Moderate: mariadb:10.3 security and bug fix update

mariadb:10.3 security and bug fix update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358) Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537) * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627) * mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628) * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739) * mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740) * mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758) * mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_6_default Judy-devel-1.0.5-18.module_el8.6.0+3072+3c630e87.i686.rpm 26cc45d4a68d037635272fe58a4b58111e7092090dde4892c8a0915c7945959c asio-devel-1.10.8-7.module_el8.6.0+2867+72759d2f.x86_64.rpm 30c27f03d4f8d6dd3e62f18b968eb501ea98bbaf2387ec1fe725e24e11a3a99f asio-devel-1.10.8-7.module_el8.6.0+3072+3c630e87.i686.rpm 6e5e3590bfbf40baec2586cb5a9e101027ed20ef90f1bb37950f2615a8dbe1e5 ALSA-2021:1242 Important: mariadb:10.3 and mariadb-devel:10.3 security update Copyright 2022 AlmaLinux OS 0 1 Important

mariadb:10.3 and mariadb-devel:10.3 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.28), galera (25.3.32). Security Fix(es): * mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user (CVE-2021-27928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_6_default Judy-devel-1.0.5-18.module_el8.6.0+3072+3c630e87.i686.rpm 26cc45d4a68d037635272fe58a4b58111e7092090dde4892c8a0915c7945959c asio-devel-1.10.8-7.module_el8.6.0+2867+72759d2f.x86_64.rpm 30c27f03d4f8d6dd3e62f18b968eb501ea98bbaf2387ec1fe725e24e11a3a99f asio-devel-1.10.8-7.module_el8.6.0+3072+3c630e87.i686.rpm 6e5e3590bfbf40baec2586cb5a9e101027ed20ef90f1bb37950f2615a8dbe1e5 ALSA-2022:5834 Important: kernel-rt security and bug fix update Copyright 2022 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) * kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-32250) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * The latest AlmaLinux 8.6.z2 kernel changes need to be merged into the RT source tree to keep source parity between the two kernels. (BZ#2107215) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_6_default kernel-rt-debug-core-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm 363d2203a7550023a56791f0ef6631e5063b110363eb6feb80e3916d15c22982 kernel-rt-debug-modules-extra-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm 4dcb15abf1d8011f8c333f18ea6bfb282f4d118341ff9a6ecc040ed2fd15960d kernel-rt-devel-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm 65a5c4bc25342263b505546a7e6612c90ae2498053922d700808c9cf7eaae87a kernel-rt-debug-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm 855407d5765713d1ad926ca9343bed569cb99ab1310e7a15c69a4399f258be88 kernel-rt-debug-devel-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm 96df872a10a9023c6aab89d352302854ca4e5c4fec00dc0d89eca7ce02bacf03 kernel-rt-core-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm 9bf34dcf2282d16d906466f3cb3eaf0965c7ebcc5173c7e655823055a82f00c9 kernel-rt-debug-modules-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm b7fb739601b0fc8500bef1fb1e7899abb4aa66444522feee56f2779775f57846 kernel-rt-kvm-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm c11a80833b7fcd8d06dd46be6ec56755ddb5ad8993015a53fa3a8f5ab3ecbc11 kernel-rt-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm d37048524bc7084ad492a79c4592530d1af316178135bc81cd6c8a31afc234e9 kernel-rt-modules-extra-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm ddd95a41d87d442a564884dbe56eba1067ab09ee35414d5b9f65fa9f081c2fe8 kernel-rt-debug-kvm-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm e9a436b621f8393c71a871bc9b08da6ab9ec797172b36dc8d8c9a095a2c371e2 kernel-rt-modules-4.18.0-372.19.1.rt7.176.el8_6.x86_64.rpm f58661ef0acdfe5b31a717f32283df7348b5abd67c3e4f32ee7eb3243c293a6c ALSA-2023:2932 Important: edk2 security update Copyright 2023 AlmaLinux OS 0 1 Important

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304) * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450) * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_8_default edk2-aarch64-20220126gitbb1bba3d77-4.el8.noarch.rpm 742ed9bc65003fe39e049d73c5712c71468e63fe0cfef03e431adb61c21c4c77 ALSA-2023:3087 Important: mysql:8.0 security, bug fix, and enhancement update Copyright 2023 AlmaLinux OS 0 1 Important

mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736) Security Fix(es): * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594) * mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611) * mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632) * mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410) * mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883) * mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917) * mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_8_default mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.x86_64.rpm e621458cd621eb4c60bf22745f688aa1016072241506d301ed4fc5dba4dfd764 ALSA-2023:6919 Moderate: edk2 security and bug fix update Copyright 2023 AlmaLinux OS 0 1 Moderate

edk2 security and bug fix update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_9_default edk2-aarch64-20220126gitbb1bba3d77-6.el8.noarch.rpm 457fcd3b159b7bb590ec97142837da0e00a2a11523f34473c697980dc604d096 ALSA-2024:0133 Moderate: fence-agents security update Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920) * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_9_default fence-agents-zvm-4.2.1-121.el8_9.2.noarch.rpm 18353da3e67927a86700fe33e87ca2f57528b87a59adec0061228d0ca4bf49d7 ALSA-2024:0827 Important: .NET 8.0 security update Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_9_default fence-agents-zvm-4.2.1-129.el8.noarch.rpm 157b003719bbae13f201387cf821adf9105d6b939dfb5a78eef5404c59fd58c2 ALSA-2024:3017 Important: edk2 security update Copyright 2024 AlmaLinux OS 0 1 Important

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235) * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763) * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764) * EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765) * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229) * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231) * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232) * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_9_default edk2-aarch64-20220126gitbb1bba3d77-13.el8_10.noarch.rpm fd3845c94830e5368764a412922dfa48386ca0326f9587a20b66819daa86acb4 ALSA-2024:6309 Moderate: fence-agents security update Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-lpar-4.2.1-129.el8_10.4.noarch.rpm 205135ff58c1d58c0b02beba0ac3663756dbc2b5d826f0bbf04919c400432431 fence-agents-aws-4.2.1-129.el8_10.4.noarch.rpm 56c91a605a010fe43299ecf2596888ed7d641c849997fd647ca3942cc420407d fence-agents-zvm-4.2.1-129.el8_10.4.noarch.rpm d17e0ee4261933fbac3765cb871589142a177e2c1805f0d717366387945f6002 ALSA-2025:1301 Moderate: gcc security update Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default libquadmath-static-8.5.0-23.el8_10.alma.1.x86_64.rpm 16356ebb56168779ba206e20d5cf7c150c08904989070b1f3b231330ac59e281 libgfortran-static-8.5.0-23.el8_10.alma.1.x86_64.rpm 5fd8575037aa9871f0f9f8f2eb4c8f8ab691f51b76f829872c2e78174097cc9a ALSA-2025:14750 Moderate: fence-agents security update Copyright 2025 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-zvm-4.2.1-129.el8_10.14.noarch.rpm 9ba2ff782b9909e2497195536939e9c669364b9f0f1cb40d4000d41fdf546c44 fence-agents-lpar-4.2.1-129.el8_10.14.noarch.rpm fc56eb26c22649ed78abc0d49041c719fdcfdadc165696bf094d1b100e107123 ALSA-2025:1611 Important: nodejs:22 security update Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default v8-12.4-devel-12.4.254.21-1.22.13.1.1.module_el8.10.0+3961+6a788e57.x86_64.rpm 6e4475a118075e5f64c2e9ff3584076f95c06f11fd77b7b137264473d702716d nodejs-libs-22.13.1-1.module_el8.10.0+3961+6a788e57.x86_64.rpm 773f758fc2f5143b8fd5f3acc01e653bfdd43168b7c827b79d05cb0d39cc8005 ALSA-2025:17129 Important: idm:DL1 security update Copyright 2025 AlmaLinux OS 0 1 Important

idm:DL1 security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default ipa-server-dns-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm 0f57023cd77d9cd95f79e3121536dc6a64df775ade5ca0ed77f9c43b599c416e ipa-server-4.9.13-20.module_el8.10.0+4050+3b475c71.x86_64.rpm 187242e3372444183760dbb93c0b7629fccb826faf4f24fefd4465d0df4ed5b3 ipa-server-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm 210fef6fec21a273b8d6a11892f44fbeced6920170464f2cb9d0bec91af4f941 ipa-server-trust-ad-4.9.13-20.module_el8.10.0+4050+3b475c71.x86_64.rpm 21c1aaa5400a7b837d8082be6c35153355a7f9bf954113f7b880d461c4f9a5f7 ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm 59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b python3-ipaserver-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm 9ab0a89ea1497eb8d96dc65bee67dab6c3998e1cd5ab6f639fc3a30b12952f51 python3-ipatests-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm e2f5abd08f35fc62e83bab9d1b3eac088705001c32a0106e31ab98a09c12205b ALSA-2025:21140 Important: idm:DL1 security update Copyright 2025 AlmaLinux OS 0 1 Important

