47daca49c4222a14c6576577b605 p11-kit-0.26.4-1.el9_8.x86_64.rpm cfe434c3548de6d93181399d2bf24e4af6ad92c4948ba0d178262b026e4e84d0 p11-kit-trust-0.26.4-1.el9_8.i686.rpm ff0f36a806ca5b14208177eb0487d5b0a87bd168b805aa2007a8ced46ce4c3e1 ALSA-2026:49870 Copyright 2026 AlmaLinux OS 0 1 Low

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) Bug Fix(es) and Enhancement(s): * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273) * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430) * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021) * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm 19ea475c8ab4ab2e084f850954475ae7182b2c0c65b0d38a4bc900252b60aee0 kernel-debug-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm 3d3fa61b4133889ff9b9902a75a8c5359e1d641ac3fe8ab95275e1268b1ab064 kernel-uki-virt-5.14.0-687.34.1.el9_8.x86_64.rpm 43e31e97c9dbfafa50693cd9353d264a0f32418041f01cde35c13d806a599ffa kernel-tools-5.14.0-687.34.1.el9_8.x86_64.rpm 5a8d69398a3d126cb61885473f7830580c133ced45955bb5b92b12ef0c653f9e kernel-debug-core-5.14.0-687.34.1.el9_8.x86_64.rpm 70d30d73702f0c0f3f7b8ea2559c6da7a7b05347f74427467e309b8419e8c680 kernel-tools-libs-5.14.0-687.34.1.el9_8.x86_64.rpm 92048e83dec087339d38dd2b50348c17001eef103fa40e1c56af2abf3c758951 kernel-modules-5.14.0-687.34.1.el9_8.x86_64.rpm ac317b83cf8b363d8a41d5a935658fe4d93dcceeb72fef526d85a3d2057470d7 kernel-debug-uki-virt-5.14.0-687.34.1.el9_8.x86_64.rpm b1f95b77ea9bbe159b485159239038b67a897e85e1e015aa54da4f8739c0dce8 kernel-uki-virt-addons-5.14.0-687.34.1.el9_8.x86_64.rpm b204f5d488bd9df05057c47e22e038d14ef1d7c0b837d34941624b67ac4c051b kernel-5.14.0-687.34.1.el9_8.x86_64.rpm b58cef5c6cffa68c364ad19f138b6a7225b5f86525a5f2c5722f143b277eee53 kernel-core-5.14.0-687.34.1.el9_8.x86_64.rpm bf0480826adb257f334e554fea819bde548c271f7951922ced909adefff2e025 kernel-abi-stablelists-5.14.0-687.34.1.el9_8.noarch.rpm c2a3a31c8253584a56dc19e02bd59754312a0e42a4a8c1b82f9138ffb7da1a48 kernel-debug-5.14.0-687.34.1.el9_8.x86_64.rpm c957d3ffcff2c7df771b5e7c1c38e7484e359d4105682ab176e89e150f57c464 kernel-debug-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm d3ec847fdd0e50257f6d4dde21eade80f2f343bd44b04ede14214a2507f8b991 kernel-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm d733a45fd15e052823f43cc4cd643cc80b8f9553a4a619816fbc12aad7d52d86 kernel-debug-modules-5.14.0-687.34.1.el9_8.x86_64.rpm f59c9edd98f7a08cdd5346696dfe4b97e35b2d5d577e3abc644b23c93fc7c48e ALSA-2026:50141 Copyright 2026 AlmaLinux OS 0 1 Important

sg3_utils security, bug fix, and enhancement update

The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets. Security Fix(es): * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313) Bug Fix(es) and Enhancement(s): * sg_inq output conformance for SCSI name string and ATA fields [almalinux-9.8.z] (JIRA:AlmaLinux-188130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default sg3_utils-libs-1.47-10.el9_8.1.i686.rpm 122db83b2f7ce6e709634403e243bee26712187998c5be135d809004b43f1d03 sg3_utils-libs-1.47-10.el9_8.1.x86_64.rpm 1271beb8bb8cb07e0f5af8b32c06c422075ceb61c8359213ead383ea51ff66d0 sg3_utils-1.47-10.el9_8.1.x86_64.rpm 54c42ddf785e7a769eef48b6e924cade621e3356787e9275bb08aadb9a177865 ALSA-2026:50147 Copyright 2026 AlmaLinux OS 0 1 Moderate

libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libgcrypt-1.10.0-13.el9_8.x86_64.rpm 400e5e650ed8ce295cf1db5ef051cc748042df93f221548b874bc1341975856f libgcrypt-1.10.0-13.el9_8.i686.rpm fd892f6b6e54339a7410e80672bd3829814a94e996f8372883cfacf6fb8710bb ALSA-2026:5080 Copyright 2026 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive (CVE-2026-4111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libarchive-3.5.3-7.el9_7.x86_64.rpm 910d6bb0e70fcf04bcab3f0678e2a9689bddfa8e866c1699148ddfb3e7b53c85 libarchive-3.5.3-7.el9_7.i686.rpm c4edd81e298f9715d85566ad1a5a5ebaf0a801e8a96fd8210ce9161e71922a8c ALSA-2026:51035 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331) * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058) * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-abi-stablelists-5.14.0-687.36.1.el9_8.noarch.rpm 1067ec41a63f8c70589fd60a565b3c47c3aca1b631c7496e05bca04fd3473230 kernel-debug-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm 4d0a9b064be0f2995cb49b1b4bf58b9c8db4cc3c7992f1cfd4a35f88589af1d9 kernel-debug-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm 633a4bc1f6106c7702085392797376363f78f30e64c9c8183e2011850c8bfbad kernel-core-5.14.0-687.36.1.el9_8.x86_64.rpm 68c422644709ab08a0107f80127ecd11a053fc62146727a23ba2a123fd40604f kernel-tools-5.14.0-687.36.1.el9_8.x86_64.rpm 6d2224c59d2157e4326ea34070b7fed760ba82461924fd84caff8bc62b47bb7b kernel-tools-libs-5.14.0-687.36.1.el9_8.x86_64.rpm 8266a46f8c2b9c1d1ecc07c316ac9106544401251f16083198935faf9a3e69e3 kernel-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm 8626aaa9c816ecaa336a2d048f9525ae38a3c6c46ffa461077bfb9742d7dba3c kernel-debug-5.14.0-687.36.1.el9_8.x86_64.rpm 92039a73c49bec0d4398407c47516b81a8a4d65855b9d4dcc1141668eca49b69 kernel-debug-core-5.14.0-687.36.1.el9_8.x86_64.rpm 94824874c2b6a48988b84b99263c94783566ce949c18801a6e39b2aa0a0d996f kernel-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm 94986b83cde48aa3eb0ef165e9799996547e8834321434b381cad129748e11ae kernel-uki-virt-addons-5.14.0-687.36.1.el9_8.x86_64.rpm 98eb31d83ca30ab99b593c8d36b4a31b6db419d1859a55ce7fc99089ab2b2d40 kernel-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm b2951cff2ac38a661db86861835adb01365df7ddb358019f7faf66cd7db87971 kernel-debug-modules-5.14.0-687.36.1.el9_8.x86_64.rpm ced3338ec2e0b7d0dbd05a1beae6eb9d74526a1b3000a49afed793ee5639b36e kernel-modules-5.14.0-687.36.1.el9_8.x86_64.rpm d1c10422f8f850b011acf253a72e390a78b8aab1f783786c309bcef24b8a9878 kernel-5.14.0-687.36.1.el9_8.x86_64.rpm e8588b13074fe6576188f8a268a1fc47075a1695104a2876ce0b2daed7ad783f kernel-debug-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm ebb54e64b3c12fc234084dcdfd1d3827f1deff17bc667fe5861372bd16c212d8 ALSA-2026:52674 Copyright 2026 AlmaLinux OS 0 1 Moderate

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() (CVE-2026-14164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libarchive-3.5.3-11.el9_8.x86_64.rpm 4ad0e3ea4ba68372493ef5d78d3a1da6531d567201c9280f0f8c46fff90cebbb libarchive-3.5.3-11.el9_8.i686.rpm 6a56ba22d6d4856bf165aea6f05849e493efe7e912df2f1c55169d9727dfaf33 ALSA-2026:53329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036) * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578) * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580) * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-uki-virt-addons-5.14.0-687.38.1.el9_8.x86_64.rpm 030a1373795caf7a8a11c7e753b94ee72fbc972efa97f52ca8abd73a83245c52 kernel-debug-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm 0465433714fbcd6eef380e553974e49216e02bf86823d59b1880d3ce9d002fcd kernel-debug-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm 079b6555c039f8628b8ed2448d39eadeaa29f031b5668c1c5aec3ea80c27a060 kernel-debug-core-5.14.0-687.38.1.el9_8.x86_64.rpm 08bd2c974036147aa255c82af5bac983f9334443b5c4ca5d61df69ee201dba3d kernel-debug-modules-5.14.0-687.38.1.el9_8.x86_64.rpm 21063ee785d6251aa4612b125b4e23e82a01244417de9d126aed3d3cd7558f6b kernel-tools-libs-5.14.0-687.38.1.el9_8.x86_64.rpm 3dc3e003ac0ee7448bab167d4b546169df2153decfa106b27c39efe5dddd9526 kernel-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm 430e710d568a7061559e4bbe6cb937f534d2684314d57445703ca65c52a8d93a kernel-modules-5.14.0-687.38.1.el9_8.x86_64.rpm 5f4b77c3a03279a72cc63e7c6245f1c32e5471c9d4213487e6832f41c67d687e kernel-debug-5.14.0-687.38.1.el9_8.x86_64.rpm 6ee18cf5cb6cd5a1087791f7aebdb800aaff059cdc52ed8a36cb4db352717a12 kernel-tools-5.14.0-687.38.1.el9_8.x86_64.rpm 78c89c17bc00018d1f1d8cb844c76f3104bb2970d41af42ad211973c4d2103da kernel-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm 862ea7f33257d56ce0aa20a1d517a42d5040842073d61c7e89cd49a11657eb2a kernel-core-5.14.0-687.38.1.el9_8.x86_64.rpm c30dc620734de841ef84c1dfece3d80daa548548a25fa2ff6918c2846bbc5278 kernel-abi-stablelists-5.14.0-687.38.1.el9_8.noarch.rpm c885d6bbfa62fdac0cf46efb6001990209378b3dbdbbf3e658d39163f3f59378 kernel-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm ccd8864ec94324955c0ac06054789d23852a426f707eb14b7661159d65df1de0 kernel-5.14.0-687.38.1.el9_8.x86_64.rpm e020d3441d09c35605131ec5cdca159782151a7211f6eeacbb267123d72f57f2 kernel-debug-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm fcadd8e4bdc510c99a3277c0ee76e2d0218e8daa569a2d5e2f1c94ca3b0dca2e ALSA-2026:53844 Copyright 2026 AlmaLinux OS 0 1 Important

iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks. Security Fix(es): * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943) Bug Fix(es) and Enhancement(s): * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2.i686.rpm 79feae4773103883af45d5940511d433e82f2e064a4ce4f31bc16a3fabe1121e iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2.x86_64.rpm c0f448fd5f45d9c70d9a5ba52baef0a33310b5ca8c26115155373f58e4fb1be2 iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el9_8.2.x86_64.rpm e4966a69da9eb162364071a31acba37be99736223bc31a8120db498e60e05c96 ALSA-2026:53847 Copyright 2026 AlmaLinux OS 0 1 Important

isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network. Security Fix(es): * open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default isns-utils-libs-0.101-4.el9_8.1.i686.rpm d169c24f00d4199e22a21b217efe00116ba22bad73e2d6b4afed62f663fbc6af isns-utils-0.101-4.el9_8.1.x86_64.rpm eee3a682f10b6f9a9d3b57b98d9128878f40ca528d90110826d4d48de4731752 isns-utils-libs-0.101-4.el9_8.1.x86_64.rpm fa8d80ed7948b543428bdc27a48ee39d3b19a0a711f44b36bbac0ecfa8a558a5 ALSA-2026:54268 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libs-3.9.25-7.el9_8.3.i686.rpm 40bfe60e5ba02118a483fbe7f000bd7b00e7847427075fceca461318237a07f5 python3-3.9.25-7.el9_8.3.x86_64.rpm 834e614ec2dd6c4c1e37d1ff440eeaaedd27414ee7c1ceeb0cbcfcc83673c7d8 python3-libs-3.9.25-7.el9_8.3.x86_64.rpm bba802546e1f5c0e4fb69900e46aafed6797b736992df0c65dce92a2ac675d9b ALSA-2026:54443 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434) * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm 045f28d56679ac345835a08c0a210824da026b98461b8d433e723fb03ab24c0f kernel-tools-5.14.0-687.39.1.el9_8.x86_64.rpm 0c4f5d8e37c3379feabc968fcc39ddf74ce7933613a33aea70fa985794864b63 kernel-debug-modules-5.14.0-687.39.1.el9_8.x86_64.rpm 1fd1b4e3a1369243fa9d384f87ed03c391a44ffbcd0305b279cd9bdb2202307a kernel-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm 45c75946300e18b734a9ce00709587486152963d708b51052df7fffce994997b kernel-abi-stablelists-5.14.0-687.39.1.el9_8.noarch.rpm 4e81848e8122745226ed38a29ccd7766946a6ae878793ba29a4625c23f6b8c14 kernel-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm 4f0f58631c76f64684ff934086c716f26890ea5a754d0c727533e627c40f0725 kernel-debug-core-5.14.0-687.39.1.el9_8.x86_64.rpm 5db3dea4007bc6f61e8344c23a5b811da3c801fd3811163dc9dd693721d47c45 kernel-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm 7ea46b8ece78baa6068f16345c915853d931228f478d6f9860a4af5962ab8dc0 kernel-uki-virt-addons-5.14.0-687.39.1.el9_8.x86_64.rpm 950b5b71592d80022c0830e59ebd506dbb235a7a7a99b49a9723197aefefcaa6 kernel-modules-5.14.0-687.39.1.el9_8.x86_64.rpm 9a03d228c0914d8228184b0e30e152905c1df54d3a25f94c4c1cd3f721e571b2 kernel-debug-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm 9ab5aac0e36cff51951c0f9e58cd6e82011a4b3bc58e90e1c8c419c89739e971 kernel-core-5.14.0-687.39.1.el9_8.x86_64.rpm ce41c1904670314bb5347225b93ffd9670ba9d407fb4da36aecb558344dcb128 kernel-debug-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm d82f0f60eefd8133c2847067e76f0c4d53cb03dc894e4750c8e6c8ee110d187d kernel-5.14.0-687.39.1.el9_8.x86_64.rpm e09bb4bca77cbd666a9a52ae66ebb1ce1e3e4311b3910ff8f86d2a7874342b35 kernel-debug-5.14.0-687.39.1.el9_8.x86_64.rpm e8d0bac3d6f10b63babc6fb72f91eb3188468e9c5c6a0aeab129eb81e3c9ec1d kernel-tools-libs-5.14.0-687.39.1.el9_8.x86_64.rpm f2e29ed29886f6630bcdf274ddb1ffd6374e1c7bff61a91bd1ecb9dd9b37408c ALSA-2026:54484 Copyright 2026 AlmaLinux OS 0 1 Moderate

python-idna security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-idna: idna: Denial of Service via specially crafted long inputs (CVE-2026-45409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-idna-2.10-8.el9_8.noarch.rpm 8677ccc80e47b4dd91906c657b970657e19735b90d9762f8d4340e4a52deb317 ALSA-2026:54571 Copyright 2026 AlmaLinux OS 0 1 Important

dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default dracut-tools-057-120.git20260728.el9_8.x86_64.rpm 4c198f85590485f31b6997705d467b72445c53c6f0b7655f826b53600f828278 dracut-057-120.git20260728.el9_8.x86_64.rpm 67f190db9dcd4ad359f16e099eec505b1e645f22b59462b402a09a4605ad0fd4 dracut-squash-057-120.git20260728.el9_8.x86_64.rpm 6e627691d2d4a82b9d4cefa92417320930b46083e16bc6b6d32bee2965538f83 dracut-config-generic-057-120.git20260728.el9_8.x86_64.rpm 7879133556ba05d495b1c21307b521eaff8c1928a670a56e003ee496b694ae31 dracut-network-057-120.git20260728.el9_8.x86_64.rpm 825c0c8bd10fee9d509e1205cead6c0a0140309d69344b6901bb4b27bea097bd dracut-config-rescue-057-120.git20260728.el9_8.x86_64.rpm ffb63275ccbe8a1ca1f1979e0f7692c28dedab3b15a81aa34b4e583c309ef7d2 ALSA-2026:54662 Copyright 2026 AlmaLinux OS 0 1 Moderate

nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libnghttp2-1.43.0-6.el9_8.2.i686.rpm 4d4233b4da8c4a6a8ef4baf42c0802509dc750a5af7ff376f7b440da86e2bb3e libnghttp2-1.43.0-6.el9_8.2.x86_64.rpm aea89ed34a5866b687b5170befc44c5f3def3a8e9de38c651785bda28e121a92 ALSA-2026:55439 Copyright 2026 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965) * curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783) * curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547) * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libcurl-7.76.1-40.el9_8.5.x86_64.rpm 09c07fff9f0ef212f51d1546f7a57cc1aa43c79e68f9c94bc7028724c420f384 curl-7.76.1-40.el9_8.5.x86_64.rpm 21a4cc188bd3b06ba7d6e8caea74ee9d99f24ef9a2d8b4ea305d8ba143750f3d curl-minimal-7.76.1-40.el9_8.5.x86_64.rpm 5709867e36ce6fa07ebeeb9aa6bfa540b8cd37fa00112033f9f37ffc086b0283 libcurl-minimal-7.76.1-40.el9_8.5.i686.rpm 5a3f2114c450a30afad72d188b44e967e8f8e226b7cf0324e0a40759045f92ee libcurl-minimal-7.76.1-40.el9_8.5.x86_64.rpm 6b05e907a80f1bbb3566eb98cacd60f24780d6d70679ed78ede8aa8ac4251f25 libcurl-7.76.1-40.el9_8.5.i686.rpm bfdd6f9c6ad6e5c7b15e3543573a2886ab60fe2bfeab15d2eedca2d2d3bdec19 ALSA-2026:55440 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glib2-2.68.4-19.el9_8.9.i686.rpm a62662291b7bae595f2315194d429aaa9a31d9d90b4c0c3e96060fa4b1743be2 glib2-2.68.4-19.el9_8.9.x86_64.rpm bd8cea4da3de121b653e44640b10d4c83883e039ef28ca76cd16c79e6ac25c62 ALSA-2026:55841 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690) * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default unbound-dracut-1.24.2-3.el9_8.4.x86_64.rpm 027a2a102afb505c17d0330fb8c0b996d3db4ec886fc2b5c00d4fcc0449eef79 unbound-libs-1.24.2-3.el9_8.4.x86_64.rpm 0692d53b749f7afeada5ed7cdca96f8f1ba0fcff7c4d33b9654ebf355d6227c7 unbound-1.24.2-3.el9_8.4.x86_64.rpm 0f403a835448a2731a474d356eb4ef7f70d6275bc486065b31b6d14642545596 unbound-libs-1.24.2-3.el9_8.4.i686.rpm a1e74c6055966d76f9c2f3e6ad4cc3d006a55a9ecf46c961069414ecabb3ad8e ALSA-2026:5602 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default vim-minimal-8.2.2637-23.el9_7.1.x86_64.rpm 071b73d949b4d92329d0f875190254c2bfbdf640345741805968900472082825 vim-filesystem-8.2.2637-23.el9_7.1.noarch.rpm e3e6f8748c33f75f49cbf00448f3e7d96e0de94fad7b86ed9dde7f99c350d231 ALSA-2026:5603 Copyright 2026 AlmaLinux OS 0 1 Moderate

opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): * openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following (CVE-2026-23893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default opencryptoki-libs-3.25.0-4.el9_7.2.i686.rpm 04c1154b8ac184d9524de765b067089d068857dd3c05a32b6d8b0d2a1709d9a3 opencryptoki-icsftok-3.25.0-4.el9_7.2.x86_64.rpm 0e51aef646aa823ba6a749ff8c057edabab7761dabc263e7e045f4eab317cd52 opencryptoki-swtok-3.25.0-4.el9_7.2.x86_64.rpm 1b237d0082860558b6028c53b0bff9836501956795bb0694ec31188563cc880c opencryptoki-libs-3.25.0-4.el9_7.2.x86_64.rpm 74ce40b21016bdd4c4c8384b4f3c1f0e574e0a7f7b842c97aab0714619455a8c opencryptoki-ccatok-3.25.0-4.el9_7.2.x86_64.rpm 7d9b8c247a6c55583c2e6750001d5359c9187c1f1e888f984faad8fec8681bd2 opencryptoki-3.25.0-4.el9_7.2.x86_64.rpm f2286db4aae593a4c092c0022f3308004746975e614c03ba5877a85b7d94a8bd ALSA-2026:57252 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-uki-virt-addons-5.14.0-687.41.1.el9_8.x86_64.rpm 12143637384b0ebe9776f711f2ecbab653c644db274c5684e6abe00fb350d3c1 kernel-debug-modules-extra-5.14.0-687.41.1.el9_8.x86_64.rpm 3b3d73583652fe98f40036e3f7e22cd697a465abbdab474799673f954acfc8d8 kernel-uki-virt-5.14.0-687.41.1.el9_8.x86_64.rpm 4d0df8adb44691250984ac8164e51c274ce977cb51de060f223b509dbedb3416 kernel-tools-5.14.0-687.41.1.el9_8.x86_64.rpm 521d1fe8d7b6cefd96d3575b91bb7b3dedf239d47c4eff97c58597c0108248a5 kernel-modules-core-5.14.0-687.41.1.el9_8.x86_64.rpm 574c0b77c0ec2dbd48a5e3e339cd0899138d8e647799d056473f04f0e9a18714 kernel-modules-extra-5.14.0-687.41.1.el9_8.x86_64.rpm 729ae0818a2dfffb4c0ff117af5474d947c44d88736856696bd3f8a8bf9708e5 kernel-core-5.14.0-687.41.1.el9_8.x86_64.rpm 83aca97c3e53536afae5db6e4473878448d089d522e0ffb526ba8241785f9fc6 kernel-debug-modules-core-5.14.0-687.41.1.el9_8.x86_64.rpm 8583f7c7dd96f2edcb316a300cd0966efd2c04ac80ed907a9cfedebb81c9483e kernel-debug-core-5.14.0-687.41.1.el9_8.x86_64.rpm b32224314699a95f963948d22ca8260c26c0526f8eb14dfe24ae57e05e966bbd kernel-abi-stablelists-5.14.0-687.41.1.el9_8.noarch.rpm b338e4717e4156cabdaf57017a2f29d58ba691877c07f9b7581f1d3d80073d85 kernel-5.14.0-687.41.1.el9_8.x86_64.rpm c7909cef550eecfe3eacf882131e9bf2f26d9da57c1c09911ccff7f4b26e62a4 kernel-tools-libs-5.14.0-687.41.1.el9_8.x86_64.rpm d94dc87e0a2251088f22f49105db8bce7589a30978019adfe1b207aafb866e74 kernel-debug-5.14.0-687.41.1.el9_8.x86_64.rpm dbbad4c5fcc7bed6370b8fecbad3766c8689fcfed0835a153e2d7daa771a2508 kernel-modules-5.14.0-687.41.1.el9_8.x86_64.rpm de992c050d769785e0304bfd02acb909364252b5347712449ca8c6dd5dc69aed kernel-debug-modules-5.14.0-687.41.1.el9_8.x86_64.rpm debe048d6b2e75536580022049442438b548f32b7098b6ff340b51b33ea28c89 kernel-debug-uki-virt-5.14.0-687.41.1.el9_8.x86_64.rpm e0ed289c6922051f22d58df7c6aaa533e8ea2670473e96545c87ae0ef9bc05da ALSA-2026:57610 Copyright 2026 AlmaLinux OS 0 1 Moderate

kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fix(es): * kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kbd-legacy-2.4.0-12.el9_8.noarch.rpm 37368b49a8ca6b817a6dc68af7c589e5e893a866dc7efc1826d2718466be975e kbd-2.4.0-12.el9_8.x86_64.rpm e8adcab929bb7ec80aba2ddcbb4e9903472fba629714441aec1a167d5f78d5e3 kbd-misc-2.4.0-12.el9_8.noarch.rpm f296e7c7bd2f3bf4e746277ed6c357724abac605c47bec4f4232c6216a767384 ALSA-2026:58572 Copyright 2026 AlmaLinux OS 0 1 Moderate

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default NetworkManager-1.54.3-5.el9_8.x86_64.rpm 1d4eb694d0320fecada969f92459852d3001b637bec50f3d45a0a6c722bd476d NetworkManager-config-server-1.54.3-5.el9_8.noarch.rpm 1fef2fab94ca2f67d3545e03bd90d6cd149b5e9658f02a265c5bfb0d49dac9a0 NetworkManager-tui-1.54.3-5.el9_8.x86_64.rpm 2f9ef5bbecb3118b84022695b80f19ad6ba588d01a14e5da2b51e8d7c5215d38 NetworkManager-initscripts-updown-1.54.3-5.el9_8.noarch.rpm 35401bb486c5a849d1e923b9d73ff5b8d43f139aace8d9f1746c225c21f65e37 NetworkManager-wwan-1.54.3-5.el9_8.x86_64.rpm 4c95aad90067d6cccc274898e6fed6bdfa1cab092bdc37390bc73b711a5124c4 NetworkManager-team-1.54.3-5.el9_8.x86_64.rpm 6818f1ec8d5fe24ae5a6b153ac8a73204f0e2591da67bb988a7693c4ea0b68c3 NetworkManager-wifi-1.54.3-5.el9_8.x86_64.rpm 9532aee6db7889271100049d6e7d28e3c458f53240b04c81e61b60666228e1b9 NetworkManager-adsl-1.54.3-5.el9_8.x86_64.rpm baa14babb352a7792a5bfb51adf0c0b5fd2b168b84f74541bec7af745edf8de0 NetworkManager-libnm-1.54.3-5.el9_8.x86_64.rpm c127c3a345e57c2ae9e26999f415791360acdec407d71e1e4ff960e467d1a4bb NetworkManager-bluetooth-1.54.3-5.el9_8.x86_64.rpm dd6a6f83de1fdc8202c5328f855f4f59aa1a641d0c0071302441f83f199b3268 NetworkManager-libnm-1.54.3-5.el9_8.i686.rpm ffc5da6084df5db586ae1181a1b6c32c96f751add9e09f935f25b21eaffa475e ALSA-2026:58936 Copyright 2026 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default sqlite-libs-3.34.1-11.el9_8.i686.rpm 10216fcab5c3ba4c54d1a2ed0e2cc49827da947bd5e66719c8e9c3c89d286516 sqlite-libs-3.34.1-11.el9_8.x86_64.rpm c895eb4ca778132a0df59539514ec8ddc81feda9d85f905b29d2e67d0c254a4c ALSA-2026:58952 Copyright 2026 AlmaLinux OS 0 1 Important

python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure (CVE-2026-9323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-urwid-2.1.2-4.el9_8.1.x86_64.rpm ee6a91c005fd6d494a6064fdcc16e0a16673e468f9ef5b837893f236db27338c ALSA-2026:59723 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-166118) * ss core dumped when there is an SCTP session [almalinux-9.8.z] (JIRA:AlmaLinux-212398) * [IBM 9.9 FEAT] zcrypt driver overwrite function - kernel part [almalinux-9.8.z] (JIRA:AlmaLinux-245333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-tools-5.14.0-687.42.1.el9_8.x86_64.rpm 064110be0687dc8b9dfd8b6a60d8f44d56a2c0ffdbda0b433467052df59b89ed kernel-tools-libs-5.14.0-687.42.1.el9_8.x86_64.rpm 064f0a39ac44dfe41c24b03f90813aea7cf7e42558c0a26817da21a65a25b04f kernel-modules-core-5.14.0-687.42.1.el9_8.x86_64.rpm 11148a90aa69d1d3679a65c17efaa5d8a79d6309db31cd5e9711df05026656c6 kernel-abi-stablelists-5.14.0-687.42.1.el9_8.noarch.rpm 1d62d6b4a606c30d34716a993219e98f936dfee3dda694ef73fb2ca0ea798f77 kernel-modules-extra-5.14.0-687.42.1.el9_8.x86_64.rpm 23559e326c23ae4b4ab84c505b49a00bd5cee86fa7205e49a1e86633aa94a879 kernel-debug-5.14.0-687.42.1.el9_8.x86_64.rpm 52695c12569917dfdee7b4afb81758abb706893ba5e79a0e67854ecaa9b223dd kernel-debug-modules-core-5.14.0-687.42.1.el9_8.x86_64.rpm 81ed656c69c395709fdc7c7a6ea83b8196cafc98d164ff2630398d242326a8b0 kernel-debug-modules-5.14.0-687.42.1.el9_8.x86_64.rpm 8b0c0901e76fac3c60f61e3aa3439beb88d8a0dd7c7c0884abde649c2be9e8a1 kernel-core-5.14.0-687.42.1.el9_8.x86_64.rpm 934472bd6838bd67716d1307396b1d311c424d8e101d51447a142d7fdfe10362 kernel-5.14.0-687.42.1.el9_8.x86_64.rpm a73253cfee2d82d58a245c5b32b7441638922091898ba90dd0909a2b85181416 kernel-debug-modules-extra-5.14.0-687.42.1.el9_8.x86_64.rpm c0ade484bdb578cf1ed03713aef52d6bbe23c1d6a52938fa98e28f66efd21c1e kernel-debug-uki-virt-5.14.0-687.42.1.el9_8.x86_64.rpm cc11825b8b1a06d2315ddbab1f45b07cacb40b54d0355e854ab7d4f7b1e65c82 kernel-uki-virt-addons-5.14.0-687.42.1.el9_8.x86_64.rpm cdf9edfa3d58741b5f09a77811d612296c6aa7cd4a58925cc2700a89420bf6b4 kernel-uki-virt-5.14.0-687.42.1.el9_8.x86_64.rpm e0200f43fbafdccb6e737bdfa2e546734c92d21d88a07aa8bfba3a8030c9d68a kernel-debug-core-5.14.0-687.42.1.el9_8.x86_64.rpm e33869ef3865e754da28129f4676dbc0e2069f8fee876ca683917be7a2ba65bf kernel-modules-5.14.0-687.42.1.el9_8.x86_64.rpm eb95898f4cfc06c6272e21541b4618746ac103f23e3aa003ca64a82d5f93bb81 ALSA-2026:60226 Copyright 2026 AlmaLinux OS 0 1 Moderate

attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): * attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default attr-2.6.0-1.el9_8.x86_64.rpm 67ae493fa9d84ffe2d1d49ddf9adc671c331df8ff1eb1f6623caed2a633131a8 libattr-2.6.0-1.el9_8.x86_64.rpm 69f48ef4f21c954e606c01b676753b69a66a6bd11ca37ee29c9e36ff1e3d74a8 libattr-2.6.0-1.el9_8.i686.rpm d34791d536432061dc22c5cd75a2fc327c7b6778b60b6115ec37ff2f710b8f88 ALSA-2026:61247 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653) * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libxml2-2.9.13-14.el9_8.4.x86_64.rpm 1588e4063f03e3a988457446fdefd09d9ceffc7ef8d498097ef20d8c2c22b173 libxml2-2.9.13-14.el9_8.4.x86_64.rpm 3fd890dda0a18ecd82f19d83c8749dce89bba4ff90c517db8e6b8d8350428f57 libxml2-2.9.13-14.el9_8.4.i686.rpm f484cb404f32351f2fe4a156dc61004a0e31b000f7ddcf6e6683fd352b94c837 ALSA-2026:61355 Copyright 2026 AlmaLinux OS 0 1 Moderate

dbus-broker security update

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases. Security Fix(es): * dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup (CVE-2026-16730) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default dbus-broker-28-9.el9_8.x86_64.rpm 34eb8db5477eae0478626e326ceebf40627f092a82ccde55baaa2817d06a1497 ALSA-2026:6153 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144) * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193) * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-modules-core-5.14.0-611.45.1.el9_7.x86_64.rpm 14c7cbd84269bb9d58a4e40a20862fe69756ab6fd2e6683b7f6abad49023ff62 kernel-debug-modules-5.14.0-611.45.1.el9_7.x86_64.rpm 17d99d62f08b08273ed96cbcb3e3482c0d5f940ab1d64c8ac33702e6b1765670 kernel-abi-stablelists-5.14.0-611.45.1.el9_7.noarch.rpm 190f50a0507efbac414b062551485df936edc98b7615361a4d072ea98852417a kernel-5.14.0-611.45.1.el9_7.x86_64.rpm 2211854d2d057524c9aa1aa20d642ed35ec0deaa5c7a515bb5479a68daebbcf7 kernel-modules-5.14.0-611.45.1.el9_7.x86_64.rpm 4107c5135f544685638bad2dff2bddcbcc949cb1f4719e8c4cc6b185c3273ce7 kernel-tools-libs-5.14.0-611.45.1.el9_7.x86_64.rpm 473d437f33140ec9c8d11df8627ff5f3c3bb6b380e791307a5f6bc67f7ba0aac kernel-debug-uki-virt-5.14.0-611.45.1.el9_7.x86_64.rpm 5a6252206eaa924d657c69776d5a5c7cfb2ca6f716ee36a9a965c794bfb27258 kernel-debug-core-5.14.0-611.45.1.el9_7.x86_64.rpm 76c3da847053362bc5390928cc4b2d42162116fad56f69f65cb2f5af5ec1ef5a kernel-uki-virt-5.14.0-611.45.1.el9_7.x86_64.rpm 77db0c2188f1212f2661e503e2f0d7025be49cdf8a80adb6ee1c4be29b784737 kernel-uki-virt-addons-5.14.0-611.45.1.el9_7.x86_64.rpm 81457e7b3e2e9a44b0db73c5200e54191880c0ac1c61135c67c1c81fd385fee7 kernel-modules-extra-5.14.0-611.45.1.el9_7.x86_64.rpm 939675f9f9445b68af95566c5c05d603568e27007c223af052b49fe354b58934 kernel-core-5.14.0-611.45.1.el9_7.x86_64.rpm 992b9c10ce1a124b16ba67bcf3acf8015c51fe116466ba0be45aa928ab60ee5b kernel-debug-modules-extra-5.14.0-611.45.1.el9_7.x86_64.rpm ac188db55efb48bfbd4f420820680a7f2ffd36bb520e41487e57cdf5964eaceb kernel-debug-modules-core-5.14.0-611.45.1.el9_7.x86_64.rpm ad0593491215173f111eb4c0688be010083e1711d04e6dffbf0b49ad87cf44da kernel-debug-5.14.0-611.45.1.el9_7.x86_64.rpm c9f80db52fbe8c44ac8d3db43d168320db8a553d0e37c2265ceb7771994f448d kernel-tools-5.14.0-611.45.1.el9_7.x86_64.rpm f05bd629fea7c0f1ee8ae6121796757002810374bb89ed14f29cff7f2550e000 ALSA-2026:61581 Copyright 2026 AlmaLinux OS 0 1 Moderate

tar security, bug fix, and enhancement update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: tar: Hidden file injection via crafted archives (CVE-2026-5704) * tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (CVE-2026-18477) * tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (CVE-2026-18508) Bug Fix(es) and Enhancement(s): * tar: --one-top-level with absolute path fails [almalinux-9] (JIRA:AlmaLinux-144021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default tar-1.34-13.el9_8.x86_64.rpm 2563f7bae97b6d73ded2af71250797ff30a3fe8050c70ac4b3126dbe32c0ce9e ALSA-2026:61623 Copyright 2026 AlmaLinux OS 0 1 Moderate

gzip security update

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fix(es): * gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility (CVE-2026-41991) * gzip: gzip: Information disclosure via global buffer overflow in LZH decompression (CVE-2026-41992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default gzip-1.12-2.el9_8.x86_64.rpm 3ff77bcd1b314d9d5d6c2cab054172b1b3073cc3c40b9a43a2985daf910b80d2 ALSA-2026:62217 Copyright 2026 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libssh-0.10.4-19.el9_8.i686.rpm 2f90958857ef6277400f9c46303441319b8179fe27c4190cb4546357fe522a1f libssh-config-0.10.4-19.el9_8.noarch.rpm 4e14165163b183983f51b5f3a00786ffbd7989e663b840f9bde278bc05430bb1 libssh-0.10.4-19.el9_8.x86_64.rpm ac64c87e5f70d2b6dc849a08db775137322d2c7bb1e2225bb8d15942dc23053a ALSA-2026:63129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940) * RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-5.14.0-687.44.1.el9_8.x86_64.rpm 00b4cc47fd0ff7205e74a206769e40bdac0b6b8325844eb5be0c6c4ad4e94913 kernel-uki-virt-addons-5.14.0-687.44.1.el9_8.x86_64.rpm 2851b06532f53dac2014a247163d72b27bbb65d259ae6a1ff93ddd1f65a2c207 kernel-tools-5.14.0-687.44.1.el9_8.x86_64.rpm 2de798f3caec4e9a29d2c3d88d0c13e38108d36feb208efc4734c83daf185401 kernel-core-5.14.0-687.44.1.el9_8.x86_64.rpm 334317a2e4431e81a75aee08da794abf1a67150f192d31ce9a8c7c7e1f0d686e kernel-debug-modules-5.14.0-687.44.1.el9_8.x86_64.rpm 425b6a6c0706547283a5d87dbe557426aa28da3dcbe95d24a7c995f0b30a5f34 kernel-tools-libs-5.14.0-687.44.1.el9_8.x86_64.rpm 65953427a53dca7afc9f64e351633b005e0d0237b6105f4793a85fc1f13412af kernel-5.14.0-687.44.1.el9_8.x86_64.rpm 72873333768c88a0978668ecda0fe724f54a2b1430dba10b8c98d7d4f418d421 kernel-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm 7c0b736f4ec3a3acbd03f16e9363dedba74efaa5d7721430d7ddc35f1664853e kernel-abi-stablelists-5.14.0-687.44.1.el9_8.noarch.rpm 94ce35047fe63b9ae0853679cf06cc9e460e716cf801adaa7710029eeccf1f35 kernel-debug-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm 9604fdc22b8c03ba01adb504e8d6069cd53625cce05aa5ff7957622b9a7f41af kernel-debug-core-5.14.0-687.44.1.el9_8.x86_64.rpm a23606bcaafd77bdb1deb6387e19070b6051f87eb148cf1b30bd686389df3c9b kernel-uki-virt-5.14.0-687.44.1.el9_8.x86_64.rpm a2b36c39bd716bf4c8fc9f23f013fa95fe19bfdd4ddae66695053464dca5031f kernel-debug-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm aab59ee8f6865089d48dd9bcfd38c475a1c62dbbc758930564f228928791015a kernel-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm aed40f3282477fd1ea05f7a6b1043be84b08d56937eb2e1a1dbd86ad43a1507d kernel-modules-5.14.0-687.44.1.el9_8.x86_64.rpm d2cfdf8a989a8856e9674e3988faf290271a87a4d687fbb8597ae9d593835384 kernel-debug-uki-virt-5.14.0-687.44.1.el9_8.x86_64.rpm e0c55394c8b3022b01b44a8f46ef9268ec59a81617d1be874e98edff028c05a8 ALSA-2026:6390 Copyright 2026 AlmaLinux OS 0 1 Moderate

