ALSA-2026:18134 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267) * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275) * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346) * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210) * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257) * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.7.1.el10_2.ppc64le.rpm 062281687b95f131e68b86f74d3de13fdc3797aed5c0244b8bc30c4d069a59fe kernel-cross-headers-6.12.0-211.7.1.el10_2.ppc64le.rpm 75da67fdbaec074a6174fb02a08cdcd24444a75fef92dde80b7f6ab8fc9da31c libperf-6.12.0-211.7.1.el10_2.ppc64le.rpm dee1803498c2cd5d221ce771f718231d02b1018acab3670081567665cedc8b99 ALSA-2026:18142 Copyright 2026 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * networkmanagr: NetworkManager File Access (CVE-2025-9615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default NetworkManager-libnm-devel-1.56.0-1.el10.ppc64le.rpm b6017ade615dcbbd9f09bc9f6cfc6071dabb1ae989b4888b33f4deb66151a681 ALSA-2026:18326 Copyright 2026 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: Denial of service in XML parsing (CVE-2025-12748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libvirt-docs-11.10.0-12.el10_2.alma.1.ppc64le.rpm 4eaa9e77a95d27e180e47cdc9de5a18d2a203d3ac51c55e07161d1589cfdc153 libvirt-devel-11.10.0-12.el10_2.alma.1.ppc64le.rpm fe4b77ca9e6e3c2d24dcced33cc682f49db98d717a6228a60f80fe1b1c83b6bd ALSA-2026:18421 Copyright 2026 AlmaLinux OS 0 1 Moderate

luksmeta security update

LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux. Security Fix(es): * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libluksmeta-devel-10-1.el10.ppc64le.rpm b59f3fd41549ea85ca1055af3c41097bd8a67caeb9d8d3b89ebf92f2c6639c18 ALSA-2026:18465 Copyright 2026 AlmaLinux OS 0 1 Important

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default edk2-ovmf-20251114-5.el10_2.noarch.rpm 0440f37c3dfa7d8ed89074f19a592ec31ae69caf218c9c023a8e521cbedd1c05 edk2-aarch64-20251114-5.el10_2.noarch.rpm 661e753247f1f87f60b2ab15a15e98b65bd5218f23543c33c5087b94428cc7aa ALSA-2026:18556 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: DNSBomb vulnerability (CVE-2024-33655) * unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default unbound-devel-1.24.2-7.el10.ppc64le.rpm be19bcc98a10489309184ec21de83f73dece198fcba6dce2f44173026760afd8 ALSA-2026:19009 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql18 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory (CVE-2026-2007) * postgresql: PostgreSQL oidvector discloses a few bytes of memory (CVE-2026-2003) * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default postgresql18-test-rpm-macros-18.3-1.el10_2.noarch.rpm e9147c3a255628bd463c0f2320a7d06550e3494a0ceb08582a56325aabc74712 ALSA-2026:19010 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql16 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL oidvector discloses a few bytes of memory (CVE-2026-2003) * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default postgresql-test-rpm-macros-16.13-1.el10_2.noarch.rpm d4481b8a457194d72857697fc9d4be3eea8b3c7d0946949734ed60169bef4a82 ALSA-2026:19017 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default podman-tests-5.8.2-1.el10_2.alma.1.ppc64le.rpm 88725138574d75c49244926b327e4b369d8856294dc03c8232bb3daa6b7467e1 ALSA-2026:19019 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3.14-debug-3.14.4-2.el10_2.ppc64le.rpm 115aed4f3804dd650bc4c611a1e4874a62f23e596819feab31fa3baf8f4b35f6 python3.14-freethreading-libs-3.14.4-2.el10_2.ppc64le.rpm 2cd5ede64dabcac8ba13d4d86f72903083cc36d603bfe89274eac08991e1d4e0 python3.14-freethreading-debug-3.14.4-2.el10_2.ppc64le.rpm 30fcd8b4c760bce2103f334d6a64aedbd5e811bfb6f59a3e5b0fd24d20e8b1a0 python3.14-freethreading-idle-3.14.4-2.el10_2.ppc64le.rpm 60a9e31f3efdb610bc19e79fdb89581863060a73882d0409c2a7be6632622d1d python3.14-freethreading-devel-3.14.4-2.el10_2.ppc64le.rpm 77669ddb3af9a2baccf4aed67e9951e401cb1a6e8d67d3b46513fbb9063d507b python3.14-freethreading-test-3.14.4-2.el10_2.ppc64le.rpm 78350f02a7b2011f77ce0411c11b8ce9336ddee8c52efc6d8478ba6c73d1378e python3.14-idle-3.14.4-2.el10_2.ppc64le.rpm 791ef4511e3e20cd33b7a4b37372e36f8ce99e69599e5ab8e00032b465abea1d python3.14-freethreading-tkinter-3.14.4-2.el10_2.ppc64le.rpm c3f769454d8f2e424d6b776e08465e75e50c9ab52b96a8d5bbf3e504b92a3b01 python3.14-test-3.14.4-2.el10_2.ppc64le.rpm cff07a5f6c726ec385bbb79273522d79e56e1a1af6093aa0f06abe46032dac83 python3.14-freethreading-3.14.4-2.el10_2.ppc64le.rpm de649e63909dd66ced536c1827fed2bbe5b397fadf4c2d092c0d21706c4703a8 ALSA-2026:19024 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.ppc64le.rpm 1497aa9e7b7c0822fc0109ff1cbae687a58b34680a48093df91908bc657f906f ALSA-2026:19043 Copyright 2026 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default corosync-vqsim-3.1.10-1.el10_2.1.ppc64le.rpm 442fda5ac2bc77b39314e54bfcf89f8dfd4706931c631b91f7780021c10693a5 ALSA-2026:19053 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default freeipmi-devel-1.6.17-1.el10_2.ppc64le.rpm ff9ff02248e1a64bf27dba0528a1178e7647883de96f488513e176bb116807fd ALSA-2026:19061 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437) * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glibc-nss-devel-2.39-121.el10_2.alma.1.ppc64le.rpm 1bac887711c40a2c930a88d4bce738716b4a03ad4dd6f468859645bf4bd53ac7 glibc-benchtests-2.39-121.el10_2.alma.1.ppc64le.rpm 9049cfe4a9a3f54aa8457c2d93d5f3a0789fc9fe5395ee1fee839f4c7c399256 nss_hesiod-2.39-121.el10_2.alma.1.ppc64le.rpm b45bab9674ae19d56399f9fc4e532e6c9f80a58cc91ddf46431d542b09384d04 nss_db-2.39-121.el10_2.alma.1.ppc64le.rpm d4f77b9586270b521525a71a5aafab14f199c8017dce6b121ff59ea5949d4e56 glibc-static-2.39-121.el10_2.alma.1.ppc64le.rpm e7fa9e437921d940a648ae6a707412478df37c4580cfe80cf57d7dcbfe5ce351 ALSA-2026:19064 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) * cpython: Out-of-memory when loading Plist (CVE-2025-13837) * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282) * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3-test-3.12.13-2.el10_2.ppc64le.rpm 4167f71d57137810af143021ed6875c5302c579480851117777c9f7ec2df26ae python3-debug-3.12.13-2.el10_2.ppc64le.rpm 7236a788813630c8f6e4223428bece1370132c6208cba041a3d0c57319b09977 python3-idle-3.12.13-2.el10_2.ppc64le.rpm a49d816928d73ed8ce87ea3eb863a614c0284e65e4388b8388852bd73286309c ALSA-2026:19074 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.7.3.el10_2.ppc64le.rpm 27d35efc521c61cd4a1b7c680f214edf950420b58f12bbd06e0e8f9b586ca745 kernel-cross-headers-6.12.0-211.7.3.el10_2.ppc64le.rpm 66d600ac768026f8eaddd539a56ee296c3f75a6f6696d2bf06a3ac095c2cf135 libperf-6.12.0-211.7.3.el10_2.ppc64le.rpm 98f666afab915a59244ddbe31d37fb7dd0144c2e16a060f6efb0a536afa01438 ALSA-2026:19125 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.ppc64le.rpm e6532780bd5822a021f993172285d87c02ccb5c28fcc4cc627eedd59c4071be5 ALSA-2026:19126 Copyright 2026 AlmaLinux OS 0 1 Important

yggdrasil security update

yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default yggdrasil-devel-0.4.9-4.el10_2.ppc64le.rpm 8c93a2dcd6a7284bce9994588610c0125935d6f5a56a6a542422e92f4e5b387c ALSA-2026:19141 Copyright 2026 AlmaLinux OS 0 1 Important

PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default PackageKit-glib-devel-1.2.8-8.el10_2.ppc64le.rpm 269b2bb1070398ab1754121b8ba3cda3414b89db8c7e11dbeb008eab6a0af618 ALSA-2026:19143 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server (CVE-2026-4271) * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsoup3-doc-3.6.5-3.el10_2.11.noarch.rpm e9c9aacec423d69703716502eee70d36997b031b05b8cdd423d46cbd4cf7206c ALSA-2026:19146 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default openexr-devel-3.1.10-8.el10_2.2.ppc64le.rpm 405a7f7e8ca2f7b2ec5baca7c2ea8bc3d5ab32ea23e0247cc8e16ce156286ce1 ALSA-2026:19148 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glib2-static-2.80.4-12.el10_2.13.ppc64le.rpm bc15b42bbb81847fe3bf8c35674aef1011a5a41cb562c3f8adbb3d3ead691ea9 glib2-doc-2.80.4-12.el10_2.13.ppc64le.rpm cd2b5c3b11ce189a8a3d681cafa6b7522f8ba9f81be1d4dbc8a7b3ffd5f98fae ALSA-2026:19149 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032) * dovecot: denial of service via crafted message before authentication (CVE-2026-27858) * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dovecot-devel-2.3.21-19.el10_2.ppc64le.rpm b1e8b8c74b69b8ddb2b6e3d2afbaca97ae5290a5a2716e1b490f96a4d2ebe867 ALSA-2026:19150 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libtiff-tools-4.6.0-8.el10_2.1.ppc64le.rpm bb9e9cdbc63ace0df2b356a9b055386c635e018a78ad0f8ef59489dcf6c097ad ALSA-2026:19151 Copyright 2026 AlmaLinux OS 0 1 Important

jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fix(es): * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979) * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default jq-devel-1.7.1-11.el10_2.2.ppc64le.rpm 89cca2f1f474b862fbe6d742cb7c393fc4da76e1dfb850c0432900b9ed5f1724 ALSA-2026:19154 Copyright 2026 AlmaLinux OS 0 1 Important

giflib security update

giflib is a library for reading and writing gif images. Security Fix(es): * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default giflib-devel-5.2.1-24.el10_2.ppc64le.rpm 7c032fb8f62968ef2348e17222476285f9795c1261bf9c01994d8a88dc7a555f ALSA-2026:19159 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nginx-mod-devel-1.26.3-6.el10_2.3.ppc64le.rpm 5868e578eecf25f41a7d7e696232b3838fb4f9179b2f3eba88d72696efd046ea ALSA-2026:19560 Copyright 2026 AlmaLinux OS 0 1 Important

libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsndfile-devel-1.2.2-6.el10_2.1.ppc64le.rpm 6ab0a0e31bb606720f96ae5300b82a9c8cadbfecec866e7a2e28ddcf2f448b8b ALSA-2026:19569 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.16.1.el10_2.ppc64le.rpm 6254220858d49f05012b59b2dca251ac5331e6fba5bd20c97c19d6d923c7f167 kernel-tools-libs-devel-6.12.0-211.16.1.el10_2.ppc64le.rpm 85911ae6fcd307815e2ad70ad994ccc46a5f3be10ae544d2605a2d234bed2ff3 kernel-cross-headers-6.12.0-211.16.1.el10_2.ppc64le.rpm db19d010d68e26872681c633424e559ca858b3002b9cbe76c6b2b95b41e2e3e6 ALSA-2026:20594 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glibc-nss-devel-2.39-124.el10_2.alma.1.ppc64le.rpm 14937bd493a0a678d3667c522f12414636e2e819f950c9764bd1da95f4c0630b nss_db-2.39-124.el10_2.alma.1.ppc64le.rpm 290b990277f201f2dd3dd0aad7d33be4a5b888f42e96f6249144b8d59af774ed glibc-static-2.39-124.el10_2.alma.1.ppc64le.rpm 5dcd916ffa76cdd6908a9261978f7c42d3f8e5572070bf2509076481180db2d4 glibc-benchtests-2.39-124.el10_2.alma.1.ppc64le.rpm 645adf6b8f76c1b7ca2099f13bd47ecf95e4cefed02114a322fe6592eaf6cb4b nss_hesiod-2.39-124.el10_2.alma.1.ppc64le.rpm 837d9bb3328c146f1e6619250ff95e90719e986d0deab2c701b3c36027330ddb ALSA-2026:20600 Copyright 2026 AlmaLinux OS 0 1 Important

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-5405) * wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark (CVE-2026-5656) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default wireshark-devel-4.4.2-10.el10_2.ppc64le.rpm 08f73c6401367f56fdc1394f68a62e562d1ab90f4c7d0b16d4dd0bb5b4fb14a6 ALSA-2026:20606 Copyright 2026 AlmaLinux OS 0 1 Important

ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby4.0-doc-4.0.3-34.el10_2.noarch.rpm 911ec6ffa66042849dff4c20c6e9c57e452e38797a2d1cb88fb1289d50cb3f4c ALSA-2026:20693 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default mysql8.4-test-data-8.4.9-1.el10_2.alma.1.noarch.rpm a5be777ac4cdff32f536e30c86ffbc34a9b78111f5b470d6b9f2e07464021123 mysql8.4-devel-8.4.9-1.el10_2.alma.1.ppc64le.rpm b058aa29409c702acb7b4d6fd86f9b498b850400b535a8371025e754cb836041 mysql8.4-test-8.4.9-1.el10_2.alma.1.ppc64le.rpm fddab508663809d7348eedff60fe31a9e0bd0980d9b030b9694298933007cae7 ALSA-2026:21286 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el10_2.ppc64le.rpm 4d1a9d014e8b6ef8dcb3220e3b5e355d330cde41c1c8ec2bc685f2179942b62a ALSA-2026:21557 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.18.1.el10_2.ppc64le.rpm 0b7019296c2c967fc42384c9d525f7f420ab903820a087a4b4e361a43974fe86 kernel-tools-libs-devel-6.12.0-211.18.1.el10_2.ppc64le.rpm 601b4cf13acf7d0baf937830e630790da95608e904629e01045bed35463c090f libperf-6.12.0-211.18.1.el10_2.ppc64le.rpm ae0a3193e3dea2e4a402c29c48d1d8700349db02be04933a0de4d642a826b01d ALSA-2026:21754 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el10_2.ppc64le.rpm e9d1e8f56961ee62ae292609b7eaaab720c6d69c2f17efcee22dc49fc1f0f9bc ALSA-2026:21757 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078) * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default flatpak-devel-1.16.0-9.el10_2.1.ppc64le.rpm ee94a4713fafaf770b1341f4076dc6cd15747072d87ccacab04726f1468ba967 ALSA-2026:22145 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-10.0-source-built-artifacts-10.0.108-1.el10_2.ppc64le.rpm 252499aefd537a67bc6bbbc88b8d6895d2ffe6e585eaa1d868996518b703aeab ALSA-2026:22529 Copyright 2026 AlmaLinux OS 0 1 Moderate

libexif security update

The libexif packages provide a library for extracting extra information from image files. Security Fix(es): * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libexif-devel-0.6.24-9.el10_2.1.ppc64le.rpm 21c2726bf40c7e7e6aff88faddecd8ae6ec6c7e50c72bb6a906d5ce4f9f167c0 libexif-doc-0.6.24-9.el10_2.1.ppc64le.rpm 5d0b639702d7549079bb75a5f01b582e877c7ebe166adf1daa4c0fec1e1e9e23 ALSA-2026:22963 Copyright 2026 AlmaLinux OS 0 1 Critical

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default samba-pidl-4.23.5-109.el10_2.noarch.rpm 4180231d6fcb81a083d7db024760d87997779989ac8643e34d7af50f5873ba01 libldb-devel-4.23.5-109.el10_2.ppc64le.rpm 442a703c350bd9369f585520f2ca543c671668ea5c923707eef6f4f3a5097548 samba-test-4.23.5-109.el10_2.ppc64le.rpm 450d3d572597e750aa74fb706ea28db61443d1a2007ad9d45187306e99b089ba python3-samba-test-4.23.5-109.el10_2.ppc64le.rpm 5a8f8c107d8ad4e4736e04574689ea99ad3b986ba880dff511978be5a20c437e libnetapi-devel-4.23.5-109.el10_2.ppc64le.rpm 8f6a40d9468e591b1bace220751fa33658c10be0d726659b2eb18323687f1577 libwbclient-devel-4.23.5-109.el10_2.ppc64le.rpm 963fcd00bafda5e4faa022d16cbabe62e91ce7fd24bc695b49af10d854e9fd20 libsmbclient-devel-4.23.5-109.el10_2.ppc64le.rpm e726b82644837eac9914f7dc7e773b7be6c5557590254ad5450129c6748604f0 samba-devel-4.23.5-109.el10_2.ppc64le.rpm f21360b013b3bee8612585c3947386a7779b50bd8c31a9b08665bdc515643394 samba-test-libs-4.23.5-109.el10_2.ppc64le.rpm faee0255c39818135f3e436dc1b88e7bbd29f41390630e2835d88d95dc553621 ALSA-2026:23231 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944) * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959) * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default unbound-devel-1.24.2-7.el10_2.1.ppc64le.rpm 80bae319a73de973ef63685f5f4eb5b5b725a39f13a636cc7c0d6b9339eed76c ALSA-2026:23329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.20.1.el10_2.ppc64le.rpm 0dd6f17dda458a557ea64e22dfbc4725bb60586daeab1b582ec07cb1f22e92e8 libperf-6.12.0-211.20.1.el10_2.ppc64le.rpm 7ec144080391441d7a870cc1b91c3e34b21a831f43a4431e4e271b9ceb04f94d kernel-cross-headers-6.12.0-211.20.1.el10_2.ppc64le.rpm ed87de11cb261a315a853b6f66a0875b73b0eeeb4dd07750b3ed653fcb47cf72 ALSA-2026:24338 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default bind-devel-9.18.33-15.el10_2.2.ppc64le.rpm 0ecfb0b73cee461e7d48a8bb96d27f90d8334cb5eb389b0d435d0bbb792762dd bind-doc-9.18.33-15.el10_2.2.noarch.rpm e794b480c049ceeadf03b0a2d4b32a7421120dc8f8cac56d7889077439239b1a ALSA-2026:24470 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default podman-tests-5.8.2-3.el10_2.alma.1.ppc64le.rpm 430755868935f10c9c1bf6e37d0441c3425bd9d621b2f2c357aaad88ddd707be ALSA-2026:24758 Copyright 2026 AlmaLinux OS 0 1 Important

libyang security update

Libyang is YANG data modeling language parser and toolkit written (and providing API) in C. Security Fix(es): * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libyang-devel-doc-2.1.148-4.el10_2.ppc64le.rpm 5fe2d5a56429b800ee1ec037532b245d05105a545f300c0622849ad4b5601db2 libyang-devel-2.1.148-4.el10_2.ppc64le.rpm df2d1a286d15670b70be999da54bbe350ba2fad2765e3800b80d4954327dfe17 ALSA-2026:24985 Copyright 2026 AlmaLinux OS 0 1 Important

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default poppler-qt6-devel-24.02.0-7.el10_2.2.ppc64le.rpm 7a5a158f0d7f96ef75aede5cfcfb0429254fc0befc417ed7c2245fd094f31f42 poppler-devel-24.02.0-7.el10_2.2.ppc64le.rpm 7d71b909aa7aac914b54dc580e5bfa9fb8d5fd48d4a703e85732d8d04a6ee515 poppler-cpp-devel-24.02.0-7.el10_2.2.ppc64le.rpm 8b91300a1682d187147c145606d31ff3dc2034a68f012e7e65493912abc32837 poppler-glib-devel-24.02.0-7.el10_2.2.ppc64le.rpm 8e106f8ae42ec768a2995e63bb7faeb48a7cbc59dd2d080fa673780dd75a35b0 poppler-glib-doc-24.02.0-7.el10_2.2.noarch.rpm db944170f7397aa5dc0f76041aa8a845f45fb3b697972932e97a17ef5e15cf48 ALSA-2026:25111 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el10_2.ppc64le.rpm 351300a0e1afd12b1103a4001c82e5a1e11ab26b61d3a231fb2f87798ab9ace9 ALSA-2026:25112 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.ppc64le.rpm 5bf521ccb4c06b6a1fe17ff985786e0966444ae48d58ef5037d6cbe711dfb477 ALSA-2026:25115 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.ppc64le.rpm 9ad13d30a8d0d9ca0c7c2ecdc3435e824ba9b0e5bd65ea5c263cc6e0435eef19 ALSA-2026:25191 Copyright 2026 AlmaLinux OS 0 1 Critical

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.22.1.el10_2.ppc64le.rpm e114c7929fad37394fd9c3b025c91212f3583aa904ebf49810718984f66b60ab kernel-tools-libs-devel-6.12.0-211.22.1.el10_2.ppc64le.rpm ef50562bf0193d68483075b878fad6bea963e7cf23012e1d4a52bc433b06d58b kernel-cross-headers-6.12.0-211.22.1.el10_2.ppc64le.rpm fb8d55dce9b0b94dc1fedc4147fc76575b9949f848e62354a40a8ba691763385 ALSA-2026:26566 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xwayland] Backport other security fixes without a CVE assigned [almalinux-10.2.z] (JIRA:AlmaLinux-184290) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.2.ppc64le.rpm 18c4060c4646ca25dd09ec18c6e46038de3fc93d8c227bcb728bcd9dd6f78ee5 ALSA-2026:27288 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): * AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047) * AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774) * objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495) * ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127) * AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319) * [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.26.1.el10_2.ppc64le.rpm 339fd6d4bddabb19a6d186fd0a8e3be22fa31c3d89ef311bf66a3526dd2be48a kernel-tools-libs-devel-6.12.0-211.26.1.el10_2.ppc64le.rpm 5156ae8e0f233c80e87213af9745b74ffda56c92cfe881db3bf096af09ae79d5 libperf-6.12.0-211.26.1.el10_2.ppc64le.rpm c41b0c9ff29c08d6982538ca8602b0bf2acc808bdc315d303b6e9d6be77a5259 ALSA-2026:27742 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql18 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default postgresql18-test-rpm-macros-18.4-1.el10_2.noarch.rpm 4d87699d4229bfaf3026a04e43a4777d01fe8bab2ec1a9f1835a23f5ec702773 ALSA-2026:27743 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql16 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default postgresql-test-rpm-macros-16.14-1.el10_2.noarch.rpm f0c9d441dd4f2c10e7ccd46c88122dd2272396a602ea50eee9f8f60032a39627 ALSA-2026:28231 Copyright 2026 AlmaLinux OS 0 1 Moderate

opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Security Fix(es): * openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default opencryptoki-devel-3.26.0-3.el10_2.1.ppc64le.rpm 2be672203b246b6fcc1d6a8aae128adc107c255e3d93825f9c6ac3b29575f1a4 ALSA-2026:28234 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libxml2-static-2.12.5-10.el10_2.1.ppc64le.rpm 7f1f25c28131183ba97320de41d5fa9fc6adc373c9a4f58c3affef65a0458bac ALSA-2026:28236 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums (CVE-2026-9150) * libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (CVE-2026-9149) * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsolv-devel-0.7.33-5.el10_2.alma.1.ppc64le.rpm 5270d6f99098e2cb997bb6aee4fafd9144a5f90e1cd232026a6b92121d28710b libsolv-tools-base-0.7.33-5.el10_2.alma.1.ppc64le.rpm 92d665dfc15134f881c269ee3dfb4c6c7ed9024321ca653edda4bc59e3a154f4 libsolv-tools-0.7.33-5.el10_2.alma.1.ppc64le.rpm c1c69817b7dc994384f0d16c78813955439f7389a776a80d4466c4e149d5f987 ALSA-2026:28581 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) * python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module (CVE-2026-6019) Bug Fix(es) and Enhancement(s): * [10.2.z]Update python3.14 to 3.14.5 for the incremental GC changes (JIRA:AlmaLinux-176147) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3.14-freethreading-3.14.5-1.el10_2.ppc64le.rpm 0df94aaf3b0ce9b973b90d82191c7ea4457a649d81a689575c9203f7395b3246 python3.14-freethreading-test-3.14.5-1.el10_2.ppc64le.rpm 148d05ee4fe89f3fb9274218830853e4f336b1bbda566190e7d29f6674f0a73a python3.14-test-3.14.5-1.el10_2.ppc64le.rpm 14b187086e446debcad7da8e04eff16de1ebfa4c6bbb6fdda0fb0f9121394d38 python3.14-idle-3.14.5-1.el10_2.ppc64le.rpm 2ce7a3a1cc1d43783cdfa4d3d694560d4ca2073a5c3ee4fe8930ade328461155 python3.14-freethreading-libs-3.14.5-1.el10_2.ppc64le.rpm 3ad31744700eb1efa87b1843c4f8cf3f71de433d516ec9d0a10f80b24b3e3a87 python3.14-freethreading-devel-3.14.5-1.el10_2.ppc64le.rpm 6774aebb6b60aa15d2a3d2d9523b73674461d172f28e08f3ed9654dc3fdfe4e9 python3.14-debug-3.14.5-1.el10_2.ppc64le.rpm b02e0428fda94d4eb786594b3ef648260fa8a0459e0fc5938eeef167869f601c python3.14-freethreading-tkinter-3.14.5-1.el10_2.ppc64le.rpm b32911d6983ca68be73579d6aa31ec70ba5c689da2fcb7a19a9a0ff8fb2a2394 python3.14-freethreading-debug-3.14.5-1.el10_2.ppc64le.rpm d5163b5d203c8dc5c46d5338d089fee484cb2b6623c78a903d8ef1c200c027b5 python3.14-freethreading-idle-3.14.5-1.el10_2.ppc64le.rpm d9754a54e956d318e893db0fdec6ddece833556225524b2475e97b06d11c5f76 ALSA-2026:29874 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nginx-mod-devel-1.26.3-6.el10_2.4.ppc64le.rpm 803e7fe118dc5465ef3c6fdc28c89233d4d90cd6da225784e9cb889305c45778 ALSA-2026:30129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.28.1.el10_2.ppc64le.rpm 1affb5742ca8ecacf84f5cf02e974ef9870b846be2a6eb482b7f3677c89b524d libperf-6.12.0-211.28.1.el10_2.ppc64le.rpm 9b1aad3d211becd5e22243a685252c1fd9609fa5c92e6f64995044bb312ddcfb kernel-cross-headers-6.12.0-211.28.1.el10_2.ppc64le.rpm f97e5b969ebbd8a510bf678a55e58cbb559c4c180b64e2cbd9a1e3e6da1dd545 ALSA-2026:33092 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): * Backport Zen5 IFUNC changes to prefer AVX512/EVEX?512 string implementations on AlmaLinux 10 [almalinux-10] (JIRA:AlmaLinux-174869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nss_db-2.39-126.el10_2.alma.1.ppc64le.rpm 2af7e652e36eaa39ef8d0c105d708d1455fe6f7c5f221b903e31b621a1326db3 glibc-benchtests-2.39-126.el10_2.alma.1.ppc64le.rpm 75a3468479a03af024d7b4cbb152274bf8d31da18c980bfe806122c4792b034d glibc-nss-devel-2.39-126.el10_2.alma.1.ppc64le.rpm 8c824d31698bda8e8d7df9e2bd6d349deefa408530f01741d345473b7f469bf0 glibc-static-2.39-126.el10_2.alma.1.ppc64le.rpm c998abc6125c40d55df7fb07ece299b56b97b8cf1338e7641460add95f354e70 nss_hesiod-2.39-126.el10_2.alma.1.ppc64le.rpm ff6e23a5aa5d94d152eb88d0dec3ab2948c552e7225d7669676f50a36b896bf4 ALSA-2026:33502 Copyright 2026 AlmaLinux OS 0 1 Important

giflib security update

giflib is a library for reading and writing gif images. Security Fix(es): * giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default giflib-devel-5.2.1-25.el10_2.ppc64le.rpm fec8cab8b8110414dadd8c2993f1866cf9be31b485b1a0b619c7b877e543800d ALSA-2026:33540 Copyright 2026 AlmaLinux OS 0 1 Important

ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby4.0-doc-4.0.3-35.el10_2.noarch.rpm 9c4dc402137050f3d244fd8c91b09222b0708196cddb3636d256ab4717d5ff82 ALSA-2026:33565 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby-doc-3.3.10-13.el10_2.noarch.rpm bf4766816b9337dbdaa62dede5fe29be0f7fb652c360c89ccf3d6d5404ee32d4 ALSA-2026:33685 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) Bug Fix(es) and Enhancement(s): * CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887) * tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.29.1.el10_2.ppc64le.rpm 4dcaeb30c1133e42dc95e4692b74c6500051dddefe331db9b2084cbbf75d9862 libperf-6.12.0-211.29.1.el10_2.ppc64le.rpm a174979da2f54fd56acdbe0a0fbf6e530b564e1356f30a1c72d7c4100fa34189 kernel-cross-headers-6.12.0-211.29.1.el10_2.ppc64le.rpm d9b31912f6d5efe6e36b1a0a73f89a6a3f7394034cd66c973ad5c4f9d789eeb8 ALSA-2026:33731 Copyright 2026 AlmaLinux OS 0 1 Moderate

rrdtool security update

The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density. Security Fix(es): * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default rrdtool-devel-1.8.0-21.el10_2.ppc64le.rpm 66770e71776d6be25e53b3ce142448f76b5fac9e2f7beabc20c986a78b4e045a rrdtool-doc-1.8.0-21.el10_2.ppc64le.rpm 9eea7bc34e3daa0820b52d977f92132215dff685bd362c5e46b77ebee5ca09af python3-rrdtool-1.8.0-21.el10_2.ppc64le.rpm acc669352478e78b95a3f246fd27649042def7818e3b5c78239e3410d896fdfc rrdtool-lua-1.8.0-21.el10_2.ppc64le.rpm d39e8518dc2750be17ff5c3d49c0d0eb6278478df35cd95c85948b8189dc7416 rrdtool-tcl-1.8.0-21.el10_2.ppc64le.rpm f278d4b4acdeb68756034a82ceb2ec28c2031d6014c62c42b9a3e04eb2b4d9dd rrdtool-ruby-1.8.0-21.el10_2.ppc64le.rpm f908452d08f877998d132ead37eb71e3cfacea110831181306dfd7e7e3815e6e ALSA-2026:34911 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) * kernel: kernel: ipv6 frag escape () Bug Fix(es) and Enhancement(s): * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537) * [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.30.1.el10_2.ppc64le.rpm 1d53f8124576cc010c2ccfd07956d07743b81557227113c5138cd57dc040242d libperf-6.12.0-211.30.1.el10_2.ppc64le.rpm 6008d1e33caa1a0ace228410fa45eb5c5d939e6ec224d5e4be041309b2b8d0e5 kernel-tools-libs-devel-6.12.0-211.30.1.el10_2.ppc64le.rpm 8ddbf222d0c92fec5f9d2e237f0ece5e51d56a5acc73c98a6054d0d716b371ca ALSA-2026:36189 Copyright 2026 AlmaLinux OS 0 1 Important

perl-HTTP-Daemon security update

The perl-HTTP-Daemon package includes the [HTTP::Daemon](HTTP::Daemon) class, a subclass of IO::Socket::IP. Instances of the [HTTP::Daemon](HTTP::Daemon) class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fix(es): * perl-HTTP-Daemon: [HTTP::Daemon:](HTTP::Daemon:) Arbitrary code execution via OS command injection in send_file() (CVE-2026-8450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default perl-HTTP-Daemon-6.16-7.el10_2.1.noarch.rpm 32b21a73a65fac12652db9a425de49e0f807cda3630eca4d41682c50de2052ce ALSA-2026:36196 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) * 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default 389-ds-base-devel-3.2.0-8.el10_2.ppc64le.rpm 83ff180bf30206278bc4fba37fd9d69a5e5a34d916757ebc2770f49c169e93dd 389-ds-base-bdb-3.2.0-8.el10_2.ppc64le.rpm e528601b24cb9a5338ca495158af2f28ad76a2b7dac640c317c4f16b2f22e8cf ALSA-2026:36203 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface (CVE-2026-40033) * freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser (CVE-2026-44422) * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700) * freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs (CVE-2026-44421) * freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow (CVE-2026-44420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default freerdp-devel-3.10.3-12.el10_2.6.ppc64le.rpm 3c2aa2e492ef41b9e4afc007d5a9886c9b18a5542e084c27c262f90a1bb3657b freerdp-server-3.10.3-12.el10_2.6.ppc64le.rpm 669c1e7035771a38fff814df947a25de19183505abaad31efbcc3b8f810a26f0 libwinpr-devel-3.10.3-12.el10_2.6.ppc64le.rpm 6b7b221e6286a085250e4f95e729f84dd3db5869785ae913a373d34bb8d5511f ALSA-2026:36211 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default freeipmi-devel-1.6.18-1.el10_2.ppc64le.rpm 5d3f1e5e4f90632d7cf64409b87213bbaac3fc183a5d6a94f171c09fde64520e ALSA-2026:36320 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292) * unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622) * unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390) * unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default unbound-devel-1.24.2-7.el10_2.2.ppc64le.rpm 38380c1ba2a676c2297405ff312d148c605899899efe6084e85982dff2432cba ALSA-2026:36364 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-10.2.z] (JIRA:AlmaLinux-191778) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nginx-mod-devel-1.26.3-6.el10_2.5.ppc64le.rpm d0ac1c7d312efe9f575232bb87122bd12b7f33d3face4b9b0eddcdf9c929bd8c ALSA-2026:36541 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) Bug Fix(es) and Enhancement(s): * CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.31.1.el10_2.ppc64le.rpm 22612c2f4032b63ee37402088d9bbba4f8c1b55ced7e48531c30cf1d53837115 kernel-tools-libs-devel-6.12.0-211.31.1.el10_2.ppc64le.rpm 3c1d971f779a032183fc95e1121a545a97060f8beac9d257300fdec398f0242b kernel-cross-headers-6.12.0-211.31.1.el10_2.ppc64le.rpm 9aad77dc9c6d6ff2e9f76696a96353c14d03a2533c93c2bff9598f2e36b748a9 ALSA-2026:36749 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion (CVE-2026-52718) * gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (CVE-2026-52719) * gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720) * gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.4.ppc64le.rpm 09e5255a6440e9a72799e17d262df5683eeabaab429c18431700aa8ab06b341d ALSA-2026:36956 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.32.1.el10_2.ppc64le.rpm 786fb5153a0e05777cfec4a45406af89e4c78ec57db7a9ad65114eb0b5299b9a kernel-cross-headers-6.12.0-211.32.1.el10_2.ppc64le.rpm cd302ef865c90e4d7b97802e2e6330424b7c6d961d349511c52f670042082063 kernel-tools-libs-devel-6.12.0-211.32.1.el10_2.ppc64le.rpm f3bbf86076240e03b63c8c27bb28f70ccd8bee526241b58b22812b1dbdb7d06e ALSA-2026:38489 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) * X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.3.ppc64le.rpm 389a615fd63d44e9e15c9249d1f186c4af62a3501768834a3516c88f7f58fb9b ALSA-2026:38492 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.33.1.el10_2.ppc64le.rpm 237d66c4f25077728009f30051f4d990baeccb0c34633c3493e0e21e1e8b79d1 kernel-tools-libs-devel-6.12.0-211.33.1.el10_2.ppc64le.rpm 7cce714dcf7e9cea90f65922a112dca9ffe7837e3b0755a104137df04403c4d7 kernel-cross-headers-6.12.0-211.33.1.el10_2.ppc64le.rpm eadafb995bdcc6c2f248594d191417cbbbf8fa757d6d090ef3d60bc1d812a75b ALSA-2026:38495 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default podman-tests-5.8.2-5.el10_2.alma.1.ppc64le.rpm 9176c2cf9e015cf6c51f404208b79fdc5eb310dc732ddda6f7430e2801990a53 ALSA-2026:38499 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing (CVE-2026-41142) * OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files (CVE-2026-42216) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default openexr-devel-3.1.10-8.el10_2.3.ppc64le.rpm c6d5d6a5bd686904ba46d3b3a996c064894a416c02fa98b27a918e2f336c425d ALSA-2026:38514 Copyright 2026 AlmaLinux OS 0 1 Important

plexus-utils security update

The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default plexus-utils-javadoc-3.5.1-9.el10_2.noarch.rpm 046d045fce643909feecc9e8b368b5978198541c747268014c772e7983fa2b97 ALSA-2026:39183 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3-idle-3.12.13-2.el10_2.1.ppc64le.rpm 2ca0ae1b0fc6cfdc69d1fa457a733f077eba2b171fe22f4a8628376826d7969a python3-test-3.12.13-2.el10_2.1.ppc64le.rpm 49458a4297c4ac0a4b764a29d50c8c0321b6c19878e7b05cc92c664a7f2f490c python3-debug-3.12.13-2.el10_2.1.ppc64le.rpm b6fbd82074b0f7e0e8a5ae1ba281a0b5798d5b77e58dbbf6f1e972688dafd913 ALSA-2026:39296 Copyright 2026 AlmaLinux OS 0 1 Moderate

libinput security update

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fix(es): * libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libinput-devel-1.30.1-2.el10_2.ppc64le.rpm aa34dfb983ba4f0d438762832399ddde6b000c8cc4c130e2a5bad02f62c436f0 ALSA-2026:39297 Copyright 2026 AlmaLinux OS 0 1 Moderate

edk2 security, bug fix, and enhancement update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) Bug Fix(es) and Enhancement(s): * edk2/x64: re-enable legacy kernel loader [almalinux-10.2.z] (JIRA:AlmaLinux-182421) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default edk2-ovmf-20251114-5.el10_2.2.noarch.rpm 15c2aa72562324380757fa4e4264b27e8d215a4ead60505448e6556096472823 edk2-tools-doc-20251114-5.el10_2.2.noarch.rpm 479f6e316a2a3e78e325be7c98c7571b7ca84ed1f03ce57d9fcd46506cb67901 edk2-aarch64-20251114-5.el10_2.2.noarch.rpm 5ebf1586f73cdbb4f6af4b6fac8634e21e96c81337572dd52d11cb6022b477ab ALSA-2026:39304 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libxml2-static-2.12.5-10.el10_2.2.ppc64le.rpm 18de76bbc66ee7d896672532aabac59b127f4c78f9e1c7310fa6e908d34a8bb1 ALSA-2026:39494 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: XFS data corruption using reflink () Bug Fix(es) and Enhancement(s): * [Exploits (KEV)] kernel: XFS data corruption using reflink [almalinux-10.2.z] (JIRA:AlmaLinux-193945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.34.1.el10_2.ppc64le.rpm 83d3318bde5f29ac0a140bd771c9e3419aeea38da71e36d36176d1cbbf13b2cc kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.ppc64le.rpm a5703c588716a0c1ae0d05bc549ce5cc8c56b0c216d9e8191d19d4eff888fb4e libperf-6.12.0-211.34.1.el10_2.ppc64le.rpm f90cb138aef6dac569ae007001cd40edf0691a4369ea2ac1b3db255296e75ad2 ALSA-2026:39573 Copyright 2026 AlmaLinux OS 0 1 Important

yggdrasil security update

yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default yggdrasil-devel-0.4.9.2-1.el10_2.ppc64le.rpm 37d60bb8349036b76ca32a14bd9b4fcc2d6904cade9460ca62761f0cbe20ed2c ALSA-2026:40856 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3.14-freethreading-libs-3.14.5-1.el10_2.1.ppc64le.rpm 079cfcdd4f48454e031b67397d07556fc0904bc2ce392681f34160a0a86b3b4b python3.14-test-3.14.5-1.el10_2.1.ppc64le.rpm 11ccff473b84ee946d903381defc44f470864d3ccdf182fcf7bdbfb130df9812 python3.14-freethreading-test-3.14.5-1.el10_2.1.ppc64le.rpm 5f29c58892131fdfe1ba79c326a839be2995843da8eb4480441076740ad70ff7 python3.14-freethreading-devel-3.14.5-1.el10_2.1.ppc64le.rpm 8cb9cf695296698564778fc4144c1cb3bf86d572b5c81e997d7aa7bfaf8fda72 python3.14-freethreading-idle-3.14.5-1.el10_2.1.ppc64le.rpm 932b3613d32c9d69ea70318b428c9e43147d629cf75e69c04113698c16c109c5 python3.14-freethreading-tkinter-3.14.5-1.el10_2.1.ppc64le.rpm a3b185f317345da11cd95d62fcf2e2f4eb7ae638c6f77add87248ccb4e656d33 python3.14-debug-3.14.5-1.el10_2.1.ppc64le.rpm cc2059ece3a71fa5442d8ad23ff61891c3235e5dd56eaabd9813f39c0a58c530 python3.14-freethreading-debug-3.14.5-1.el10_2.1.ppc64le.rpm ce841da633accd09772edf3d15807a560f4073e50c8d61f9ff4b3584c838546d python3.14-idle-3.14.5-1.el10_2.1.ppc64le.rpm f28dc7291991a6499128d891d3ac73f03c664e61e529b5f7b783340a3e72d040 python3.14-freethreading-3.14.5-1.el10_2.1.ppc64le.rpm fbc99bd8bb4bbd15a9bf888e2535ba83055363cc5935bada65a12864e1b949b6 ALSA-2026:41892 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security, bug fix, and enhancement update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355) * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) Bug Fix(es) and Enhancement(s): * Reintroduce the `tiffcp -i` option (JIRA:AlmaLinux-185328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libtiff-tools-4.6.0-8.el10_2.4.ppc64le.rpm 5996bd684370207f68e34c13fbb97f55d7dcf528b7b6d0c730387ea71009e832 ALSA-2026:41893 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [almalinux-10.2.z] (JIRA:AlmaLinux-192468) * dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [almalinux-10.2.z] (JIRA:AlmaLinux-192329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.ppc64le.rpm 46124c424b0e750909d2ed88cad1458fd5cdfa1c77cfc18ac26a742968359570 ALSA-2026:41895 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.119 and Runtime 9.0.18 [almalinux-10.2.z] (JIRA:AlmaLinux-192473) * dotnet9.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [almalinux-10.2.z] (JIRA:AlmaLinux-192330) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-9.0-source-built-artifacts-9.0.119-1.el10_2.ppc64le.rpm ef1849bafa6dd86f78a8dd37160b85c01b2b02aa10fed37ff2133c71a55c5b10 ALSA-2026:41897 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 [almalinux-10.2.z] (JIRA:AlmaLinux-192463) * dotnet10.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [almalinux-10.2.z] (JIRA:AlmaLinux-192326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.ppc64le.rpm aabeaa04f8877f31921bf4b3e38d8471b088c5e3ade72e90421b1366cd5b6a98 ALSA-2026:41937 Copyright 2026 AlmaLinux OS 0 1 Important

sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474) * sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsss_nss_idmap-devel-2.12.0-3.el10_2.1.ppc64le.rpm 190ab4190b8fe7a26140200c3dbd6a08065eeb7bd42cb489edc74cd6daf283ff ALSA-2026:41988 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dovecot-devel-2.3.21-19.el10_2.1.ppc64le.rpm 3943f6fe5fd10ebc1d297f537d61e70fa2bd065fc457c9e494d9a835bf75ce13 ALSA-2026:42063 Copyright 2026 AlmaLinux OS 0 1 Important