idm:DL1 security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088) * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default ipa-server-dns-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm 0f57023cd77d9cd95f79e3121536dc6a64df775ade5ca0ed77f9c43b599c416e ipa-server-4.9.13-20.module_el8.10.0+4050+3b475c71.x86_64.rpm 187242e3372444183760dbb93c0b7629fccb826faf4f24fefd4465d0df4ed5b3 ipa-server-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm 210fef6fec21a273b8d6a11892f44fbeced6920170464f2cb9d0bec91af4f941 ipa-server-trust-ad-4.9.13-20.module_el8.10.0+4050+3b475c71.x86_64.rpm 21c1aaa5400a7b837d8082be6c35153355a7f9bf954113f7b880d461c4f9a5f7 ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm 59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b python3-ipaserver-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm 9ab0a89ea1497eb8d96dc65bee67dab6c3998e1cd5ab6f639fc3a30b12952f51 python3-ipatests-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm e2f5abd08f35fc62e83bab9d1b3eac088705001c32a0106e31ab98a09c12205b ALSA-2025:23137 Moderate: mysql:8.4 security update Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040) * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default mysql-test-data-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm 32c0e3b4c114fae4abfa71886d6b9d4728a673d813b70886a9595c7538ccfad4 mysql-errmsg-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm 70d2ed08985d4667389fdab4c8cf39416aa2d5bc47900fdc45073cfc1b647df3 mysql-common-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm 7bac4aecb12b46f80ea60f49a07d9a45780295c28c05d53339e66db22296a4fc ALSA-2025:4459 Important: nodejs:22 security update Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498) * SQLite: integer overflow in SQLite (CVE-2025-3277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default nodejs-libs-22.15.0-1.module_el8.10.0+3986+a908e756.x86_64.rpm a60661bc41c969194c49eeb54299c8ee618a3f670277919e23ef7e849b821f7c v8-12.4-devel-12.4.254.21-1.22.15.0.1.module_el8.10.0+3986+a908e756.x86_64.rpm b09aa1ba4eca54e53b496fbfadf3faf08ac1a6681f09e49724b2e893721fce0c ALSA-2025:8506 Important: nodejs:22 security update Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default nodejs-libs-22.16.0-1.module_el8.10.0+4006+3c416519.x86_64.rpm 6eaac82ad67bbbfc14c36a1c7e936a062a017ab1519a8e6c08d115c1658a6f95 v8-12.4-devel-12.4.254.21-1.22.16.0.1.module_el8.10.0+4006+3c416519.x86_64.rpm e1c0105264480f14d14b22095d4073726e7299cb358d627ab0b61153d3b69793 ALSA-2025:9188 Important: idm:DL1 security update Copyright 2025 AlmaLinux OS 0 1 Important

idm:DL1 security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm 151d2e276492b4bf66b133e73e018020586b739861c8d4d16281c291ced111e4 python3-ipatests-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 303ddbf7b9150cfac4510632323b565f2759baa8cf86576d93a050e8e18f86a1 ipa-server-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 3ba505bc9d78830978408b7025512d8fdb2834042c2cba7ff735db1d22f04d5d ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.noarch.rpm 56b8766fd06a41900a4bc86ecc305d35eed3657241b7fe9e1760aa64c0eaa21c ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm 5705992b469b09aaa894621097f55eb9af9d652e312b8bf24e2ff7c66dae63ca ipa-server-dns-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm accd6092b597737762e6936c1eab6467a2752e5dde51ba8f9a23aa2461be804e python3-ipaserver-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm be5881ad817c676c938ae1976012411bf3ff0606f4cb4ecd4a8da85854f143a9 ALSA-2025:A001 Moderate: open-vm-tools security update Copyright 2025 AlmaLinux OS 0 1 Moderate

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools:A malicious actor with non-administrative privileges on a guest virtual machine (VM) may tamper with the local files to trigger insecure file operations within that VM. (CVE-2025-22247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default open-vm-tools-test-12.3.5-2.el8.alma.1.x86_64.rpm 5e858bdd1a1f175e51b5a750484acadcac36fe7ebbd36e1825d7c7b240ad1b27 open-vm-tools-devel-12.3.5-2.el8.alma.1.x86_64.rpm c870e128c9a83e1afb16bdbc03bdb4a3dfa6af77bb513cdb33dabcbc48a54464 ALSA-2025:A004 Important: libblockdev security update Copyright 2025 AlmaLinux OS 0 1 Important

libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API). Security Fix(es): * libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default libblockdev-nvdimm-devel-2.28-6.el8.alma.1.x86_64.rpm 252d072f4480ac6ca3fc888c15af3c1779885d51eb23fcfdd51e082d97000ab3 libblockdev-kbd-devel-2.28-6.el8.alma.1.x86_64.rpm 3e5875b030d8edabfece2eed83a6fc7de24951e952e89f9bbf53d6e83e83fcbe libblockdev-mpath-devel-2.28-6.el8.alma.1.x86_64.rpm b2c88c8ce5c1ba0edc446318a98a13a4575c69cac776d13b4acdff27930fdc5c libblockdev-tools-2.28-6.el8.alma.1.x86_64.rpm bf5760ded7daf6e3fc651c2a313bba1181af2c5411fafa2ec335ee28193539c7 libblockdev-lvm-dbus-devel-2.28-6.el8.alma.1.x86_64.rpm c6d4cf689c5a96cf51222303868b4471bef1bd87386c3b24f519090f89077da7 libblockdev-dm-devel-2.28-6.el8.alma.1.x86_64.rpm e8fe4e20ebb7bcc9930ba6a658a022b7390a04ddc91f49b5655d659d5acc8df3 ALSA-2026:12176 Important: fence-agents security update Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007) * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597) * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-nutanix-ahv-4.2.1-129.el8_10.25.noarch.rpm 043ee47c51e110683c02887fbb85e38d13f9ab68610d50c69ace366a2a4012ec fence-agents-zvm-4.2.1-129.el8_10.25.noarch.rpm 1a2bae3e7c04fcbe60385d24203eace95b01fde631e2cd0d739713771ab94a96 fence-agents-lpar-4.2.1-129.el8_10.25.noarch.rpm 96fa29ed84454cf8893ad5e8cac410b06dcfa7da3c90090bed35699c2a3697dd fence-agents-azure-arm-4.2.1-129.el8_10.25.x86_64.rpm d807067d841590c06896a709a64fabed77ce98ad0d2f8e405056dd0758c987da fence-agents-aws-4.2.1-129.el8_10.25.noarch.rpm ea01f2ced268ea06be9ca086b465349a0c8952357f15a7e14829670da9e209a6 ALSA-2026:1240 Important: fence-agents security update Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-azure-arm-4.2.1-129.el8_10.20.x86_64.rpm 43fa7329a90929ad5904255197130e5c83785138f88b065f0d4bce8a3fefb451 fence-agents-nutanix-ahv-4.2.1-129.el8_10.20.noarch.rpm 4963fac734a5c0638add92fc638f6efa5a209abbdd46d3db0a69b08bb0a9e5a5 fence-agents-zvm-4.2.1-129.el8_10.20.noarch.rpm 5712d7d502090923f6f8fd42a790eb186d64015fdffbb19d69ec088925f80421 fence-agents-lpar-4.2.1-129.el8_10.20.noarch.rpm 89d1df470e9bd0d8617a347d07a73ef9373b0e6e14f55b978d1d591f03575667 fence-agents-aws-4.2.1-129.el8_10.20.noarch.rpm a3f7ffa8d683f949e2a77ed2843efb02fcc9fc1a8c9a3360efb3ac033d0a044b ALSA-2026:1906 Important: fence-agents security update Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-aws-4.2.1-129.el8_10.21.noarch.rpm 22167e15c2afc4e2d256b3658aeba654f2bbd1af090838c5e1472234168090f7 fence-agents-nutanix-ahv-4.2.1-129.el8_10.21.noarch.rpm 2b3faef686285d0e6e50807c1e25a509f0539351acb46c2ecdec140b9636860c fence-agents-lpar-4.2.1-129.el8_10.21.noarch.rpm 82ff0a54f86548a9ed0130b782db7d26b3d7e2c2bde8196135cfab174ad7791e fence-agents-zvm-4.2.1-129.el8_10.21.noarch.rpm aa33e42af193ded809e5aef77034d1f1e84bd6c08a6b972a67754b742f1b8957 fence-agents-azure-arm-4.2.1-129.el8_10.21.x86_64.rpm faf2a06e0e0e8efe2a8b57036b286c778092502418ee527cc5c4ded0138e15b4 ALSA-2026:21295 Important: .NET 10.0 security update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default v8-13.6-devel-13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2.x86_64.rpm 8665d1a6244efeeff459f93d8e008ce87af1a0fdcd79dc8879bed385ce7fe9d4 npm-11.6.2-1.24.13.0.0.module_el8.10.0+4113+bc863bc2.noarch.rpm 9919ff306026467e4310bd20ef03654cc7483478f47f4ce9bc95b9c25217bcdd ALSA-2026:25114 Important: .NET 10.0 security update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default mysql-errmsg-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm 4eaf86685c7be5aa67008e904d67f2cb5247b2498134e2e9bbfa0c52b265ad63 mysql-common-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm b808f9278368ddaa3426e68bdab0ceba601957a14fcbc404b09c4d6dfafabc3e mysql-test-data-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm f059737d89a485a2c6f6be94a49ecdafd4ff1e310913085daeb5b36919474f79 ALSA-2026:39868 Important: nodejs:24 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338) * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678) * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733) * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525) * undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697) * undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734) * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619) * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930) * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935) * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933) * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934) * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928) * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615) * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-8] (JIRA:AlmaLinux-168744) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default v8-13.6-devel-13.6.233.17-1.24.18.0.1.module_el8.10.0+4228+2938bc94.x86_64.rpm 373a1c194d51df7c4666be8af94d686d3c2f2106aa4a99f584398a822975a9d7 npm-11.16.0-1.24.18.0.1.module_el8.10.0+4228+2938bc94.noarch.rpm 8622fde48003921573a31d0b6e33f98c4d6584ca5bbdc8fd71c17f8426a535e7 ALSA-2026:41900 Important: .NET 10.0 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 (JIRA:AlmaLinux-192459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default dotnet-targeting-pack-10.0-10.0.10-1.el8_10.x86_64.rpm 0a1d15987eb979b6be40247d7744b4013d8b94b2ab2eac07752f8b1298617fb8 dotnet-apphost-pack-10.0-10.0.10-1.el8_10.x86_64.rpm 0a4b909aa87b22ca5bb71a0f93e77b25967943e3b58590e9d59694c97aff0cd7 dotnet-runtime-dbg-10.0-10.0.10-1.el8_10.x86_64.rpm 0de7b23bf105cc2937cff488b4f7211d482f53ec2fe050870140e81b01952d47 aspnetcore-runtime-dbg-10.0-10.0.10-1.el8_10.x86_64.rpm 156abb721f2399cde99bb2abe24eba2b192d3817c51100a7244cc48f4da3d992 dotnet-templates-10.0-10.0.110-1.el8_10.x86_64.rpm 2a94b6fdadb9def83034b7df451ed25664df1c3781063127bd74f30e3d4b9211 dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el8_10.x86_64.rpm 3fad00f231cf9dfacbc09761e15b7f23dbf60a4f5e51c81b08f177632a29bc37 dotnet-sdk-10.0-10.0.110-1.el8_10.x86_64.rpm 3fc012db967745da61437bff87e21b1ae9ff0319b828c887314bc48421fd50f9 aspnetcore-runtime-10.0-10.0.10-1.el8_10.x86_64.rpm 5cf8fe6bc4f54b2595e7d605b894a0d74a1fe6a8f58f8cfa6d4620d894b8b47e dotnet-runtime-10.0-10.0.10-1.el8_10.x86_64.rpm 5f3a8843e6f6e94dbc79b26dd29f236e37601ad5191e7362213d84ffcd521f7a aspnetcore-targeting-pack-10.0-10.0.10-1.el8_10.x86_64.rpm 7844e48a6394d18c5f719e82e01c0bea8eb3d90a291bbe4026945d4c9f64db77 dotnet-hostfxr-10.0-10.0.10-1.el8_10.x86_64.rpm a2583b362f7dd729217f150a6ea3573515041a74649bd65aba8cfd53870338bc dotnet-sdk-dbg-10.0-10.0.110-1.el8_10.x86_64.rpm ae14bb002a42c2330151ffedf0d73917a69b902f245fdcd1a6a7b7cd74ad8d18 dotnet-sdk-aot-10.0-10.0.110-1.el8_10.x86_64.rpm bffc5b7db42ede44e2c212736c1ac368f6e5dd13aa778b5b13ad599faa74dec7 ALSA-2026:4458 Important: .NET 10.0 security