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default rsync-3.2.5-3.el9_7.2.x86_64.rpm af95ee21b2f07a11d52361636d9c116282d3487fc011af9ed61fb575cb917caf ALSA-2026:6462 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default openssh-keycat-8.7p1-48.el9_7.alma.1.x86_64.rpm 7242df0fa12b74cc779f911c4d1cd335ae9df9f4e4e20ecc19f20d9ceb466062 openssh-clients-8.7p1-48.el9_7.alma.1.x86_64.rpm 7acfa281d5f89f46e2681750469762231d04b13a7569356e0a95b92dec7a054c openssh-server-8.7p1-48.el9_7.alma.1.x86_64.rpm ba22ddf5ad1e8238eaee653667c056dc39cf8687ab1e53db4d4700bcb9fb76a1 openssh-8.7p1-48.el9_7.alma.1.x86_64.rpm cd0a38e18485631353637f3139495f93b54417dfcf744f4a6ea02d91816679af ALSA-2026:64800 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVE-2026-16118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glib2-2.68.4-19.el9_8.10.x86_64.rpm 1da5c0171847d3af989784c5267e3dfacfedcbc4d6882fa3c4af497a69217324 glib2-2.68.4-19.el9_8.10.i686.rpm bdf612b59aac17972b2b2bb185ee970b88fc5e5daa8f6e1b554c7d657603cd94 ALSA-2026:64808 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004) * kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933) * kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319) * kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-uki-virt-5.14.0-687.45.1.el9_8.x86_64.rpm 11ee5b054d71c8f682be2dc44b2f9c382e079ad024c49be356bd8324127d1c18 kernel-5.14.0-687.45.1.el9_8.x86_64.rpm 2252b73cbfaff1e9b704816a656de3e4dbda00d70cf7ba991c62f8dc3da33584 kernel-abi-stablelists-5.14.0-687.45.1.el9_8.noarch.rpm 2c24d99d5fca8d1198af2f8760701c33eec0149e55a0f6fcdce84087adb936be kernel-uki-virt-5.14.0-687.45.1.el9_8.x86_64.rpm 376080b138d63d1c02a5b7bf6d6934e958d5e072696957e1ad25b8aa26f7f1c1 kernel-core-5.14.0-687.45.1.el9_8.x86_64.rpm 4364536f26a5ed03f74ded27845d72890502310710f3093c0c96b0e42707b293 kernel-uki-virt-addons-5.14.0-687.45.1.el9_8.x86_64.rpm 4455c3f5eb4ec7f1d49c82b7c5a5d1305611418920106f533b8029542f88a3e1 kernel-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm 6ff2015b5e4824297ce896c5cbb6ad73805839b9fd992f20b9059040a3ab87bd kernel-modules-5.14.0-687.45.1.el9_8.x86_64.rpm 709b75d4eea2039037e1d4be6d93d3607020ed1a1026896662d9f9d28058f9f7 kernel-debug-core-5.14.0-687.45.1.el9_8.x86_64.rpm 72ea4c770e84144feb306c47a772f175a7928e0efc274b89468810059597279a kernel-debug-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm 76a18253a04e7519e20c8b5dd8f6df090c2d5575e891ea302ad1699f78901a2d kernel-debug-5.14.0-687.45.1.el9_8.x86_64.rpm 77f3f764a19f020787c498c92fb04f5fa5bae942f6bafddc01bb75f8fb85c66b kernel-debug-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm 81d85102cc624e3dd0de53bfebceae2b194a294fbfcdadfb42a1ced34b5333f2 kernel-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm 93ef3ec26733c98ba8d39be36a7f68ac684874b4e064d5818457b850688d46f1 kernel-tools-libs-5.14.0-687.45.1.el9_8.x86_64.rpm b9baad7273b4da29c6a7d857bc7840319edf569180302c1b0fbdf3b02690288c kernel-debug-modules-5.14.0-687.45.1.el9_8.x86_64.rpm d9daae671d5e69f8dfef8402bafaecd15e330e42d2577489fe8b44f15bb5f215 kernel-tools-5.14.0-687.45.1.el9_8.x86_64.rpm eb9121ae5a0ffdf7ea4fc56a297a15a43a217f3549b002e60d795358ffb2f94b ALSA-2026:64812 Copyright 2026 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default expat-2.5.0-6.el9_8.3.x86_64.rpm 079d363589ecb1ad7bfb7bf904dc4ab3f1640c68c1c13268f9ae39850fc54ccf expat-2.5.0-6.el9_8.3.i686.rpm 0a478d94c0323b79ab177ab34b8d7fa477a87a502ac6c1029105cf6d59de5a86 ALSA-2026:64815 Copyright 2026 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE age(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default pam-1.5.1-28.el9_8.1.x86_64.rpm 56e08667b6e557debbb7fc5e6491c1f0b034437f42bab8a57d06dfd23b0695fe pam-1.5.1-28.el9_8.1.i686.rpm bfdc2c48586d49eac7c473ae4f2875eac4fbfcbf79b1a5b2e099b49cf416fabc ALSA-2026:6570 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-tools-5.14.0-611.47.1.el9_7.x86_64.rpm 15cd68d7c5877dfa74e9597a5aa09a72603e9b672db2c0fd96bf5e21e8536d1e kernel-debug-uki-virt-5.14.0-611.47.1.el9_7.x86_64.rpm 1abf5c31feb37574f2d4c2da3315140b8dc777e225cd3dc2f1278e6e045b7e0d kernel-abi-stablelists-5.14.0-611.47.1.el9_7.noarch.rpm 1bb23cb929c84667ea25a58064e4e87b875599bd08a95396350ff0b35f6fb073 kernel-uki-virt-addons-5.14.0-611.47.1.el9_7.x86_64.rpm 211ef73fd31afba37aa9fd4d48779aba6badf0a2713fb96f61538e8faf559fe4 kernel-5.14.0-611.47.1.el9_7.x86_64.rpm 2707876cb50c3dd544c2f3d6ad24c54af3432d577a60275d009232f988d61667 kernel-tools-libs-5.14.0-611.47.1.el9_7.x86_64.rpm 38ad7d5b4b2006f759d546b30d38528df31e01d976edad7b3669ea7edb2bef22 kernel-modules-5.14.0-611.47.1.el9_7.x86_64.rpm 4c73c850c581f2264fb8f3c2f3d4f9d9849b5d2cd5f43a3a4657659f2ccc05e2 kernel-core-5.14.0-611.47.1.el9_7.x86_64.rpm 57f78139c8526348e718f82d5277df07f4dea0de46d426461a39743e6304334d kernel-debug-core-5.14.0-611.47.1.el9_7.x86_64.rpm 74ace1d8b01a78c073d5801025ae3b5269d1d3f7e5aba3e3a6aed8b9bc62a16e kernel-debug-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm 7d593a760071e59e6feed493ebf32dda989848b1c5f3e92164423227f80f7ec3 kernel-debug-modules-5.14.0-611.47.1.el9_7.x86_64.rpm 8430b84e157bb7260fd82c73719b103b193798526bd9e85b5906727f5e43865d kernel-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm 8afe44885f902b81c8301273e8e0b5bcba9b3707b926d6e59d9846c321d9cdce kernel-debug-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm 8f482db3478297fe3004640b119699da6ef964b7c790148fb90f4f0db5961aeb kernel-debug-5.14.0-611.47.1.el9_7.x86_64.rpm 9a6059b549ab7bd7669d761af5b1c9bf6d2fb58bb8753d7747f35dfda2060e53 kernel-uki-virt-5.14.0-611.47.1.el9_7.x86_64.rpm be5d288b37f1b737481c2a6cb68616bd54dc2f483014fd5e3e04a885db81504a kernel-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm d0e866c312b72493d77e65f41aba831901990476d5f322cd133a48449fb95bc5 ALSA-2026:66180 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): * KSM to deduplicate only zero pages [almalinux-9.8.z] (JIRA:AlmaLinux-249161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-uki-virt-5.14.0-687.46.1.el9_8.x86_64.rpm 01a97969178d9eb5a806dad89d7d165e1736bcef61b99e30a8acabca93bacaeb kernel-debug-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm 0ceeaef55f157567cde708757a69f26db7ef221b7d318fe54fda7adfbb160561 kernel-tools-libs-5.14.0-687.46.1.el9_8.x86_64.rpm 0f42616de1aead2e07ca7b4bfaf69fa7dd91ff475b90bb92dd5949e699aa168a kernel-debug-modules-5.14.0-687.46.1.el9_8.x86_64.rpm 25df82ad032f3b7351e04a338409cfe1e19a8af2deb415dca853b5a44c0bf5e8 kernel-debug-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm 2e5e32dd57496a89196be20cba67ae73f651337fd2a18c55a9f98c2bd5ae77c8 kernel-5.14.0-687.46.1.el9_8.x86_64.rpm 3fe80408d4de133ae17d75eec1177d38deb0268dda3071df6c34b987e8c20c1d kernel-core-5.14.0-687.46.1.el9_8.x86_64.rpm 458ee0d586b29529bca684274cb6800e508b6504292b2f2a6aee286b3fb1730f kernel-debug-5.14.0-687.46.1.el9_8.x86_64.rpm 56f5db9163fb4505f62099905a063c6b2f444fa3dbac0f327dabd2eadb1a3677 kernel-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm 6594155a04c4e9197cc21bdfa588a1a2891a18232126e283bff45f553676c9dd kernel-uki-virt-addons-5.14.0-687.46.1.el9_8.x86_64.rpm 6dab4428dcde1ebb905c8c0ecc497df116c5fd76f269246c72f445bc69d85cb6 kernel-tools-5.14.0-687.46.1.el9_8.x86_64.rpm 7d97c812e414e9d899c6bb8ed81e9817f438e7fcb03bc51e161a9a69545333a1 kernel-modules-5.14.0-687.46.1.el9_8.x86_64.rpm b199e9b0eabd49e6d1f9c3e55477a0c29c9419102eb7732f80e8222bc70d6ed3 kernel-debug-core-5.14.0-687.46.1.el9_8.x86_64.rpm cf960912203ced9b1125965104e330f2b2afd63da3ccc8abf9d88bb21beff0f6 kernel-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm e58fd523e7ac85c8dc6e4aecbb48807ff9860ff921b747420898d0259022c534 kernel-uki-virt-5.14.0-687.46.1.el9_8.x86_64.rpm f1a11d52cbc74a88249306e7a00478bb582592c99b54683e927e2f8e06ee2c2d kernel-abi-stablelists-5.14.0-687.46.1.el9_8.noarch.rpm f5140cf1a283bc129a0cb0b28ff453fe1f1e6d1a81764c0027b8bd07989cc0bd ALSA-2026:66366 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420) * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859) * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892) * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857) * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076) * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072) * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078) * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-filesystem-8.2.2637-26.el9_8.21.noarch.rpm 41f80c82ddb7f012c709fa6ca6d31fe0f92502595372d3a11a0f98566a849f65 vim-minimal-8.2.2637-26.el9_8.21.x86_64.rpm 8ab922d009a3573c01a5ac8cecb4ca194e12f0070016911924e636f93a1c3b7b ALSA-2026:66403 Copyright 2026 AlmaLinux OS 0 1 Moderate

coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values (CVE-2026-56392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default coreutils-8.32-41.el9_8.1.x86_64.rpm 350e9cb8c4b5aee282c26c06d5b717e0362a845a1fb8a38fedb0fec7b420de09 coreutils-single-8.32-41.el9_8.1.x86_64.rpm 9e5448352a1f74fab50d292645f29e7d98249d450cfa36fe84f578ce60050f87 coreutils-common-8.32-41.el9_8.1.x86_64.rpm dc29e67f2e276622b9beb4a5e39787c9806c488c02724991ac62547370560a75 ALSA-2026:67150 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CVE-2026-63945) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames (CVE-2026-68402) * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376) * kernel: wifi: cfg80211: validate PMSR FTM preamble range (CVE-2026-68406) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) Bug Fix(es) and Enhancement(s): * gfs2: Various xfstests fixes [almalinux-9.8.z] (JIRA:AlmaLinux-178219) * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-9.8.z] (JIRA:AlmaLinux-193025) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-9.8.z] (JIRA:AlmaLinux-193050) * Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [almalinux-9.8.z] (JIRA:AlmaLinux-224489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-5.14.0-687.47.1.el9_8.x86_64.rpm 073b08fb96ac9725192c86c910b08089bda61422fdd9ec41d633e36035f91606 kernel-tools-5.14.0-687.47.1.el9_8.x86_64.rpm 18efb529ebce5f0d2842c1108e6bc26100b4531e6fa2b3b4d7396615867be47f kernel-abi-stablelists-5.14.0-687.47.1.el9_8.noarch.rpm 20e9f7c6ff2b1284dda2bdaf6f056e207b550a27d7adcb43860489d0ac73df33 kernel-core-5.14.0-687.47.1.el9_8.x86_64.rpm 38fbd6d029fb7dc07456a34c280f1fc949f1d0e1e81279eba81d853bb1dde689 kernel-5.14.0-687.47.1.el9_8.x86_64.rpm 5ecfbc4310041133c8633038ecb3b40331dc218bdd24db577f45e3728e974b3d kernel-debug-modules-core-5.14.0-687.47.1.el9_8.x86_64.rpm 6542b3ac67806d57947de4083605e730ab46ebd65ee5cf9a21190f7bb12a12b4 kernel-debug-modules-extra-5.14.0-687.47.1.el9_8.x86_64.rpm 6680b8373f740ab3949cff09a7c98d6148376473cbf893043a5b9d773975250a kernel-debug-uki-virt-5.14.0-687.47.1.el9_8.x86_64.rpm 67bfedca2f648e936281e0fd61eb8d899ec4dd9b818e0250ef4da78dc18acf8e kernel-uki-virt-addons-5.14.0-687.47.1.el9_8.x86_64.rpm 6899b6c0ba771b79b399f35174ba1b7797b398a0a5611f4a9a465e6f8afe29b4 kernel-modules-extra-5.14.0-687.47.1.el9_8.x86_64.rpm 6c8704e1064663089e251bb4d2491d3f917b4998a8ff08ba616625663dfa9b68 kernel-modules-core-5.14.0-687.47.1.el9_8.x86_64.rpm 78f84db32ccee9f2d04b3b40d4c9f32dd0a83ae8d5971ae8150526119a868d4c kernel-tools-libs-5.14.0-687.47.1.el9_8.x86_64.rpm 91d55dd0972e8366f316e2245e6bf0bbb0114796c6868d13061cc18800f3513b kernel-debug-5.14.0-687.47.1.el9_8.x86_64.rpm c288031548ca4581cd0e95702992a4152a8b5b8df761cd241250d7fb1bd74e60 kernel-debug-modules-5.14.0-687.47.1.el9_8.x86_64.rpm c8c366889953a81c30534ff78cba2e58daf5a0f2d97503c79555cf39441619bc kernel-uki-virt-5.14.0-687.47.1.el9_8.x86_64.rpm da27b3ed0333570aa4b6e83e3d9d4cc1540df1543ed1502dc81dd48e7e30e550 kernel-debug-core-5.14.0-687.47.1.el9_8.x86_64.rpm f061257e2d523767d7e96fdd7a73c6d939560254ff189e593ba47c7c9e3a5532 ALSA-2026:67165 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456) * openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798) * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072) * openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076) * openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457) * openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874) * openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073) * openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074) * openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075) Bug Fix(es) and Enhancement(s): * openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 9.8.z] (JIRA:AlmaLinux-232828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssl-libs-3.5.8-1.el9_8.x86_64.rpm 01ad218da2de02e7fa2cd821831cc59182d45aa5717467e53c2705a7530214f2 openssl-3.5.8-1.el9_8.x86_64.rpm 4d6abc5fd3ab627a7e0b441ebdb38fd6ab8cd9651925c18ee0bd65a1c36ceb39 openssl-libs-3.5.8-1.el9_8.i686.rpm 623945660e4d90c717e06cf6405cccef40e3b27c2dfdea6daf0a091aac7cde64 ALSA-2026:67265 Copyright 2026 AlmaLinux OS 0 1 Moderate

libkcapi security, bug fix, and enhancement update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API. The kernel interface and therefore this library can be used by unprivileged processes. Security Fix(es): * libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVE-2026-71225) * libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path (CVE-2026-71226) * libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVE-2026-71227) Bug Fix(es) and Enhancement(s): * libkcapi: AEAD Decrypt Auth Check Skipped for Zero-Length Input in `kcapi-enc` [almalinux-9.8.z] (JIRA:AlmaLinux-242667) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libkcapi-1.4.0-3.el9_8.x86_64.rpm 21ed793a8f95342643f09ebdde7e36e4e7270469cb1489412a5173cf816ea5d3 libkcapi-1.4.0-3.el9_8.i686.rpm 788be836bad10c1c994087e6125981c74b64c38fd8be2987ebca2ea1afaaebe3 libkcapi-hmaccalc-1.4.0-3.el9_8.x86_64.rpm ac66c7c1e9b467dad11afcf25af0a437ffb55c38babd5ccd75dc6728f4834fa6 ALSA-2026:67462 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460) * rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454) * rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789) * rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790) * rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458) * rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464) * rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803) * rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784) * rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463) * rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452) * rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791) * rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795) * rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456) * rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793) * rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453) * rsync: rsync: Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457) * rsync: rsync: Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461) * rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802) * rsync: rsync: Arbitrary file write via path traversal in --relative mode (CVE-2026-53785) * rsync: rsync: Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783) Bug Fix(es) and Enhancement(s): * Rebase rsync to version 3.2.7 in AlmaLinux9 (JIRA:AlmaLinux-248835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default rsync-3.2.7-1.el9_8.x86_64.rpm 20cc9871b5fbffabf75442fb2960805995dfd0eba60cad79996460d0fe35ae08 ALSA-2026:67470 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * gfs2: bufdata leaks [almalinux-9.8.z] (JIRA:AlmaLinux-178223) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-5.14.0-687.48.1.el9_8.x86_64.rpm 087c00bf65d3f978c393931669485c239a8b36e400632e0ea03279b8c041f700 kernel-debug-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpm 0f394fed01812764a01542375addca0a40f56f4b9e332a31b3979d2b9715b81d kernel-debug-5.14.0-687.48.1.el9_8.x86_64.rpm 54dad9ee6479d51d77c3ccc48f84476f3b00e4e660b27c1dab5c8fd33f37939e kernel-debug-uki-virt-5.14.0-687.48.1.el9_8.x86_64.rpm 59d06e86a8846465a6a67860fccfdee26d5eddf07f4958f3faf3f0312ea8a982 kernel-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpm 717b08a78955ee644f9f6d82c3c62cfcd22d281978d4cb89f00f98cdefa3c47c kernel-abi-stablelists-5.14.0-687.48.1.el9_8.noarch.rpm 83d8bd458a3096e73e697dc59c86be30a7bcc19eee1443a4a7d357015c18490b kernel-tools-5.14.0-687.48.1.el9_8.x86_64.rpm 8500cf573bf68a05102f7d8aecf6e6f970bbaa5554513b9c80acfe8a6eb64515 kernel-5.14.0-687.48.1.el9_8.x86_64.rpm 8dc0f1abf8dd18a7b205715faf7c0621e932bb3ab77f021328ac488151838f4e kernel-uki-virt-addons-5.14.0-687.48.1.el9_8.x86_64.rpm 9287d28fc56ddb01a8f4eb115d444234924d3a3a29624580e81498e10b1edc6a kernel-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm 946f07375ceb1a64dcd1ec8e9947da1dc45c25fe78b544c3e52bb0d785fcefbd kernel-tools-libs-5.14.0-687.48.1.el9_8.x86_64.rpm 97183cdf68acc062531a21bf082244741094e5d0ba9b297ede3c3cf1fd8ca178 kernel-debug-modules-5.14.0-687.48.1.el9_8.x86_64.rpm 97355dbae893b490d57a43b6890ef50a078b9db226f93924c3d8e236d5af5164 kernel-debug-core-5.14.0-687.48.1.el9_8.x86_64.rpm aae13ed508f496c42bc25eee4be507eeb274505d84329eec084c56f46c8d6f44 kernel-core-5.14.0-687.48.1.el9_8.x86_64.rpm e5d99dd6485bceb1692a7b82b45bb3e12d6c559324b4276cdd285ea661b34dcd kernel-debug-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm eb9a34a1289ff3d15a791da669c4c24d18ca6ac06145bb5c388749d704e0f781 kernel-uki-virt-5.14.0-687.48.1.el9_8.x86_64.rpm ecf01e269eaed9858383c58150ef1286b449589b4321ac659aac2ab9bc7f0a40 ALSA-2026:67585 Copyright 2026 AlmaLinux OS 0 1 Moderate

firewalld security update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es): * firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-firewall-1.3.4-20.el9_8.noarch.rpm 3cf4870cd8da8f6457ad4909256bcf86ba1d571ce5bf3be4ce09d720019f844b firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm 9650238eab22e0efbedd6698f0139dc9e0a087290d8b6feec4a24308c5cbd5e1 firewalld-1.3.4-20.el9_8.noarch.rpm bf2791071c23772678217ea6b5e766b9a5cab09371a3b9c8c87ed8db361cf7a1 ALSA-2026:6766 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default python3-libs-3.9.25-3.el9_7.2.i686.rpm 0f2ac2c36f94d75b4f8d02d59ceaec04dc1342510cc56f2d0917b663349f7623 python3-libs-3.9.25-3.el9_7.2.x86_64.rpm a2863d3f40540700c830e3be9d230e2b5c7c49f60e6fc61e112502aa6b045728 python3-3.9.25-3.el9_7.2.x86_64.rpm dd50623245a97d6060d749a4ce04ab8c9bbe1e00522ec9dc8787bb5e97799294 ALSA-2026:67910 Copyright 2026 AlmaLinux OS 0 1 Important

libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fix(es): * libevent: Libevent: Denial of Service via malformed RPC data (CVE-2026-63383) * libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption (CVE-2026-63387) * libevent: Libevent: Memory corruption due to use-after-free (CVE-2026-63381) * libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header` (CVE-2026-63384) * libevent ev[http:](http:) Multiple HTTP Parser Bugs Enable Request Smuggling (CVE-2026-63382) * libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling (CVE-2026-63388) * libevent: Libevent: HTTP header handling bugs create risk of access control bypass. (CVE-2026-63385) * libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning (CVE-2026-63379) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libevent-2.1.13-1.el9_8.x86_64.rpm 09dc28d18a416255c059605f60ef03f2196f31d8137caa9ad517040f6f789f1b libevent-2.1.13-1.el9_8.i686.rpm 5006271ef39ff121a0201066c308d024734b06830b00dc1e689b1f7fc7232adb ALSA-2026:68011 Copyright 2026 AlmaLinux OS 0 1 Important

microcode_ctl security, bug fix, and enhancement update

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973) * kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8.z] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-260496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default microcode_ctl-20260210-1.20260812.1.el9_8.noarch.rpm a3c5216b4990315750227dfe5e44ffe647507fce16836082212f280793ffde5c ALSA-2026:68292 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: DNS cache poisoning via UDP source port predictability (CVE-2026-50252) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default unbound-1.24.2-3.el9_8.6.x86_64.rpm 2d1c8074d1bb1a6a7478e1abf2496669cd4445014564cfaa740eb4578403fb46 unbound-dracut-1.24.2-3.el9_8.6.x86_64.rpm 5686ab33d6e31d7f4bb8e34cd2f1df903588f198f31563d4c53a3ff5a356b0bd unbound-libs-1.24.2-3.el9_8.6.i686.rpm 7a1605d698262874a24be9d8f0bafe1a397e81e19b2fde76853d136c8672d29c unbound-libs-1.24.2-3.el9_8.6.x86_64.rpm 8a1699b2ff4b3efd560a905a935555461944c3f49dff2849ac0110e0139145a1 ALSA-2026:68570 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910) * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043) * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133) * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298) * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) Bug Fix(es) and Enhancement(s): * gfs2: filesystem withdrawal rework [almalinux-9.8.z] (JIRA:AlmaLinux-252540) * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [almalinux-9.8.z] (JIRA:AlmaLinux-252544) * gfs2: Get rid of sd_async_glock_wait [almalinux-9.8.z] (JIRA:AlmaLinux-253986) * [AlmaLinux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255217) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [almalinux-9.8.z] (JIRA:AlmaLinux-256733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-5.14.0-687.49.1.el9_8.x86_64.rpm 08f4505a54006f2c5bb7ec585d526d4cb6933beb72adfd350bc1ca1c7b77d446 kernel-core-5.14.0-687.49.1.el9_8.x86_64.rpm 26d679ab1fd559afde70d9d273f878d66a184a1dcf603c19a3e4370e214fe9ad kernel-debug-core-5.14.0-687.49.1.el9_8.x86_64.rpm 56174c727bdceae84b74ebfbda63a6d36e7dd880cdb16bab8045ae0b3075d3b4 kernel-modules-extra-5.14.0-687.49.1.el9_8.x86_64.rpm 5ab6b0a2dabb048b77e4fc085550098670b770176fc35d6c2c1b64be4895612e kernel-abi-stablelists-5.14.0-687.49.1.el9_8.noarch.rpm 68c19e44e6e43e4d500266800710a32c8391ce3d68608798402c6dd67f874665 kernel-modules-core-5.14.0-687.49.1.el9_8.x86_64.rpm 720f8fa4038b5119fcf3ab552ecb7bff30408f4806b0e8ee7c912996d116f056 kernel-debug-modules-core-5.14.0-687.49.1.el9_8.x86_64.rpm 7f8600279ca55793bc4122d1ce76838b3592d592235a60a8c5a641280f56123d kernel-debug-5.14.0-687.49.1.el9_8.x86_64.rpm 87eb2feca6fb00b92dc3339302d957fdf18bc8ae10597e716b79c1dadb2ac686 kernel-debug-uki-virt-5.14.0-687.49.1.el9_8.x86_64.rpm 912033c9b3da7d409dc17a8d7e6378ad93baba2762dc46d95af791ef43c5a44e kernel-debug-modules-5.14.0-687.49.1.el9_8.x86_64.rpm 91a0652eb1f32ffe2a8d55dcf33d5c6367e30627a196f97ace389f0ebe4a5a05 kernel-modules-5.14.0-687.49.1.el9_8.x86_64.rpm 9c281a715bee4a3b4b505c7ea40b5ff231ff9c5fa8be901923f9700e33e465bb kernel-uki-virt-5.14.0-687.49.1.el9_8.x86_64.rpm a051b07d96e951dd86de3783da16e59e00fc0f740c7f861041551fe42b4ea37e kernel-debug-modules-extra-5.14.0-687.49.1.el9_8.x86_64.rpm bef24424fa6f931b491536234646b9d809d7f39eb8ec979b0c10920ea965ea35 kernel-tools-libs-5.14.0-687.49.1.el9_8.x86_64.rpm c4ade05eb7dea232db84569b5a8b9e11592ca0c3b5031f12a2fd2b08cf81705f kernel-tools-5.14.0-687.49.1.el9_8.x86_64.rpm cc559be58b242f6e55720d89441cda1969b3f79d6207506fd2e1ee6e5f70ae70 kernel-uki-virt-addons-5.14.0-687.49.1.el9_8.x86_64.rpm f2d20315fdf387352d90a5c8b2ef2fe63034f281ad08a90ee1e6a710787cae5d ALSA-2026:69123 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default sudo-1.9.17p2-3.el9_8.1.x86_64.rpm e2afb24c1b6b5c4df0d4063f5c3f9bfd22e6596ce3adc42ae44168eb86d6eb80 ALSA-2026:69126 Copyright 2026 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458) * curl: Information disclosure due to uncleared proxy authentication state (CVE-2026-8927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libcurl-7.76.1-40.el9_8.7.i686.rpm 1d5a5ac03de48928758fa1db84d60dc7fcc1e1263798678226f23a26f18a71a0 libcurl-7.76.1-40.el9_8.7.x86_64.rpm 4ab88f14adfe56f5f1f20dfc48ed563cf31db3831ee2d1b9b05f2b0151c23078 curl-7.76.1-40.el9_8.7.x86_64.rpm 55ad4c467b04afe39fe373e20d7950fcef441b4cba4b22934729667f52190ee3 libcurl-minimal-7.76.1-40.el9_8.7.i686.rpm 5eada508fa1f03953646deb585ef2822bccdb751ee3a62d9e83662466df8eecd curl-minimal-7.76.1-40.el9_8.7.x86_64.rpm affef73f8b772888f1ee968aec82cc30f93fe5b963ca756c70252e5ab166ff4e libcurl-minimal-7.76.1-40.el9_8.7.x86_64.rpm cc2285d99374b9590e69cc1a2c00af016ba6c6218bdc1e536b4989d17bfcedec ALSA-2026:69130 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssh-9.9p1-11.el9_8.alma.1.x86_64.rpm 05873817678ed549432d2faff0db6ce4d8eb687ef7c0b05b1e9532b593bf9975 openssh-clients-9.9p1-11.el9_8.alma.1.x86_64.rpm 4ec2fb26bbf3fd382c948ac1f0ea5a0c238806c7a9a9efd75243510f6655e9cf openssh-keycat-9.9p1-11.el9_8.alma.1.x86_64.rpm c254e95ab5b2d9c206f8c1f57ada405aec80b8392a48bf7856c98ec411439466 openssh-server-9.9p1-11.el9_8.alma.1.x86_64.rpm fdd16eaeabae3742cfc4b0f91eb1eaf295404f7a62f0c28875092f38b49a4e04 ALSA-2026:70459 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-9.8.z] (JIRA:AlmaLinux-254108) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-uki-virt-addons-5.14.0-687.50.1.el9_8.x86_64.rpm 011b37766b7f40abfbd8537e98a5a032232bbc4d3b2957da3fc0cbf040e25839 kernel-uki-virt-5.14.0-687.50.1.el9_8.x86_64.rpm 028195cd41bcfac79dd2e35b747e8eeda81fde1a8dc8db5f2233258d598beda8 kernel-modules-5.14.0-687.50.1.el9_8.x86_64.rpm 034cc7863c83e1a6f8511149ad93d3de32749a5759359a61821ededb0f202c23 kernel-5.14.0-687.50.1.el9_8.x86_64.rpm 127027c270e849b419f290f5d956c0771f823fb155d00823017c410d17d722f8 kernel-tools-5.14.0-687.50.1.el9_8.x86_64.rpm 26758e7186db33da462f417257090247a18663b2bdeef09b7cf70b1ed31a6df1 kernel-tools-libs-5.14.0-687.50.1.el9_8.x86_64.rpm 2a63cf56f67dbaa255d895b22d3685a5619bbe3f7e41fd54f99aede5352d0789 kernel-modules-core-5.14.0-687.50.1.el9_8.x86_64.rpm 2f91d23fc30a145b3752d527d57efc9313612ad1af5f8fbf9107534de0199920 kernel-debug-5.14.0-687.50.1.el9_8.x86_64.rpm 403c3c029ca81fe36d184b0d3e5a79fbf61583a0ff221da1ebc92251e7852518 kernel-debug-modules-extra-5.14.0-687.50.1.el9_8.x86_64.rpm 40622dc054c699f64e3fbc002ef65f9c2f9a11a651ce4b14ccce3b586343245d kernel-modules-extra-5.14.0-687.50.1.el9_8.x86_64.rpm 43f8c3a0e4598350c42a345e59799f634c7f990e8366b44b0571f6a3d7657713 kernel-debug-modules-5.14.0-687.50.1.el9_8.x86_64.rpm 4915fc40c696dae8b444e737b80117982f47bb8d73b3d0fb59075c864fbcbe32 kernel-core-5.14.0-687.50.1.el9_8.x86_64.rpm 9d9b96382fc1a20df3c20dcbb932c0608907d6531d89879a502195b043ffb83e kernel-abi-stablelists-5.14.0-687.50.1.el9_8.noarch.rpm aa1c67a54d6a5eeda55e9f796bb8a110d63750afa744e5713a171ccc84ddbd3d kernel-debug-core-5.14.0-687.50.1.el9_8.x86_64.rpm b5f170c9abef5ca796bd67fb0c758e992f70e2a13d1ef5033fd15b1540ac4fd3 kernel-debug-uki-virt-5.14.0-687.50.1.el9_8.x86_64.rpm b95842aafa68d1402b731824fb1d5a4b673d07f2465a416181f241c2657961d0 kernel-debug-modules-core-5.14.0-687.50.1.el9_8.x86_64.rpm fb58448a550719ac015dd68899e34d55e948f45ac4b428cef0b47c2ea6fd76c8 ALSA-2026:70641 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fix(es): * skopeo: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * skopeo: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * skopeo: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * skopeo: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default skopeo-1.22.2-8.el9_8.x86_64.rpm 5416749829136b84767130452ef629abdb13e24c2ceed6292db022bb206bc9c2 ALSA-2026:71232 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053) * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-9.8.z] (JIRA:AlmaLinux-216251) * netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:AlmaLinux-236634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-5.14.0-687.51.1.el9_8.x86_64.rpm 23e00bacfcf5d5b51dbb97c88055e89a4083e3e481c738ae293d57c23a07216f kernel-debug-core-5.14.0-687.51.1.el9_8.x86_64.rpm 3b3a92a5bc334d67ec30b5e176d35a60e079af8a07a63806f28eda5a343211a9 kernel-debug-modules-5.14.0-687.51.1.el9_8.x86_64.rpm 55c913d239f56d47d471c7ca2a16b4bacdfa388a991fbaf5732e29bf3ca900c4 kernel-abi-stablelists-5.14.0-687.51.1.el9_8.noarch.rpm 90a6ad0366c68ad1b02c60002a41919ec1722ea8b8bd22794bc71cdde9822d76 kernel-debug-5.14.0-687.51.1.el9_8.x86_64.rpm c9a0514eead7527a0f9fa9b37573996f73201d180e98898df38ae81e4fb1c107 kernel-core-5.14.0-687.51.1.el9_8.x86_64.rpm f1499b01e64a338db6e402fd64f09b1ea6199a08c4fe8530e2210931e042da58 ALSA-2026:71487 Copyright 2026 AlmaLinux OS 0 1 Critical

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default unbound-libs-1.24.2-3.el9_8.8.i686.rpm 25ff58e993fd889f9d961b54c0287300bb8e2e14f3a84e5b43eb52057cbc4abf unbound-dracut-1.24.2-3.el9_8.8.x86_64.rpm 2a697efce1afca65a1e0a6411cb2ebd0e2ac7caa090195ee9a12a40f8ac02104 unbound-libs-1.24.2-3.el9_8.8.x86_64.rpm f46b34e195fd7adf5e1a382ee02747cd4d5401815a802944103419962689a65f unbound-1.24.2-3.el9_8.8.x86_64.rpm f5ba6b6cab0f733b53c17f2837c8f346cfc044f424208ac7ca54e8d471cf2880 ALSA-2026:71585 Copyright 2026 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138) * libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143) * libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140) * libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142) * libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144) * libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libxml2-2.9.13-14.el9_8.5.x86_64.rpm 158e7f10911eb52bd78e919643c49fe5e5fffdc6c43028d5fdfe799c425910b0 libxml2-2.9.13-14.el9_8.5.x86_64.rpm 1f83ad048acd3419e17512d191768670ef22500ab464615c3a3fb0e9bf05b86b libxml2-2.9.13-14.el9_8.5.i686.rpm 70a9dc1bfef6c5144e35b84755f247298df286d948654eca19a4b7fae6678303 ALSA-2026:71700 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) Bug Fix(es) and Enhancement(s): * MADVISE i/o size in AlmaLinux 9 additionally limited by read_ahead_kb - Was addressed in AlmaLinux8 via AlmaLinux-22476 [almalinux-9.8.z] (JIRA:AlmaLinux-260938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm 08d3b779f28c9ad4c8e824332a841bd5e4b2e740544821b0923b6aae4567a43d kernel-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm 1880f112ee12338226fdbd830eb4d5c6b1d8eeda04a11739b67d521fb83e5e3c kernel-core-5.14.0-687.52.1.el9_8.x86_64.rpm 23fcfdd18f215a1bbd9d3516a6d6579686d4a48e21d41b5daa045881db0731e5 kernel-debug-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm 50d4b60c38f18f5ecec7432e27918376bd765080bfbcbbffffaa4b3aec9bf6a5 kernel-tools-5.14.0-687.52.1.el9_8.x86_64.rpm 61bbab86b2772822d2b77390cb53d7b5ddd6e0dc600970a78157432a97c0bb64 kernel-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm 6b8e255545b714a9f6b2a8fdeb64d74496d59d4641270facdafa2042c3ec9c74 kernel-debug-modules-5.14.0-687.52.1.el9_8.x86_64.rpm 74ac6afdf209458579a79f03ae647b107cca5a58f63fa130b54f5f3fcb0f77ca kernel-modules-5.14.0-687.52.1.el9_8.x86_64.rpm 98dcf19362db0e681c8e135d229cbcabbc23f8d5f181d529eb3437aaf7906489 kernel-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm 9a97eb0231854d09bdc557e414f72d6bd17aa7403a5d682c0bcac447ace06616 kernel-tools-libs-5.14.0-687.52.1.el9_8.x86_64.rpm a2795f2b37b3e6bcfe3e33ed3ca4613594cc2f8c43b5122c2b9ee03960ecf0ed kernel-5.14.0-687.52.1.el9_8.x86_64.rpm bdc239f78643bc41abc5e498e2f85ba5b82988de7241bc07588099089f3fc433 kernel-debug-core-5.14.0-687.52.1.el9_8.x86_64.rpm bde485dea288b7de87d150980bb1290ff74dc798d25386131cb100bc1439e673 kernel-debug-5.14.0-687.52.1.el9_8.x86_64.rpm c19179fb640d06d445eda4b64d6b747817b490d0e48ed25cbb76bcced9c5f2a5 kernel-uki-virt-addons-5.14.0-687.52.1.el9_8.x86_64.rpm d1b21b5dc8ac29760a5c8175fb61d254d0952cb8f8be5f2b65998c4b0b0658ef kernel-debug-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm df812bc9eda820ad316e0d82e464cb1ac0dc9d7de9244dcd60325ac3154c81fe kernel-abi-stablelists-5.14.0-687.52.1.el9_8.noarch.rpm e5dc9d671ee0433df08b2aa6aced346d5387e62c8b618c5a91df434e547907d5 ALSA-2026:72623 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875) * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-9.8.z] (JIRA:AlmaLinux-188656) * crypto: xxhash64 should not be fips approved [almalinux-9.8.z] (JIRA:AlmaLinux-256437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-5.14.0-687.53.1.el9_8.x86_64.rpm 028ed2f755e5e582b59c042ce84fc84b29c6416ff5e875fe0774de964da56440 kernel-debug-5.14.0-687.53.1.el9_8.x86_64.rpm 0c7f68e18a64b1b9b7d97b615ba48a6ff3ba6a8b9b7e8c79ea064cdf87f8cb9b kernel-debug-uki-virt-5.14.0-687.53.1.el9_8.x86_64.rpm 12f9b683430b19ca885442a360dc2eeece47750c03a1271d4c0ff8be32763ee8 kernel-debug-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpm 269a6b4a46cdf45c2a2516e46ce5bf8ef0112a62309d1c9df662b94ecf3a9f2c kernel-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpm 2de1a7883a8fc8de58a8959608f0d0ce57a555ef15f4d9d2d020a286055b940c kernel-debug-core-5.14.0-687.53.1.el9_8.x86_64.rpm 3fa82fae0e9b3bda25b361627f9d5871c3d5574c1425e5db7b94aab707f0c27c kernel-uki-virt-addons-5.14.0-687.53.1.el9_8.x86_64.rpm 407af66b8c2fa3a337f4babedf71a43b220060c6bb481441e01b680776c31668 kernel-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpm 6ec833ecba36b91395b5721e670635483ffa8f1cf1e0f9c365d96c7735da9ea6 kernel-5.14.0-687.53.1.el9_8.x86_64.rpm 9c5048270adc8262be645ea8a99df77490fb197a76cd453ff7636f45e264476c kernel-tools-libs-5.14.0-687.53.1.el9_8.x86_64.rpm ae41aedb2a345fa7f01d0e847b368f2c248307fc65565f3e6d4894b21a654cc2 kernel-tools-5.14.0-687.53.1.el9_8.x86_64.rpm aeea920736541de68bde9262c6869c207c14782fe788354a8db5c5f9ce7d8f59 kernel-debug-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpm befdb8a5c535d467fe444128908da54c49735e15150dce47a0df10ca2669a7fa kernel-abi-stablelists-5.14.0-687.53.1.el9_8.noarch.rpm c0166dbd960a37b3e30470aeaefb1eb2dee5dd14db43c1062869c2956b3c4706 kernel-debug-modules-5.14.0-687.53.1.el9_8.x86_64.rpm e3ba89c5ed3063a36e60d2520759a4c6e112735e3232dfd75b5cf3d43ec3ad6d kernel-core-5.14.0-687.53.1.el9_8.x86_64.rpm e899d0fbf1f993da71c56a8a63baf766dbc6ae17ffb034c59febd09a39e678f9 kernel-uki-virt-5.14.0-687.53.1.el9_8.x86_64.rpm fd801f4f46378162d6faa610397c05a6fa158772187fd45e6cc35e4ef1570771 ALSA-2026:72663 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: Expat: Denial of Service via quadratic complexity in attribute processing (CVE-2026-66046) * expat: Expat: XML Injection via Malformed UTF-16 Input (CVE-2026-93990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default expat-2.5.0-6.el9_8.5.x86_64.rpm 53914e26875f00614e7d5344a9641ad209ff4143e4508a5b35861ea3c3ec0b36 expat-2.5.0-6.el9_8.5.i686.rpm 80204f6db92383fd97c503ea08852fded21e4d2323e225dbf6b10c5a15515d2f ALSA-2026:73512 Copyright 2026 AlmaLinux OS 0 1 Moderate

gawk security update

The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. Security Fix(es): * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468) * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553) * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default gawk-5.1.0-6.el9_8.1.x86_64.rpm b653a21cf634a7570ada45863206dd1e4d3c13ae0e58f62f8d5cc5a7cf9d0ebe ALSA-2026:7384 Copyright 2026 AlmaLinux OS 0 1 Critical

cockpit: Unauthenticated remote code execution due to SSH command-line argument injection