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glib2-static-2.80.4-12.el10_2.14.ppc64le.rpm 7f6f9e8853cb0f165b2e6374e436d317bf6ecc22f7e182a626444a924a515983 glib2-doc-2.80.4-12.el10_2.14.ppc64le.rpm ed96e2c4a6d824423e9a1005be1cc67056f86a0fac08f53c11d10789b7b47748 ALSA-2026:42694 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928) * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435) * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glibc-benchtests-2.39-128.el10_2.alma.1.ppc64le.rpm 07115aa0558d06347f23259627fb54f098367c29f204df258d93d7979b2e1a3a nss_db-2.39-128.el10_2.alma.1.ppc64le.rpm 4f1cebcecb39989183d5cf208ff01d906322431ec42fae66c267e09a09065978 glibc-static-2.39-128.el10_2.alma.1.ppc64le.rpm 7d74542237da57568ee39a9d0dc12d500629d821515a7645107f276cbdc278c6 glibc-nss-devel-2.39-128.el10_2.alma.1.ppc64le.rpm c983e93db039a854534eb78d7ff8b2d50aa1d06fc573dfb5e3d815ea8a44c1cd nss_hesiod-2.39-128.el10_2.alma.1.ppc64le.rpm ef63886e2f965d4269d7a9b37d8c23c492be7d3570ec207f77564f974db2569f ALSA-2026:42895 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340, AlmaLinux-212342, AlmaLinux-212343) Bug Fix(es): * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360, AlmaLinux-212361) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default java-21-openjdk-devel-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 10b44198c6d8d3a9de0e6b88d5f3bb3ee4a0043d336e50c208ace034314f72bb java-21-openjdk-src-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 1c99d3fa3436495e63a8846165ef795f2d59034d2c97f83404dcc76dcb669437 java-21-openjdk-jmods-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 239d7181cde31bfe1c370e84a3ecf014a0411d7a6bd7d5c662515b27983aad72 java-21-openjdk-static-libs-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 3e7fcff3eba33b7e3a78ab3a8d6c042df5f6c50f1a8f1574a8ba2fedee82834c java-21-openjdk-jmods-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 48345cdf6de3b1394305a302fa4ee881236971ad06f66a71119df404cf5a390b java-21-openjdk-headless-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 4ae85e64d1518fdaa565ca3f870a7bf9b16cfd1fcc3a74a5f66eeb4078460941 java-21-openjdk-headless-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 7eea7ead77c1213d6b4427bf118dddf355b8f1e1152dbbabbe0b5ac881e014e4 java-21-openjdk-static-libs-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 8b8833cbb108053d7ae465b591718950be066157611aab82b1c8c2962da0f3cb java-21-openjdk-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 9b789c3ad24cb21980f0e585438f6b0b1e4073d707bd80f11b8d23fa46dbb084 java-21-openjdk-devel-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm 9e8186231fca7d412437f7fd1c69258c3f30424f65860fe81eea6ff00491a936 java-21-openjdk-src-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm a8ae17c4ebd06eacc6331ad1e7bf23de554e4cc04f5617fd157feecb110255d7 java-21-openjdk-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm b791728286f1b0d7168e82ef10687cae860a7f159f72797e22fb5ef8ae196ea0 java-21-openjdk-demo-slowdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm c617e4a497718a0ec572b756bd4eaed4f7b581a3dc07388323673a591661020f java-21-openjdk-demo-fastdebug-21.0.12.0.8-1.2.el10_2.alma.2.ppc64le.rpm e3f2d8af94c922645a3933934486230d6578827eeee8647a902b81615c4592b9 ALSA-2026:42899 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-211046, AlmaLinux-211048) Bug Fix(es): * The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11. This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2). This release reintroduces this optimization. (AlmaLinux-211050, AlmaLinux-211052) * On AlmaLinux 9 systems, the alternatives list a JDK and architecture pair (for example, "java-11-openjdk.x86_64") followed by the path to the binary in brackets. AlmaLinux 10 systems have a simpler format that just lists the path. Because the OpenJDK 25 packages for AlmaLinux 9 were originally based on those from AlmaLinux 10, they used the simpler format. With this release, the format for OpenJDK 25 packages on AlmaLinux 9 is updated to be closer to other JDKs on that platform. (AlmaLinux-212650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 050746e06ae9337ed34058e3e8a1cc2e221a05beb75162c225e5e3b10980c46c java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 238411fa3fc530d2b29ad1c1edc7788bddc2cd2742f2d5e3f016114029a47c23 java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 30b9f97c1134bb415281e452495412608d3106ba01ce28930045d7c577942bff java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 39ced689e17b2dd4a7c5a643fa95baccd84c99273d4402ab4a1b235814030724 java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 44c0a1440bf3d2c0c7b25a66baca3cc22d8a778b01af7bc8c1e0329c0afa6493 java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 4abc64bebffd0752b2ffd975ad207af1badb7de5f7d456180ea495169b5a3c7d java-25-openjdk-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 55f83cb2364982863e3d63538903a1c155f5f3e501a852c7b8858493547cb639 java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 56a44a980c236d4b5a33828d0084cb91d3840cd53e4462357dbb07f19ad6133b java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 610a4e63b1c5646e274b0559d337095e803b42bdf490773ad43e68d1a7bcd4f9 java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 641417dafe388a5b67fc7a25c4f1ee8b06cf9f9f0fe50d3a3bc4e2c6b8ee7093 java-25-openjdk-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 75a9f17ffb10b1eead42c600d129dc201704d755802b31830330a04226b47bae java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm 8e455bdbead25960f85a0dd0b1ced276c644ec2e973f06570db42fcf9199d399 java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm ba3fb741d1b1db0ab2a96fa01141793505245f9318c08d15c285eab10e2bc46a java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm e5229d54b6a995781a09650ef6508baac810a0f265c37f1a77460f887031c41f java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm e9deea6de5b73d2a2082e9adc86c2436330fdf66debdda166d5b1f5b039442b5 java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.el10_2.alma.1.ppc64le.rpm fe466a44f4872fd7472883c8d9c1178f790f4b3696442b46b76542053788e1b4 ALSA-2026:42919 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168) * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) * kernel: can: bcm: thrtimer use-after-free during RX operation teardown () Bug Fix(es) and Enhancement(s): * nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103) * tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975) * [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311) * ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.37.1.el10_2.ppc64le.rpm 287f380f56237cc8f5d864155e1ed35e3ead4180e932dcd3041e46a64f1aabe0 libperf-6.12.0-211.37.1.el10_2.ppc64le.rpm 43f3f2d000c5bda439db0c48b6e8e04cadf79fcdf037b5324ad30901e3c2ae9e kernel-cross-headers-6.12.0-211.37.1.el10_2.ppc64le.rpm a8ee45a08116e22a068b7ba5840e0e02010ac244883329ccc5db65e469176fd8 ALSA-2026:43505 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb-connector-c security update

The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fix(es): * mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default mariadb-connector-c-test-3.4.4-2.el10_2.ppc64le.rpm 84c4d730bd4430152a68e7a9478d8b215c834d5ee10961af315b8327f0d82461 mariadb-connector-c-doc-3.4.4-2.el10_2.noarch.rpm 8cf1ce56d4d79c064cdad31b2bb230e2d0a09ef70c34615e9310cb74aabd0d18 ALSA-2026:44270 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.38.1.el10_2.ppc64le.rpm 74d763af8dc75bf5671568a65b27e45b531ed45f04f6119f6ff1312a820d0ce3 kernel-tools-libs-devel-6.12.0-211.38.1.el10_2.ppc64le.rpm 8020deaeb8665330c34fbd471a3eba63b75ec247dd12d73523eb25874cd55154 kernel-cross-headers-6.12.0-211.38.1.el10_2.ppc64le.rpm fdfffdfcc51f022d16cd706ad5ab2ab9a7c6721990a5f1a649c177165bdf07dc ALSA-2026:45114 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.39.1.el10_2.ppc64le.rpm 1a5eab18f097eff83b6bd1752b0eeefce2a55837f46596f0e209bc88f62049e7 kernel-cross-headers-6.12.0-211.39.1.el10_2.ppc64le.rpm 6192dfc1e2cb5f8ddcfb56a395007882df37f1dcc4429dc2c7813dc1b6dede4a libperf-6.12.0-211.39.1.el10_2.ppc64le.rpm dc7c9620e37e3195ec939adb43880b26ba9ebfecaf5c13f0c8c57fa7c2385e8b ALSA-2026:47017 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): * rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.40.1.el10_2.ppc64le.rpm 0a1be6ef024680fc006a5f5c3c6f646cf6b8b843ab255cd602343583c40dd5de kernel-tools-libs-devel-6.12.0-211.40.1.el10_2.ppc64le.rpm 1341fa2371aca810dcf126317b9d33e00801ff305d7884296d95f528308347db libperf-6.12.0-211.40.1.el10_2.ppc64le.rpm 614f716c41eecfc4df1c2ac1adf3168384cc93bafb6f025b902f2fb8e35d720d ALSA-2026:47079 Copyright 2026 AlmaLinux OS 0 1 Important

libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fix(es): * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001) * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libXfont2-devel-2.0.6-5.el10_2.1.ppc64le.rpm e0dbaa2dbbd6197514d6ad8eb2ea244d4831269ed13df00c517139fb7ccb4c26 ALSA-2026:47085 Copyright 2026 AlmaLinux OS 0 1 Important

rest security update

The rest packages provide a library for access to the RESTful web services. Security Fix(es): * librest: weak random number generation in PKCE implementation (CVE-2026-16615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default rest-devel-0.9.1-11.el10_2.1.ppc64le.rpm d8946c3244050a773b45af4746c39b006067e0513d5a58cd201b5b0a1d22122e ALSA-2026:47180 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691) * gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.6.ppc64le.rpm 674af259d2fcdb27b0c03546899b8ad003e786c46b918c6d7c25e352a8c2832b ALSA-2026:49211 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): * [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [almalinux-10.2.z] (JIRA:AlmaLinux-185669) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-10.2.z] (JIRA:AlmaLinux-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.42.1.el10_2.ppc64le.rpm 6ba0754b09f37254e739c8ccca7e12071f6f7b2fbbe256f248ef5f7c29464da2 libperf-6.12.0-211.42.1.el10_2.ppc64le.rpm 8cb1a4ff449fe119fac71c686cc643cbc2e4d3afb8b8233a3eb16a940fd22ee2 kernel-cross-headers-6.12.0-211.42.1.el10_2.ppc64le.rpm d9e1b9ca745248c7802ba95897dfc149b43cb5821febd6de500e92f3c7e12ced ALSA-2026:49836 Copyright 2026 AlmaLinux OS 0 1 Important

ldns security update

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets. Security Fix(es): * ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching (CVE-2026-10846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3-ldns-1.8.3-18.el10_2.1.ppc64le.rpm 003051d836c56e0f6e870eb460c15a7a16f34643b5d418a8bc59ce85fce72931 ldns-utils-1.8.3-18.el10_2.1.ppc64le.rpm aec81baf75066e1175b1af2535d0e9a24be963920ca0e4ae3cc082a2479fb950 perl-ldns-1.8.3-18.el10_2.1.ppc64le.rpm cf4216c19dfae8dd25c0bfbae8889ee0582b966a141b5bc4919afacc699d3388 ldns-devel-1.8.3-18.el10_2.1.ppc64le.rpm d36ca94cbea37f5ea53793c66ab04623a7412fcae52ff7a2971ea98b0b31369b ldns-doc-1.8.3-18.el10_2.1.noarch.rpm d3a9d21b00192966f42699a0a0e9a7496c7988733f2e1989217611c1e00a2679 ALSA-2026:49871 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID while holding VMA lock (CVE-2026-23199) Bug Fix(es) and Enhancement(s): * [Lenovo] Graphics not working on T14 G7 Intel (Pantherlake) (JIRA:AlmaLinux-172832) * Possible regression with FM350GL [almalinux-10.2.z] (JIRA:AlmaLinux-184266) * [10.2 FEAT] CNB102: dpll: sync with upstream (JIRA:AlmaLinux-211011) * backport make module and modules-core provides use variant [almalinux-10.2.z] (JIRA:AlmaLinux-213965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.43.1.el10_2.ppc64le.rpm 8ac15e566064ce7a752ce38affcb0a306eb4d324a092b9cfd812b13a3de43fa6 libperf-6.12.0-211.43.1.el10_2.ppc64le.rpm b016b00a7dc72923f535000ac25029f7665a5607c94d3c58f300b2f87cadcb23 kernel-tools-libs-devel-6.12.0-211.43.1.el10_2.ppc64le.rpm e79d3d452b34b6cc65ea84aa8e757ea86925e30eaefcb3be17b7df4cbe42e25c ALSA-2026:50142 Copyright 2026 AlmaLinux OS 0 1 Important