update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default npm-11.16.0-1.24.18.0.2.module_el8.10.0+4237+cde4efc3.noarch.rpm 361d4a0fa19754d400849ec9f2599c5fbc8b47bf2f2fd22725a4a281f3e0bd3a v8-13.6-devel-13.6.233.17-1.24.18.0.2.module_el8.10.0+4237+cde4efc3.x86_64.rpm e8a63d89060bc4b26b2474dbf76beb8508bc6001b654149841e21a1b7c20a916 ALSA-2026:47736 Important: fence-agents security update Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies (CVE-2026-59939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-aws-4.2.1-129.el8_10.27.noarch.rpm 01a3e896b3a9ca6a07fff581ae09cd7c0314493ea080d70877e7299dfd463700 fence-agents-nutanix-ahv-4.2.1-129.el8_10.27.noarch.rpm 320febe4288455dc389a9dbdf594627502fef50ff2077bba2ca73acea39e3a7b fence-agents-azure-arm-4.2.1-129.el8_10.27.x86_64.rpm a6e431f4e1e756541efda5511c8497be4fbfb93ac419af5ab27265f89c26b16d fence-agents-zvm-4.2.1-129.el8_10.27.noarch.rpm ad99ee32df4f8201f467ca2c2abf4a16060335f2122820d1997a28b9eac69dc1 fence-agents-lpar-4.2.1-129.el8_10.27.noarch.rpm cd0182acdc9b7fe25ae451a26e3b895859d10f2e147299a7b18c951fc4c56fe4 ALSA-2026:49927 Moderate: fence-agents security update Copyright 2026 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-azure-arm-4.2.1-129.el8_10.28.x86_64.rpm 398065d5cd78ad4cfd7b66c0c02cdbaffc3f2901244e6215f6f316de5ae96057 fence-agents-lpar-4.2.1-129.el8_10.28.noarch.rpm a7507df9731d2661f6a41d6774e709ddf16a54df925fc23540cf99b8a359dab9 fence-agents-zvm-4.2.1-129.el8_10.28.noarch.rpm c07027e36d527be89b30521f1cfbe1c8e37f462882979fa74ad548aae545e90a fence-agents-aws-4.2.1-129.el8_10.28.noarch.rpm c893d64c04c0d735e6abf31556291094d5de3e0ef1e74e9847ba7b8c93b7288b fence-agents-nutanix-ahv-4.2.1-129.el8_10.28.noarch.rpm e70c65f25517d1b74f2ed0461a4279ad4306a6d75772b54b624210e4a5603f79 ALSA-2026:53363 Important: fence-agents security update Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default fence-agents-nutanix-ahv-4.2.1-129.el8_10.29.noarch.rpm 437ea1a46de9b47db36a6d3cf0e57577f7975c2222b803fc369a7c18daf10bc4 fence-agents-zvm-4.2.1-129.el8_10.29.noarch.rpm 4e405dc6d454fe3738c738e78091e9208bdb78d272a5a009b090dcbf3eb99f19 fence-agents-azure-arm-4.2.1-129.el8_10.29.x86_64.rpm c4458221dcbddbc557ff6bd0f2d28e8bdbff6e18724084296e303c7574d276fc fence-agents-aws-4.2.1-129.el8_10.29.noarch.rpm c9b599faeb88253b8a007a81d1ebf5538ef53e5b044d7c1b6ff8a98d86671437 fence-agents-lpar-4.2.1-129.el8_10.29.noarch.rpm e9818b2e176efbfd44d15538c9000055f1c8195806f77b8c503d44702b158e01 ALSA-2026:54246 Moderate: kernel security update Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-cross-headers-4.18.0-553.155.1.el8_10.x86_64.rpm 15e63df086ddd5662a8e68e543dac47834430c490695e6c497660f3a0d88f077 bpftool-4.18.0-553.155.1.el8_10.x86_64.rpm 19a77d661dd7c679fb0ce92ba46e6ca39b8176dc430093f22a8b2ee3863971e4 kernel-debug-modules-extra-4.18.0-553.155.1.el8_10.x86_64.rpm 1f68f86d3e0c35b1936b4f30998f6dfbbbf77dd8be685e8e115e34087f016ad7 kernel-tools-4.18.0-553.155.1.el8_10.x86_64.rpm 3571fb69f7cfbb0083068f19e2cf12b560fcba131742f7d2ba0e3f6bc79ab4db kernel-debug-modules-4.18.0-553.155.1.el8_10.x86_64.rpm 36b6f4c6578a5b7a52e765592164ee881eb0b27cca1aecd622b13f386c4e6d10 python3-perf-4.18.0-553.155.1.el8_10.x86_64.rpm 56b9f5861747eacbe18d16295c40cdb40f1960af792760934e10e528ee8a0187 kernel-debug-devel-4.18.0-553.155.1.el8_10.x86_64.rpm 5b764acc27e51bd74d5ff21a6c3042fb66f24f979409f03d4a4a06732124e29e perf-4.18.0-553.155.1.el8_10.x86_64.rpm 6b90438253bedb7d6da29a186278e23f3cc94d3921edc0c5e55611ff12d83037 kernel-modules-extra-4.18.0-553.155.1.el8_10.x86_64.rpm 6c5a02051e9df5fafdaf16a85a4b09156df889bd44ce34650d19d36236483c90 kernel-modules-4.18.0-553.155.1.el8_10.x86_64.rpm 7e1d8a01b8381de68d3d236c304efc8f105d703ade104dd6874af7247a5e70ad kernel-tools-libs-devel-4.18.0-553.155.1.el8_10.x86_64.rpm a67f1e5a93cb07b329d5506efad7297f5de696897e969ef8ace50beb0338b619 kernel-devel-4.18.0-553.155.1.el8_10.x86_64.rpm b8accf02c433ae70f044a773a9ac1b5f7f338259ae9ce702aa0cc0a573c81d85 kernel-headers-4.18.0-553.155.1.el8_10.x86_64.rpm d8eaf4de667de71afdb0d2d26c183ac8ae1752b795c02f48f7081752c8286362 kernel-tools-libs-4.18.0-553.155.1.el8_10.x86_64.rpm d9200d2d17c767f2ea0e939addd08109bcbe96060a184c4f2a0e88e30c98a7c9 kernel-4.18.0-553.155.1.el8_10.x86_64.rpm f251609aaa371f526ec35f8a12ecd34c526d4140724040324522ecd4f696e999 kernel-debug-4.18.0-553.155.1.el8_10.x86_64.rpm f3ca0867e644fa717fb7d6a6046f7eb6039df0f5592f9edd1e9039e9deadf6f5 kernel-debug-core-4.18.0-553.155.1.el8_10.x86_64.rpm f8147c567928eef936e3dee1db013ae7b8e9fe67d3a714f120fdf6dc40f433dc kernel-core-4.18.0-553.155.1.el8_10.x86_64.rpm f8eec878dd390fd8f4dcf9466a4aa4a1486210043534f658e3c1e75565f6f05d ALSA-2026:54371 Important: nodejs:24 security update Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (CVE-2026-54272) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default npm-11.16.0-1.24.18.0.3.module_el8.10.0+4250+09238ed4.noarch.rpm 201d993641952b6d55cddb97bcb31be103cd7ac79fd0e8d4a6adb8e72d8faa76 v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4.x86_64.rpm e4eb355b80213fbdd176a568def2d34933e9bae63e3fcddfbaea2c186d8706f0 ALSA-2026:54542 Important: .NET 10.0 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (CVE-2025-39902) * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges (CVE-2026-17523) Bug Fix(es) and Enhancement(s): * Backport "sched/deadline: Fix bandwidth reclaim equation in GRUB" to AlmaLinux 8.10 (JIRA:AlmaLinux-189997) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-8.10.z] (JIRA:AlmaLinux-224556) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default perf-4.18.0-553.156.1.el8_10.x86_64.rpm 00e8f13f74d6963552f6e32f96a8ca194e8fad1d113b501913c4c5ed83e57d53 python3-perf-4.18.0-553.156.1.el8_10.x86_64.rpm 1ae1d6cab1162cc94b0fc2271f600149f3fd50b0e343d3e3e7b039805d9c61d9 kernel-core-4.18.0-553.156.1.el8_10.x86_64.rpm 1e0958a5bf3fe6fd0ae75282166deb15e8234ea43d613a376c2aa852b2afdf18 kernel-cross-headers-4.18.0-553.156.1.el8_10.x86_64.rpm 3cfc832d95249d26fdaf96d750dff9b66a65ef6d2193a073c40f8aab92ad2a28 kernel-tools-libs-4.18.0-553.156.1.el8_10.x86_64.rpm 4ba9b42968f19a9ec195780fd97f7e22000cecec57320f647afaa407cf041639 kernel-modules-extra-4.18.0-553.156.1.el8_10.x86_64.rpm 50674eebcde93d920cf4904c85c32753268593c5e68a6f92c1b8e10bc4226e51 kernel-tools-libs-devel-4.18.0-553.156.1.el8_10.x86_64.rpm 526e6d3e57b2da5be67858b87ea77eefafa2eef23c274b0253ab31aa7fa418ea kernel-devel-4.18.0-553.156.1.el8_10.x86_64.rpm 5cd30f6cc9637de8013780f02e9179f57117a4237c5f71c90e1312c5d4422a73 kernel-4.18.0-553.156.1.el8_10.x86_64.rpm 67ae679c0a18cc59602b134084916ea30e23507a4b96405007fa9669a8ab9fec kernel-headers-4.18.0-553.156.1.el8_10.x86_64.rpm 71419e4c6a581082349c749649a586f0e909e00689ed0cf75ebbfd2dcb3ee456 bpftool-4.18.0-553.156.1.el8_10.x86_64.rpm 9194715cba635acf8f55feff32193d203a6a5118228040637c4eb345af90cb60 kernel-modules-4.18.0-553.156.1.el8_10.x86_64.rpm 975e0e88f18f5522a56b9323fb0834d13c6d47fc94295cb4a3d6e0206a1831a5 kernel-debug-core-4.18.0-553.156.1.el8_10.x86_64.rpm 9e56b8bb4d21083f1b441a7279244917f4298836e693ad578f0bd1b1f06e3cd0 kernel-debug-devel-4.18.0-553.156.1.el8_10.x86_64.rpm d7b2008163a4d15ac231a22db5a506aae4448230ec3a11a9f89cc3fda9bc8589 kernel-debug-4.18.0-553.156.1.el8_10.x86_64.rpm e21b0caadf06ba5ed9c8e63c9af2b151b56b8b792c8bf198cb3d55dd4ff88583 kernel-tools-4.18.0-553.156.1.el8_10.x86_64.rpm e4cd8b4cc0cb6470ae3126a46a628919a8691dfa05226f6ec474cf3f166e3c93 kernel-debug-modules-extra-4.18.0-553.156.1.el8_10.x86_64.rpm ed9ff64bb6736ab5234c1d360903c1bc88476ea0887a72f3b52c3db38dbf903c kernel-debug-modules-4.18.0-553.156.1.el8_10.x86_64.rpm f706903278747e1d8619a5df7b0320cbd68f53976c1934d42c88fe99ab5e475d ALSA-2026:56936 Important: mysql:8.4 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

mysql:8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145) * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315) * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163) * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185) * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178) * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182) Bug Fix(es) and Enhancement(s): * [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default mysql-errmsg-8.4.11-1.module_el8.10.0+4255+e01a855c.noarch.rpm 25d6b276f637eb80d111e1b53f7d81fac1366d68a81d2c55ff658020d052e492 mysql-common-8.4.11-1.module_el8.10.0+4255+e01a855c.noarch.rpm 8565517a279c84a4e53ef300d9fb050968f93523ada46c2c2ce2dd2e4ab34380 mysql-test-data-8.4.11-1.module_el8.10.0+4255+e01a855c.noarch.rpm 92f736713491b312df60a739cd99a0929fb4939fb38976552ba7d1c9928de928 ALSA-2026:57253 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after AlmaLinux 8.10 kernel update (JIRA:AlmaLinux-219767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpm 1edc257cfe3bc3a49acc5de441fda44b3b768d9422e69950eb5a10fd82241060 kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpm 1fe44f19892ba99376651dc15e05ffd5d554733aad207b2270796458d2b944b6 kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64.rpm 294e904470fdaa7666b76550ee9806e0274072d2d69c2c4d28c2680877960f75 kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64.rpm 3f217349392739f914a518495fe10667bec125d0f5e15b85f20060f342c5401f python3-perf-4.18.0-553.157.1.el8_10.x86_64.rpm 5f3b55b95135cad8706ed397f32e15e84c7add1e64ccfcdcdfa2e69d95b7ba03 kernel-debug-4.18.0-553.157.1.el8_10.x86_64.rpm 6402256184dd31ceb64a3556926f15617f4ec2dca288ed3b5e1ed2d50b019f1e kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64.rpm 6f99a4c71d313d303a3d026f8745221a8c0eb308d401536707cbb0665a8bc15f kernel-modules-4.18.0-553.157.1.el8_10.x86_64.rpm 8bbf4ef6a195ff2998215d4ae3b88fd0493ae02796e5d5ccd21c10783ca7fc5e kernel-4.18.0-553.157.1.el8_10.x86_64.rpm 9d750199e228d64dabf836df2ba75db2095e84716bca9e720e7cb3df97a35acf kernel-core-4.18.0-553.157.1.el8_10.x86_64.rpm a7e33af2e4ce90cba8913abe8d68579e7ca26385270f8525eb5f013508631da9 kernel-tools-4.18.0-553.157.1.el8_10.x86_64.rpm af85672a2e956ef376cb5c0d4c4d2b29ffe7b89b0065ee5bcf5567e824fc649f bpftool-4.18.0-553.157.1.el8_10.x86_64.rpm b0f5884f51f091790c92b66740ae58a314736a942e034961d2a23eeec40732f7 kernel-devel-4.18.0-553.157.1.el8_10.x86_64.rpm