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default cockpit-bridge-344-2.el9_7.noarch.rpm 2effe186221fe6dc07d95815c153435b8730f5e721c05bc7db9576b8bc00adad cockpit-system-344-2.el9_7.noarch.rpm 3b3523d9a2fd6605d71280f802e7ab26a7f5145b77dd7ecc2e593fbfb83bd428 cockpit-ws-344-2.el9_7.x86_64.rpm 5f95ca3a47cc8a6a578f4c68fe5f0d56896ff973e042c9e3d71042e296333646 cockpit-344-2.el9_7.x86_64.rpm 64fdd8201a5fbe238a64be3a9e884a8c3c018cc0204f308631c2bf41555a18e6 cockpit-ws-selinux-344-2.el9_7.x86_64.rpm 71816bcab5c8bc87863251dc72b6e3ae65729fd47139a9c1f291a165ada28ca7 cockpit-doc-344-2.el9_7.noarch.rpm 9e555d673f9eb1696fd5340e348f6a1c9787e2fdd1db09530fde04b6077fc7b9 ALSA-2026:73955 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay (CVE-2026-60001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssh-9.9p1-12.el9_8.alma.1.x86_64.rpm 7c235b170f7a434360a917f3e1dc697c0651c2b769f275ae5ac991f2d1bf2f8d openssh-keycat-9.9p1-12.el9_8.alma.1.x86_64.rpm 974cd292a387fc5422fa532829a15ce47713719104637c1d61c6826b30768f12 openssh-clients-9.9p1-12.el9_8.alma.1.x86_64.rpm b027a716413ce35674e93fe64dd4c9920b721600e7d46f7b0c9640ffb1ff50e4 openssh-server-9.9p1-12.el9_8.alma.1.x86_64.rpm c7dce5d991bd9c0ed5db014338992fe47ad710fccbb218cc5168828aae0e00e0 ALSA-2026:74438 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) Bug Fix(es) and Enhancement(s): * Backport of protocol attribute to IP addresses (IFA_PROTO) [almalinux-9.8.z] (JIRA:AlmaLinux-169936) * try_charge_memcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [almalinux-9.8.z] (JIRA:AlmaLinux-269060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-modules-5.14.0-687.54.1.el9_8.x86_64.rpm 0fb0634f1b8fb599d875000d8bafe9a257d06ed00c400b905efc3060a644da0b kernel-uki-virt-5.14.0-687.54.1.el9_8.x86_64.rpm 1a33532aa2403cb78b35bcb4bbbe33b4502d5cc490a5743d9add9409883e233a kernel-5.14.0-687.54.1.el9_8.x86_64.rpm 250b4a2d714bbf84f9e7d67987c995155c64e7eb1b47ad5f895842d1904dda40 kernel-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm 3b158a2c38dfc838e5ede86276ad686a3ee850cf69bfc5bd162fa6e8adc6df3e kernel-tools-libs-5.14.0-687.54.1.el9_8.x86_64.rpm 3bda313f80df4ba19699990e0b1d1f3ec1433a7ccc80bc4da334ea8a9c122528 kernel-debug-core-5.14.0-687.54.1.el9_8.x86_64.rpm 3c525c2407474ed87fc121c3129a2b5129d4b57d4472aa7be08b4377f2f4d8b2 kernel-abi-stablelists-5.14.0-687.54.1.el9_8.noarch.rpm 695829b6008a847f3d91fc3b7e5da0748d6c2283cb07cc09a93d093ba03fdaf2 kernel-tools-5.14.0-687.54.1.el9_8.x86_64.rpm 6d32b8bc6d6f71f7abff01a93facf05b283051ef3205b1898db18d83d97ef523 kernel-debug-modules-5.14.0-687.54.1.el9_8.x86_64.rpm 6e0bc3f9aaeea085ea278250b1e0b6fff1641f62a2e32108d1a1ed2f56755117 kernel-debug-5.14.0-687.54.1.el9_8.x86_64.rpm 9ab227c13f41d37b15b892ebd6f0e7cfb10326b5b4989f55080cd4c046fc33e8 kernel-core-5.14.0-687.54.1.el9_8.x86_64.rpm ab64f747ef36ce9c9988d5c86c4d9706f4be1d6bc09dbd87d6c41d0ac74e9610 kernel-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm ad2797c4d03b54c997a0d5ee43426427466e261d6152b0a8bca65b6d86e8ee6a kernel-debug-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm ce54da50af0c32fbd3ee2e76b051b8645e913e4a6ba86de4a592e231dbe0a073 kernel-debug-uki-virt-5.14.0-687.54.1.el9_8.x86_64.rpm d26f63d0aae31b46d8b89f43a2c1a986abdbc0d8ad4d3fa1f4e2c1c3e2ae3da9 kernel-uki-virt-addons-5.14.0-687.54.1.el9_8.x86_64.rpm d2d831c278dd59982f16299792777d343916d5e883f91c3c4e8c5339761d2673 kernel-debug-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm d87124c6c3fc8f138ff579ff644356a16c27b04b90719322a0f0649606b082d0 ALSA-2026:74441 Copyright 2026 AlmaLinux OS 0 1 Important

libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fix(es): * libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access (CVE-2026-0799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libpcap-1.10.0-4.el9_8.1.x86_64.rpm 779b8b352af352325bbdc149e141eb64749f12e977b7ea140c77f89ad1dd8e96 libpcap-1.10.0-4.el9_8.1.i686.rpm a1f6c57a16e3a77e4488a6c07969902e4d0f95ef1f7801c9abecf086414ee2b4 ALSA-2026:75571 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization (CVE-2026-96512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default sudo-1.9.17p2-3.el9_8.3.x86_64.rpm 997ed5260bd9a2605ce9cfee3f78e8252d9ee243f1bd025d3576d31ae8de85cc ALSA-2026:75768 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default vim-filesystem-8.2.2637-26.el9_8.23.noarch.rpm 5a67c6210898178046677dc40c8145bf74fc0d99b2374239e4380ef1967c8a3b vim-minimal-8.2.2637-26.el9_8.23.x86_64.rpm e8a8dff156c6a193d161fce65c7ba7bb97f5b739db703030031886614e3ae068 ALSA-2026:7668 Copyright 2026 AlmaLinux OS 0 1 Important

nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libnghttp2-1.43.0-6.el9_7.1.x86_64.rpm aef6f9d1d479bb539e35cc605da8856b462caff378bcb493b63b8be34454445d libnghttp2-1.43.0-6.el9_7.1.i686.rpm b0e5047ba1fcd51dc8ab8c37d2893121c1dceb503305e0eba596a3488a656243 ALSA-2026:76733 Copyright 2026 AlmaLinux OS 0 1 Important

rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia. Security Fix(es): * sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default rpm-sequoia-1.10.2.1-1.el9_8.i686.rpm 1d01b70134835f84be7079166c36f130d7f0a821f503a686d02af76fabd72851 rpm-sequoia-1.10.2.1-1.el9_8.x86_64.rpm 2dc3bf467280df242c9e9bc77c4af328dcb2c812c89b46da966f1e12c9ad8384 ALSA-2026:77396 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssl-libs-3.5.8-2.el9_8.x86_64.rpm 0dc8692e5eb52946e5dca0f3f885f4c05a19451d19cf728506f305eae4d97dbf openssl-3.5.8-2.el9_8.x86_64.rpm 40e7d99612c03647fd35b1d574a194adb6cb99626bb5b2e97b81fed2d4cf6ca5 openssl-libs-3.5.8-2.el9_8.i686.rpm e5f6a35a295f978b8c03bba7ce32d78c1da43734aaf8495225fba5d7e5f6b007 ALSA-2026:77689 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) Bug Fix(es) and Enhancement(s): * "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480) * [GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201) * AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577) * Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014) * RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-uki-virt-addons-5.14.0-687.56.1.el9_8.x86_64.rpm 0860eab77c4297a378749cc3e6ea4679fbb63d31ecfd80f839bf5935e9580212 kernel-5.14.0-687.56.1.el9_8.x86_64.rpm 46a037a932805ccc99b462d83894fbad197889d5a4dbf82259c28580842b1e39 kernel-modules-extra-5.14.0-687.56.1.el9_8.x86_64.rpm 4ee63ceab5973db78299b28a60442eb85b38f53ea10e1c7f8dea86065d100b64 kernel-modules-5.14.0-687.56.1.el9_8.x86_64.rpm 50a5876f363c0392afca9ced739a05d0d31b0c62e6d4e9fd24e947fdd3d25285 kernel-tools-5.14.0-687.56.1.el9_8.x86_64.rpm 6a3f844dd1ea9db57fb0a415529836329d8f3f4be77da4c9cc2d4143fd4b2d5f kernel-debug-modules-5.14.0-687.56.1.el9_8.x86_64.rpm 737fe89903822758b0b4b968eecb9236546c6ab312a289a715e131f4ab173df9 kernel-uki-virt-5.14.0-687.56.1.el9_8.x86_64.rpm 7d4a39e821006d5c34d27516747c104d8c43fef3c07140fdca3ad175d5c5903d kernel-abi-stablelists-5.14.0-687.56.1.el9_8.noarch.rpm 89b46cefce0c5ebebd0a4d80701aee2ae6349101ce905db1b4e7082d2abab417 kernel-debug-core-5.14.0-687.56.1.el9_8.x86_64.rpm 8d97e88205164172bee7a8e3fda68793b44bded4e1a33c9dee2a5b0f0bafe642 kernel-debug-uki-virt-5.14.0-687.56.1.el9_8.x86_64.rpm 9c6c1509155af8be7982a954e2e99a4f542850ebac6e5a68e21a5f231f4f882c kernel-debug-modules-core-5.14.0-687.56.1.el9_8.x86_64.rpm ae4924aa66c1bb5df41f30c854204f4d93c24198257a4ac7db57901c6ad38088 kernel-tools-libs-5.14.0-687.56.1.el9_8.x86_64.rpm af1801afb70c4c2359e1c6c173a581cf9de79d605f8c5dba30b3c1834d23fdb9 kernel-modules-core-5.14.0-687.56.1.el9_8.x86_64.rpm e4a96cedd7cc912395e8fc6396d56b0fb909e1f97bc2d3b19df504dbd8669f0e kernel-core-5.14.0-687.56.1.el9_8.x86_64.rpm e8ce9beb83317042b2e75fcfe47cc6f032d8c5308f748cafc68fe8e124cebce6 kernel-debug-modules-extra-5.14.0-687.56.1.el9_8.x86_64.rpm f33eba887f075567cd4d7175df9ef227793f5b848b43b271023ed038e62d73b2 kernel-debug-5.14.0-687.56.1.el9_8.x86_64.rpm f453a8d8fdb5a3339029b78e8a68c44fbdc36d8a553445591545f53df2ad0c71 ALSA-2026:79281 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion (CVE-2026-6791) * glibc: glibc: Process abort due to invalid memory in wordexp (CVE-2026-6368) * glibc: Fix out-of-bounds array write in tdelete (CVE-2026-19542) * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt (CVE-2026-77117) * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt; UCS-4 conversion state (CVE-2026-80489) * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374) Bug Fix(es) and Enhancement(s): * glibc: Stop shipping glibc32-debuginfo package (in debug channels) [almalinux-9] (JIRA:AlmaLinux-219516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default glibc-langpack-chr-2.34-283.el9_8.x86_64.rpm 00a280fd11fef375397d52adf716af94d82fc22b9a69f3e949ec0fbc83f6bdba glibc-gconv-extra-2.34-283.el9_8.i686.rpm 01550a48035a36cc1ea04c9dd612f9a881e225b2341ec6986d9d01952840be78 glibc-langpack-zu-2.34-283.el9_8.x86_64.rpm 016822e5b0e8b27a02d72d1852fb0c4957c5b9bb4edb7cd916ce4c9687ba643f glibc-langpack-mnw-2.34-283.el9_8.x86_64.rpm 01d038c8538d58662f1ba52e5e243c4420d259adaec9c9346fa3ea74ea16197b glibc-langpack-niu-2.34-283.el9_8.x86_64.rpm 032a5f45816f4177c658ebf3c45cf7d43459dc4ac99999b84ce7d1c50467441f glibc-langpack-mi-2.34-283.el9_8.x86_64.rpm 0598f8531780f601ffeddc009f0801da7254ce97675fe3afab40675f0380dc99 glibc-langpack-sr-2.34-283.el9_8.x86_64.rpm 067ce8e626200c2ee4d5788684f464f1b20163090b5d73c9868b7f5f22a78d4f glibc-langpack-pap-2.34-283.el9_8.x86_64.rpm 08638a17c4da567a833528f2a8d333d3ed61566487370d90278f70b74725afa1 glibc-langpack-bo-2.34-283.el9_8.x86_64.rpm 08b5390ecd037519ee22a21b239715c4d7e7166c746b55ef880447b542de6c00 glibc-langpack-fil-2.34-283.el9_8.x86_64.rpm 0928efb5b55f9b18fdb26708ac054989a394216257af6897c3e8ac373c78e5fc glibc-langpack-bg-2.34-283.el9_8.x86_64.rpm 096e38080c33d39f19034da3b290dbb949a029e9f60aacf2fde9290a54ab3750 glibc-langpack-tk-2.34-283.el9_8.x86_64.rpm 09b30d2ac609fd30b2ab97043f7d45a1717ca2609a4c023c0de26e1e9de38f4b glibc-langpack-gd-2.34-283.el9_8.x86_64.rpm 0acadecbb6935206c48c632cdce820890c1dcd99612e687eb8386b03fb727f93 glibc-langpack-as-2.34-283.el9_8.x86_64.rpm 0b7d190756699dbbb31175bedae28af6c8a526320b4a32346fa7c7beb32bf0f4 glibc-langpack-ka-2.34-283.el9_8.x86_64.rpm 0bb6be978b8265c31c4e0c21924dfeeaeba154f30e1df233779e4db5be526384 glibc-langpack-kn-2.34-283.el9_8.x86_64.rpm 0c2fb95b67111f40c943eecfda7d1aa0f324c511234c9c6fc93fac9a57e3740f glibc-langpack-crh-2.34-283.el9_8.x86_64.rpm 0da189e24152b6c172bf2a59d53fd9f924a9323f024d48c32243dbc94db78663 glibc-langpack-en-2.34-283.el9_8.x86_64.rpm 0efd218a2b63e579d0dc3f8518ae950d2f85f03e933191b3a1e8af19cf797507 glibc-langpack-nb-2.34-283.el9_8.x86_64.rpm 0fa3bf885544cd57c8a554936c15a14d779913d97b382690d6bffe9f0a761a03 glibc-langpack-ss-2.34-283.el9_8.x86_64.rpm 110674d41a5eb5b6e7a3e3f283a141a1e91455ba41b2fe0274f917ec3554f157 glibc-minimal-langpack-2.34-283.el9_8.x86_64.rpm 11d1b8d5ccdcc84e73600f365a72948402ed135739c47c309310df3cfd41977c libnsl-2.34-283.el9_8.x86_64.rpm 144e1f871b03aa88db7d868ddda7023265dcbfaf37a2f1c0ebd9bb74a384b798 glibc-langpack-tl-2.34-283.el9_8.x86_64.rpm 16979c8dfdf11705e35e2fd6c4a0b42f4f4320688080bd896dd737101f9a4136 glibc-langpack-cy-2.34-283.el9_8.x86_64.rpm 180f0d7a7dfa01991e1af2a28b230a032e4bf1a6cf5a2f95085efbc24173a893 glibc-langpack-hr-2.34-283.el9_8.x86_64.rpm 189a0b945aca1de3a4d38dfdf52b85e07f5f2cd71175c65d956f50dea214b7db glibc-langpack-ug-2.34-283.el9_8.x86_64.rpm 1942336429aab8f7987a0d79cc2d312c1c33509431839a8d7ca4b4c83859d7dd glibc-langpack-ts-2.34-283.el9_8.x86_64.rpm 1b5ad91c48d348052a1bdb4b468bbc1a6baa8c53c872e7fa2b7e51cf54772dc5 glibc-langpack-gu-2.34-283.el9_8.x86_64.rpm 1d5619e4cd203a64f7ac0d4480c7ea237e87b4e789643fd22f1c8cdfd6bb7273 glibc-langpack-te-2.34-283.el9_8.x86_64.rpm 1d56c1c81423ca0933919938a55ca9d993e5ea9682a0334acd333b2b505a7c6a glibc-langpack-ku-2.34-283.el9_8.x86_64.rpm 1e3d7f660522b68771799981e0368aa0634df511085b9eee0d29d66fe3625d10 glibc-langpack-ja-2.34-283.el9_8.x86_64.rpm 1eca59b4aa1ea37a085fe4c5db452da4200d1205b4c1a9b49f4baa1921f01ee6 glibc-langpack-ca-2.34-283.el9_8.x86_64.rpm 1fbf178e6d01029f9d9d03d9335af4d86ebaaa2e5fbb462828132054de89ae56 glibc-langpack-xh-2.34-283.el9_8.x86_64.rpm 1fd2dc5aa5539cdd1be9f8175bd36b2ac925ee8767604099708b850181e44b79 glibc-langpack-kok-2.34-283.el9_8.x86_64.rpm 21839192c96000b92abc8315060b21ea6b37de77a60f470078ea5760c3d3bdb0 glibc-langpack-wae-2.34-283.el9_8.x86_64.rpm 21b996b10d453efa5f6f4a8fceaee901a4270260798e470d606b78c1857b0b44 glibc-langpack-lg-2.34-283.el9_8.x86_64.rpm 21f7ba8562f7440e9ba14c84a6fdfd288e422af0d72170a728c38e23b1ea09e7 glibc-gconv-extra-2.34-283.el9_8.x86_64.rpm 23d65bafc94a36d94a8429aabc8720b391f515ea03c32202c14aebf5a1523a54 glibc-langpack-ta-2.34-283.el9_8.x86_64.rpm 24de89c79c1f5cfbedfa33a0c9718593e35e896f2421bebbfa09401715a6d56f glibc-langpack-eu-2.34-283.el9_8.x86_64.rpm 25cb7381d36d562274c3e8f562c40e4740f4347f9894bfa38d70cf850e2e9f0c glibc-langpack-miq-2.34-283.el9_8.x86_64.rpm 2849fcb1665ef07872035031b7c113a0a155712341321bd460031b2d57263343 glibc-langpack-gez-2.34-283.el9_8.x86_64.rpm 2a19ea3968786476e0be4694edf28ec870af900bf8f5edba3c250aea81bd3323 glibc-langpack-ky-2.34-283.el9_8.x86_64.rpm 2a1e4f4bbe86902a30753fcc5090b37e626cac7e101aaa4c9a81022757c790ec glibc-langpack-dz-2.34-283.el9_8.x86_64.rpm 2c0a98e1779dacd7d3c0d9871e61331ed489d3dff956310e9e17111e295bbca1 glibc-langpack-os-2.34-283.el9_8.x86_64.rpm 301f3e977fb548a95baf71ea96f9e085dffb34fe846395b415136ff15bd8fff4 glibc-langpack-yue-2.34-283.el9_8.x86_64.rpm 311e70bac4ecfad9de4e2d467b285a66932ce1739b84c0604ca22aa5ab614a30 glibc-langpack-he-2.34-283.el9_8.x86_64.rpm 320d4a1cddb563b60058cce30d9b3a91ab1d79295989e21bfaa9fc011c1a93ba glibc-langpack-af-2.34-283.el9_8.x86_64.rpm 3313e7586773cf3e91897039f59ef60bd1c533769885b102a9efa5ca08f813d1 glibc-langpack-hi-2.34-283.el9_8.x86_64.rpm 33cfd0034556e52d37605c9cca8058b2ea8ee5b76fe8bba5a2e3247765ff49ba glibc-langpack-mt-2.34-283.el9_8.x86_64.rpm 34ed5c52bc8d93985e01b1e0c523865901dd049353753e91a4c2c48dd0a48644 glibc-langpack-mg-2.34-283.el9_8.x86_64.rpm 350cc28357cba1c4c1fae286c39b6b5b14fe0b775015e630890119e4d50895ed glibc-langpack-mfe-2.34-283.el9_8.x86_64.rpm 365b658ce7f78e7527fc4938b35d5a279c421ebe4e10c2a4bc969cba6fa10071 glibc-langpack-wa-2.34-283.el9_8.x86_64.rpm 391ef29e451eb89485f60e26cbf80f8393d4b8a761807d34bf6848873d739e13 glibc-langpack-nl-2.34-283.el9_8.x86_64.rpm 3aa7b8df79c2f1423c9d75e47ec089f12c02d3befb33894fdf20b4d543bcacb1 glibc-langpack-nso-2.34-283.el9_8.x86_64.rpm 3aaf845c8db61e78e07a24b0bde0bdaef546708766d29728fc09651716fc1008 glibc-langpack-anp-2.34-283.el9_8.x86_64.rpm 3bd452af64bb77eb22e6b5dc6799325c1c061607d63bfbc6c1d1e369023b2a98 glibc-langpack-mni-2.34-283.el9_8.x86_64.rpm 3ca79a4092bd433de2b63ee6dc4b1e450038b8a6941a546242e163ae89c99fdc glibc-langpack-az-2.34-283.el9_8.x86_64.rpm 3cdbdd5b62e4f2b22ada1177efa605b4492e5349650b28d3727b804d9947193a glibc-langpack-kab-2.34-283.el9_8.x86_64.rpm 3d93c49a392f3dce080fb94d2cdb332171f679fbe4ebe6f025733daa2356a308 glibc-langpack-bi-2.34-283.el9_8.x86_64.rpm 3fd45c2670acc89feafb7877ad9f093d338b64f962201c275a6a076b5fb56d0f glibc-langpack-sa-2.34-283.el9_8.x86_64.rpm 4071b82bc333f605b6cb582e8d18096d4a044c485b69ec569fda1a7029788d27 glibc-langpack-sv-2.34-283.el9_8.x86_64.rpm 40a3824effebdd93e02f06e1c786df33a07e313334f3947a7a10b611af8e7f7f glibc-langpack-or-2.34-283.el9_8.x86_64.rpm 416723cec230c83e9a5fb6b9baa471bf6d11eed7751137d8151244f6055f1992 glibc-langpack-om-2.34-283.el9_8.x86_64.rpm 4259cf4b408626fcdff3cd905962e8cec87007df087b08b5caf3c57f740f2148 glibc-langpack-lb-2.34-283.el9_8.x86_64.rpm 4273b69b0201785fc518c0892412e49602231c0ffe750d0ec70c7a35320aec31 glibc-langpack-agr-2.34-283.el9_8.x86_64.rpm 45cc85207514ac4f38206e1f6d43a8afb468ddb193325f0f448ca18cf4db99c3 glibc-langpack-lij-2.34-283.el9_8.x86_64.rpm 45e7340f9912646d683111314b3e48233672d3bf39241c7cab2e0e823f913a38 glibc-langpack-ha-2.34-283.el9_8.x86_64.rpm 48350d2e057a0d13d7527806cc16ebe0604b04490ccd0c4408e3afb9b547fe7d glibc-langpack-hy-2.34-283.el9_8.x86_64.rpm 4a0488eb11b2fdf4be68582c14c04c3fadd65f6dfa8efed1bfd26c1f4cfa1a06 glibc-langpack-hne-2.34-283.el9_8.x86_64.rpm 4a87f3e9fa39de815a71455fc05b98a59f89da3b17649192efaec0473d6edd90 glibc-langpack-kw-2.34-283.el9_8.x86_64.rpm 4b00e8183b5b0373d6c2ad2edd04b9a30ad6a50397279c7bb1b32faab864aea0 glibc-langpack-tt-2.34-283.el9_8.x86_64.rpm 4b78db9d10bb126ed6b5255f79bdca9e3c4d403afabe51ea51306d07186dfe15 glibc-langpack-sd-2.34-283.el9_8.x86_64.rpm 4c43abf92ea48f531d0e355a116e238d06459ed76fbf23a00a0496d418d344c5 glibc-langpack-ru-2.34-283.el9_8.x86_64.rpm 4c67c896e78c1f53ed9a020156f3735268d888ae73feb1aa6468cad0bf775865 glibc-langpack-se-2.34-283.el9_8.x86_64.rpm 4e080c6d4b4ebbbcacf3d4b9730f64e2b29bdd4286f7d439eacdf70cdf0977c4 glibc-langpack-ik-2.34-283.el9_8.x86_64.rpm 4f31149e56e993d8f806537aae0762e32e3d8747dfcc9ccb504c8d86b71fc0c4 glibc-langpack-sc-2.34-283.el9_8.x86_64.rpm 51fe2fa2b64ad94a9435df4979d0852e892a98c99a2f6b76e816208700dd0e37 glibc-langpack-pa-2.34-283.el9_8.x86_64.rpm 5230c0dd521f994e9428b0e09cb6666049f8e06961548771662647cd27caac04 glibc-langpack-to-2.34-283.el9_8.x86_64.rpm 52fffdf224f859fddc8ae68fb5a05dee9a1b2594703c2044483a420dd1b84645 glibc-langpack-kl-2.34-283.el9_8.x86_64.rpm 55adc0c5abd2b02293762dd0111d58eea259373d405f1dc18845fb6c959e0459 glibc-all-langpacks-2.34-283.el9_8.x86_64.rpm 57d4599bb3bb8abd5c70fc92d48f04128e0492eebd5b0514c646c21eaad4231f glibc-langpack-ms-2.34-283.el9_8.x86_64.rpm 57f9a70b4eb7376c8e632b1c42bc71ddf28d25fe90b0174f5e38ff8477297c83 glibc-langpack-unm-2.34-283.el9_8.x86_64.rpm 5823194f8d4fd980525b799eba31f23c628e4736afcf37f36079f89d454aca56 glibc-langpack-hak-2.34-283.el9_8.x86_64.rpm 5c3ee2aadd0470d97ca5c06c119443f263215c892f71d57d2bc69678d0c4d955 glibc-langpack-nan-2.34-283.el9_8.x86_64.rpm 5dc92dc36136b2f73eaac35f4b314391972212866c78165e819bd9c63180ab4b glibc-langpack-yuw-2.34-283.el9_8.x86_64.rpm 5ed60436cbe89764a0a3ddd3f0190d8fa628a860ad3a975f1a9e088bc97c9f11 glibc-langpack-ml-2.34-283.el9_8.x86_64.rpm 5f005f705f48fe2ff7eb4c08a2db593f27f6b026f99e2e5defea7b6766f22790 glibc-langpack-yi-2.34-283.el9_8.x86_64.rpm 5f1011a7914cf1f809bccdbc702a6bc5411e4c52244032d2efec07d62515acfa glibc-langpack-uz-2.34-283.el9_8.x86_64.rpm 5f3f6ce0764226521271ee3f6702cbb274b02a4002ecf729d8650d1f6d7c3686 glibc-langpack-ak-2.34-283.el9_8.x86_64.rpm 601a527af07e035e5d1681e4ed524b82ea6389244103d31ef985c0e87a07d3a6 glibc-langpack-bn-2.34-283.el9_8.x86_64.rpm 61e5d93f14c4f7b545e6f8779474353d396f637cbd2059c634bd6f01114840f2 glibc-langpack-ve-2.34-283.el9_8.x86_64.rpm 6246c903697b828b56e9dfa5dea289b92587b9e7d2bd9cff35e375210b6e5d6a glibc-langpack-fy-2.34-283.el9_8.x86_64.rpm 630599cf22d83dff2b47915e65bca80cde8481788f5017cffe8c5d1a0b18515f glibc-langpack-an-2.34-283.el9_8.x86_64.rpm 649e0b253ae505990a9ce1fdbbce3ca0f3a9725f03e330405d61bd4420f680e7 glibc-langpack-tg-2.34-283.el9_8.x86_64.rpm 671c3a34e522ce997ef81c70b08bbd35d13e99ed4652292390cf297532d08b74 glibc-langpack-hif-2.34-283.el9_8.x86_64.rpm 68374ee99701f1e49ae2a1a5de97743a28238269a284cfe1271cb1c0b1bdd205 glibc-langpack-mai-2.34-283.el9_8.x86_64.rpm 6982623b7d68d661eb11ac5073d52154fa42c05e0ac4bbdef65d58e8fbe163e5 glibc-langpack-zh-2.34-283.el9_8.x86_64.rpm 69c0188cfce79241cef89eed1f0886255e22fbacbaad1a5ab92c2ff171cf05c4 nscd-2.34-283.el9_8.x86_64.rpm 6c97448ab6138c8b8fad3bad3b2be0c74fafcfea5745ab375a12ac3ad86efd4e glibc-langpack-ko-2.34-283.el9_8.x86_64.rpm 6dafd32f55b8e7980ee4d48f86d766ef1ecbf5d3145f2952fe2de5dde26a7dc7 glibc-langpack-the-2.34-283.el9_8.x86_64.rpm 6e7894c595d0102036a779729498bd8964c80b45b48a6d228e1bc0ab33d31eab glibc-langpack-aa-2.34-283.el9_8.x86_64.rpm 700eab8f2d75889daa3b67eef3f30794aaf2dcd86773c85d4725c97f5c0a917b glibc-langpack-ig-2.34-283.el9_8.x86_64.rpm 70535423ce59ede5c06b3f2ef589919fba239c8869b4eac0f1e0f3273a777ef7 glibc-langpack-is-2.34-283.el9_8.x86_64.rpm 7141d7ebce31996fe1cc103f0db045dbde9aa1f11ee896568a438062fa50f216 glibc-langpack-sw-2.34-283.el9_8.x86_64.rpm 717475708928b2aa312c0789caaa9281fd359126650ca1c0284ee7877f287eaf glibc-langpack-dv-2.34-283.el9_8.x86_64.rpm 73bfeb589649095f706af4b2655b27675d16487854609014ca3dba3519bf0af1 glibc-langpack-sah-2.34-283.el9_8.x86_64.rpm 7419ef40eacfdced7a1f62f77b3d787beb74c4824f9d376da6c411543eade726 glibc-langpack-id-2.34-283.el9_8.x86_64.rpm 7624fca064c676bc32fdd5c536a83d20d8c2b7eb829352ca4e6a5efc4539a011 glibc-langpack-ro-2.34-283.el9_8.x86_64.rpm 77a65a9119b94d3a30397de6c8dc8e24f56d9e9dc2b89f28124b0cd81a92cef9 glibc-langpack-ber-2.34-283.el9_8.x86_64.rpm 79a50811c221985fb8abbcfb74b8ccae266ebb110fa6543c3fe212ba0ff6d942 glibc-langpack-shn-2.34-283.el9_8.x86_64.rpm 79bfec9bb4a739bcacddfad905e376502ba1dfe4e69d0d2b81df5280311d2581 glibc-langpack-dsb-2.34-283.el9_8.x86_64.rpm 7b85197acb0e6783216fb2e7b9a00253aa1285413543455c8239dd1fe14cb237 glibc-langpack-eo-2.34-283.el9_8.x86_64.rpm 7c0479722b7b99be5a78fc64cab5407baf500f38b590a5f5f20befbb3315aa60 glibc-langpack-ur-2.34-283.el9_8.x86_64.rpm 7c6acd29d5c9e32072ec4f32eedb3fee8481b95d0ec1a8f1f83679383e0dd3b1 glibc-langpack-sid-2.34-283.el9_8.x86_64.rpm 7c969729b6c016f55c830f01378e2c07d1cf1cc41090ef71ed2705392da65563 glibc-langpack-km-2.34-283.el9_8.x86_64.rpm 7d0b38c1082a5600a80d7666f5f1a4c6641c4db16416a6e30fca5d9f3646e114 glibc-langpack-oc-2.34-283.el9_8.x86_64.rpm 7d27f0148159bd0b457e97d5f9e1bb5898dc0aa77f866724323b061cc3ce2df4 glibc-langpack-gl-2.34-283.el9_8.x86_64.rpm 7df1efbf588393569d28e0f9fc275519c3bae632df72b62594ef62741d8fd717 glibc-langpack-ti-2.34-283.el9_8.x86_64.rpm 7f741da9109297eb2a94f4b3cad72f32044adf4cb6daac5e94c7665122dbef30 glibc-langpack-sgs-2.34-283.el9_8.x86_64.rpm 8147d25259f4917e1541dacc4d393fe131fe8ae449a2b53c7244f5236c8c1635 glibc-langpack-da-2.34-283.el9_8.x86_64.rpm 8253bab5719c41c4de63eb026b01d2a98b55c5398a8117930b7f8d7011d36549 glibc-langpack-nhn-2.34-283.el9_8.x86_64.rpm 837a00a73ba69abe736e7e32d875af0b6e49819035d37f36322328b94ae77a16 glibc-langpack-raj-2.34-283.el9_8.x86_64.rpm 85f57311f12c3aeed865b4ae3d3fb172c4f7bf94c93d4411c2caf4f68a17f99d glibc-langpack-mn-2.34-283.el9_8.x86_64.rpm 876d9290f7dc7bad3ae1c99776d3ea9823790e3ab80a6f2c9b1d6896ed412c47 glibc-langpack-sm-2.34-283.el9_8.x86_64.rpm 87f56c7b4588c6c38fc67e14977d98e8b38bfb5b79ec2a185ca30b82dc8b9cb7 glibc-langpack-bho-2.34-283.el9_8.x86_64.rpm 884067bc72721a7d916739ce981a61f80f0456ee98757994b8a4902297a32ca3 glibc-langpack-mhr-2.34-283.el9_8.x86_64.rpm 8919221d1d928b6959359e31eec8f8a1c7ffbdff16348d1695556b751380366a glibc-langpack-mjw-2.34-283.el9_8.x86_64.rpm 89ed9abacf1cdd3be7c629b18f9fddf6e8e55d9df039730c7ff01ccc82ff8a97 glibc-langpack-ps-2.34-283.el9_8.x86_64.rpm 8adad96ee88e3b4ce8e76d0cdebfac27ae8476ab71e3c34b6886439489a68bfd glibc-langpack-uk-2.34-283.el9_8.x86_64.rpm 8c6bcafe8bc7dd7c4fce0dee9bf1c3e6d375b4e7da88cb2cbd8b71c72e4db30a glibc-langpack-ks-2.34-283.el9_8.x86_64.rpm 92fb9bfe0519e73a3d53f37c71327141a9fbaaf2085660c624b193e20163a0a4 glibc-langpack-rw-2.34-283.el9_8.x86_64.rpm 93cd298ff36526615747dedb511ca4eb66b00f62ab2603fdc16e1ec3244cd49a glibc-langpack-tig-2.34-283.el9_8.x86_64.rpm 956f02f48ece6ad723905798b8218835c9ad4443808c7760b450f589d9d65866 glibc-langpack-bs-2.34-283.el9_8.x86_64.rpm 95ad7f07218e096f050c6e4d940ce79eb13b11468f01c9b134fbf6c5d7e93779 glibc-langpack-wal-2.34-283.el9_8.x86_64.rpm 95b5d06951d7709cdf3c0aa9c524f49f82011957ea1c32c1bebde655bf4a378c glibc-langpack-ckb-2.34-283.el9_8.x86_64.rpm 98b7c9cdec63a929731989ac2d699dd9ed59b3c3b6a5d7dc904b08ad5d6ad779 glibc-langpack-cs-2.34-283.el9_8.x86_64.rpm 996e5660b1f5d32ec88cbf4bdb2209adf34b731d431d5c8cb055db70cc9aeed8 glibc-langpack-lzh-2.34-283.el9_8.x86_64.rpm 998bc97d69aa3a88a90273ca6cc5a05c031248164749167059235b142931995b glibc-langpack-ce-2.34-283.el9_8.x86_64.rpm 9b95d80a7c48131f636a459f40f86a399b4fd2419562711ac625262827668934 glibc-langpack-cmn-2.34-283.el9_8.x86_64.rpm 9cdccb3f0674c3a0b3e0314eaa948af750962ab8600aaaea433392ec63f7c4d7 glibc-langpack-fur-2.34-283.el9_8.x86_64.rpm a0c00e2700e4f4cbc23e573abbe10d7e147735001f9eca00d102e5b475f3b923 glibc-langpack-nr-2.34-283.el9_8.x86_64.rpm a137e85a050fb6573e6c5272e9fa03a2a35648f1020ea5c8d888d4d77ec920ad glibc-langpack-ff-2.34-283.el9_8.x86_64.rpm a16368192bce8c47583092726b67d74d9b3473b10239891acb936da609ffd49b glibc-langpack-ht-2.34-283.el9_8.x86_64.rpm a251f6b4f369742f92a7c76e86e65e26e582c878070a10e5cb020a284a5beaf8 glibc-langpack-hsb-2.34-283.el9_8.x86_64.rpm a323e308fe406c8b9f2cbd93a4abb1c457cf4a1d517032ace4517b62ba488371 glibc-langpack-ga-2.34-283.el9_8.x86_64.rpm a5ad38b691d24bf61e36f69fb4249e99b52f1a44448de762731d00468172d6cb glibc-langpack-fi-2.34-283.el9_8.x86_64.rpm a6995fc4f711041ea351b1899db397ada565f434fd4c1d1f052e35bae0894bcb glibc-langpack-quz-2.34-283.el9_8.x86_64.rpm a7550314685f36a84a18c81654421f348c55e2e6d825a421bd206be402fad6bb glibc-langpack-lv-2.34-283.el9_8.x86_64.rpm a8e876b81617fc286f269dfac4c6e6596fb3b10ea8ec6f9789c2423a7ecb3e41 glibc-langpack-sat-2.34-283.el9_8.x86_64.rpm a984f7170e2c1d47cf124755787f70da2945eef54a0efc5baa318ea21ab36fe7 glibc-langpack-nn-2.34-283.el9_8.x86_64.rpm ad3a85001bbe65724d76240c7469aa27da27474c26b81587834d5b306d33e01c glibc-langpack-my-2.34-283.el9_8.x86_64.rpm ad4b8f4d884d7da8df2dcabc8806eb2ff7288a95f63f4ae85e2b9f1404107417 glibc-langpack-csb-2.34-283.el9_8.x86_64.rpm b07c9c75e62de2b2e4cfac64390ad2470f34a37453504ac7cefe554283a37854 glibc-langpack-doi-2.34-283.el9_8.x86_64.rpm b13648b164794f944f859a09e4a325b96262539e19d38a2fa1be7f935ee4676b glibc-langpack-mk-2.34-283.el9_8.x86_64.rpm b3523be434f33061c65e486638aab75f0be053ae82a1f20ad96f4f1b3a81eaad glibc-langpack-fr-2.34-283.el9_8.x86_64.rpm b3db24799f359f520ac3d83ba9f2e75fde4867f557d5b2087943a2c768c89120 glibc-langpack-shs-2.34-283.el9_8.x86_64.rpm b3e39fa35437923f4e165da809c0242289d6a7d87f422a4d9ea8aa5be3ad7762 glibc-langpack-th-2.34-283.el9_8.x86_64.rpm b5d9afd99ff7a839820aaa2d26e410994b1a12cca24c73c731e7dacaa6aba729 glibc-langpack-ln-2.34-283.el9_8.x86_64.rpm b695eca0c8761ded742e81932f2b43f71ed256e83133f7bc0790b8d84f1519a4 glibc-langpack-it-2.34-283.el9_8.x86_64.rpm ba18e7af57c679e34332c37ad66f58290a1514565519a5afdd5962605cb99af9 glibc-langpack-fo-2.34-283.el9_8.x86_64.rpm ba81db0637de4cf163c119961100261eb775611a6e7a52a661f3f8bfa1b3fd28 glibc-langpack-sl-2.34-283.el9_8.x86_64.rpm bc30cbe13e34f1da4a034bbe12803b0102df4736aa26b4ae4b17497a57cc4fdd glibc-langpack-st-2.34-283.el9_8.x86_64.rpm bc34f22e97089eb32ed130bfb3f2b0e346ef0b5afb0a0a214da575d08fa897f6 glibc-langpack-sq-2.34-283.el9_8.x86_64.rpm bc6b0244ec7a7d20ca72eb0f084ff92438048eef7822e07c4b1017dc2549a019 libnsl-2.34-283.el9_8.i686.rpm bc8c478131799711998f43b86549c428cf8c417266da2d2430fa8623792d84e5 glibc-langpack-li-2.34-283.el9_8.x86_64.rpm bce37371bff3ef95835eca0b4bdd08740358ba3c76ba3223a48f5a82334b0bc7 glibc-langpack-be-2.34-283.el9_8.x86_64.rpm bdc05091fa9c80e34da657e6b89491339105afa4c6120b8d97a2c67beed17269 glibc-langpack-yo-2.34-283.el9_8.x86_64.rpm beb03dfbcdc19e39e114dd1b788f498e98d9371c872e39ddda01fa6439d461d4 glibc-langpack-pl-2.34-283.el9_8.x86_64.rpm beb43f1bb6c2c71bbbc4846976a02641fffbc25b4b0b642065c97d442ed5227c glibc-langpack-ayc-2.34-283.el9_8.x86_64.rpm bfd20abff97ffc466c784bab0970e6d8b012420043b6352fe493eaf7b584d9b9 glibc-langpack-el-2.34-283.el9_8.x86_64.rpm c04cb32a06b889612e289d7405a40d2edd1579f741144a61c741b9bf78349d9b glibc-langpack-sk-2.34-283.el9_8.x86_64.rpm c0535f95da4c09d5c87ac67a3b707e798e259a32401b9b5e0f9b43e3ca229fc4 glibc-langpack-so-2.34-283.el9_8.x86_64.rpm c1c4c130b229bf69e4e4f603dc9aaac102f7c7020fbcc9852053fa6a62ca75c6 glibc-langpack-mr-2.34-283.el9_8.x86_64.rpm c2585328751d809be94a48e0edf7cd301accd82e6f77a67162bb200eaaf71f29 glibc-langpack-am-2.34-283.el9_8.x86_64.rpm c354bc1f0dfc3bdff869b2e0a43010884f22e1d0df401adf745cb49bd6824605 glibc-langpack-bem-2.34-283.el9_8.x86_64.rpm c60911a981a24db7d63cea7d8c4f87f56690de190c90882f2e1afe8cc70d4436 glibc-langpack-lo-2.34-283.el9_8.x86_64.rpm c71e903d7ac5f62dbffaaa153f9e024a03a942e5dce35689ebd6ff2b0530db7e glibc-langpack-ast-2.34-283.el9_8.x86_64.rpm c7678cba8ba7f76ecdf978dc634a2b407a08c0335df4fc0c33fa8f2ffbaa0313 glibc-2.34-283.el9_8.x86_64.rpm ccaa3e5bae82c0ef04cdb9a6ec60bebe385bed77a29c1a10a7d32a3a0abff244 glibc-langpack-tcy-2.34-283.el9_8.x86_64.rpm cf1d7277cd8f81ddc8be7f1cec655f65455c0ff0e5f26e3b57cae613a3287fa5 glibc-langpack-fa-2.34-283.el9_8.x86_64.rpm cfae068b8e4be6ae4a57f4ee7aa4fc6c52fbd929fc6b0ae78073dd0f7eed557d glibc-langpack-cv-2.34-283.el9_8.x86_64.rpm d0e82b95e1653fc50c877d9aa6f61d54bf45036575dab65a75a5be56f9b01680 glibc-langpack-br-2.34-283.el9_8.x86_64.rpm d130ea9c1e7baa1a32d081c3d37f2135db0be14e4ee2b817879c88c53a7622e5 glibc-langpack-bhb-2.34-283.el9_8.x86_64.rpm d506dac93c1316b4b039c37f04f062fd07f4ad855058493b92f1a4612ba6856b glibc-langpack-iu-2.34-283.el9_8.x86_64.rpm d50d238ac89c5e2b04a84d7505a6369b9069f80a4c1473780d23b13cd6c1ca2e glibc-langpack-szl-2.34-283.el9_8.x86_64.rpm d66e1407fecc71aaf9aa70d7be023a4f29d14d2c9ff9de3e47dca0c13be47f36 glibc-langpack-nds-2.34-283.el9_8.x86_64.rpm d69b8afc114254f53cf9aa590566af51b2941b2b24d9c5af56d0e371a7b48f74 glibc-langpack-tpi-2.34-283.el9_8.x86_64.rpm d77d867a9fab852bdadcba5f346c42461c459ca661f4750677b1f37f1f3ffe05 glibc-langpack-ia-2.34-283.el9_8.x86_64.rpm d7d2182573302a4571153bfe3c1e97b9ff65d7696387bb43c4943f39be3f6cd6 glibc-langpack-wo-2.34-283.el9_8.x86_64.rpm db9529976b1b8509be1ad998584358bbba2649b025d4dc53bfdee65362127c7f glibc-langpack-byn-2.34-283.el9_8.x86_64.rpm dbe481f57cfdbc4f0b1cf9db6a2b361f51a51ba5738dd137fd2168d128dccda3 glibc-langpack-mag-2.34-283.el9_8.x86_64.rpm e2e4b7d0762bd6e70554fc62ad5535e01b135163842020d892e61d765ecd6bf7 glibc-langpack-lt-2.34-283.el9_8.x86_64.rpm e434b8fa4c9d47baba2378fb0b1b15f534aa54311bbcc8eb82f9fd528a4b2875 glibc-langpack-ar-2.34-283.el9_8.x86_64.rpm e4495a244415d586a17beb1d8f832a0ed9c929ed85e5dc7212a488201287864b glibc-langpack-tr-2.34-283.el9_8.x86_64.rpm e5884564d3d7c1233b2fa8eb73ae999cd6a3f7743e8115812d634a23ff6170e7 glibc-langpack-es-2.34-283.el9_8.x86_64.rpm e68208326ca580eebcfd89416c307262618d393ab14ba4389b042b6f5e301f68 glibc-common-2.34-283.el9_8.x86_64.rpm e6b5b4c22b368b3d370907766921f94356f2d68d345303e83e4fb4b1857eb480 glibc-langpack-ne-2.34-283.el9_8.x86_64.rpm e705998c39ac9a7d2bcae21a0e119f88a52f30a2499b86cbc2525572845cd148 glibc-langpack-gv-2.34-283.el9_8.x86_64.rpm e79694d82b9d8bc42f3fd59cc62d98d0f26be3b5082f1a04cc0cba3a3d997f96 glibc-langpack-si-2.34-283.el9_8.x86_64.rpm e9985a0d682a6e4d4e1d97908d481790b1e6e11fc493a5278718957ffe309259 glibc-langpack-brx-2.34-283.el9_8.x86_64.rpm ea29e3d01050f7af6edf56f5d346f560a190718c2268b909a5c3b0584bd7eb51 glibc-langpack-hu-2.34-283.el9_8.x86_64.rpm eefca9e51cdfd487fa16697505ca7c42c763c60112ba3e2da65e6cdd2af488ca glibc-2.34-283.el9_8.i686.rpm f049ad03e3513b162c9dbaac28eda6f38c8dcc32cbcffc3690a613da8e3b5ec8 glibc-langpack-tn-2.34-283.el9_8.x86_64.rpm f2c6137b173dbd20b6648837e13e49653e755ae4ecb39336770791a7d30b803e glibc-langpack-kk-2.34-283.el9_8.x86_64.rpm f4e435a3ea3928592180c8f969891b6d370e1d92f8c9f7bd39c5853cde1f7a28 glibc-langpack-vi-2.34-283.el9_8.x86_64.rpm f5525c414511b977c39d9b0263b2e5b340cbf063d6ee58ceb7f829dc3ffb68d0 glibc-langpack-pt-2.34-283.el9_8.x86_64.rpm f5896652b0072821b6fd89905f642155594ad2f61d05ac32617500bcf7e6694b glibc-langpack-et-2.34-283.el9_8.x86_64.rpm f6de4a32cd86e0c3e3758ffaf94124ffbbf2c76354c16e13e0fcd7699faff3b9 glibc-langpack-de-2.34-283.el9_8.x86_64.rpm ff4db774628d3cc0149acc3544ed2acbac4b94942a97f58c1095d96081b29c59 ALSA-2026:80511 Copyright 2026 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924) * curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libcurl-minimal-7.76.1-40.el9_8.8.i686.rpm 0720cda948eb2f32e281384a1643779eab69a61aaa039d1e549e31a4ccdc6a6f libcurl-7.76.1-40.el9_8.8.i686.rpm 1b81bb50c4195cc5320d021f9e1f9b8ecd69005fe3b5ce06f4e602b35dccaf23 curl-7.76.1-40.el9_8.8.x86_64.rpm 344c547f5217b1c1077b9574e0e8883677154e5cbf22842aaee9f058335d87d9 libcurl-minimal-7.76.1-40.el9_8.8.x86_64.rpm 79cd5179f761bc04114b510b2d3c563eca5e6c5bbcd3ba34b281d0c9f5fe7c0f curl-minimal-7.76.1-40.el9_8.8.x86_64.rpm b9b9006d73824b8670eda435fbb86b3a4335ee29d51fe98d3895b60f32334a89 libcurl-7.76.1-40.el9_8.8.x86_64.rpm dc6c81855d85d8428e20bf93cc960701fe84fa36f41e9c7cff201570b90a4e65 ALSA-2026:81532 Copyright 2026 AlmaLinux OS 0 1 Important