sg3_utils security, bug fix, and enhancement update

The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets. Security Fix(es): * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313) Bug Fix(es) and Enhancement(s): * sg_inq output conformance for SCSI name string and ATA fields [almalinux-10.2.z] (JIRA:AlmaLinux-188123) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default sg3_utils-devel-1.48-7.el10_2.1.ppc64le.rpm 66bbcce5634794b4cdec039830e23ffa3a588b963fd1b40a5c35364896da07f9 ALSA-2026:50747 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Remote code execution via heap out-of-bounds write in RemoteFX decoding (CVE-2026-55827) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default freerdp-devel-3.10.3-12.el10_2.7.ppc64le.rpm 2870c79856022b16fb7cec59b8bfb6922ff43723b994ad484588e505ba37470d libwinpr-devel-3.10.3-12.el10_2.7.ppc64le.rpm b6a3330da954358f515c9b9722966489ae2b46d0c6776a0c9deadf2df00aaa67 freerdp-server-3.10.3-12.el10_2.7.ppc64le.rpm b85ff5814222f392881c60f909f9672ba118200ad8f9671ea7231151ad8fca31 ALSA-2026:50773 Copyright 2026 AlmaLinux OS 0 1 Important

ruby4.0 security, bug fix, and enhancement update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby4.0: Rebase to the latest Ruby 4.0 release [almalinux-10.2.z] (JIRA:AlmaLinux-211310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby4.0-doc-4.0.6-36.el10_2.noarch.rpm 10b9f69dd32723f605cbc08edd0d11d6f4c657671bda53ce633749a396f52e1b ALSA-2026:50778 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby: Rebase to the latest Ruby 3.3 release [almalinux-10.2.z] (JIRA:AlmaLinux-211300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby-doc-3.3.12-14.el10_2.noarch.rpm 46022b511c83726e5919b500b33fbd6b00f36fe7ff04e742c7028b628cca38ae ALSA-2026:51295 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345) * ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.44.1.el10_2.ppc64le.rpm 64b8b6fc3161981188e75bada67f81929cb55f3a3f03cf74aeaa012b7aa24a61 kernel-cross-headers-6.12.0-211.44.1.el10_2.ppc64le.rpm 68a568bfd707d577085d20984c01187d9007dbaccad119e0f0199fb77ba757a6 kernel-tools-libs-devel-6.12.0-211.44.1.el10_2.ppc64le.rpm bdb2fb06fced3b3fd89341bc3115e43a2b28c5f2a184827e4cad8b9841e0c3f1 ALSA-2026:53330 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143) * kernel: shmem: fix recovery on rename failures (CVE-2025-71072) * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035) * AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503) * AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.46.1.el10_2.ppc64le.rpm 222fa0e0154733f78d6698b1d9b9c9c37dab7f803725a642556c59b865628607 kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.ppc64le.rpm 41d7e34ec1bc5f87aabbbab738ca54fa1cb5ffc19cb9bceca0892a9e78f2c14e libperf-6.12.0-211.46.1.el10_2.ppc64le.rpm 99205e68218610777036f6600bdb53ddc52a01a21bd8cf5f00e1b13cd43658c0 ALSA-2026:53435 Copyright 2026 AlmaLinux OS 0 1 Important

udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fix(es): * udisks2: udisks2: Local Privilege Escalation via as-user option spoofing (CVE-2026-7867) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libudisks2-devel-2.11.0-2.el10_2.1.alma.2.ppc64le.rpm 2c28613f2594e8ad6e6780b1a8b49a82ceee6a8386cf47b75cbfb94742e0e67e ALSA-2026:54343 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300) * kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361) Bug Fix(es) and Enhancement(s): * netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311) * tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.47.1.el10_2.ppc64le.rpm 095a6ede0873983deebbdec5f4dccab235ac575c5fd16bbc66a7bc38d47ec80e kernel-cross-headers-6.12.0-211.47.1.el10_2.ppc64le.rpm 9379435904eea456fcff888951306cec46a025a15e6cbe04b5e6ec1746895f66 libperf-6.12.0-211.47.1.el10_2.ppc64le.rpm fed905253ea2d511649816c34028a4f363b3842d144d14a742149a9b5b47f5f1 ALSA-2026:54486 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow (CVE-2026-64620) * FreeRDP: FreeRDP: Double-free vulnerability via crafted .rdp file leading to potential remote code execution (CVE-2026-64621) * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624) * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299) * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289) * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default freerdp-server-3.10.3-12.el10_2.8.ppc64le.rpm 3cdbc9011dcd1781caa5389311a74349c6ce02bece1ca0d83386713397f060aa freerdp-devel-3.10.3-12.el10_2.8.ppc64le.rpm 729572decb122573896eb11840cab3d86aa34188215b2de147dae9f47be7d018 libwinpr-devel-3.10.3-12.el10_2.8.ppc64le.rpm f28e9f25e8c498515115d21dda545184e36b1104c7248b1909fb3bd64baf5fc8 ALSA-2026:54541 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.130 Runtime version: 8.0.30 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.130 and Runtime 8.0.30 [almalinux-10.2.z] (JIRA:AlmaLinux-235472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.el10_2.ppc64le.rpm 249d19f588162eae748cfb0e0b0a9ec6221d1a805c4bbc23ca216ccbee0295d1 ALSA-2026:54590 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.120 Runtime version: 9.0.19 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.120 and Runtime 9.0.19 [almalinux-10.2.z] (JIRA:AlmaLinux-235477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el10_2.ppc64le.rpm 546a63dc11b7848350119ed24745cd9390dcb35bac76af6c1fb85d7ffed8c408 ALSA-2026:54650 Copyright 2026 AlmaLinux OS 0 1 Moderate

nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nghttp2-1.68.0-3.el10_2.2.ppc64le.rpm f7140578d2ba612cf83a1be08c7d26b5a1ee7648785e7dac005a4fd5ac83afb1 ALSA-2026:55424 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default 389-ds-base-bdb-3.2.0-9.el10_2.ppc64le.rpm 6f263c061df7dc6d77df7d020202cd170468d555611f080b0a84a9ed13e1f074 389-ds-base-devel-3.2.0-9.el10_2.ppc64le.rpm ca4df9c1937fe82202cc30bc5470bc7a56d99f5e196e9b011d5fb8fed3de6f5f ALSA-2026:55433 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.7.ppc64le.rpm e420a65f503737d6a2c99fe5e7c1296046a9e013203f26e1ac30d7931dec4695 ALSA-2026:55437 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default bind-devel-9.18.33-15.el10_2.10.ppc64le.rpm 6dacee1a91c2a83191886eb376982d870c2e97f7e6ff8201af06e4996f26eebd bind-doc-9.18.33-15.el10_2.10.noarch.rpm bef2f81f4c02f8446fe4280195a27721cd50f030c9396aa4d7f34ad45d7fc63c ALSA-2026:55448 Copyright 2026 AlmaLinux OS 0 1 Important

libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libXfont2-devel-2.0.6-5.el10_2.3.ppc64le.rpm 708f20ae82d627e083b6b7dcea632fa0ec778aa36eb3bb3bffaf4e8b2e4b30d4 ALSA-2026:55617 Copyright 2026 AlmaLinux OS 0 1 Important

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524) * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526) * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules (CVE-2026-16527) * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default pcp-testsuite-7.0.3-5.el10_2.ppc64le.rpm a91608af2cf0f8e5d51576d61cdb3b47ad1d53e167bf7d1cdb1d87ae388d37a2 ALSA-2026:55787 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default java-21-openjdk-jmods-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 1e0c14e33bfba75505eec1e29d776a42bade7c62bb4c4fc33b91b13348f47677 java-21-openjdk-static-libs-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 3007c41f5e91c854097b8776f576107eb19198375abe930bb06add08d8ca7cc3 java-21-openjdk-jmods-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 4acc7079e427105c331840bac0b07c02197a00809e44d8c1d9074f91b367427f java-21-openjdk-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 5a12fc0724822e505b43bbae2c4fb7739eea43b5b311442f3240a5c80a673308 java-21-openjdk-devel-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 694e626abf654ebd8682225cd3983e8f9c9d0adaacc064e6a7e047f448f83367 java-21-openjdk-headless-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 73dffce639dfe08dc3ffe2061e16226dfad6912f6f3418cfb75a0813059183a3 java-21-openjdk-headless-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 76a079f0d99ed09f5381140fe3cd110ce4a5d6533f6ba6fe97b17fbb96ee72ee java-21-openjdk-static-libs-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 77fe06251d849ae3cb43b3feecea44b76d5c8bfc3c0289513deb812c75f5717d java-21-openjdk-demo-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 78bda483112227744afdeea40f1fce3b648545457f5ac65b851e97c9ee7d996b java-21-openjdk-src-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 7aa125dc65e6a6a8ee3161dab0a310d469773482fd25010fb956e5e8cd9555c6 java-21-openjdk-src-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm 8447a3e21152c2396c31639d7216cc5525e72c9f12b883569b0145d070128eea java-21-openjdk-slowdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm c2c19e0e307645549e877427a985201708fb43867750260a9e94abaa266fce20 java-21-openjdk-devel-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm c30ffa7f4d4279675616494760773c161248ab1b0a557127c79f7c574ccf3925 java-21-openjdk-demo-fastdebug-21.0.12.1.1-1.2.el10.alma.1.ppc64le.rpm d688c521660557d9368f46681a1466cc305a97e5283916a8ad3ede7547fea0c6 ALSA-2026:55798 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Improve font loading (CVE-2026-70906) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default java-25-openjdk-demo-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 00a9236b983f2b3b3c1060b7aa87258a779a4725b337cb572ae391a51cc790f9 java-25-openjdk-static-libs-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 020e2c0951ace6a6e902540aa57fa398526cdf07a9d318a654a3b02a80aa8da8 java-25-openjdk-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 047a84ccffcd942a7201423a71da368209f72db3d30f060df27cd402a152b3bb java-25-openjdk-headless-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 0a68c330414f686295936d1f9f9f76059c14275277377632026b08dedcc784a8 java-25-openjdk-headless-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 0b8212b34f2b35b7844a0f5f26b21cd79b35ca432d3dd802513c6f5d900e2f86 java-25-openjdk-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 0e15d6d540a4142c9a43ebeb6239894688ab01c63214dc0879cfe92552c18d7f java-25-openjdk-static-libs-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 1c29b23cd464e087609f27d80bd3b516e6d93ac06e85638a7ec3379427642275 java-25-openjdk-src-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 25272e600ee500fade1d22a796112e7a55c3735685df7288753443c1110a364d java-25-openjdk-crypto-adapter-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 254c99d62847022bdba3cb3be7a9dad9074216a7ec434940197614dace59bfc6 java-25-openjdk-devel-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 3d07f8f5f4d964f98f91946045010afbdc76a9ce71b7aeae79f8d95c4a894db9 java-25-openjdk-jmods-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 426344aef5adb45f48be0b8e784d119379c77cbdd3aee4411fce7eaace8daf9e java-25-openjdk-devel-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 68423ac380da48817c3fa7221df513678d47144e82e0b62777a70c28e9efeb02 java-25-openjdk-src-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 8b75abd8a0584ef481eeaa17172d3d7477179704b76401f4620747ab9818af20 java-25-openjdk-demo-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm 9a46b673f156dfc7a3c91a6321f55e3f994226ae303569788b677248304613c2 java-25-openjdk-jmods-fastdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm e07eb8dfba694ab160b4928f71f05ae778a94db4f359ab0c6f3b70b799ababcc java-25-openjdk-crypto-adapter-slowdebug-25.0.4.1.1-1.1.el10.alma.1.ppc64le.rpm f3299a47e1e2605f78d8d6b95027f1818ace1b73155b44de03e533177c3f6cb6 ALSA-2026:55858 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.111 Runtime version: 10.0.11 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.111 and Runtime 10.0.11 [almalinux-10.2.z] (JIRA:AlmaLinux-235482) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-10.0-source-built-artifacts-10.0.111-1.el10_2.ppc64le.rpm 77f9ffbbacb041e167b76317cbca4892339029c9c407097fba3784abc5b6b785 ALSA-2026:55892 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690) * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default unbound-devel-1.24.2-7.el10_2.4.ppc64le.rpm 7673066ad28c6ab941652d0a9d91318b503e0875960f2fd96a8fa9bc3c134470 ALSA-2026:56007 Copyright 2026 AlmaLinux OS 0 1 Important

mysql8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fix(es): * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145) * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315) * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163) * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185) * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178) * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182) Bug Fix(es) and Enhancement(s): * [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188044) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default mysql8.4-test-8.4.11-1.el10_2.alma.1.ppc64le.rpm 6ddaf398fd458c80933df75320591c9968aae3315b8163553d0ea28a3deade41 mysql8.4-test-data-8.4.11-1.el10_2.alma.1.noarch.rpm d2cfc67fb9e6ffd91fcc37ace5d5f06a12107a569db323dd8f86bf7b1e2d5830 mysql8.4-devel-8.4.11-1.el10_2.alma.1.ppc64le.rpm d4a724dbcadf6e2dfedb64d7c79d76addf3607ce504a87a3bb23f0f10dd1af19 ALSA-2026:57015 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glib2-static-2.80.4-12.el10_2.21.ppc64le.rpm 47138dfa053636fa37b3233c801d0d875fde3ad51586a2e5d72d15202ac4c585 glib2-doc-2.80.4-12.el10_2.21.ppc64le.rpm 8933ae63be610bde8b9ae717d537ce0777a036967f7249d4fcd3f22a91293e5b ALSA-2026:57126 Copyright 2026 AlmaLinux OS 0 1 Important