bb669cfac92bd5b1f5505698ee7bf295283e523ee81a01515410fab6e0acfeee kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64.rpm c376f8c17ea89f71f599f4c6f6593bc36ecdc37d3d8ec852c956a4bb41bf2ac7 perf-4.18.0-553.157.1.el8_10.x86_64.rpm d4a7fe949a4a58032af7cba0c62df7d098e4cf6ac10d391f8ace3988ce1c8adf kernel-headers-4.18.0-553.157.1.el8_10.x86_64.rpm f2a8a209c985814ce7098d47da630fccfb6ff5c0b5edd09139b633df53d81923 kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64.rpm f7470a1f8f1f75974124224bf9241ea4c7041d9b4d517b0f734ed060bcaf3c2e kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64.rpm fedec5941ada09b57415ad913d26c16263cec3a261658ee8c6cc0a45698acaf3 ALSA-2026:59821 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) Bug Fix(es) and Enhancement(s): * ss core dumped when there is an SCTP session [almalinux-8.10.z] (JIRA:AlmaLinux-212400) * SELinux TCP/MPTCP connect check bypass via TCP Fast Open [almalinux-8.10.z] (JIRA:AlmaLinux-222800) * [AlmaLinux-RT] usb_hub_wq items may run on isolated+nohz_full cores (JIRA:AlmaLinux-178088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default perf-4.18.0-553.158.1.el8_10.x86_64.rpm 00b0865ef425e3112d74585f1c4e28452ec5dd6c42a001dd7c260f001d63551a kernel-headers-4.18.0-553.158.1.el8_10.x86_64.rpm 06d3bdbb7eae921fb997ac794c7eddb8337b356e94ae5d449d0b28ba17920c48 kernel-debug-core-4.18.0-553.158.1.el8_10.x86_64.rpm 101ae60c0bd6ea256473e0536defd77509051967d4f775b20d77fe6b3494c3a5 kernel-debug-modules-4.18.0-553.158.1.el8_10.x86_64.rpm 1e0fa213ae8df8d7be5eab7241ed2c6b7891ec5c67b501e31615fcf3a55fca46 kernel-tools-libs-devel-4.18.0-553.158.1.el8_10.x86_64.rpm 288555c96be0a72ec8118ecdf200c781c949968442f4f98d7ee06f6e81920609 kernel-core-4.18.0-553.158.1.el8_10.x86_64.rpm 34918b95cb30999c399f41bdeb271968760fb57a912e7930bafb5c090740d1b5 bpftool-4.18.0-553.158.1.el8_10.x86_64.rpm 46d6ddd007f97fa1e9f59eb9d6c8668e78c2388d6a594421544f2c3db67dc5e9 kernel-tools-4.18.0-553.158.1.el8_10.x86_64.rpm 48b4cf6e0e8c1967054c8ac96925af141727d4509ba500954ca8b616b43c67ef kernel-devel-4.18.0-553.158.1.el8_10.x86_64.rpm 56ad78baef2d6b66d8633918f315fd216969e1b0f2715c8cf93bcca67bc0a329 kernel-debug-4.18.0-553.158.1.el8_10.x86_64.rpm 5b399c849bd82eed3046b94a8fe999e1410b3e524f8c90ba1e8fab901d5d95ec kernel-debug-modules-extra-4.18.0-553.158.1.el8_10.x86_64.rpm 5eec9aaa34f4dbe6b00aa6e5039916c49745764dbe1ceeb23e52f10f4cfbfa04 kernel-4.18.0-553.158.1.el8_10.x86_64.rpm 66b680938485b1f931bbdde3fa7d5fd31c6b9a6b4623227cc181126fca819d1e kernel-modules-extra-4.18.0-553.158.1.el8_10.x86_64.rpm 6bd78e3ca5d7b4f925712aaa096b1c2fc09263fd69d7dcfc64293fe20fd40f09 kernel-tools-libs-4.18.0-553.158.1.el8_10.x86_64.rpm 77bb39db690295b819c1f6fcad174204ccc7523f2e1f3871a295250b50aee1dc kernel-debug-devel-4.18.0-553.158.1.el8_10.x86_64.rpm 9bb17e0d105894eefea139abe0e17524d0c426665306851c9a66ae4e95e17b63 kernel-cross-headers-4.18.0-553.158.1.el8_10.x86_64.rpm b4552f63f66f949c59dfaf0f687b307580acd8fa625215922054bb613ffc2aa7 kernel-modules-4.18.0-553.158.1.el8_10.x86_64.rpm cda8e2479742fc6d379c33b83a6e8775f7b4fba4a1908ba16c3c4a7ddd57cf81 python3-perf-4.18.0-553.158.1.el8_10.x86_64.rpm e243471a78b04d1b28e2f0586325abc40952c4e7ea642735ed291d96e4b4176b ALSA-2026:62583 Important: nodejs:24 security update Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el8.10.0+4268+8e07aa5a.x86_64.rpm 0c48d2e8a4d35d0d26977f355cb4926cae9437a5cdca2d3b45b8d81a27708f73 npm-11.17.0-1.24.19.0.1.module_el8.10.0+4268+8e07aa5a.noarch.rpm 4b9bd0ff598bba7c8bcc1148855160dfe7ace30fa9b167175f62a82928d0ee8f ALSA-2026:63014 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849) * kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045) * powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-devel-4.18.0-553.159.1.el8_10.x86_64.rpm 05ad20f845dbab7af419c4b1b019f60ddd8e3940d67f57ef39dad050a7c6aaa0 kernel-4.18.0-553.159.1.el8_10.x86_64.rpm 157f2a00c33707a4e7d5a0ecdb4cef84cdc51041de3407b044f6dd9f314e7452 kernel-headers-4.18.0-553.159.1.el8_10.x86_64.rpm 2af64d4d9d1226440cacf56f70128e30f5199b853fe0a5f5a607171d9baaa256 kernel-tools-libs-4.18.0-553.159.1.el8_10.x86_64.rpm 3def2f6a8548de20ad9a879d528dd02ae504bd19d4558e251417480be552326e kernel-cross-headers-4.18.0-553.159.1.el8_10.x86_64.rpm 5cbc4bfd5cdd3b18ef2fb6ac9db08e7e02cbd664a43714f8e1326886db93c1c4 kernel-core-4.18.0-553.159.1.el8_10.x86_64.rpm 6057422d0dd3c7c621f9629858a684e08daea144a4714e403e44a3548b1a0123 kernel-debug-core-4.18.0-553.159.1.el8_10.x86_64.rpm 6c0b2c2e59c544ab7d20a077136bb6e974c5f394b98e865eb2be1c6aa0784221 kernel-modules-extra-4.18.0-553.159.1.el8_10.x86_64.rpm 73e3f109e25cc880b8bc489c66966adbc1c8dbe1850366aa9f867bef728e13b8 python3-perf-4.18.0-553.159.1.el8_10.x86_64.rpm 7db2acf8616e8718edacbc02fe3d5b2cbe80bc0ba3956a65979023106b58982a perf-4.18.0-553.159.1.el8_10.x86_64.rpm 7f797a4b17d79c88c741a642e352ed5d504f5ce057b664e737749fb426693d16 kernel-debug-modules-4.18.0-553.159.1.el8_10.x86_64.rpm 8340ab020005d2d5260e4637e06609affd46185802dba095c8978d941d7617dc kernel-debug-devel-4.18.0-553.159.1.el8_10.x86_64.rpm 8905cbac2d40b7432b6636f3ece93e5fdf651594ef02bec32695cf8eac2e3a64 kernel-debug-4.18.0-553.159.1.el8_10.x86_64.rpm 8b90bc8737cf1596e80ed1755db1db052718a0bde9ffd1a5f4158ea8516b9f11 kernel-debug-modules-extra-4.18.0-553.159.1.el8_10.x86_64.rpm b0c278d6f4698b901aa9093c4ee896a274b5ebf99a69944f71678b819974fe99 bpftool-4.18.0-553.159.1.el8_10.x86_64.rpm bc33d0d9e6ec1ddbd3118001a8d3deafc9fb7c78fba68f04ad9bc9bf87b2adf2 kernel-tools-libs-devel-4.18.0-553.159.1.el8_10.x86_64.rpm d13873edc5c7b6493b96e1c9c7b430aaaf6d64916178026a2a5c621c95ea9345 kernel-modules-4.18.0-553.159.1.el8_10.x86_64.rpm d6a4958d4db782659950df863f28f467bbb36dab755bcd282c60f7edf8b24fee kernel-tools-4.18.0-553.159.1.el8_10.x86_64.rpm d6ac214649227c116d70dd5d9b44496c75dac220f86d24ca600ade8e9af72b1a ALSA-2026:6391 Moderate: mysql:8.4 security update Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948) * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968) * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default mysql-test-data-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm 132e239d2e381d6d84c5ff6879a5f733dc36643413bc8cb6f17518f85f7303dd mysql-errmsg-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm 9a3e60b49d558d7e50333d04cc2e23d3fc3dd796da2994c0db236d453cbb176d mysql-common-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm aed379944a57d0b9a041d49e5844d2a6b9cac49d21f67dd731061dda00f50bab ALSA-2026:66000 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-tools-4.18.0-553.160.1.el8_10.x86_64.rpm 05bf4949fc33cf93b956eb234a1978c85bcd4a2c875a69b115007804eaf01663 kernel-debug-modules-extra-4.18.0-553.160.1.el8_10.x86_64.rpm 147886fbfdaaeeffa259fbb73ebd46e1fbbb72df5b0a7fd8917230975762e458 bpftool-4.18.0-553.160.1.el8_10.x86_64.rpm 35c01b0ce97630cae1eb7c639dfdc00f1657f294f652fd94e51f036341a6dddf python3-perf-4.18.0-553.160.1.el8_10.x86_64.rpm 3dee104bba8b19dfbf098c77d93c97cc69b743af5cbf4e7e3b9ee3cbba5e99e6 kernel-debug-core-4.18.0-553.160.1.el8_10.x86_64.rpm 4771d05ae2be50dcc577c583b3c77589e2814e7dccd8a9f1db632dd0e3da64e7 kernel-debug-modules-4.18.0-553.160.1.el8_10.x86_64.rpm 587706f98fcbd1926c622c26e1b7a36276544be1fe3d7e4437ed17128b82626f perf-4.18.0-553.160.1.el8_10.x86_64.rpm 58fc5b5777fedb47704465dd942f562695d1ca495ecae91f507d5afe189e6a8c kernel-debug-4.18.0-553.160.1.el8_10.x86_64.rpm 67913a26e9ebf1da4d139ea2caf7498193923e841faf682f37a530ec734ca7c4 kernel-tools-libs-devel-4.18.0-553.160.1.el8_10.x86_64.rpm 713e5b42e3e81bf47b8af4a3977bbb3e0134ce30578d4c6207fa318902d5a3c1 kernel-core-4.18.0-553.160.1.el8_10.x86_64.rpm 7b7e2a0e0140e23fae1638441d93ff7b7031b952760965e42e109c66e53335a2 kernel-4.18.0-553.160.1.el8_10.x86_64.rpm 8588ec1eaf550aa2dbee5c133e530ea101f4696268396e65884f8aadad29910d kernel-cross-headers-4.18.0-553.160.1.el8_10.x86_64.rpm 8ba7bc91b7e173673484701e1a60fec0f0b62fa161fa046619e18265f040aad2 kernel-devel-4.18.0-553.160.1.el8_10.x86_64.rpm a8fd75b0a508d80385893cbdbe8486e40ccbd85b426206f3a5e810a3c1398c72 kernel-debug-devel-4.18.0-553.160.1.el8_10.x86_64.rpm a95b3e26bb052042ee2ffb722d2c2e22ac329c6ee40c9208be0131995bf1c3a6 kernel-headers-4.18.0-553.160.1.el8_10.x86_64.rpm b43611251c4ed15dabb650f336aac5b18f6ad1e05d3e43559ea47b0f1552ea73 kernel-modules-extra-4.18.0-553.160.1.el8_10.x86_64.rpm cb78cb7bad5d803de727ffed12160d0818c3674b75519e622a19d02306f3b5bb kernel-modules-4.18.0-553.160.1.el8_10.x86_64.rpm deb12a18901863eeb5d4c700eea7ae59fc32a2bc4fa066dc1d0dc1e81f5c434f kernel-tools-libs-4.18.0-553.160.1.el8_10.x86_64.rpm f6bce6e6eec995acbf947004e9fe9d93c22214e01769d42470cbe00e08d32c28 ALSA-2026:66325 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) Bug Fix(es) and Enhancement(s): * scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [almalinux 8.6.z] (JIRA:AlmaLinux-194117) * gfs2: harden gfs2_glock_hold [AlmaLinux-8] (JIRA:AlmaLinux-240340) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-modules-4.18.0-553.162.1.el8_10.x86_64.rpm 03b8280b21e2b0a756c3a257967841d858074bb322afba107a58a3039fbf46ed python3-perf-4.18.0-553.162.1.el8_10.x86_64.rpm 11f2e3e425dee9c977a952d6221c7eac07493ed928c0778467c115118d037be7 bpftool-4.18.0-553.162.1.el8_10.x86_64.rpm 13cbf4293335273309258b1059a553d2c786c43ef8c59e37bf3096c368b6136d kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64.rpm 159b6aebb9e797bda18a22d4e25938a22e6cf82cdee0e55db416066e78ec3804 kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64.rpm 2e662a8c2c6c73206398e1fca3ad1f327b18a9cfc5d2dfa287065db93edb5ba5 kernel-core-4.18.0-553.162.1.el8_10.x86_64.rpm 3f50631e33d8232c33fa53fa13551bfbeaea322e89fcbb47caea01784cf3d48f kernel-headers-4.18.0-553.162.1.el8_10.x86_64.rpm 4fe1f8093fe649b4b88e6094339097a06ce06001cdd5e2f85426d205755ce8cb kernel-devel-4.18.0-553.162.1.el8_10.x86_64.rpm 5552dd44645a859d6d97c97fe9335de439581b3844ba1f5e17fc844898f76c5f kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpm 82b5db9d97901d298357c550d9487798b3c8759cfd20fe107408299f6ac35370 perf-4.18.0-553.162.1.el8_10.x86_64.rpm 9672925dce4cd35be93672bf00e7d75f179779018a3e5ab63725b0f4688a4780 kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64.rpm a598ddbfa29ce588bb2825bf1513cfcc4ce85a7938001a58416f5c65a9972e0e kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64.rpm ae4a76b5cb4e1a8762d5f1cf1e35373a8416b4d2ec75bdfe75b224575f54f8c3 kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpm b662294a35c3893629f9d5fb635b1652ea125ebb232454c7b38ea713eeb8b6cd kernel-4.18.0-553.162.1.el8_10.x86_64.rpm c5eda06ba9e83956d5937fb83c5863da480d62a69337d20e8aba264cd875545d kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64.rpm d13dccf00cbbd46040d0d1de1572651867dc05bfffe0208a41b240e9c9dbf0a9 kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64.rpm df048b206fc107c9bff20042de2a8bd72146c1566b8a42b0b59ec222e0ee9275 kernel-tools-4.18.0-553.162.1.el8_10.x86_64.rpm e5f5af9ead7b92bee37611a71bf2e5208469288334785375286af7a51b23cf77 kernel-debug-4.18.0-553.162.1.el8_10.x86_64.rpm e5f9825b87d9ae080144bd642bac6d4f766a2a072823ad96120960abbbcb7d08 ALSA-2026:67468 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: EDAC/bluefield: Fix potential integer overflow (CVE-2024-53161) * kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address (CVE-2025-71127) * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-core-4.18.0-553.163.1.el8_10.x86_64.rpm 0aad9d841c059cfa800fe3e20d5217b93201868aca202690c76561419ca22623 python3-perf-4.18.0-553.163.1.el8_10.x86_64.rpm 25f9237bab312efd2c7bbf55d5e81a5893eba0d91c87b6e45326f7e1bd270ffe kernel-tools-4.18.0-553.163.1.el8_10.x86_64.rpm 29c4e35283a1a14f03ed99e54778c72054df97089c1f3c93afb39fa476d60a24 kernel-headers-4.18.0-553.163.1.el8_10.x86_64.rpm 2cdb1f2a3fa3d31e7a733a0a143abd3b6bd2a62395b1ec07e7969076e9faf1e2 kernel-debug-4.18.0-553.163.1.el8_10.x86_64.rpm 2f77a1114b3ac77dae6ce583939c51fc5298585ce1aa38afefc28896146adce5 kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64.rpm 350a66e41ab410fe8116a8718640e0f8fc22e8b1ed914cdd5cb7e4efa89b8eef kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64.rpm 45b5897c3f348aa140bad00ceaf8539fe4785906f27fdd872681e9082f93fcff bpftool-4.18.0-553.163.1.el8_10.x86_64.rpm 530213e8041c4cf92a9e27666f18f17ebd8de310f646320ec0308e0b8b30b278 kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64.rpm 6273189a5c2398fe4fe6868caa5c21ad24389c56a5a87782f31a8a2db37d71f4 kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64.rpm 66e61760847128102450a41c4eae4dafa4c672022605cc2db213184310555188 kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64.rpm 729402e3b33a4decb985c5343134f9eda46731a7c5ac50aa9868acb4f3c6a600 kernel-devel-4.18.0-553.163.1.el8_10.x86_64.rpm 9c3e75d83e676fa4991eb824cce8c1d9db6c461f7060ae3648ad64b42e3f9f59 kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64.rpm 9e411791ee249f4a304494c55dc0bdde31a12266d41f00110bc89845cf66ffc3 kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64.rpm a24808393661d7f82757977cc292d0312337709f00e3ba616008e433ba1adbd9 kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64.rpm d27175086ecc784d8caaa9d126cc318020ade311a395e628e5230294a8ef85b9 perf-4.18.0-553.163.1.el8_10.x86_64.rpm dae413cc1c0d55b3b7206cfc6ec219ee34efbcd9b825af94b63f9f361add7de8 kernel-4.18.0-553.163.1.el8_10.x86_64.rpm eb7132e0ee29233cfdac0a02247b55bcc815a1dd24eaf6b0ce33d2dfeb4e5a66 kernel-modules-4.18.0-553.163.1.el8_10.x86_64.rpm f35aca77116558683726bd4026c49edff3af692eb831f5fca5c32ae6d9991944 ALSA-2026:68531 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075) * kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-cross-headers-4.18.0-553.164.1.el8_10.x86_64.rpm 0b2b033f95444260d795775475db28f391aa9709090d292b98b246e27def8ec2 kernel-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm 1c4751cd2992f92b16ce254fdb291666c51b15e6a5debad02ff2e5e0849a44f9 bpftool-4.18.0-553.164.1.el8_10.x86_64.rpm 1e32946e2a9ea2a021786b1d4c71ee29450921743022cf01244b34fc5bf4e9b0 kernel-tools-libs-4.18.0-553.164.1.el8_10.x86_64.rpm 272b4deb742fec0ea3fd9ac473929e415acee1f249b6a1bb5003df58037eb3df kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm 2a778ba2c700485580b872481aba79608a6295ebc72ec24d9091672f695e8722 kernel-debug-modules-4.18.0-553.164.1.el8_10.x86_64.rpm 2ab4f9a51c7dda3c9d42386ceb625eb8188cf950497f8bbe143c190080a3ad42 python3-perf-4.18.0-553.164.1.el8_10.x86_64.rpm 2e5453ec85a60c04ca461efe1a80046c820445e807f27f7f14fbc580c92f2903 kernel-tools-4.18.0-553.164.1.el8_10.x86_64.rpm 504d9ae9de8f4c83e069a2bfbb73552827ce7202883ce6666f0517eabd2ee17d kernel-core-4.18.0-553.164.1.el8_10.x86_64.rpm 56f35e4550d38221a6c3f26fce55cb98fb440e3e47e49ffb36be40c77add9483 kernel-debug-devel-4.18.0-553.164.1.el8_10.x86_64.rpm 5905e0a84b582d1caad92d4e3fb1e6eab4979c90847b2f59ff1276fb164d6b5a kernel-debug-core-4.18.0-553.164.1.el8_10.x86_64.rpm 796c1da0761a5d1ae095abe5d2ca56ae4ef8a155a691edad2b93495a12d0d22f kernel-tools-libs-devel-4.18.0-553.164.1.el8_10.x86_64.rpm 897f45adeac02a6f3df4a4a87b8874e2b2a3b99997e9d629597a7b353a327cf9 kernel-debug-4.18.0-553.164.1.el8_10.x86_64.rpm 8cfccdd8aac480e322985f4eb6760a950b17fcd2fb4c8549c1042d1b5a282157 kernel-devel-4.18.0-553.164.1.el8_10.x86_64.rpm 9db63fc107fc35530a31f0e3eed0cf5a6727bd0df6c140c2645cb637214faf4b kernel-modules-4.18.0-553.164.1.el8_10.x86_64.rpm 9f83fa92c5080e954d2b1a9c30ff322affd3a00f2b8199a1b45b81af2f7502f0 kernel-headers-4.18.0-553.164.1.el8_10.x86_64.rpm bd75ecda0d21a3008f22ab7add60c68820c3ebc63e849da20f6eaa3e6781cc42 perf-4.18.0-553.164.1.el8_10.x86_64.rpm be601c4b670aaaaee5ec6cd7bef585fdbb56346d4e907af4680216fe15982664 kernel-4.18.0-553.164.1.el8_10.x86_64.rpm ed3908e6d1f21ba46ff304a96b4556ff413f6b40e7aa5df4ec79da59e1dff2bf ALSA-2026:68676 Important: .NET 10.0 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120) * kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214) * kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043) * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) Bug Fix(es) and Enhancement(s): * Intel IOMMU: possible circular locking dependency (JIRA:AlmaLinux-243217) * xfs: repeated xfs_trans_cancel called from xfs_iomap_write_direct (JIRA:AlmaLinux-251578) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default python3-perf-4.18.0-553.166.1.el8_10.x86_64.rpm 15fd8f7f925b633f9ad7000a67b9faeeec359fab9a1ebc299f21e54bcefaff4e kernel-debug-modules-4.18.0-553.166.1.el8_10.x86_64.rpm 3d96e54b61e101d8ee822aebf5e7e8e3a248e78bffa7cb7023c5b137feee8b0d kernel-debug-4.18.0-553.166.1.el8_10.x86_64.rpm 43443ebf2d945570158d720b111647b412eb1e1b8b0ac738afe4bcdc5dd834f2 kernel-tools-libs-devel-4.18.0-553.166.1.el8_10.x86_64.rpm 4c274d977c1d824a4ab742e44993d44cf6cf2ed53c7c16c7427d44942a5eab8d kernel-debug-modules-extra-4.18.0-553.166.1.el8_10.x86_64.rpm 6600373aff758ac64e45226998f11c40563f6ced351cb13167cc302d092b1715 kernel-modules-extra-4.18.0-553.166.1.el8_10.x86_64.rpm 7533c8416dcc40707f3cb3964c304cb77d69afd1f4570e26b1d4f9a870ed5a5b kernel-4.18.0-553.166.1.el8_10.x86_64.rpm 8d8ad7524f7fd8612882966664bf2f179034f28fb3040c43f9d9002ff87c6b62 kernel-modules-4.18.0-553.166.1.el8_10.x86_64.rpm 91744d2d61b2ead7ad5afdf84ed3839ff282b342f82a6ef6e111c5b97253682b perf-4.18.0-553.166.1.el8_10.x86_64.rpm 91a42df6697a5334ccb0079ad102a1036a25f549023b81e1ac508e21254c4cdc kernel-debug-core-4.18.0-553.166.1.el8_10.x86_64.rpm b41ef24a695a828625dcc11aefbc247563e78ea73272bd8071a2eeb0f9603be9 bpftool-4.18.0-553.166.1.el8_10.x86_64.rpm bd48f7030afac788357f0e413c76279321f23082ec27440c2e461be925629e5d kernel-headers-4.18.0-553.166.1.el8_10.x86_64.rpm c5f9d99541131d903c51b20441742e568f4aad07208f3b79b645d4849a953d69 kernel-devel-4.18.0-553.166.1.el8_10.x86_64.rpm c7e0777e060eff8953e042bbd033d14614c6c3c762d3af6e115a2d44a1d8dc8f kernel-tools-4.18.0-553.166.1.el8_10.x86_64.rpm cb355491bd28a6e5b7e123939b81bef7e74f694079a5303266e011ab9c1db4c7 kernel-core-4.18.0-553.166.1.el8_10.x86_64.rpm d9361949fd56e6b20d4dbe83cc41dc81b56ed33fe530170f7e626f4e308ac9b8 kernel-cross-headers-4.18.0-553.166.1.el8_10.x86_64.rpm d936ebcef15176897c6a87cb8b5f28018fa1761453f917afdbd27b8a292688cc kernel-tools-libs-4.18.0-553.166.1.el8_10.x86_64.rpm db03fea49d95c220101dbb813bad4b56fab03018ba9433d2a5bfa76fe932534c kernel-debug-devel-4.18.0-553.166.1.el8_10.x86_64.rpm f5cd54c3c350a721664c79504522c4d4c90c1788b896d236cdaa0d6416f64645 ALSA-2026:71213 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-8.10.z] (JIRA:AlmaLinux-216297) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-debug-modules-4.18.0-553.167.1.el8_10.x86_64.rpm 023e3691aea920dedb3d92694812b45117160bc387eece94e8519d60a5a1b3da kernel-cross-headers-4.18.0-553.167.1.el8_10.x86_64.rpm 09dd8dbbfb6af7eff9273449af8572f5fc2ebe0abc85a440f63811490c1fcf82 kernel-tools-libs-devel-4.18.0-553.167.1.el8_10.x86_64.rpm 0de3bacbb69da1f12aaaca8b62b2f3af400af706e9bdcf58e7003f95a0e97d98 kernel-modules-4.18.0-553.167.1.el8_10.x86_64.rpm 0feffee0578eaac05f4084e3a18c957defed6ced4f6ae787d4250a3767b56cd6 kernel-4.18.0-553.167.1.el8_10.x86_64.rpm 169960b7d7efacc850752b2f47c6441faa14f3d6cd3ae2ad579225b56b47a1c7 kernel-tools-libs-4.18.0-553.167.1.el8_10.x86_64.rpm 1e1d364e324b59e5ad08377f802ade4f5558fce303289c140160b0c8abd9e0fc kernel-tools-4.18.0-553.167.1.el8_10.x86_64.rpm 21408d6ceb4b6add51542eeaf9a3b6390c05e3d1ea5095e38f923f40dafe69bb kernel-core-4.18.0-553.167.1.el8_10.x86_64.rpm 230163ce6eda26f57427594989b204b5b14ec2097722a783622b047a4263d125 kernel-headers-4.18.0-553.167.1.el8_10.x86_64.rpm 26a22264a7f6beb9cd85e73337beeb9df31e21809233a3e89cac658a7972324b kernel-debug-4.18.0-553.167.1.el8_10.x86_64.rpm 2780ebd48a643a903756d2a11036a6681f675d97c1bc12a832a51eb8d04816ef perf-4.18.0-553.167.1.el8_10.x86_64.rpm 88a8e528fa4fe277af8d62627a4d8ab88e128e96b5dd00951d4478f5aebb89a9 kernel-debug-modules-extra-4.18.0-553.167.1.el8_10.x86_64.rpm 9c09bd8348843c4401dce049c0a3e2612e063180664d8fb62b2ae819f34c0261 kernel-debug-core-4.18.0-553.167.1.el8_10.x86_64.rpm af32affdb03145f9d7717e7f58631a663893aa09323b55d8688102601e49359d bpftool-4.18.0-553.167.1.el8_10.x86_64.rpm c44b24955a74fcccfa2c6608cd1cbf692dd906fbf0b3970ba161a8cf42d3e977 python3-perf-4.18.0-553.167.1.el8_10.x86_64.rpm d1ceaa019bbac28cdc40abe98fc67f7c602bcfef62c25d915cd7720b59621bd5 kernel-devel-4.18.0-553.167.1.el8_10.x86_64.rpm e88fe9a7335b1ba21a747899e0246d516db1b2bdc4ba2e32809bc8268bb8059e kernel-debug-devel-4.18.0-553.167.1.el8_10.x86_64.rpm