pcre2 security update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145) * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156) * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157) * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160) * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158) * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161) * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default pcre2-10.40-7.el9_8.x86_64.rpm 9b3a2901ccfc4d9191ae3987d1560edc8e4e1b94f2c7362b8a38d313cbd890b7 pcre2-10.40-7.el9_8.i686.rpm c76dcdd17f62094b7dc2066985d1280a030175ee5a15499799fbec41c8aba4ed pcre2-syntax-10.40-7.el9_8.noarch.rpm f20101abb5716d2dd311513ff28a28cb678788976ce9a0cf647f8f0f37ee3f27 ALSA-2026:81552 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (CVE-2026-46309) * kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925) * kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508) * kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507) * kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236) * kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278) * kernel: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CVE-2026-68245) * kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) * kernel: cifs: validate DFS referral string offsets (CVE-2026-72318) * kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887) * kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970) * kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811) * kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-5.14.0-687.57.1.el9_8.x86_64.rpm 0f03072c24138bf3a7e5f21bb0ae6ccf288d505cd73c61be1943dd98b14ef892 kernel-debug-core-5.14.0-687.57.1.el9_8.x86_64.rpm 57a37dcf8dc2f229ed9dffdc7250e57944f4d83b25fc35be79bac892833fd39a kernel-debug-modules-extra-5.14.0-687.57.1.el9_8.x86_64.rpm 5ee0679d56a550020c74de0dc4315450ca584b6f1410fafdc4a6f7e010fdc365 kernel-core-5.14.0-687.57.1.el9_8.x86_64.rpm 68b2df92c85d589fce064e82ad741ba9895d706ead30acbed6ea9372dbdf7fa3 kernel-debug-5.14.0-687.57.1.el9_8.x86_64.rpm 7f223ed171cd366a6ab1e8477b34b49ee2d470b1167ad73b0bda4f411206900f kernel-debug-modules-core-5.14.0-687.57.1.el9_8.x86_64.rpm a6e90998f377e39492ea72288b0ae71af1d9f5b689384aa929c050a4db2280df kernel-abi-stablelists-5.14.0-687.57.1.el9_8.noarch.rpm bc6c9db4bb08463cd618407363697297b6f2849633263c8ca1bddd18bc684a3c kernel-5.14.0-687.57.1.el9_8.x86_64.rpm c536340ed33ee6a381039089d417ddd6ec6941dbd0fc86f7b29ce26eb2c67de5 ALSA-2026:8259 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417) * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421) * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default vim-minimal-8.2.2637-23.el9_7.2.x86_64.rpm 3b0272851ab3fd77becb4a8daf66652bfaf722d867a5e920d915c80e4d3b2966 vim-filesystem-8.2.2637-23.el9_7.2.noarch.rpm 94fe2cb8f2f54709fc1042edb356a556e14c1d5d65d2ddd8d1c19e1e5ff29b64 ALSA-2026:83156 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-uki-virt-5.14.0-687.58.1.el9_8.x86_64.rpm 216c9f920d54f7248ac78cd1dfeb0839aada8021b49eafb3aa339d2068cd43d7 kernel-tools-libs-5.14.0-687.58.1.el9_8.x86_64.rpm 2f34537ed74359f4a6df20a8f8905eead62c7c1c648263423426c8d992efd312 kernel-core-5.14.0-687.58.1.el9_8.x86_64.rpm 3514f21939d4f34e5459522e1118bd37e84cc013eb3e8983d053ec0becb23d9c kernel-debug-core-5.14.0-687.58.1.el9_8.x86_64.rpm 40e0fa4bf5e3e89bdfc339a7ccd2f265dbc49cee4d4d07fe0cd082ea545109db kernel-tools-5.14.0-687.58.1.el9_8.x86_64.rpm 493e3fd30b8f55770a046549578b06d836420c6e3493bcf3bfb0423df8e33350 kernel-uki-virt-5.14.0-687.58.1.el9_8.x86_64.rpm 74a85bbd0ea48f8cc0adcf3bcdc4ec0581d11ffdcc24b56e81fa8353c788b873 kernel-debug-5.14.0-687.58.1.el9_8.x86_64.rpm 74fde21fa73d76802dfad903ccd555c04359c7c8205d1f4a92a7d251c464621d kernel-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm 7642b182ac5b62fa017587677e8bfc085f5a6afcef90b90ffc3b3f467e4277cd kernel-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm 82ea3c68c104f24f49ba0a3abc3147c4157a6e3e7d12e064d4f40d3215be12c7 kernel-5.14.0-687.58.1.el9_8.x86_64.rpm a6e49c78d32ff6633b0529a3867b40772fb6f545303314f8bbed3bc6f688afaa kernel-modules-5.14.0-687.58.1.el9_8.x86_64.rpm b5645ea11da413698d8f7e10d7db5f7ed3c3ffba07e7b6d09ef740faf1a94073 kernel-uki-virt-addons-5.14.0-687.58.1.el9_8.x86_64.rpm cf5e6c9ed7a6337803c340f0d6f4f497ff4e2f65ab37f59e0f33d6aa4aa0becc kernel-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm d3aac3f2ebfe4ffaf622747dee5b4e2797d10daf29aa0377f8b29b6d43c087e4 kernel-debug-modules-5.14.0-687.58.1.el9_8.x86_64.rpm ddc27e31eb678a1e252c1093a57d5b7e688a313d32babf9122eec9d5423c1a43 kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch.rpm e1cba32c44fa8833c41ba16612321a5103e62ebe5102a18125882d3b860bb215 kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm e741c132fd0fabc5963bfb9e8097b58eacf55f28fcf065115650a1cd31e4009f ALSA-2026:83562 Copyright 2026 AlmaLinux OS 0 1 Important

rpcbind security update

The rpcbind utility is a server that converts Remote Procedure Call (RPC) program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine. Security Fix(es): * rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service (CVE-2026-94640) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default rpcbind-1.2.6-7.el9_8.1.x86_64.rpm 1e00b3e2258cef4a1c3459eab7d21ceae8c712fa301fc69b96ae4d3ba59dd21f ALSA-2026:84594 Copyright 2026 AlmaLinux OS 0 1 Moderate

environment-modules security update

The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "module" utility, which interprets module files. Security Fix(es): * environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters (CVE-2026-85013) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default environment-modules-5.3.0-2.el9_8.1.x86_64.rpm fcc916588122fad2c009f871a4b51db7fbd420e4556821814c449bb5c9496af3 ALSA-2026:8510 Copyright 2026 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424) * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default libarchive-3.5.3-9.el9_7.i686.rpm 83dc63bcd67b3717a98b4e9a6e5a2f89376d58ec6a605d609440c3a3afd9caf8 libarchive-3.5.3-9.el9_7.x86_64.rpm ae150c1f4aa5ac21138df2c4d75df6e9a2c9c96b29096f2d33c9b8775cc89b82 ALSA-2026:85309 Copyright 2026 AlmaLinux OS 0 1 Important

bubblewrap security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup (CVE-2026-87766) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default bubblewrap-0.6.3-1.el9_8.1.x86_64.rpm 8d27f7bb63065844c9bcfd3d6fc4f1e6892e87776d395be49fe421eeb3766b88 ALSA-2026:85958 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997) * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (CVE-2026-59998) * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default openssh-keycat-9.9p1-13.el9_8.alma.1.x86_64.rpm 1afda8b9926a4448e0c670f03ad9e5773e185e4cd19a41850411e28be7eb7b30 openssh-server-9.9p1-13.el9_8.alma.1.x86_64.rpm 4fb5e2987d49b4eda7c06f14a571767389341d13b1a27e19fb961d9edd4920dc openssh-9.9p1-13.el9_8.alma.1.x86_64.rpm 71d18d7d1840597f405828fc5ea6d398aabd8f13b4fa53067821bcf675249647 openssh-clients-9.9p1-13.el9_8.alma.1.x86_64.rpm 7db760ce17014d22f4a8ac3ea0a91842b48a01ae017aea2f0d4ec4deb9410f8a ALSA-2026:86033 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) * kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999) Bug Fix(es) and Enhancement(s): * Batch: z-stream xfrm - almalinux-9.8.z (NST-Core-26W38) (JIRA:AlmaLinux-256697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-core-5.14.0-687.59.1.el9_8.x86_64.rpm 100dcbaa25131fa66ac25e264c1307a9dead5f2efc7f06ca121c8d3170f1fd9c kernel-modules-5.14.0-687.59.1.el9_8.x86_64.rpm 19944e3a0b8403992bd8387653b3ff94bc0e265ad416868a542be32d3e8b419d kernel-5.14.0-687.59.1.el9_8.x86_64.rpm 228a25eee286a3ea57f03ade49f770292cf5d58c8c1c900ce5edf1788c5b352f kernel-debug-uki-virt-5.14.0-687.59.1.el9_8.x86_64.rpm 23e246bd67f223867bf4e560c367280964334850d6156f6242d99fafc3bfe45c kernel-tools-5.14.0-687.59.1.el9_8.x86_64.rpm 33e08b18f8641b38eb8c9a01ebbb9852e20fce66cc4ba22393977b682b193966 kernel-modules-extra-5.14.0-687.59.1.el9_8.x86_64.rpm 568541b8a94f72ffb665ee9a3823d762c1d7cc3a9b0cd97bfc3b89cd638d5452 kernel-debug-modules-5.14.0-687.59.1.el9_8.x86_64.rpm 5c858c6e56b151892089251b94b28473f6197641343722d8ca9dae030811e75b kernel-modules-core-5.14.0-687.59.1.el9_8.x86_64.rpm 61990ed41f2a60de86fefbcf035b80f527c210cc03da7699d4a8b83bbb7c7a50 kernel-debug-modules-core-5.14.0-687.59.1.el9_8.x86_64.rpm 621e7b4f822765ec522e029f052d5c729f4b9529056bdc719ffc9c548301c546 kernel-uki-virt-addons-5.14.0-687.59.1.el9_8.x86_64.rpm 62ac2fe6cc0ea56c41a7f846434770cc8f97edc37734d87cb36e009c08b0db4d kernel-tools-libs-5.14.0-687.59.1.el9_8.x86_64.rpm 657d0b786e190824d0b216a00e6e0a39d860263caeee82167672ce6cdcbec502 kernel-debug-modules-extra-5.14.0-687.59.1.el9_8.x86_64.rpm 6a3830ac51948e99f391bee8da7914e0c3cf5fce32ca371acf3fb876fa00787b kernel-abi-stablelists-5.14.0-687.59.1.el9_8.noarch.rpm 7e0ba5b343682cf86850ea1d4906181e2542cd15615a07e4f0dfd65090fa6645 kernel-debug-5.14.0-687.59.1.el9_8.x86_64.rpm ac187b1ae52a404d4aee240daf50a1b044e937f60bcb886cc0c23ef90eef0267 kernel-uki-virt-5.14.0-687.59.1.el9_8.x86_64.rpm b9dedfa8573693bc68968fcd4740d8ef32b1cdb0eae4b60c9ac88c31c6ead3fd kernel-core-5.14.0-687.59.1.el9_8.x86_64.rpm dba93690a0ad379ebc299ea136b9052fcfc7ce2a7ac53a713ac96baf6e68556a ALSA-2026:87805 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448) * kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) Bug Fix(es) and Enhancement(s): * RTLA segfaults on freed memory access on double SIGINT [almalinux-9.8.z] (JIRA:AlmaLinux-193029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-debug-modules-5.14.0-687.60.1.el9_8.x86_64.rpm 00701e1e6d7b7ee60b5e333194ba86c427ae2b160eda91f6a679c7282537ec9b kernel-modules-5.14.0-687.60.1.el9_8.x86_64.rpm 19c4b4745fae831b00a016a880826d2df40881fa97bb681c71982aa10874a701 kernel-modules-core-5.14.0-687.60.1.el9_8.x86_64.rpm 50830fd449bad18e8dfb54368cc729694e4f9413170b518003faa0cdc03b5bc1 kernel-5.14.0-687.60.1.el9_8.x86_64.rpm 5398a1f42a27026c41af937ffd90eb4063304da907c2f7bbff1493b1c43dc029 kernel-debug-5.14.0-687.60.1.el9_8.x86_64.rpm 66d3092dd604843b7778ada7c2a1c0c285a160ed55eaaa72f16b92e080c18c17 kernel-abi-stablelists-5.14.0-687.60.1.el9_8.noarch.rpm 86d2c74ee547cd7d7da85993e942096b00a8c7ae85d46e3f784733d2dc2e2834 kernel-debug-modules-core-5.14.0-687.60.1.el9_8.x86_64.rpm 8eb880cdb3519fd5581d3ce566b503bada91e3f424b45fba2317c60d29818e10 kernel-tools-5.14.0-687.60.1.el9_8.x86_64.rpm 93041e2b08397dea4cfa138ea2fcfbf0e787ea63460c7b88f5e0edb5e10bf50d kernel-debug-modules-extra-5.14.0-687.60.1.el9_8.x86_64.rpm 96e379d10937341eea2c408fd012a0b9928361167766826ccb9fcf4fb6c7a9c7 kernel-tools-libs-5.14.0-687.60.1.el9_8.x86_64.rpm 975d32bdd52a8a7bd547c32385c3f4d23bf3d13de39bfb6212255dd7b3861f20 kernel-core-5.14.0-687.60.1.el9_8.x86_64.rpm a477802b60bc3a83d0f80b2c95be18b5c9f6e2d9bdd7661bbe21a776d6e975c3 kernel-debug-core-5.14.0-687.60.1.el9_8.x86_64.rpm b3377e6183b5182ecaf818289c3d864abc390cce06738878494926ee063aeacc kernel-uki-virt-5.14.0-687.60.1.el9_8.x86_64.rpm bbe9570d4c52a7c154779e6203e1f6155d3a3130fec33569ea16bb0c0463b06c kernel-uki-virt-addons-5.14.0-687.60.1.el9_8.x86_64.rpm be55714aac667d8d54d868e864bb8e83faaac22035e407cd9463614a5e991e49 kernel-modules-extra-5.14.0-687.60.1.el9_8.x86_64.rpm ca92cb6da87f297a8f8c021dc3d18a497f3f2117a8a9f9647e859c195323a4e0 kernel-debug-uki-virt-5.14.0-687.60.1.el9_8.x86_64.rpm f27036e958c4d98cb60ab376265f1efc1b1832333e2c8b889fd972a0947f8acb ALSA-2026:88247 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: expat: Denial of Service via integer overflow in expat_realloc (CVE-2026-102633) * expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default expat-2.5.0-6.el9_8.7.i686.rpm 2038e4b5bab28d80e181746baea022ef1f6a539a73e92dfd8f434e79c240b029 expat-2.5.0-6.el9_8.7.x86_64.rpm 8eff780d40cc8bc4f54dd8fd958c692be936afd065afd14eb55caac001ba40f1 ALSA-2026:88459 Copyright 2026 AlmaLinux OS 0 1 Critical