yggdrasil security update

yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default yggdrasil-devel-0.4.9.2-1.el10_2.2.ppc64le.rpm 6c3aaa68ce7237fbc024cc48afb4b7f4e1ae079c71b0ac5320d1760aef8dab85 ALSA-2026:57251 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545) * cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.49.1.el10_2.ppc64le.rpm 02b83617b48817377b8d18546d96d2114c4d9fe3662660e982d59eaa3d443165 libperf-6.12.0-211.49.1.el10_2.ppc64le.rpm 09f7272251be91a85c2d70eadec0bd874d1d81d06ce3a039c727b3acb329b791 kernel-tools-libs-devel-6.12.0-211.49.1.el10_2.ppc64le.rpm 4226059cd65046952e5ef8426388083f7cfd6824d08949d8eba25f5e97d17c20 ALSA-2026:58902 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3-test-3.12.14-1.el10_2.ppc64le.rpm 98fa83ad7dda6e24b527a33d4d04bb5ebed73ca4315ddedb4c00cbda3b2ba155 python3-debug-3.12.14-1.el10_2.ppc64le.rpm a41eb50c3b4b2766d91516fdc55ee0ee7c3f1fa453843d961eb868b5832509c2 python3-idle-3.12.14-1.el10_2.ppc64le.rpm e5b8479ab6c49a0b5e0fcce95586e91f10b9a46d2f1c5992b648abb7b6cf0061 ALSA-2026:58928 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3.14-test-3.14.7-2.el10_2.ppc64le.rpm 08b0c3789ecab9d11011c45ca47e6bc1ea094b6ddd02d9a086235ff25e633bc2 python3.14-debug-3.14.7-2.el10_2.ppc64le.rpm 174ab27ecfb59e14382d05d245006480af854beacd5ea6f0e854a6c85ccb0a5f python3.14-freethreading-devel-3.14.7-2.el10_2.ppc64le.rpm 783dd6f7827b35548d33b2ebbafb31a29ca8ee5a34d29eb2445cc5d276329e19 python3.14-freethreading-libs-3.14.7-2.el10_2.ppc64le.rpm 8590e56535237378c4d008ed1837784d5bf34b885fd83b6eaf094dda751e3c02 python3.14-freethreading-tkinter-3.14.7-2.el10_2.ppc64le.rpm b1918a9e26bc87230dcd130a38d32aff26f681c0b934dbce874e89ce640a57e2 python3.14-freethreading-idle-3.14.7-2.el10_2.ppc64le.rpm be274ffed17c95bb12a87ce1c0a903939774d1bcdb03761124d8c25c4f1d89a6 python3.14-freethreading-3.14.7-2.el10_2.ppc64le.rpm ce6960328ec9d53cbcc654be68e29e5fc93de33cdfcf0e83b332161072c29ce4 python3.14-freethreading-debug-3.14.7-2.el10_2.ppc64le.rpm dcc273532433eebfceaf679b7a2c8742d8a78e5eaf946b9b286a336092782b50 python3.14-idle-3.14.7-2.el10_2.ppc64le.rpm e5ca3d0636864e60c9bd5a280de7453478ea49b5c6f5de1dfaaa9c9b8fa15bd2 python3.14-freethreading-test-3.14.7-2.el10_2.ppc64le.rpm ed282beabe6b7795a49789484927dbe027183b72c009ffb2aa13d52bc6f9af46 ALSA-2026:59220 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nginx-mod-devel-1.26.3-6.el10_2.6.ppc64le.rpm 0cec6e3df990bd28f5f8745d2d0b5d0bb4e4297cdad82df0d035def5ffcb5912 ALSA-2026:59372 Copyright 2026 AlmaLinux OS 0 1 Moderate

assertj-core security update

A rich and intuitive set of strongly-typed assertions to use for unit testing (either with JUnit or TestNG). Security Fix(es): * assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) (CVE-2026-24400) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default assertj-core-javadoc-3.24.2-9.el10_2.1.noarch.rpm 4e7371349a195ff0dfb89d4ac5346a706e544f1edfca0754afaaaf3b875bb039 ALSA-2026:60394 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libxml2-static-2.12.5-10.el10_2.3.ppc64le.rpm 73ac664d42bb7ed788c5b72ad976f28ec024c29c3dc36f529df240693346f898 ALSA-2026:61378 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses (CVE-2026-67297) * FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301) * FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288) * FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291) * FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing (CVE-2026-67296) * FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup (CVE-2026-67304) * FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling (CVE-2026-67298) * FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption (CVE-2026-73242) * FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling (CVE-2026-73241) * FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU (CVE-2026-63652) * FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194) * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode (CVE-2026-63633) * FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure (CVE-2026-69159) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libwinpr-devel-3.10.3-12.el10_2.10.ppc64le.rpm 13e1b56fccf8f1e63ec2f8529c0dcf893559103806309a787479d1df9fa9daa4 freerdp-devel-3.10.3-12.el10_2.10.ppc64le.rpm 68042e25c683e930520ce55920cb9e5c7674a6a06018c473e72daab61d8f52cc freerdp-server-3.10.3-12.el10_2.10.ppc64le.rpm 6a69f1b93793a09e4cdefaedbeaadb70f84aedc0513179739987542ebc1ac5bf ALSA-2026:61887 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) * kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685) * kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419) * kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408) Bug Fix(es) and Enhancement(s): * AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043) * ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393) * [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627) * AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.50.1.el10_2.ppc64le.rpm 0d6216ffb29fabbaf165d9e1bfe9d3c76b55c59158885d39fbf82d3c4dcb4f8f libperf-6.12.0-211.50.1.el10_2.ppc64le.rpm 51afcc00e487007e7cb7f50ea8241d6048bb673440927df1ee8ba7ee6b596564 kernel-tools-libs-devel-6.12.0-211.50.1.el10_2.ppc64le.rpm acd1638ca8b162ecc7c515523f0cb7f5c2765b5269f8f10a5f769aad77a3c5ff ALSA-2026:63128 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.51.1.el10_2.ppc64le.rpm 1fd0cf4f7c7790f39f5834dfdcd2e4c83fa1e51d9e3319bfa6d361fd5ce33912 libperf-6.12.0-211.51.1.el10_2.ppc64le.rpm 64a394cf02c8f1a611f3b10c1b265c61f59f6f675d126cb041b4ad8c6b676549 kernel-tools-libs-devel-6.12.0-211.51.1.el10_2.ppc64le.rpm 87cfcf972e703510798a9892ebf0cd1b01e630542c0cdb6be0a37e39ed27fd5f ALSA-2026:64785 Copyright 2026 AlmaLinux OS 0 1 Critical

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVE-2026-18355) * 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (CVE-2026-18453) * 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property (CVE-2026-18922) * 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN (CVE-2026-76560) * 389-ds-base: 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS (CVE-2026-78701) Bug Fix(es) and Enhancement(s): * lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [almalinux-10.2.z] (JIRA:AlmaLinux-244470) * fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [almalinux-10.2.z] (JIRA:AlmaLinux-248770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default 389-ds-base-bdb-3.2.0-10.el10_2.ppc64le.rpm 0d181e30cbb6b24ca6369a6354e99c02455d0d2baf81a0932d6373da35bae4af 389-ds-base-devel-3.2.0-10.el10_2.ppc64le.rpm d9607d0c75af478c92cf4aecd63e5b696e904fd2752e4cbcf41e8c7bb565099c ALSA-2026:64799 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVE-2026-16118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glib2-static-2.80.4-12.el10_2.22.ppc64le.rpm 226dbe28fe8b59a82d40cf2ce69d959c468f8cea16ab296bc9c97e1bb3101510 glib2-doc-2.80.4-12.el10_2.22.ppc64le.rpm 6d29a853c7e7d5751d9cd49b3171f740eca98c382ce908494831ecde56bb9b98 ALSA-2026:65334 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: Bluetooth: virtio_bt: clamp rx length before skb_put (CVE-2026-46123) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: vfio/pci: Clean up DMABUFs before disabling function (CVE-2026-53322) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: vfio/pci: Check BAR resources before exporting a DMABUF (CVE-2026-64042) * kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap (CVE-2026-64051) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: wifi: mt76: mt7925: fix crash in reset link replay (CVE-2026-68307) * kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (CVE-2026-68193) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) Bug Fix(es) and Enhancement(s): * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-10.2.z] (JIRA:AlmaLinux-193027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.53.1.el10_2.ppc64le.rpm 3eb31e19f0d35855c07761ae9f91cdb408435469f0cbe319e23c726ad3ea69d6 kernel-cross-headers-6.12.0-211.53.1.el10_2.ppc64le.rpm 40ace8d3af29001a47582ef9aa802a017165739f5df8f78780e23c8f6fa9a85b kernel-tools-libs-devel-6.12.0-211.53.1.el10_2.ppc64le.rpm 5acd39fa894bd066395fb156a887da2e75f93d37a66494d07ed82aecc35db020 ALSA-2026:65816 Copyright 2026 AlmaLinux OS 0 1 Important

qt6-qt5compat security update

Qt6 - Qt 5 Compatibility Libraries. Security Fix(es): * qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default qt6-qt5compat-examples-6.10.1-1.el10_2.1.ppc64le.rpm ae865d09df8b8be8ed6507b6d26de7d4f05cee963cb5acae6caedf7b9ab8eb38 ALSA-2026:66349 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway (CVE-2026-55193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libwinpr-devel-3.10.3-12.el10_2.11.ppc64le.rpm 287d3f9e40529e911fbe072ff97654769f53c7484bb2e339e33318cce9fb0648 freerdp-devel-3.10.3-12.el10_2.11.ppc64le.rpm 9192f12f8745a57e6ebd82ca8bca9e1ac8920d8c6881434250f47a59cd937006 freerdp-server-3.10.3-12.el10_2.11.ppc64le.rpm ba2a77b0efaed1937ee10a6d68653c5a69fad643c4afa749c7088f9dbca14968 ALSA-2026:66355 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.54.1.el10_2.ppc64le.rpm 12c0b719c5916556df141ee3266e6857c5e4b9f152f2403c9878efe1fc83ffd1 kernel-cross-headers-6.12.0-211.54.1.el10_2.ppc64le.rpm 24f20992f13271b7aba33a5b66060dc391782f07c0f1d340416c7e697c19a8a7 libperf-6.12.0-211.54.1.el10_2.ppc64le.rpm d789d5a190abc421bc050f9fc5a678271ecfc19c657d1ce3025d1d8e014bbb22 ALSA-2026:67280 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql18 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default postgresql18-test-rpm-macros-18.6-1.el10_2.noarch.rpm f2e3b11f55e89c173bf82a5ea89601eb7eb79b7b4a93eb73188bd59580feebb6 ALSA-2026:67314 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nginx-mod-devel-1.26.3-6.el10_2.7.ppc64le.rpm fcf52aad012828476cd382e9bfef7621c5d57603ceaca05d334fd7865f1907ac ALSA-2026:67471 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149) * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * [almalinux-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:AlmaLinux-245035) * RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:AlmaLinux-255233) * [AlmaLinux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255348) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [AlmaLinux-10.2.z] (JIRA:AlmaLinux-256731) * RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:AlmaLinux-256890) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.55.1.el10_2.ppc64le.rpm 95487218037c009464fe1268a2247f3aeca213ecb09aee36972db45754b8aab4 libperf-6.12.0-211.55.1.el10_2.ppc64le.rpm bf644202eca70137bf1c0ed56490eabbed79f8da9f925cb3e5dd2cddc00ce4bf kernel-cross-headers-6.12.0-211.55.1.el10_2.ppc64le.rpm cc7d026f9c4019bf0f27ea7129506663fa9fe3dcaacad221ca951e3de93ba81a ALSA-2026:67525 Copyright 2026 AlmaLinux OS 0 1 Moderate

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.131 Runtime version: 8.0.31 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-10.2.z] (JIRA:AlmaLinux-252248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-8.0-source-built-artifacts-8.0.131-1.el10_2.ppc64le.rpm 50b5795a38817a584032916c1da2871e3136176352d81a192d016f280051e1f9 ALSA-2026:67528 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.121 Runtime version: 9.0.20 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-10.2.z] (JIRA:AlmaLinux-252279) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-9.0-source-built-artifacts-9.0.121-1.el10_2.ppc64le.rpm 786ae91d0e4410f1a00aebacaf640760dc712affa471f86662dd8354bae31926 ALSA-2026:67530 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.112 Runtime version: 10.0.12 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [almalinux-10.2.z] (JIRA:AlmaLinux-252320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-10.0-source-built-artifacts-10.0.112-1.el10_2.ppc64le.rpm 8805fa82004fa2e7babf364f855349ad27097c33219d785ce55c249966561638 ALSA-2026:67872 Copyright 2026 AlmaLinux OS 0 1 Important