f3ec65e5adfb4ec78e8976afeed8d3308dfa726046f1bf28983ef004c06bcef4 kernel-modules-extra-4.18.0-553.167.1.el8_10.x86_64.rpm f756bd42ef4d03d8a03000832cdacdbf8dcabb292d3c99280d8db6e7ebc32dbe ALSA-2026:71329 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-devel-4.18.0-553.168.1.el8_10.x86_64.rpm 01ca49d202da744149db1e4e41a52eb0860a4d84c432586f11d654b2e579789e kernel-debug-modules-extra-4.18.0-553.168.1.el8_10.x86_64.rpm 17f2c904de23248fa68efe01344816ac7f4f3820f6d1ad46d5fe49fc82b09b8c python3-perf-4.18.0-553.168.1.el8_10.x86_64.rpm 202b9537356b7ef00604f196ac2909fbf5ffcda340396077122c439dd0588d39 kernel-core-4.18.0-553.168.1.el8_10.x86_64.rpm 2fd7b45df7030c5af0e58c65243b17ef5e928e9793754303742dee270615ae32 kernel-tools-4.18.0-553.168.1.el8_10.x86_64.rpm 31bb84506fa8305ecca71395c1220ae9ff3e91240a895698ac116a07c17dfca0 kernel-4.18.0-553.168.1.el8_10.x86_64.rpm 479c2182e32da5da7b83e74ec69cfc93409dd868e4082258e85688888521da92 kernel-cross-headers-4.18.0-553.168.1.el8_10.x86_64.rpm 503c2d4577f1d331ceac9b8a7324ae6ae333bf0c3a87182f259b810506afdbd3 kernel-debug-core-4.18.0-553.168.1.el8_10.x86_64.rpm 58cd18a0f2d4a347b9af0d70130752e98291e168714180c25fde2af2a32da24c perf-4.18.0-553.168.1.el8_10.x86_64.rpm 6846aa15ba59eb22cfabfbe5843664e4f99b15190d493ddb4c9981458b82f6aa kernel-debug-devel-4.18.0-553.168.1.el8_10.x86_64.rpm 6931726a3456cbefa6e5a6e2952d02ac38a1b3e5ebef367f1f25e1a4e9d08272 kernel-modules-4.18.0-553.168.1.el8_10.x86_64.rpm 8e4ee51b34daa85b9b66e01f93009e67e2ed18aece698cf196016e6e7bbda267 kernel-tools-libs-devel-4.18.0-553.168.1.el8_10.x86_64.rpm 9e7519322114cecbe28349f3786896663805d8594655b56ef676462e1842ecbe kernel-tools-libs-4.18.0-553.168.1.el8_10.x86_64.rpm 9f77d3b94982ac390917fa5bbe6e2f659e0e6a450f9a37a3b7aa3e62bd85b7b5 kernel-debug-modules-4.18.0-553.168.1.el8_10.x86_64.rpm afdfd11455dfb53dda2527cacc80bcdd452a1f6d54b7cc0ddfdc665df06924aa bpftool-4.18.0-553.168.1.el8_10.x86_64.rpm b40c4e18c98df1d3625029ec361e795ea355966c5444b7b523624dccb89197b3 kernel-headers-4.18.0-553.168.1.el8_10.x86_64.rpm d6fe90f696f12f8ae2ca2c52be207e0ce19f073c76b39e6480f7de2aa2b51124 kernel-debug-4.18.0-553.168.1.el8_10.x86_64.rpm e80493f77ab8a2278a89eacfd474b2a601c737c0bc4ed6f70b78ced1d0bd1c8a kernel-modules-extra-4.18.0-553.168.1.el8_10.x86_64.rpm eca8ffe8e688cc274e1ebc617e8e0f86413f5b0513dd1be5c59a51671a7bee4c ALSA-2026:72468 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-headers-4.18.0-553.169.1.el8_10.x86_64.rpm 04ba1d94e74963c300ca84ecb624e1135f7f9cbfdde42fd16936977b6681f375 kernel-tools-libs-devel-4.18.0-553.169.1.el8_10.x86_64.rpm 05b460f984f786e9903f95374adc3c14fa3c2d60db2b1efafd4066837a9328bc kernel-tools-libs-4.18.0-553.169.1.el8_10.x86_64.rpm 10d4ab0809efca60560400bdff30dbc8140e26508b14d8b90de82502e9ea788f kernel-debug-devel-4.18.0-553.169.1.el8_10.x86_64.rpm 20156addc07e7628c493f48a3b7edd1a8d14c3c56bbf8b16c40f06a10f9ea72a kernel-4.18.0-553.169.1.el8_10.x86_64.rpm 3825ced6c50332398d7783c131bc81cb833fb5529ccc25840a2ed862ee767a8e perf-4.18.0-553.169.1.el8_10.x86_64.rpm 575f05d598cc71f2a87c341577cb946dfe121d05f72fc7b68feb3eb552e6fc37 kernel-debug-core-4.18.0-553.169.1.el8_10.x86_64.rpm 5a056ad570ef5b7a8d57c0709da7743f32affb9111dc83f0cf97ae4876dc18d8 kernel-modules-4.18.0-553.169.1.el8_10.x86_64.rpm 61ae78c86d8d3ddb357f439f41960f8dea768356a45fcd77360b358e0ac8d6c3 kernel-debug-modules-extra-4.18.0-553.169.1.el8_10.x86_64.rpm 7a89fa5839d2d7d4b6cbab8cea00e3bd8fb433501f8e0bfd73ef8ccc3f300734 kernel-core-4.18.0-553.169.1.el8_10.x86_64.rpm 91a0d610f8449599d21dc05b2dde4a1d32eb5d9c1c966f1353d6826a7798500f bpftool-4.18.0-553.169.1.el8_10.x86_64.rpm 9839a027948a8ec5697aad27dcefa99bcade2bffb3a0a03ab03a198cbfbf3ca4 kernel-cross-headers-4.18.0-553.169.1.el8_10.x86_64.rpm a68191ed1142ba39595aa3a9ef3127eb8df59a8a26fe500088c1a940e5cf8893 kernel-tools-4.18.0-553.169.1.el8_10.x86_64.rpm a7078c4d91182899d24ed75fe15c84d530920745a4f5fe38e94049fee3b70bb5 python3-perf-4.18.0-553.169.1.el8_10.x86_64.rpm aa9821a841727f6507b4ccc8c9ef8b57be8124d61b1797a44b48439312718e4c kernel-devel-4.18.0-553.169.1.el8_10.x86_64.rpm b93241a97bf321dc5300eb5b342f35ae6ef5c81cf726d58d1bf1fcb4f407863a kernel-modules-extra-4.18.0-553.169.1.el8_10.x86_64.rpm cc87dd7656e799bc078a00a83296aae8646815bd57d311a0eb7290300fd38372 kernel-debug-modules-4.18.0-553.169.1.el8_10.x86_64.rpm d81c73ec9651861bb4983dd427adf7c6755d2e02b60e5c4ef47f7b6f6317ca50 kernel-debug-4.18.0-553.169.1.el8_10.x86_64.rpm e0307c008f7e4fbe3f35cebe7621a9cb5314edaa15a8ad72a33c7e5e10527cd0 ALSA-2026:74085 Important: nodejs:24 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152) * undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-8.10.z] (JIRA:AlmaLinux-249188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el8.10.0+4292+21afb960.x86_64.rpm 5f94fe403ac504370447f163692ada77ba6b51f9e4f2830516fdb16c41d277bc npm-11.19.0-1.24.21.0.1.module_el8.10.0+4292+21afb960.noarch.rpm 638e1b948cbbb3b7c3dc14d88099a23f329c9375e51f55d397013e7afd91bb9e ALSA-2026:74133 Moderate: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329) * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099) Bug Fix(es) and Enhancement(s): * [AlmaLinux 8.10] "kernel BUG at lib/list_debug.c:28!": list_add corruption in register_trace_event AlmaLinux 8.10 (JIRA:AlmaLinux-214136) * request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from CVE-2026-63823 backport) (JIRA:AlmaLinux-270349) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-core-4.18.0-553.170.1.el8_10.x86_64.rpm 0003698af65890afeb3eff05fb8283040b509ca6517317793f486de707566d22 bpftool-4.18.0-553.170.1.el8_10.x86_64.rpm 1154816c27dea96bc41429dd374163907881394439b41910f4833a6bad12e57a kernel-devel-4.18.0-553.170.1.el8_10.x86_64.rpm 1dde67f13ec412338fedcd083bc83a25bae5c7b17fefce6227fd07d6d89e3a35 kernel-debug-devel-4.18.0-553.170.1.el8_10.x86_64.rpm 2d1979df33138c3be1125e9452a47512bb844d075e543b6d951c3209906b8ccb kernel-tools-libs-devel-4.18.0-553.170.1.el8_10.x86_64.rpm 36b6f3e88c7139ea464018c555aa80a8a4e16bad28c777144e2060e0e2353b58 kernel-tools-4.18.0-553.170.1.el8_10.x86_64.rpm 4baae12eb18b29f7af0064eb568a9fbf14d8c86f8f6900e1ad957982cfc30b1c kernel-4.18.0-553.170.1.el8_10.x86_64.rpm 564222ef588f9eaf40c233f937c5fc9e16568db54f5caa20efe908c15a178025 python3-perf-4.18.0-553.170.1.el8_10.x86_64.rpm 6c7ee90ad24945557112f3d2f6391e837e796c7dfeff2f6e9e3c73eebc0fb1cd kernel-cross-headers-4.18.0-553.170.1.el8_10.x86_64.rpm 733bc0e387744bdacd525bd98e6a01a85e08e07ddd331a53044955d304ceb2b5 kernel-debug-core-4.18.0-553.170.1.el8_10.x86_64.rpm 82cb42080eb6acb37478a8d5fdd262ed3de1c643b9f5281ec5e955939d7dbc29 kernel-debug-4.18.0-553.170.1.el8_10.x86_64.rpm 846488f6a2c33261c9a6e0e11ec63d9ac099d8c046f7563b451a4f66d5d89824 kernel-debug-modules-extra-4.18.0-553.170.1.el8_10.x86_64.rpm 87a240a096ff07561e6930dc1f480e6fe3f64eb155a16180c132af0b284fa91c kernel-modules-4.18.0-553.170.1.el8_10.x86_64.rpm 8c0c39c7a64eb191f1f48ee123f593a4ba32e4a03e50e36e70141d546ed7d2f6 kernel-headers-4.18.0-553.170.1.el8_10.x86_64.rpm ae412111fb46499160cca29a68153c619fcddeec31ab2ff8f5bc7c1b51b8f1bb kernel-debug-modules-4.18.0-553.170.1.el8_10.x86_64.rpm c213c82f3d85b025e48f25c8b71b69285adf5c619c999d207449a8f5df0bfa3b kernel-modules-extra-4.18.0-553.170.1.el8_10.x86_64.rpm c66e67bf8124f130f8576dbf76665711db63538d02f5e81bffbdc5f174e57edd perf-4.18.0-553.170.1.el8_10.x86_64.rpm d6542a276aaa2b27e6474a8b695f8bc6ac27e09c6ca86345cc7cd28cc1f919c4 kernel-tools-libs-4.18.0-553.170.1.el8_10.x86_64.rpm ffc80501fba61866d45baadbeeb137795600d19fac83f315e675770967554850 ALSA-2026:75747 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994) * kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242) * kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048) * kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756) * kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105) * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861) * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: gfs2: add some missing log locking (CVE-2026-53049) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230) * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270) * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992) * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994) * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432) * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052) * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255) * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516) * kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569) * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746) * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921) * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481) * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972) * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227) * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417) Bug Fix(es) and Enhancement(s): * AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194) * AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199) * [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-tools-libs-devel-4.18.0-553.171.1.el8_10.x86_64.rpm 2c801270c0d05609a21815495559fa4c306fed81f38902af2a832a1b4b758105 kernel-tools-4.18.0-553.171.1.el8_10.x86_64.rpm 383980775e0c61a07a802f79821dcfc0248fd95962313ecc51f4e6305cae3c1a kernel-devel-4.18.0-553.171.1.el8_10.x86_64.rpm 4e945c3d7eee74d44c2ed3c88dc63c4ecea3b0e850538f930b106d4bda35874c bpftool-4.18.0-553.171.1.el8_10.x86_64.rpm 4e9f9b2fd7fec4c2bebd79297157642b4aa6370645c99cba7a610295dc68f866 kernel-modules-extra-4.18.0-553.171.1.el8_10.x86_64.rpm 636111dabec6d0cd6bb9a62f1ef6518e7bfd6a4139e565870f235569b16a047b kernel-headers-4.18.0-553.171.1.el8_10.x86_64.rpm 65f8fbcbb036eb6f9eb1ea152e62dc6922581fa0ef25aa7e84262cfd9703ab07 python3-perf-4.18.0-553.171.1.el8_10.x86_64.rpm 6c2d43a6483455eec4f0c7f211460fadfff4f427a3c122c82f48be570485b3fd perf-4.18.0-553.171.1.el8_10.x86_64.rpm 6cf2f40cbc850720cf5a86b327b14046ce316ac4ee8110a35fe27d493d7c34ef kernel-cross-headers-4.18.0-553.171.1.el8_10.x86_64.rpm 7e325c7e80e87c17306678e9a11ae0cb241f92a24257182e742d3fcdf085f390 kernel-debug-modules-extra-4.18.0-553.171.1.el8_10.x86_64.rpm 