ca-certificates security update

The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). Security Fix(es): * ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default ca-certificates-2026.2.92_v9.0.319-90.3.el9_8.noarch.rpm dc729b8966d5e1f5d88901df8214b8bf317976dda55c4599ae67592b4247d748 ALSA-2026:8921 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-uki-virt-5.14.0-611.49.1.el9_7.x86_64.rpm 34060a83ad703ec4ed5b522c9c47c0c5967bab46ad24dc5e36b8d81de5ccc5de kernel-modules-5.14.0-611.49.1.el9_7.x86_64.rpm 38ffef41dedbad1a3a3bb170cd165c7415dba2c659ca7009c015c6ed4db769d1 kernel-5.14.0-611.49.1.el9_7.x86_64.rpm 39bc82d117abeeb633dca9bdc2eb32058f2afef93519b7b7ae2fe1df2ff9af65 kernel-debug-core-5.14.0-611.49.1.el9_7.x86_64.rpm 4b50dbbd575670a3bb19392ef7ac1b6ee839f2abd4677fa37b4719d1db9d2cf0 kernel-abi-stablelists-5.14.0-611.49.1.el9_7.noarch.rpm 628d5c00f64abaaf1213daad568586e29fd384a14589760f240f4d119d9146d4 kernel-debug-uki-virt-5.14.0-611.49.1.el9_7.x86_64.rpm 680758e35ad537cf4b6a31c92cf9baa8576ec2d96af737d01b27a62115cf365a kernel-debug-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm 6edad10fc06968b0ad1eb14cc3e6225f4afbcd79e3eaa8eb7fc51cc54154c3c2 kernel-uki-virt-addons-5.14.0-611.49.1.el9_7.x86_64.rpm 707e68e947a5eabed9d25eb943073c5bb080347091b9e6a8fe7a69374a5e0f77 kernel-tools-libs-5.14.0-611.49.1.el9_7.x86_64.rpm 7e441d5247e4388730949b0bcd9e0e357ed6063b6159e18fb7fb2e461c296fd6 kernel-debug-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpm 813ae253842a5820ce0e8e1d2ee6722467701ff71ceec2b1174ea5996e227b77 kernel-tools-5.14.0-611.49.1.el9_7.x86_64.rpm a525f780af7e926112db922e9798e015858bdb92598940981e59a1c5a979b936 kernel-debug-5.14.0-611.49.1.el9_7.x86_64.rpm a5e0e0690d821ff770dbf0ea9c5bb56f89283e394f5a55eca57ba1c6cfbdcae4 kernel-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm c2cf4dfb15bc0558d19f0185f447ea6d537dc5c493fb0dc400dbd64b040af9c7 kernel-core-5.14.0-611.49.1.el9_7.x86_64.rpm d1cfe00f7e0ff915d1ee35535a9e36a86faaa56451d4eaa389c297427484ee94 kernel-debug-modules-5.14.0-611.49.1.el9_7.x86_64.rpm f9414b54b8d772b20d7a2383289fe46a23d5aff13c599e8ae19ab0aff96e5c8f kernel-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpm fd2578cd6eac486e593151ac35392c756080c86fdffcfa9d6633f26fae061851 ALSA-2026:89742 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Arbitrary file deletion via race condition during temporary directory cleanup (CVE-2026-12345) * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-libs-3.9.25-7.el9_8.6.x86_64.rpm 16955ec52992bf9368547e7de7681a5f238b0cac93ba536c68aac9a842e31b3d python3-libs-3.9.25-7.el9_8.6.i686.rpm ab133be7b3ad42ec045405410029c0c7bcb16744b397d294fe0d476a9722ca67 python3-3.9.25-7.el9_8.6.x86_64.rpm c50a7ffb04954dd87fa3dec6a4491d0445991d0f42f2c39c552793744aa824a7 ALSA-2026:89749 Copyright 2026 AlmaLinux OS 0 1 Moderate

xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default xz-libs-5.2.5-8.el9_8.1.i686.rpm 01cb5879d28e2ae55d37948d1f2e909f34a2e96568157e892d71a33bce41db82 xz-libs-5.2.5-8.el9_8.1.x86_64.rpm 5e82e31942b3f00ef8e95ecd2e0811b268eecc7829b215db2b5c4eccb9c98cfb xz-5.2.5-8.el9_8.1.x86_64.rpm acf5056fb0be7870e7e422fdb2abd5d5407251781f5e33901861f275cb620269 ALSA-2026:89755 Copyright 2026 AlmaLinux OS 0 1 Important

lrzsz security, bug fix, and enhancement update

Lrzsz (consisting of lrz and lsz) is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fix(es): * lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode (CVE-2026-105840) * lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode (CVE-2026-105841) Bug Fix(es) and Enhancement(s): * lrzsz: segfault with -s [almalinux-9.8.z] (JIRA:AlmaLinux-282108) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default lrzsz-0.12.20-58.el9_8.x86_64.rpm 3bf4bffedf0f70e816000c95a5a320866ad595abef2773b8c8ff0bb5e334e53a ALSA-2026:90365 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CVE-2026-72242) * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) * kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CVE-2026-80824) * kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * kernel panic at __crypto_xor+0x2 after a number of out-of-bounds read and use-after-free read (JIRA:AlmaLinux-257205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default kernel-abi-stablelists-5.14.0-687.61.1.el9_8.noarch.rpm 1c4655a5d61ee3509ed58302f57076e05361cee9f7708e072c671367772fb65a kernel-modules-5.14.0-687.61.1.el9_8.x86_64.rpm 389822357b2d60181cf531ec0cc821996c57f6a9c25a4c297841ff9c3048da39 kernel-debug-modules-5.14.0-687.61.1.el9_8.x86_64.rpm 5b5847dd85233585597017d66456697d8b582b279afe30bc095bb47d1b5d8ecf kernel-modules-extra-5.14.0-687.61.1.el9_8.x86_64.rpm 5b78464834665891f3976469e2f071340c5ccc1cd43002059fbbde773c74b831 kernel-uki-virt-addons-5.14.0-687.61.1.el9_8.x86_64.rpm 714884d628fae6574712636fab816cee3b1befeeb866ef60f6ba8ff9919f8dd4 kernel-5.14.0-687.61.1.el9_8.x86_64.rpm 7a19715001a1f040f8386bec2e8deca4fdf77a514b74c6865c26b6181ecf56d9 kernel-debug-5.14.0-687.61.1.el9_8.x86_64.rpm 8e8c7cb75e59bc5537bafd9b4d954783fc532ea6d3e37558d5933ab7a4dbe323 kernel-modules-core-5.14.0-687.61.1.el9_8.x86_64.rpm 9e5f7202a76c35c4f6e45f687dfb41abd429a5058c5371833550fe34aba79c80 kernel-tools-5.14.0-687.61.1.el9_8.x86_64.rpm a573a28ffd486e88c71158f2c9786cb55002d7ef1483bf6c81f1b4506b53e847 kernel-core-5.14.0-687.61.1.el9_8.x86_64.rpm b522d3af65431279f3c9b266c98f538cbf472ecb48dacbcb3f2ff0c3daa68bc1 kernel-debug-uki-virt-5.14.0-687.61.1.el9_8.x86_64.rpm b542f0ea8c2caf0aaab875478eed51514517bfeef2dd8382adabb0b84809aadf kernel-debug-modules-core-5.14.0-687.61.1.el9_8.x86_64.rpm b55b28ba901b7906e29c062a605a456b2fc5448b5fb3768911a3f4f4542747dc kernel-tools-libs-5.14.0-687.61.1.el9_8.x86_64.rpm d7204a52f28559ad03a8510c5245c6d7e2660aa38f77263fd85e477f9c6256a8 kernel-debug-core-5.14.0-687.61.1.el9_8.x86_64.rpm e0b622b405213e67d86dfd0b566909d01a53d5a4802e892fb256d1d1a443b2a0 kernel-debug-modules-extra-5.14.0-687.61.1.el9_8.x86_64.rpm f2be9635b77e4504158d9e3d421565ab66edbafb2d83679ec1a0a77b4a1c4fbf kernel-uki-virt-5.14.0-687.61.1.el9_8.x86_64.rpm fb2272f412e384eb64be6cfdbce09e6bba0f71b5a331b9a9aba0ef61ad209738 ALSA-2026:90462 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default skopeo-1.22.2-9.el9_8.x86_64.rpm 64408670b88834fcb1b65fadb2c9c7d6d02e8fcc158246e7e4332804c6e19636 ALSA-2026:90494 Copyright 2026 AlmaLinux OS 0 1 Important

python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default python3-urllib3-1.26.5-8.el9_8.2.noarch.rpm 1f716e915d823a8d9aae5266a7637eceb32eac420a5c0376af7694cb60780add ALSA-2026:90495 Copyright 2026 AlmaLinux OS 0 1 Important

brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_8_default libbrotli-1.0.9-10.el9_8.1.i686.rpm 0c0cf940579e3e278d761314d478e65ab28be134077d93e78a5ab15d1e093657 libbrotli-1.0.9-10.el9_8.1.x86_64.rpm c660c2bbe4ee412b9e3a3937e26008fb9683e8e25a605c697480e4d274b8eb9a ALSA-2026:A002 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-modules-core-5.14.0-611.49.2.el9_7.x86_64.rpm 0031c32a6a7a259356ea320235cb4fd98bbd8949980b0b34daf48b608737d58d kernel-tools-5.14.0-611.49.2.el9_7.x86_64.rpm 0903ab4b3f9408df0fdf4fbc7cb2462bd805dcbc728aa5f47e33b9bafaa26a1c kernel-debug-5.14.0-611.49.2.el9_7.x86_64.rpm 158b12b1b4a2c0ed97a440c5815e8a35e83a22a71eee41c129eda3dba6c964bc kernel-5.14.0-611.49.2.el9_7.x86_64.rpm 20c2d4a09435ee75dfddce7815cc6f42fbd27178ce42a21e92ac7f3f48d73580 kernel-modules-5.14.0-611.49.2.el9_7.x86_64.rpm 2bf06b0d64879bec182362944f905753f0b9799e24b8f27d7d331925a35d42ff kernel-debug-modules-extra-5.14.0-611.49.2.el9_7.x86_64.rpm 5bd0eeff59f0b95b4cefa5e241ed02f58714108e7686755df75d5260271084b6 kernel-modules-extra-5.14.0-611.49.2.el9_7.x86_64.rpm 6241ff5dde09f51130bb9c88a329498908d1d3fabd86dde90e9dca8da11f8a53 kernel-uki-virt-5.14.0-611.49.2.el9_7.x86_64.rpm 6b4c0374f53f7c09f6f52195ebaeb99c0b92d2cea2aea11a96274cc45e9ff22d kernel-abi-stablelists-5.14.0-611.49.2.el9_7.noarch.rpm 7323ac4a3a753a19cdd9f3bbd4cdbad346fa356776d10cc1c82295e29a5f5d70 kernel-uki-virt-addons-5.14.0-611.49.2.el9_7.x86_64.rpm 7b2a75c20a514028072357d458a14ee2d3b6de4c98be3b2ec89f154f66372855 kernel-core-5.14.0-611.49.2.el9_7.x86_64.rpm 875a3f7a78733e5a824abeaf86dc951b99e23db23436e7908db6b9f8676a51ef kernel-tools-libs-5.14.0-611.49.2.el9_7.x86_64.rpm 8d1eae010a3f0c5f91185d7f88d56f9008bf98bde331da73474d6365ffa9b63c kernel-debug-modules-5.14.0-611.49.2.el9_7.x86_64.rpm a484e248676a6527e7114c633c9201fff6c8a48864c7ed89a6d25bd5057b4e3e kernel-modules-core-5.14.0-611.49.2.el9_7.x86_64.rpm ac766a49c5383b55be9cff8aaa5930d87ca588519b564534d7a44be0b9fabed6 kernel-debug-core-5.14.0-611.49.2.el9_7.x86_64.rpm ac850e7b5ee1b5398e6f2e63926e9da73f7f76effe3f46be8297d4f475bdd800 kernel-debug-uki-virt-5.14.0-611.49.2.el9_7.x86_64.rpm e99a29c2b50d34aa2928a75c5be7a0e0b9acd603800e59d5a8f5e236fa5d0059 ALSA-2026:A005 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-abi-stablelists-5.14.0-611.54.3.el9_7.noarch.rpm 05b83f3cfdca4d1541de02fb7f00f2e915c04fc04d8f0f472d7cb4d6205b1acb kernel-modules-5.14.0-611.54.3.el9_7.x86_64.rpm 0ac80892e76dac52a437ba7c5fdca941c3b00abf5ba27d303ce659bcf78c8da9 kernel-tools-libs-5.14.0-611.54.3.el9_7.x86_64.rpm 13aa28115aefce64b470182daaeb9199a3ec489949ffde788a42b5422b0aee6f kernel-core-5.14.0-611.54.3.el9_7.x86_64.rpm 1f1deef26a5bc36dbcc84795c555062d7e8b5609dc36c511188a1c04adbfcf4b kernel-uki-virt-addons-5.14.0-611.54.3.el9_7.x86_64.rpm 3f0f764efa0fd8aff6867a631a09282de484f5feae7305aa3a56a8601b9affa8 kernel-5.14.0-611.54.3.el9_7.x86_64.rpm 5adc0e71d54d8c712b5b22a09aefb45c80e93d21e1a8b2d57f18e8504fda9ea9 kernel-uki-virt-5.14.0-611.54.3.el9_7.x86_64.rpm 767c25d1c328e6dbccce30b9452be36e2973297e07cc4940df83b67c22679fa8 kernel-debug-5.14.0-611.54.3.el9_7.x86_64.rpm 76c2419eff03c780b33e31d8f824de108988647905e38918802f94a6cd31f300 kernel-modules-extra-5.14.0-611.54.3.el9_7.x86_64.rpm 7887c3f3a752dacdc5b96d80b2a942f124777bab583fccce6c89c0d6b2f766ae kernel-debug-core-5.14.0-611.54.3.el9_7.x86_64.rpm 7d6befed1e6084a26c49e095c9da6429d00af9708ca1523f5dc86194e75beb4a kernel-debug-modules-5.14.0-611.54.3.el9_7.x86_64.rpm 90b8947a78918a709c79fa4bf740fdbc35730f44b66537b9090be323598de176 kernel-modules-core-5.14.0-611.54.3.el9_7.x86_64.rpm 9a3e2dc812f916cad3ed25a149d07a2122ba7c1853df20bb924858df27027f8a kernel-debug-uki-virt-5.14.0-611.54.3.el9_7.x86_64.rpm c93dacfac4052a8c5b5a8383f4bd8ed309aed853024e5687664b1be844ef364f kernel-debug-modules-core-5.14.0-611.54.3.el9_7.x86_64.rpm d6b9c7e9eeb4c0f07a485b5e7ae2f27c16eaf5dafd0e3097b154cd23bb1c84f2 kernel-tools-5.14.0-611.54.3.el9_7.x86_64.rpm f35aac89f9de43546e9f41d9931d9887d52368bb36c1a0bff3aeee163421e17e kernel-debug-modules-extra-5.14.0-611.54.3.el9_7.x86_64.rpm f45a4e417363365993b0fe77c918b3823c7f4fb8b74b562781d5d2546e21dbfc ALSA-2026:A009 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300) * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-baseos-rpms__9_7_default kernel-debug-5.14.0-611.54.6.el9_7.x86_64.rpm 042ec6283feec8d7385840412328b9c7c0b5f0f61ad03b17b1bb36dfcef1783c kernel-debug-uki-virt-5.14.0-611.54.6.el9_7.x86_64.rpm 1198a0d2cf77738517927b05cfd14a406348858c1e9e8a193da6e90fa46ad562 kernel-debug-core-5.14.0-611.54.6.el9_7.x86_64.rpm 1ed2e537158d90b05a06f7c17329e65e27fea21d5f4ce1eaf3ae138755b68d72 kernel-debug-modules-extra-5.14.0-611.54.6.el9_7.x86_64.rpm 1f5eaa47881ae68d3a9808ea64a842f45c0a2c4ac1222845f03e4f13eaa79f06 kernel-uki-virt-5.14.0-611.54.6.el9_7.x86_64.rpm 26d0fa033dabd466450c82c47a855430d10141cd3e1822b5a227ddf4096b7c86 kernel-debug-modules-core-5.14.0-611.54.6.el9_7.x86_64.rpm 3734b827646283bb80e464b180707fb9ddd459659a0b273791d272cbe1c36806 kernel-modules-5.14.0-611.54.6.el9_7.x86_64.rpm 3ca6a1025e52c5bec23f7127cddd81ca803e15df0cabd5327993fe7e4712e007 kernel-tools-5.14.0-611.54.6.el9_7.x86_64.rpm 49498acdefeb872db920f79bd27ac6e75608c6cd024f39f09d08909f3b4e09ce kernel-modules-extra-5.14.0-611.54.6.el9_7.x86_64.rpm 4b87fd088bcec66d5ae06390cf1439ed7e26cc28b132e078b4adf1d7c662682f kernel-debug-modules-5.14.0-611.54.6.el9_7.x86_64.rpm 62f5c66295d7e2a5fbb1efda420bec5e38111244ea112d28d0da22be89e05fcc kernel-modules-core-5.14.0-611.54.6.el9_7.x86_64.rpm 843363dddc9efe52afcae43399c49ed41891e6cb2cca177dd2bb66d20dcee4e7 kernel-core-5.14.0-611.54.6.el9_7.x86_64.rpm 92707d7a13fa234065dc3e6465c9acf748c8406d34706b9720ed9c31d2488cef kernel-uki-virt-addons-5.14.0-611.54.6.el9_7.x86_64.rpm 94c14677986901e75888a5edda75c7e03c2700f6157fcdfbae4e18543963ec97 kernel-abi-stablelists-5.14.0-611.54.6.el9_7.noarch.rpm b68ac0ea7c19c42d12d4ded7368c1f6e819930a7ef83322328ae407269c7defb kernel-tools-libs-5.14.0-611.54.6.el9_7.x86_64.rpm cc76fc895c0a1bf50b4699c201b5b921650f7dd0ff40a82dbd312e45953b8aa9 kernel-5.14.0-611.54.6.el9_7.x86_64.rpm cf8baa332b26b481c90e005075ac787914358d9974d3b33cc27bbaf17d4a1f27