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default corosync-vqsim-3.1.10-1.el10_2.2.ppc64le.rpm dec5a679998666b9ee7a1905aa8c2a9d2588c7263e6f980d27c8de78317a5c4c ALSA-2026:68235 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709) * libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711) * libsoup: libsoup: Heap use-after-free in libsoup HTTP/2 client on_data_read() via GOAWAY during body upload (CVE-2026-85197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsoup3-doc-3.6.5-3.el10_2.14.noarch.rpm 6bf3be055b11065a25d7112069d761fb27c69f94e9c38e76b683116273bd2f16 ALSA-2026:68291 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: DNS cache poisoning via UDP source port predictability (CVE-2026-50252) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default unbound-devel-1.24.2-7.el10_2.5.ppc64le.rpm cf109196e791128a714aa5c946add22381cbdf61a63fbf753a6c140af7999c67 ALSA-2026:68507 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: netfilter: handle unreadable frags (CVE-2026-64414) * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) Bug Fix(es) and Enhancement(s): * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0) returns EBUSY [almalinux-10.2.z] (JIRA:AlmaLinux-239776) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-10.2.z] (JIRA:AlmaLinux-254105) * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:AlmaLinux-255225) * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:AlmaLinux-255516) * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:AlmaLinux-255518) * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:AlmaLinux-255519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.56.1.el10_2.ppc64le.rpm 6f47b82cb7d318ae6b3a95c3b5d65a99e918c45fb2be74742ec80912ea603b43 libperf-6.12.0-211.56.1.el10_2.ppc64le.rpm 728b56e5097a8cede2bd140034c923965c9d7ddcbaa6ab4fda0eab58bf140cf1 kernel-tools-libs-devel-6.12.0-211.56.1.el10_2.ppc64le.rpm e8bbb17c3dd369aac59c0bd34a23a3e473fe2aa97ce3c7eae1aa310804eadefa ALSA-2026:69308 Copyright 2026 AlmaLinux OS 0 1 Important

yggdrasil security update

yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default yggdrasil-devel-0.4.9.2-1.el10_2.3.ppc64le.rpm a0d03422fe46bc5526f073617130cd50e350a7cbd872f4a27d2d4043d29dd7ae ALSA-2026:69609 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files (CVE-2026-68515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default openexr-devel-3.1.10-8.el10_2.4.ppc64le.rpm 58f5522a3fa924720d5b140695619446222165d1bccca3e0d2bce5e6c63e4b04 ALSA-2026:70186 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql16 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default postgresql-test-rpm-macros-16.15-1.el10_2.noarch.rpm 49bbad5117088919b1af51fbcff00683a55c6c9606a6c7c2c8c0e25341560b44 ALSA-2026:70201 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) * podman: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * podman: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852) * podman: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * podman: Quadlet install --replace non-truncating write retains removed host-access directives (CVE-2026-19730) * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default podman-tests-5.8.2-9.el10_2.alma.1.ppc64le.rpm 44fe49f9a26c71683705beb6cd9c44071b8d22ff028f27af4160fcc6fab6a6b6 ALSA-2026:70498 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * Update kernel to use new certificate paths [almalinux-10.2.z] (JIRA:AlmaLinux-169478) * RHIVOS - [backport] S32G Driver Enablement - PWM (JIRA:AlmaLinux-255517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.58.1.el10_2.ppc64le.rpm 9ff73c92d177f42af340bdb7fe8a8821ede87485819a251ed4054323798aecd4 libperf-6.12.0-211.58.1.el10_2.ppc64le.rpm a0a3f1955e43f42b9549bd1945308c5de7cfee3c3178668b50b83eb02f2d7cbf kernel-cross-headers-6.12.0-211.58.1.el10_2.ppc64le.rpm e9c809a00f72ea1c7b73362d958922a591f9311391abacbc96a1087b052433a5 ALSA-2026:71419 Copyright 2026 AlmaLinux OS 0 1 Critical

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default unbound-devel-1.24.2-7.el10_2.6.ppc64le.rpm 7e7c24e9130ee6536f10cfd9785df835c71224d4d6e1a05fd4eea198d4ba593c ALSA-2026:71586 Copyright 2026 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138) * libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143) * libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140) * libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142) * libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144) * libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libxml2-static-2.12.5-10.el10_2.4.ppc64le.rpm b78cf3f719807d060ac02b8fc1fc40f64bef3d310146089e823ce251552ff469 ALSA-2026:71602 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481) Bug Fix(es) and Enhancement(s): * Bypass DMA APIs for coherent allocations for pre-mapped memory [almalinux-10.2.z] (JIRA:AlmaLinux-252331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-cross-headers-6.12.0-211.60.1.el10_2.ppc64le.rpm bc30bb340a7a58fc3b4da7a7758bf4b1ba5d45234f4e32d3f488529dccbff6ea kernel-tools-libs-devel-6.12.0-211.60.1.el10_2.ppc64le.rpm bfefda522b6e29306f4fb818531216a9aaf8239393fc559c79937818e65d716b libperf-6.12.0-211.60.1.el10_2.ppc64le.rpm f90bc693d39ce5c13921beb0bb61eef229ac2d81bfbbe850fdb571de1e5915e9 ALSA-2026:72279 Copyright 2026 AlmaLinux OS 0 1 Critical

ipa security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198) * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197) * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861) * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147) * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550) * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097) * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578) * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678) Bug Fix(es) and Enhancement(s): * [Cursor Automated] Include latest fixes in python3-ipatests package [AlmaLinux10.2] (JIRA:AlmaLinux-173375) * WebUI Hardening [almalinux-10.2.z] (JIRA:AlmaLinux-238510) * ipa-otptoken-import hardening [almalinux-10.2.z] (JIRA:AlmaLinux-238518) * host-mod: handle the password attribute when set with --setattr userpassword= [almalinux-10.2.z] (JIRA:AlmaLinux-238522) * ipa env: support only simple * wildcard [almalinux-10.2.z] (JIRA:AlmaLinux-238526) * ipa-epn: drop_privileges method is mixing uid and gid [almalinux-10.2.z] (JIRA:AlmaLinux-238673) * ipa-migrate: require Replication Administrator privilege [almalinux-10.2.z] (JIRA:AlmaLinux-238676) * ipa-migrate tool is renaming host records & host info in automount information [almalinux-10.2.z] (JIRA:AlmaLinux-240768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3-ipatests-4.13.4-1.el10_2.noarch.rpm aada4129cc2eba155e636ed8ca940c21802b27bb54ac8e78f0bc8727067509f5 ALSA-2026:72427 Copyright 2026 AlmaLinux OS 0 1 Important

ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby4.0-doc-4.0.6-37.el10_2.noarch.rpm 52f1f690f25bf615ba7af684613c10e16165f150e3282b36f84909b5c8c9f9e4 ALSA-2026:72624 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480) * kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (CVE-2026-89775) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-10.2.z] (JIRA:AlmaLinux-188661) * crypto: xxhash64 should not be fips approved [almalinux-10.2.z] (JIRA:AlmaLinux-254943) * kata-tdx TD vCPU stuck at reset vector (EIP=0xFFF0) on Intel Xeon 6 (Granite Rapids / Sierra Forest) ? guest never executes. (10.2.z) (JIRA:AlmaLinux-260402) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.61.1.el10_2.ppc64le.rpm 3cf7f0c5f7e5b0d27fc840c8da571d8157c1f410aef425dbe73e15f769d38bf1 kernel-tools-libs-devel-6.12.0-211.61.1.el10_2.ppc64le.rpm 709119f2dad6a382777557dd6d6b4491a59b0b1fc3e778693f666b7a1f5c179a kernel-cross-headers-6.12.0-211.61.1.el10_2.ppc64le.rpm 7c98c1379d8de18859878fac0b5cbc9378a784de773b8c023399eda9f1205fbf ALSA-2026:72785 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ruby-doc-3.3.12-15.el10_2.noarch.rpm 09682b03de1764d4aa428a677326ab926d2bf8f1aa301f04748e026b8ab4198d ALSA-2026:73979 Copyright 2026 AlmaLinux OS 0 1 Critical

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass (CVE-2026-91949) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default freerdp-devel-3.10.3-12.el10_2.13.ppc64le.rpm 31bd9c6fe55011024645213d932bf6c6a335d58fe7faaecc3454c72230876941 freerdp-server-3.10.3-12.el10_2.13.ppc64le.rpm a3efee2b987454e3878223c2bff38c396a135c8b13112e6ba937806fe0bb31ac libwinpr-devel-3.10.3-12.el10_2.13.ppc64le.rpm bd006c87158fa274d0af59f218900bc6b07284a0f160f26ba4a035cdb67fad03 ALSA-2026:74442 Copyright 2026 AlmaLinux OS 0 1 Important

libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fix(es): * libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access (CVE-2026-0799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libpcap-devel-1.10.4-7.el10_2.1.ppc64le.rpm 1c72fa0ec9a36767f1431cd7389e26f2da5b870769029247dbc77709e222dbe1 ALSA-2026:74464 Copyright 2026 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default ghostscript-tools-dvipdf-10.02.1-16.el10_2.1.noarch.rpm 1139d94a4afa32b10bc8f970a77e35eb935151274b7492b03b3a62efdee0048d libgs-devel-10.02.1-16.el10_2.1.ppc64le.rpm 378d1847b0286343953f7834452a5f68ce69e4776b60f5349ad3fe157ba8189e ALSA-2026:75570 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU (CVE-2026-85089) * FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954) * FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964) * FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU (CVE-2026-91946) * FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956) * FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963) * FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption (CVE-2026-91947) * FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959) * FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure (CVE-2026-91950) * FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR (CVE-2026-91960) * FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libwinpr-devel-3.10.3-12.el10_2.14.ppc64le.rpm 2322919f7d58d453dbe0bae4c68f232cf8ca5bf1038f53d590f889168f2fd0b7 freerdp-devel-3.10.3-12.el10_2.14.ppc64le.rpm 4c51ab508e693a76d80df6e5c91d46bf0225fe8080de7d8268a05a83f189f332 freerdp-server-3.10.3-12.el10_2.14.ppc64le.rpm e8899e6fcc66e62824be4e471424722918744f65456cc219a2ef8f6d3e98059d ALSA-2026:75576 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099) Bug Fix(es) and Enhancement(s): * gve: backport large queue depth patches [almalinux-10.2.z] (JIRA:AlmaLinux-219261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.62.1.el10_2.ppc64le.rpm 7838484d05f6e54f7553d4ab0527716208d5c2443f3f6dfc1312c686e73f7e7e kernel-tools-libs-devel-6.12.0-211.62.1.el10_2.ppc64le.rpm b177541307cbc9c68ecbf95611ba71c1ad402e073ca9d4ec048e74b834872f31 kernel-cross-headers-6.12.0-211.62.1.el10_2.ppc64le.rpm b9f349fcc57302a843609aef71b459102d00f1442a923686aa5cf29f9310050f ALSA-2026:75577 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736) * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667) * bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563) * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default bind-doc-9.18.33-15.el10_2.12.noarch.rpm 3b9755ac6c753830e0794ed357299cbb5cac035c2fa318660643252d4b0780ea bind-devel-9.18.33-15.el10_2.12.ppc64le.rpm 4dd66a207241f9e099639f499375aa071ec82ee5b2a4bf6d3b247e8dba339499 ALSA-2026:75583 Copyright 2026 AlmaLinux OS 0 1 Important

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622) * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (CVE-2026-18917) Bug Fix(es) and Enhancement(s): * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target [almalinux-10.2.z] (JIRA:AlmaLinux-186019) * virsh dumpxml missing one SCSI disk when VMware VM has 64 disks per controller [almalinux-10.2.z] (JIRA:AlmaLinux-191267) * libvirt-guests does not work together with virtlockd on shutdown [almalinux-10.2.z] (JIRA:AlmaLinux-224982) * Expose guest-get-devices in libvirt-api [almalinux-10.2.z] (JIRA:AlmaLinux-243305) * allow hyperv pvpanic "device" to process Windows crash dump [almalinux-10.2.z] (JIRA:AlmaLinux-242547) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libvirt-devel-11.10.0-12.9.el10_2.alma.1.ppc64le.rpm 602c68607f3498bb400a89d78aba85607e8eb5e1928216dd73e979bba58b29c7 libvirt-docs-11.10.0-12.9.el10_2.alma.1.ppc64le.rpm c6bdf05aa3cebffe091ec8e3d9f2575d877c96b19e8be591476ae3bf173230b8 ALSA-2026:76734 Copyright 2026 AlmaLinux OS 0 1 Important

rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia. Security Fix(es): * sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784) Bug Fix(es) and Enhancement(s): * Uninformative error message on --import failure [almalinux-10.2.z] (JIRA:AlmaLinux-176906) * Return NotTrusted importing non-allowed keys [almalinux-10.2.z] (JIRA:AlmaLinux-176907) * [FTBFS] Update bindgen for LLVM 22 compatibility [almalinux-10.2.z] (JIRA:AlmaLinux-176908) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default rpm-sequoia-devel-1.10.2.1-1.el10_2.ppc64le.rpm 78d6ab30682a444de69258121fcb28ce4f806ceabccc7ced2afdbc84622c2cf8 ALSA-2026:76738 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860) * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270) * kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357) * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918) * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984) * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992) * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994) * kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078) * kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132) * kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557) * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255) * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516) * kernel: packet: use consistent hard_header_len in non-ring send paths () * kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582) * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669) * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746) * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921) * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972) * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227) * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417) * kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288) Bug Fix(es) and Enhancement(s): * wifi card breaks using FIPS (JIRA:AlmaLinux-257457) * AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.63.1.el10_2.ppc64le.rpm 3395b41f0a7a34b6fb8642f1be95be335dfb7347333968f1bc2b483c1cfe7671 kernel-cross-headers-6.12.0-211.63.1.el10_2.ppc64le.rpm 3662b999b634d52a01538fa775f1bba83650e7d15fde68bbbe38e4f29fdadd48 libperf-6.12.0-211.63.1.el10_2.ppc64le.rpm a64349c2ee7e17a67b8cb5cc3c5aeaaff31239aedff62d606af98a01ec6668d7 ALSA-2026:76781 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Process abort due to invalid memory in wordexp (CVE-2026-6368) * glibc: Denial of Service via stack exhaustion during tilde expansion (CVE-2026-6791) * glibc: Buffer Overflow in strfmon right-justification padding (CVE-2026-19499) * glibc: Fix out-of-bounds array write in tdelete (CVE-2026-19542) Bug Fix(es) and Enhancement(s): * The iconv utility no longer returns exit status 1 after a successful //TRANSLIT transliteration * A counter overflow in __wcsmbs_clone_conv that occurred when setlocale was called has been fixed * A fcntl.h header conflict when compiling on AlmaLinux 10 has been resolved * Minor documentation improvements have been picked up from upstream For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default glibc-nss-devel-2.39-142.el10_2.alma.1.ppc64le.rpm 6e687a5b520ac623bb2c39876537c09693bc4689bb3646b8cd95d616a455ee08 glibc-static-2.39-142.el10_2.alma.1.ppc64le.rpm 6f96a71a7c0763455d7f35ad2c950ff4f0d25215984e48632be2751e6a7735b5 nss_db-2.39-142.el10_2.alma.1.ppc64le.rpm 8624ac8d38b84f6b0e60dce859c6e4a029603e2522205a21d1273c2fc005dc7b nss_hesiod-2.39-142.el10_2.alma.1.ppc64le.rpm d5277d4e95da0b18c808c93707fbca63995279051d6ffdfe27596a965e5301d9 glibc-benchtests-2.39-142.el10_2.alma.1.ppc64le.rpm daa99c595b4c189ffc2fb17fe975830ab1046aa075cc7cbb701dd00c4966f536 ALSA-2026:77018 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3.14-test-3.14.8-1.el10_2.ppc64le.rpm 084b16c3997e70264b931200e13fc6485126a114612ddafb2952f67be621c4cc python3.14-freethreading-libs-3.14.8-1.el10_2.ppc64le.rpm 0d373abf5a561228aa99283002efda8e55135dc239275b5a1919cc1616c774ae python3.14-freethreading-3.14.8-1.el10_2.ppc64le.rpm 1dd19d50b961f1353e73a2c107d1d282fb1d8f32873a53674896197fd7ddd559 python3.14-debug-3.14.8-1.el10_2.ppc64le.rpm 327dd292a18dd284a51b318e59a81cabe98c171913490b9e86e02178323c9aca python3.14-freethreading-devel-3.14.8-1.el10_2.ppc64le.rpm 4bf7330bd345ab9e8656d3de4806f8328db5032004a7b8de6651f9e27683bc05 python3.14-freethreading-tkinter-3.14.8-1.el10_2.ppc64le.rpm 4d4cd8b67712dd1f9aa59ffd18827eda9fdb3d248cffefd6de253781fe523107 python3.14-freethreading-test-3.14.8-1.el10_2.ppc64le.rpm 57b070cf4a322a11eb0544d9e9775432db50f530477a2c95a62839f52af17bc5 python3.14-idle-3.14.8-1.el10_2.ppc64le.rpm 858c42a810509f821da19141598ea5011bf998d0f956681b6e1c08e1bb32e644 python3.14-freethreading-idle-3.14.8-1.el10_2.ppc64le.rpm aa8ca77cf57d863e45389779d19eebdc3be246c96236237f1478de7938fb52bf python3.14-freethreading-debug-3.14.8-1.el10_2.ppc64le.rpm d67fed608100d1f6320616956d942f1a45b52f66a897aaea8fe3fc3b6a921e34 ALSA-2026:77020 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default python3-idle-3.12.15-1.el10_2.ppc64le.rpm 7351f78d0dab761278d5f02049e3e3ef9241e7b47066cb0d0454a7a473b5df47 python3-test-3.12.15-1.el10_2.ppc64le.rpm 90d20be9bfe1d47c54f1d2624f676348749e6ecf5b3534127f2725c80335a4d9 python3-debug-3.12.15-1.el10_2.ppc64le.rpm a5217ab695340208235bdebdbe292ca07ee819652e212e9d1a59e31f85c1d2ab ALSA-2026:77534 Copyright 2026 AlmaLinux OS 0 1 Moderate

sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation (CVE-2026-87853) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsss_nss_idmap-devel-2.12.0-3.el10_2.2.ppc64le.rpm 9123b26618b5e71d40934283c57b43cbc85066ed0f90feca6cb82cec0d357732 ALSA-2026:77690 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) * kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675) Bug Fix(es) and Enhancement(s): * mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:AlmaLinux-212709) * [GNR-D] missing interfaces tspll_cfg [almalinux-10.2] (JIRA:AlmaLinux-273805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default kernel-tools-libs-devel-6.12.0-211.64.1.el10_2.ppc64le.rpm 44a326061758671a45f22824d76279f584dc935c2e3b2fc3ad78ef4376540872 kernel-cross-headers-6.12.0-211.64.1.el10_2.ppc64le.rpm 7847231308b207eca79bfefa69d3db74ed32bfe92058624281d468abb4910912 libperf-6.12.0-211.64.1.el10_2.ppc64le.rpm 8452cd9eeb35e9be16d6d5028b56b898840c4544f81fd9245498a6754056a07e ALSA-2026:79122 Copyright 2026 AlmaLinux OS 0 1 Important

cjose security update

CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service (CVE-2026-53938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default cjose-devel-0.6.2.2-7.el10_2.1.ppc64le.rpm ff4dae3fe0fbbb99113398aa0c5a60997b4aa7610b105cf93ff088a63d66e337 ALSA-2026:79371 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters (CVE-2026-42391) * dovecot: Dovecot: Authentication bypass via incorrect OAuth2 token validation (CVE-2026-73208) * dovecot: Dovecot: Denial of service via crafted email headers (CVE-2026-27852) * dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve (CVE-2026-40019) * dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion (CVE-2026-33263) * dovecot: Dovecot: Denial of Service in ManageSieve login process (CVE-2026-33605) * dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free (CVE-2026-42007) * dovecot: Dovecot: MySQL multi-byte escaping wrong (CVE-2026-40018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dovecot-devel-2.3.21-19.el10_2.8.ppc64le.rpm 1193fdf2859889f229dc3e71e23ec028cb7b49ca7bdaee9b3035026c497fc6f0 ALSA-2026:80498 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275) * flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280) * flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default flatpak-devel-1.16.0-9.el10_2.4.ppc64le.rpm 231e560845a961819858dea69d16152476dce642391619c4b4068929a6b87d3d ALSA-2026:80605 Copyright 2026 AlmaLinux OS 0 1 Critical

cjose security update

CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption (CVE-2026-53939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default cjose-devel-0.6.2.2-7.el10_2.2.ppc64le.rpm e03942cc1386a4157e1571b716fd051c07c9f0dbc02a13b7ea9f14bdcfa887a3 ALSA-2026:81406 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332) * kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385) * kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508) * kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507) * kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) * kernel: cifs: validate DFS referral string offsets (CVE-2026-72318) * kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289) * kernel: af_unix: Unlink scc_entry in unix_del_edge() (CVE-2026-80521) * kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970) Bug Fix(es) and Enhancement(s): * net/tls backports for 10.2 (JIRA:AlmaLinux-275027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.65.1.el10_2.ppc64le.rpm 136fcdd2b90db9064c52bb60f1f75573dadd2937a9a4c39595414961c8231e9c kernel-tools-libs-devel-6.12.0-211.65.1.el10_2.ppc64le.rpm 7bee98d6529e54a2bc461083034125eb66e69d639be45adaeaa9eed418fdcfcf kernel-cross-headers-6.12.0-211.65.1.el10_2.ppc64le.rpm e8be186af16d826eafd818ad1046c1cd6e82e2d52c937abccf9d7fb110dbc913 ALSA-2026:81522 Copyright 2026 AlmaLinux OS 0 1 Important

pcre2 security update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145) * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156) * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157) * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160) * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158) * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161) * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default pcre2-static-10.44-1.5.el10_2.ppc64le.rpm 4cdda70ef73e66ad5a5200eb776642c9788cce536cfc466794559a90bb614bfa pcre2-tools-10.44-1.5.el10_2.ppc64le.rpm f62d9ce1fe0bf67c7bd4af11898b7be22ee4e7a4b952dcd85aba6c90551cc8e2 ALSA-2026:83207 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859) * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CVE-2026-74574) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) Bug Fix(es) and Enhancement(s): * cannot use VFs of i40e/ice NIC in bond device (JIRA:AlmaLinux-143410) * ionic: commit backported to 9.8 missing in 10.2 (JIRA:AlmaLinux-165657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.66.1.el10_2.ppc64le.rpm 0592b8dd68bea3c1341ef8e7c3f44413c0ab603e84b21ad969002f54f6c0615d kernel-tools-libs-devel-6.12.0-211.66.1.el10_2.ppc64le.rpm 1f9592e10d38bff893e249365530f3f40dca20c803a1db9ff895c3350f7f3a1c kernel-cross-headers-6.12.0-211.66.1.el10_2.ppc64le.rpm ea91b98283ad1e2df9fddf4b1168803e415a130bec8c77876401f590289a241b ALSA-2026:83551 Copyright 2026 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libgs-devel-10.02.1-16.el10_2.3.ppc64le.rpm 7460a8f604034503c736da894a07f494ec7a833489064391cfe2ca4730dd50db ghostscript-tools-dvipdf-10.02.1-16.el10_2.3.noarch.rpm a8f47880fc9d7cb9f94f7853b04296d8d7d1119b4580c82fd5adaa9c63d7fa75 ALSA-2026:83618 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding (CVE-2026-102555) * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libsoup3-doc-3.6.5-3.el10_2.20.noarch.rpm 9d4cc65df520c8f1871282fe1657d0f3911326d504e01432d28ed70526e6b9d0 ALSA-2026:84721 Copyright 2026 AlmaLinux OS 0 1 Important

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886) * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880) * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919) * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879) * wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928) * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927) * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) * wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-95389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default wireshark-devel-4.4.2-10.el10_2.8.ppc64le.rpm 711e62294b10efea4d27c9255be6c232a4da3f768f80fa115ecfb2f9d89c6d09 ALSA-2026:84753 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt (CVE-2026-77117) * glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state (CVE-2026-80489) * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374) * glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration (CVE-2026-8674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default nss_hesiod-2.39-145.el10_2.alma.1.ppc64le.rpm 19e69c17744118b108f0c18cd9658e4f9121abfcb4c6cabd0faa27367752c510 glibc-nss-devel-2.39-145.el10_2.alma.1.ppc64le.rpm 4361aeba5f37d6c59a6d39aab0ee029c1e3d0183f70bb39e02ec06174ef1013c glibc-static-2.39-145.el10_2.alma.1.ppc64le.rpm 78e3fa90193f0a5d59bf6f1a39082567a2b4b66deca2c4b8240ce4fd8d329c9d glibc-benchtests-2.39-145.el10_2.alma.1.ppc64le.rpm ac0f8c3693b3e7ceb91711627f73b7f8e955a70d9705fa7157deb2546e58a819 nss_db-2.39-145.el10_2.alma.1.ppc64le.rpm e549a014c23bfab2dc63c9337df2f48b16cb1433b5121a241fa1517c6b11bac8 ALSA-2026:84795 Copyright 2026 AlmaLinux OS 0 1 Important

librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default librabbitmq-devel-0.14.0-3.el10_2.1.ppc64le.rpm dbf2f778988721ff0b67f4792277c7c5bd946b360f7c9777f2e749d24fe8f97d ALSA-2026:84796 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing (CVE-2026-34544) * OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files (CVE-2026-59184) * OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read (CVE-2026-59189) * OpenEXR: OpenEXR: Denial of Service or Information Disclosure via crafted EXR image file (CVE-2026-59982) * OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read (CVE-2026-59981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default openexr-devel-3.1.10-8.el10_2.5.ppc64le.rpm 465950efe53ea6bb30a583368264c1279b035d1852c2d87a30ba357f7bd41a06 ALSA-2026:85191 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.4.ppc64le.rpm 78161b059c28bb6370c25f26198d74c5a02bc663e3864e253ea66981a8f2dcf9 ALSA-2026:85321 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: sctp: avoid auth_enable sysctl UAF during netns teardown (CVE-2026-68162) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588) * kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752) * kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: signal: Prevent exec() race (CVE-2026-98256) * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) Bug Fix(es) and Enhancement(s): * [10.2.z] kselftests: mm: hugepage-mremap: Bail out! mremap: Expected failure, but call succeeded (JIRA:AlmaLinux-181987) * [IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part [almalinux-10.2.z] (JIRA:AlmaLinux-245336) * Batch: z-stream xfrm - rhel-10.2.z (NST-Core-26W38) (JIRA:AlmaLinux-256678) * RHIVOS - [backport] S32G Driver Enablement - USB (JIRA:AlmaLinux-257228) * Fix pending kernel issues for L1VH GA - Kernel (JIRA:AlmaLinux-267038) * Backport 6785011f8b16 ("ipv4: validate checksum_start before completing checksum") [almalinux-10.2.z] (JIRA:AlmaLinux-280590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default libperf-6.12.0-211.67.1.el10_2.ppc64le.rpm d319e7ec28b88194b1bc6030bf54a8f941fab583f457a62390af5575bd77e224 kernel-cross-headers-6.12.0-211.67.1.el10_2.ppc64le.rpm e4bd5d8387354d3a66d41ebd901094847c397306baaae9d736b1c4a2b4b2250c kernel-tools-libs-devel-6.12.0-211.67.1.el10_2.ppc64le.rpm e663a18b49740cc4fece19063243577f041c6431b74ddf56b54e3e479bb41529 ALSA-2026:86168 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.132 Runtime version: 8.0.32 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVE-2026-96222) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.132 and Runtime 8.0.32 [almalinux-10.2.z] (JIRA:AlmaLinux-277794) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-8.0-source-built-artifacts-8.0.132-1.el10_2.ppc64le.rpm 1715bbbb478b2b92d10da7a8b4cca10ae718a5510a1aa4e668112595f49282cf ALSA-2026:86172 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.122 Runtime version: 9.0.21 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.122 and Runtime 9.0.21 [almalinux-10.2.z] (JIRA:AlmaLinux-277801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-9.0-source-built-artifacts-9.0.122-1.el10_2.ppc64le.rpm b1eecb3931d8e6e3df977999e66f9b2d7afcbc0214989c21cb70c92eb046206b ALSA-2026:86195 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.113 Runtime version: 10.0.13 Security Fix(es): * dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-102870) * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) * dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96957) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.113 and Runtime 10.0.13 [almalinux-10.2.z] (JIRA:AlmaLinux-277809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-ppc64le-crb-rpms__10_0_default dotnet-sdk-10.0-source-built-artifacts-10.0.113-1.el10_2.ppc64le.rpm 3cfdac249ee7b5d12d3e3ec1b98b0619af0a75ff825bc147a7035ca2e0892da3