8501eaa5dc123612913361ba27f61583a83b5db7563a0cfd4ab6cbce5aba7996 kernel-debug-modules-4.18.0-553.171.1.el8_10.x86_64.rpm 85d799e7629ef591b1c9d5721b8bcb52809846d84742730cb9c79ad8d6021043 kernel-debug-core-4.18.0-553.171.1.el8_10.x86_64.rpm 894ada2350554a90af94b6336e4a8b28af6391a1f99412338460641a26644dd8 kernel-4.18.0-553.171.1.el8_10.x86_64.rpm 9202bbfdb8d2b604d580bd438c16fe9aaedc19d73d9f0f97afb740ea121444b2 kernel-debug-devel-4.18.0-553.171.1.el8_10.x86_64.rpm a07af894335724cfe7e3fb04e14407d1548bff57d4ec67553b15af2e2a41cbb6 kernel-tools-libs-4.18.0-553.171.1.el8_10.x86_64.rpm d65a203f10b7a69e19897625234cf56c33efb5d4a4cfb748d535cd90101f025c kernel-core-4.18.0-553.171.1.el8_10.x86_64.rpm d6dbb1bf225a3dc741103ab0e8102c891812e36c3872415af7f8b0e220834c3f kernel-debug-4.18.0-553.171.1.el8_10.x86_64.rpm e386f4699f7a6d55280dd72268f3483484fa084b9a7b05ccb941f19c2301ca5d kernel-modules-4.18.0-553.171.1.el8_10.x86_64.rpm f1643f357145ce31a10361261012e67dab8fa5d8790e9bdd6c64ed8aff599571 ALSA-2026:7670 Important: nodejs:24 security update Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs denial of service (CVE-2026-21637) * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996) * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581) * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527) * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526) * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229) * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525) * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528) * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712) * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710) * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions (CVE-2026-21715) * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716) * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711) * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713) * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714) * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default npm-11.11.0-1.24.14.1.2.module_el8.10.0+4160+4819ac42.noarch.rpm 149b7e5f38874abbc9d1a1f050adfb1b83230912911b200f8251cae7894a2d5d v8-13.6-devel-13.6.233.17-1.24.14.1.2.module_el8.10.0+4160+4819ac42.x86_64.rpm b0582a291e3bba2f7184e68d23e091609f2edefd429261ff9e51f552243f9ec0 ALSA-2026:77498 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: packet: use consistent hard_header_len in non-ring send paths () * kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-tools-libs-devel-4.18.0-553.172.1.el8_10.x86_64.rpm 148086ee37430f397ade3e86b344de2664e4cc48fcc2ab08cc3e0ebe14833779 kernel-tools-libs-4.18.0-553.172.1.el8_10.x86_64.rpm 2947cb3e9ecb566df9f2f94c7c851314fc1e4295a72826b5a1d8cd9e97eab827 kernel-headers-4.18.0-553.172.1.el8_10.x86_64.rpm 3900159d206f6d641ca8c9a2dceec311f021103a869b4a41e7cf0d2812a9be48 perf-4.18.0-553.172.1.el8_10.x86_64.rpm 40be326693854b3778abdd677526a206a54495df54de9eadd2b435dd360357a3 kernel-core-4.18.0-553.172.1.el8_10.x86_64.rpm 538c3fa9c34b2d0197fc59d782c8acf7eed32f451ad080cb43c69d35ff896126 kernel-4.18.0-553.172.1.el8_10.x86_64.rpm 5a63cd71ff6600e7285cc12257e168203b5543bacf0b08dca8f054e5f1099ac9 kernel-debug-4.18.0-553.172.1.el8_10.x86_64.rpm 6899be871b57bde8bbabdaec7034342dcb4dc09b90c394d6b06c28df54155ca2 kernel-debug-core-4.18.0-553.172.1.el8_10.x86_64.rpm 6a19b195c916d64c3037a88f815a3a948a70f0da0cb16b9e8d2e6707a444083d kernel-tools-4.18.0-553.172.1.el8_10.x86_64.rpm 6bc4a50b5cf996170501bb28d40e187c1cbdd383f9a968bc9ca960d7bfa4f545 kernel-devel-4.18.0-553.172.1.el8_10.x86_64.rpm 7de21e2560eaf5d9c86addaa3706edeecd7c68a7f39ff91289771e458ad1455c bpftool-4.18.0-553.172.1.el8_10.x86_64.rpm 8f1df9bf15e58d439b9949246a153c983b840c4d4c31b7d6c421ce41a26e0ca4 python3-perf-4.18.0-553.172.1.el8_10.x86_64.rpm 976560286c0bd77b1368cad677cd4728ae7d06c232b4c113a30246876a530d85 kernel-modules-extra-4.18.0-553.172.1.el8_10.x86_64.rpm 9b064abac6fe4e2955fa82fd582d724ba260058e5e37016190e46a84e8c41966 kernel-modules-4.18.0-553.172.1.el8_10.x86_64.rpm a6d49411d406caf100998ad7ae60c6326bf090dbe116e17cd0b52e06278171ff kernel-debug-modules-4.18.0-553.172.1.el8_10.x86_64.rpm ab48770b6e5f936a74be86912ecdc24618ca58a4ab048beb9600d2799725756d kernel-debug-modules-extra-4.18.0-553.172.1.el8_10.x86_64.rpm b4a775164bcbfb8b04b9bde754f966ff524ff705f7e3a2df2133a8fb14a82691 kernel-debug-devel-4.18.0-553.172.1.el8_10.x86_64.rpm e60a15d6ab7a343bb04eff39c40328930764106f4e0609fe0269dc1fea8b4ab5 kernel-cross-headers-4.18.0-553.172.1.el8_10.x86_64.rpm e7994352e57023dc27d64bd8ce5a342a64b6e14c7602336adecc36599d5641ec ALSA-2026:82807 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236) * kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: cifs: validate DFS referral string offsets (CVE-2026-72318) * kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887) * kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-debug-modules-extra-4.18.0-553.173.1.el8_10.x86_64.rpm 074830d451abdc1c2fde76de22782aead6f61a5bcdd62d776aaf0056b907106b kernel-debug-modules-4.18.0-553.173.1.el8_10.x86_64.rpm 0ee2de0e25eec13ee99ad21aa4fa7d48f98e300e5befb9bb13924151a31bf983 kernel-4.18.0-553.173.1.el8_10.x86_64.rpm 3ccf94b5196966b7250029897ed3bf0e8be63faf1689869d5b957de52bf1b5c1 kernel-debug-4.18.0-553.173.1.el8_10.x86_64.rpm 5ab4073688caccaaf1c4aa720407514ba974458946a8d3f8df07c897c51c10a3 kernel-tools-libs-devel-4.18.0-553.173.1.el8_10.x86_64.rpm 5bcae857ebbe03142d80c98de7a39dde37c95cdc24fe815f908951b85ed84ea0 kernel-headers-4.18.0-553.173.1.el8_10.x86_64.rpm 64a6b595b252f49ad85aaaf9511a80d97fa2fc321cdb6c2ea1917352207df0fe kernel-devel-4.18.0-553.173.1.el8_10.x86_64.rpm 690017b9e9cb9e4af0a4f49983a22635532352247a422f127a4eacae8593122d kernel-debug-devel-4.18.0-553.173.1.el8_10.x86_64.rpm 7060c932a3fe9a8550324dd9d26b386bfc1916768c5dbd13558049f249077ffb python3-perf-4.18.0-553.173.1.el8_10.x86_64.rpm 89bdc3374b08c79aac738a3210bb0a191801e6e8659c6383ab4e50cd30f11d96 kernel-modules-4.18.0-553.173.1.el8_10.x86_64.rpm 94c244e045fb80244009ca4fade815c8dd5cf67f9fb5dd7c04a9768a07f7422c kernel-debug-core-4.18.0-553.173.1.el8_10.x86_64.rpm 9772240533888fad4c1bb73455ae879c7da7c2bd0feb874f5db58d14ae26eb2b perf-4.18.0-553.173.1.el8_10.x86_64.rpm a8d7f18cb4f357a22b393ebc657077f8636d223d8f6e98dcdc2bfda8efbd6726 kernel-tools-libs-4.18.0-553.173.1.el8_10.x86_64.rpm b7b8d027355d0b33eb66671b538242276a2b34aee06f6b8cd27fd8680bf15075 kernel-tools-4.18.0-553.173.1.el8_10.x86_64.rpm bc60c5274a9d5e09bb6b7667d41bff37152b448f2e31dbdc53182335ffa41aea kernel-cross-headers-4.18.0-553.173.1.el8_10.x86_64.rpm d5adf25cc73d7383e4b24ffb860c4e90f19d804c3828f7faddb1d8babb88a230 kernel-core-4.18.0-553.173.1.el8_10.x86_64.rpm d62d1157d999ca431d6f794f55194eda0218a44fff9d9c85a54f4971d035752b kernel-modules-extra-4.18.0-553.173.1.el8_10.x86_64.rpm d69ba1c63730ea99611bbbc612fd38b55a4ed9da0f06e5f9f193f0d0e17fe6d3 bpftool-4.18.0-553.173.1.el8_10.x86_64.rpm ed6f480240babae73589020de1be39404a921e0b52285eb33183fae8df222672 ALSA-2026:83157 Important: kernel security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) Bug Fix(es) and Enhancement(s): * powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:AlmaLinux-240146) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-cross-headers-4.18.0-553.174.1.el8_10.x86_64.rpm 0264b9a7e04c7ed822b06ec17e41fd3f895a63bb8f0f335d68c281024d50b7dd kernel-core-4.18.0-553.174.1.el8_10.x86_64.rpm 092514d234e470c2fd18ae699d5b309b8f5020570007085b5e1bc8998c2cd79c kernel-debug-modules-4.18.0-553.174.1.el8_10.x86_64.rpm 19b13a8e7f7b49688811a74b83c804f55cd34c88efe62d3fed4a05d5424f3791 kernel-headers-4.18.0-553.174.1.el8_10.x86_64.rpm 21728a0d2d8089bb70c33fdf8a4cf9513db141b166578a07cd487db14267bc53 perf-4.18.0-553.174.1.el8_10.x86_64.rpm 296f34c8670c4a18297c2a2c2a955af9c8cb041fffb790ef7790d16d5ba15f4a kernel-debug-4.18.0-553.174.1.el8_10.x86_64.rpm 4496924e5e05ebe4888a3f4823bb745eb6f26d24d1a3fa2d65d9ab2db31ac979 kernel-modules-4.18.0-553.174.1.el8_10.x86_64.rpm 4faced770eb3e32419d903a86a0274f52e129c64df0c6946318dc1e1410da241 bpftool-4.18.0-553.174.1.el8_10.x86_64.rpm 6d07e66010e8aaf3ea5ac124a22cb7e0753a14b7a9efd40db4190342c6f9745d kernel-debug-devel-4.18.0-553.174.1.el8_10.x86_64.rpm 8cbbdea9a2cd1df5a06ff8c25768a0a9a78020fcde1e39ac1c5e123bc3313f81 kernel-debug-modules-extra-4.18.0-553.174.1.el8_10.x86_64.rpm 8f612c64975b00ef330f6ba9000f2010e7ff20deb6f5acd2214dbbfba2879519 kernel-modules-extra-4.18.0-553.174.1.el8_10.x86_64.rpm 8f67d108d20e16a1fe16bded3a25fe702d763c67df2c3a2d14f66bbb1db33515 python3-perf-4.18.0-553.174.1.el8_10.x86_64.rpm 9a55a78d1396f51a9f533eb447380d28843509f40cda1456698d71a23ec2d4f0 kernel-4.18.0-553.174.1.el8_10.x86_64.rpm 9ec8586e48849f170bbac645e5b5e4f65e7cfbc312cea96cea95df43719ee699 kernel-tools-4.18.0-553.174.1.el8_10.x86_64.rpm b9c8f11e837117aec9a3e6d1c947c27ff03ddc44c51c8f59963866f338970d13 kernel-tools-libs-4.18.0-553.174.1.el8_10.x86_64.rpm e73e26840b7ad47fda2e7e37be659e98576577f499f96a5fe712f45f22031c3f kernel-debug-core-4.18.0-553.174.1.el8_10.x86_64.rpm f87e4a627730d9d7cf445d333fca6e89cc7828b020e17b212b99104bd04e706e kernel-tools-libs-devel-4.18.0-553.174.1.el8_10.x86_64.rpm fa267861b7efbec8cc0d6511ac1801dce0481531f5df40822e15e7e593954c8a kernel-devel-4.18.0-553.174.1.el8_10.x86_64.rpm fff45528e1b80e6ec7f8e63848d85ee62d0db48b235020e1a4fa5f711c87a446 ALSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Critical

idm:DL1 security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198) * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197) * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861) * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147) * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550) * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097) * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578) * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678) Bug Fix(es) and Enhancement(s): * Fix ipatests for kdcproxy after CVE-2025-59088 fix [almalinux-8.10.z] (JIRA:AlmaLinux-129966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default python3-ipatests-4.9.13-21.module_el8.10.0+4302+2d2000af.3.noarch.rpm 0dc892199eff5db7ff0d4f18fbc8fd1f9ea16661bf474c6e54d5c1d0a7e3f831 ipa-server-trust-ad-4.9.13-21.module_el8.10.0+4302+2d2000af.3.x86_64.rpm 1b75458b0313664a1af372bb657c21556df1eab6d090745e3a331c9f94957077 ipa-server-dns-4.9.13-21.module_el8.10.0+4302+2d2000af.3.noarch.rpm 41ac26e437e356ffae3f1853af16bfe2a1b506b069def7ecdd8184bc1ab8da84 ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm 59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b python3-ipaserver-4.9.13-21.module_el8.10.0+4302+2d2000af.3.noarch.rpm 6e5b188f929fec264a8166ce08465200a08aab493312263f5c94252b8266c70f ipa-server-common-4.9.13-21.module_el8.10.0+4302+2d2000af.3.noarch.rpm 7ab3b7165531371d213aeb17e9ba8f415d8bd39db86d7025f9c24629d9d4ac0d ipa-server-4.9.13-21.module_el8.10.0+4302+2d2000af.3.x86_64.rpm 92042bf5fac7411f48b87cf0957f5e07cfc15dfb838b107d5008349a66465e35 ALSA-2026:8473 Important: .NET 10.0 security update Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588) * kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752) * kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631) * kernel: sctp: stop processing a packet once its association is deleted (CVE-2026-89479) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * gfs2 filesystem withdrawal rework [AlmaLinux-8] (JIRA:AlmaLinux-129363) * Batch: z-stream xfrm - almalinux-8.10.z (NST-Core-26W38) (JIRA:AlmaLinux-256684) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-tools-libs-4.18.0-553.176.1.el8_10.x86_64.rpm 1810713453bdb329f6d1e26457ff7eeb723394cee0187cc8352a09756972f1ff kernel-modules-4.18.0-553.176.1.el8_10.x86_64.rpm 1aea093811ac5d4c154a92e3f46b33c9b10fd96c87799270fe08a9df1bf0334d kernel-tools-4.18.0-553.176.1.el8_10.x86_64.rpm 27d29d424aef4eb710770e6dd7fc74dd33a95112116b5484a74eec77004e366b kernel-cross-headers-4.18.0-553.176.1.el8_10.x86_64.rpm 33ebece195481a89d2c9667487a652a1a8c51cb94dbece341be15c95deeb9bc7 kernel-tools-libs-devel-4.18.0-553.176.1.el8_10.x86_64.rpm 37e02efc6bbf940a934092f5945cc4c1fea3d86e09e04af45e8ebce4eb898e83 kernel-core-4.18.0-553.176.1.el8_10.x86_64.rpm 3c22aa029619b0da21e9494c95fb21784205991976db30d30b3dc3af283ac66f python3-perf-4.18.0-553.176.1.el8_10.x86_64.rpm 4e241d9987c2d323194d272de8db235c6d458ed1b134c4ef959c3536f88b01f2 perf-4.18.0-553.176.1.el8_10.x86_64.rpm 53f58b3112b4204bbec12d32d9b6f3a530e18b80d8c53be557932d7da38123a4 kernel-debug-modules-4.18.0-553.176.1.el8_10.x86_64.rpm 738be1e30bd0ff04cc0d5290b5c5710368453e2e0ab52cde3446f7eb2292973e kernel-debug-devel-4.18.0-553.176.1.el8_10.x86_64.rpm 8cd6f7119041fc8351f692a89df37e246e16e2bc854623643b6c2970d6accb37 kernel-4.18.0-553.176.1.el8_10.x86_64.rpm a8839cec612245c48a1be50d6019faee9ca194098a48c886277550e2ac5184a8 kernel-devel-4.18.0-553.176.1.el8_10.x86_64.rpm afb4a93a151e20fc6635b96ea9afc35a748e5f09a447ddb52aa24058e49b9f25 kernel-headers-4.18.0-553.176.1.el8_10.x86_64.rpm c1ae924afdde3fe4e5d1a6e79ad7b2c4b0184f635eee77d1eaa7c97223013ebb kernel-debug-modules-extra-4.18.0-553.176.1.el8_10.x86_64.rpm cbdac5dccec1033f92b54e0e3dc3dc54389ea9ac6422429c65d6f9ebe997fb76 bpftool-4.18.0-553.176.1.el8_10.x86_64.rpm e8d0622d34c534f2c3ad31a9efaf2340676a81aaec389381159e5d15812f30dc kernel-modules-extra-4.18.0-553.176.1.el8_10.x86_64.rpm eeb79a69e7604d4c3a166539265bba46f62a8a578faa8af8c1cc38fb065323fc kernel-debug-core-4.18.0-553.176.1.el8_10.x86_64.rpm f641450b8a598cc618d6cb53210b310801ead4dfee69d850491baa1943a469d1 kernel-debug-4.18.0-553.176.1.el8_10.x86_64.rpm ffb8c4d7526195a21799b5c4be5588f7e82dde92c950e1ff64fdbab083b0ad16 ALSA-2026:86192 Critical: .NET 10.0 security, bug fix, and enhancement update Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.113 Runtime version: 10.0.13 Security Fix(es): * dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-102870) * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) * dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96957) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.113 and Runtime 10.0.13 (JIRA:AlmaLinux-277805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default dotnet-hostfxr-10.0-10.0.13-1.el8_10.x86_64.rpm 20c5ee3a122e6e99d7e17e89e388a17f2d19f3ad59459897ec99aa0f664a9ee8 dotnet-sdk-10.0-source-built-artifacts-10.0.113-1.el8_10.x86_64.rpm 3a45e6f051516446b04379f3d5d56ba819126b5fac841c53d7b5eebc147620ad dotnet-runtime-dbg-10.0-10.0.13-1.el8_10.x86_64.rpm 85ece18d229f4a1359011894fe7b7ecce2578530e4464b4374f7185ffd11071b dotnet-templates-10.0-10.0.113-1.el8_10.x86_64.rpm 8777f197da18f05962a26c6b40bbc198f71f7af99d8dea197c454b7c342ee129 dotnet-apphost-pack-10.0-10.0.13-1.el8_10.x86_64.rpm 8bdc6f651832635b19c9bdd30e6eb9c4ac19e6c90fbfdc936e9a2820020cdff8 aspnetcore-targeting-pack-10.0-10.0.13-1.el8_10.x86_64.rpm 8ef3a41a3b1532f20cdc00210182149e33e71ff3055086a0ff2a2691be85518f dotnet-sdk-10.0-10.0.113-1.el8_10.x86_64.rpm 90fdbc7ef5a57c035c924340fce6adbf4536cf9700e0f59b9a22d71aa591ddf8 dotnet-targeting-pack-10.0-10.0.13-1.el8_10.x86_64.rpm 95127ecd49af4ece062ecbff1c282e5570025557d0ef85f45956537bf1f84894 dotnet-sdk-dbg-10.0-10.0.113-1.el8_10.x86_64.rpm 98fd53f14302cacf8176aabe2642887252edcabe354f1c2572545cd7abf73054 dotnet-sdk-aot-10.0-10.0.113-1.el8_10.x86_64.rpm a8791a5c258c5d64d526cf2fdc2c3d739ef31812d0a9a1599cfb688219e127dd aspnetcore-runtime-10.0-10.0.13-1.el8_10.x86_64.rpm a8dee680f63d10795e0c3436f8d86ec88938baba9bcc90a7253ccfd0828cfac1 dotnet-runtime-10.0-10.0.13-1.el8_10.x86_64.rpm b480e320dfd94dedcbe8619241e2deb909dc441b2d5018b57629e4f79ff887e9 aspnetcore-runtime-dbg-10.0-10.0.13-1.el8_10.x86_64.rpm d14912c9fb6b6eaa154f5321a7438e467a491bf1d11e6b0303ef794b7928119c ALSA-2026:87375 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) * kernel: inet: frags: strip GSO state from fragments before reassembly (CVE-2026-80590) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-debug-devel-4.18.0-553.177.1.el8_10.x86_64.rpm 07893b1a8c728dfe6423486bd88138ecd31986131845820e36dc5f2338dec4f1 kernel-modules-4.18.0-553.177.1.el8_10.x86_64.rpm 0dc233c3dcffc1f5502e639c647a13e94026127eed7a315edcd3aaa81868ce88 perf-4.18.0-553.177.1.el8_10.x86_64.rpm 3d22dd43be75083b41f87f8471fe027d7d0d275e4f11017206e179c4cdf97705 kernel-devel-4.18.0-553.177.1.el8_10.x86_64.rpm 52c58f7804d8dc23a0212d20d45e91f864d56d84b61789228db3fc2d62c8b850 bpftool-4.18.0-553.177.1.el8_10.x86_64.rpm 790cc34d18e6fe3eb7d9b0cbf6c6841c7784fe51cd6e99f59ec214bde7eb08b3 kernel-4.18.0-553.177.1.el8_10.x86_64.rpm 79a5d8e46cd1050e622a79f64088312d8f704fbb7660fe082b524302bf8602d9 python3-perf-4.18.0-553.177.1.el8_10.x86_64.rpm 87a9447924380200599f799f9d10954f80114f3767452e95778b351ecdf1b6d2 kernel-debug-modules-4.18.0-553.177.1.el8_10.x86_64.rpm 93334b60f44da157f09e9626a3a3ff79e1b9a5b2d02ffe727cd4d02f5f91d1ef kernel-tools-libs-4.18.0-553.177.1.el8_10.x86_64.rpm a8797fde19b2919020e34dd45fcc89ce2f0f45be8e1000986d251585d7144fd1 kernel-headers-4.18.0-553.177.1.el8_10.x86_64.rpm ab05e324bcfd09fb750638d406ab50cd8b7f75f9fdcc95857e47d2ae424cac44 kernel-debug-core-4.18.0-553.177.1.el8_10.x86_64.rpm b03603942e4208fb11a56c11c8608048a59e673e708fbac6a54156099ba027ab kernel-modules-extra-4.18.0-553.177.1.el8_10.x86_64.rpm c13ea7bb0d0abf84b78554a57038a4c25d33cbe41ac827591abdb066927a1a3b kernel-core-4.18.0-553.177.1.el8_10.x86_64.rpm cdf55c5d876e40ef85d9656073036ad9dc3718cf86f911d698c69651f1457cfa kernel-tools-4.18.0-553.177.1.el8_10.x86_64.rpm e0e42bd2867bc5fec5f2ce3c0a64baeceb535c296bfcc86d40208bbd69dd3bf3 kernel-cross-headers-4.18.0-553.177.1.el8_10.x86_64.rpm e3a4e4481e9dbf131fe6652cd7d57ddd9afe983ea49059e906766aefa4a1f6c3 kernel-debug-4.18.0-553.177.1.el8_10.x86_64.rpm e4732ec4354b85ab7694cb2b98210996d8879e2cfef40aea0e0cc568062185fd kernel-debug-modules-extra-4.18.0-553.177.1.el8_10.x86_64.rpm f14ac2eccc10648d8e2e92ddcadc0cfdb451909efeefcc59c82445130e5f3ea6 kernel-tools-libs-devel-4.18.0-553.177.1.el8_10.x86_64.rpm fec333dce6922148126b51f3e49067f52c7601bf96e80dd27610090072b8903e ALSA-2026:A001 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-ipaclones-internal-4.18.0-553.121.1.el8_10.x86_64.rpm 3d91e1e778c783cff47e890e6e382428d769aee48940978ab269929dfff8ece6 kernel-selftests-internal-4.18.0-553.121.1.el8_10.x86_64.rpm 67888e19ed2d06f9fa1e46e1ec0d0df5390a213492a01b3dd3004e228726337c kernel-modules-internal-4.18.0-553.121.1.el8_10.x86_64.rpm 7932b02c4960b4f973fa2b024ce891c8135f9692f1ad2fa27d5a96e02fa57bbb kernel-debug-modules-internal-4.18.0-553.121.1.el8_10.x86_64.rpm 8ce75dba157b17f0dae092308d53b16e1df364dae584e3712a48b69a343315de ALSA-2026:A004 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-ipaclones-internal-4.18.0-553.123.2.el8_10.x86_64.rpm 340f64c427ff60ae632791020da039919b85f5904004f39747324a9fb6688462 kernel-selftests-internal-4.18.0-553.123.2.el8_10.x86_64.rpm 948d2f06712425e46790e165d3e4f8161a2e58b9aa700e3f4841d2bd7ce59610 kernel-modules-internal-4.18.0-553.123.2.el8_10.x86_64.rpm 9e18863e324a877d38b86652fd85fc604b1dad00cc238d60148b21d1a232bd08 kernel-debug-modules-internal-4.18.0-553.123.2.el8_10.x86_64.rpm a3a874276daca829336b36b022d8ce736e5e7389f4b18cb3f9d126362e955bab ALSA-2026:A007 Important: kernel-rt security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-rt-modules-internal-4.18.0-553.123.2.rt7.464.el8_10.x86_64.rpm 0726db76192acd9b84f286f9e99f7725d0e26e10452770594eb872a2686767c5 kernel-rt-selftests-internal-4.18.0-553.123.2.rt7.464.el8_10.x86_64.rpm 0e373298ad2888dae2e60d20b3498e0362165d8bed7015a914934d45d6d407b8 kernel-rt-debug-modules-internal-4.18.0-553.123.2.rt7.464.el8_10.x86_64.rpm 64295ac632c233f700e1c9b4fcc2dbe0a11de7dce5f56ea9f62edf67726420c5 ALSA-2026:A008 Important: kernel security update Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300) * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-8-for-x86_64-devel-rpms__8_10_default kernel-ipaclones-internal-4.18.0-553.124.4.el8_10.x86_64.rpm 9f7a70cad2849c077c99ad8800b5b188ffedaec642f8ba652971d8116fa5d643 kernel-debug-modules-internal-4.18.0-553.124.4.el8_10.x86_64.rpm b3f142e7d0ed4c6fab136467bb1d5d26a9d6766e556bab37f0e86e06b1835ec0 kernel-modules-internal-4.18.0-553.124.4.el8_10.x86_64.rpm e56d2071ad44855b2aa1ed8648bcbddfd34d424942df1422ddd88d7283c6419c kernel-selftests-internal-4.18.0-553.124.4.el8_10.x86_64.rpm f4687e67f02958512d593c65f115618d830ea75c97ad3d0e95416e412fb87438