<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18134</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-06-08 10:12:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633)
  * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
  * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
  * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
  * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
  * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
  * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202)
  * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
  * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267)
  * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275)
  * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346)
  * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345)
  * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
  * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
  * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
  * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
  * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034)
  * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
  * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210)
  * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257)
  * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320)
  * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
  * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18134" id="RHSA-2026:18134" type="rhsa" title="RHSA-2026:18134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56633" id="CVE-2024-56633" type="cve" title="CVE-2024-56633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21839" id="CVE-2025-21839" type="cve" title="CVE-2025-21839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37980" id="CVE-2025-37980" type="cve" title="CVE-2025-37980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38015" id="CVE-2025-38015" type="cve" title="CVE-2025-38015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38097" id="CVE-2025-38097" type="cve" title="CVE-2025-38097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38166" id="CVE-2025-38166" type="cve" title="CVE-2025-38166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38202" id="CVE-2025-38202" type="cve" title="CVE-2025-38202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38267" id="CVE-2025-38267" type="cve" title="CVE-2025-38267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38275" id="CVE-2025-38275" type="cve" title="CVE-2025-38275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38279" id="CVE-2025-38279" type="cve" title="CVE-2025-38279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38345" id="CVE-2025-38345" type="cve" title="CVE-2025-38345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38346" id="CVE-2025-38346" type="cve" title="CVE-2025-38346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38405" id="CVE-2025-38405" type="cve" title="CVE-2025-38405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38441" id="CVE-2025-38441" type="cve" title="CVE-2025-38441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38470" id="CVE-2025-38470" type="cve" title="CVE-2025-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39866" id="CVE-2025-39866" type="cve" title="CVE-2025-39866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40034" id="CVE-2025-40034" type="cve" title="CVE-2025-40034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40134" id="CVE-2025-40134" type="cve" title="CVE-2025-40134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40210" id="CVE-2025-40210" type="cve" title="CVE-2025-40210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40257" id="CVE-2025-40257" type="cve" title="CVE-2025-40257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40320" id="CVE-2025-40320" type="cve" title="CVE-2025-40320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23040" id="CVE-2026-23040" type="cve" title="CVE-2026-23040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23111" id="CVE-2026-23111" type="cve" title="CVE-2026-23111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23210" id="CVE-2026-23210" type="cve" title="CVE-2026-23210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23243" id="CVE-2026-23243" type="cve" title="CVE-2026-23243"/>
      <reference href="https://bugzilla.redhat.com/2334549" id="2334549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350585" id="2350585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367614" id="2367614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373343" id="2373343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376060" id="2376060" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376065" id="2376065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376382" id="2376382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379178" id="2379178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379187" id="2379187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379199" id="2379199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379237" id="2379237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379239" id="2379239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383399" id="2383399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383478" id="2383478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383906" id="2383906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396940" id="2396940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406782" id="2406782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414468" id="2414468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416307" id="2416307" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418880" id="2418880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419945" id="2419945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436806" id="2436806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439687" id="2439687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439895" id="2439895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448594" id="2448594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-18134.html" id="ALSA-2026:18134" type="self" title="ALSA-2026:18134"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="211.7.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.7.1.el10_2.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-211.7.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">062281687b95f131e68b86f74d3de13fdc3797aed5c0244b8bc30c4d069a59fe</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="211.7.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.7.1.el10_2.src.rpm">
          <filename>kernel-cross-headers-6.12.0-211.7.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">75da67fdbaec074a6174fb02a08cdcd24444a75fef92dde80b7f6ab8fc9da31c</sum>
        </package>
        <package name="libperf" version="6.12.0" release="211.7.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.7.1.el10_2.src.rpm">
          <filename>libperf-6.12.0-211.7.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">dee1803498c2cd5d221ce771f718231d02b1018acab3670081567665cedc8b99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18142</id>
    <title>Low: NetworkManager security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * networkmanagr: NetworkManager File Access (CVE-2025-9615)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18142" id="RHSA-2026:18142" type="rhsa" title="RHSA-2026:18142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9615" id="CVE-2025-9615" type="cve" title="CVE-2025-9615"/>
      <reference href="https://bugzilla.redhat.com/2391503" id="2391503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-18142.html" id="ALSA-2026:18142" type="self" title="ALSA-2026:18142"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="NetworkManager-libnm-devel" version="1.56.0" release="1.el10" epoch="1" arch="ppc64le" src="NetworkManager-1.56.0-1.el10.src.rpm">
          <filename>NetworkManager-libnm-devel-1.56.0-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">b6017ade615dcbbd9f09bc9f6cfc6071dabb1ae989b4888b33f4deb66151a681</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18326</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libvirt: Denial of service in XML parsing (CVE-2025-12748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18326" id="RHSA-2026:18326" type="rhsa" title="RHSA-2026:18326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12748" id="CVE-2025-12748" type="cve" title="CVE-2025-12748"/>
      <reference href="https://bugzilla.redhat.com/2413801" id="2413801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-18326.html" id="ALSA-2026:18326" type="self" title="ALSA-2026:18326"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libvirt-docs" version="11.10.0" release="12.el10_2.alma.1" epoch="0" arch="ppc64le" src="libvirt-11.10.0-12.el10_2.alma.1.src.rpm">
          <filename>libvirt-docs-11.10.0-12.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">4eaa9e77a95d27e180e47cdc9de5a18d2a203d3ac51c55e07161d1589cfdc153</sum>
        </package>
        <package name="libvirt-devel" version="11.10.0" release="12.el10_2.alma.1" epoch="0" arch="ppc64le" src="libvirt-11.10.0-12.el10_2.alma.1.src.rpm">
          <filename>libvirt-devel-11.10.0-12.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">fe4b77ca9e6e3c2d24dcced33cc682f49db98d717a6228a60f80fe1b1c83b6bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18421</id>
    <title>Moderate: luksmeta security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>luksmeta security update</summary>
    <description>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.  

Security Fix(es):  

  * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18421" id="RHSA-2026:18421" type="rhsa" title="RHSA-2026:18421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11568" id="CVE-2025-11568" type="cve" title="CVE-2025-11568"/>
      <reference href="https://bugzilla.redhat.com/2404244" id="2404244" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-18421.html" id="ALSA-2026:18421" type="self" title="ALSA-2026:18421"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libluksmeta-devel" version="10" release="1.el10" epoch="0" arch="ppc64le" src="luksmeta-10-1.el10.src.rpm">
          <filename>libluksmeta-devel-10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">b59f3fd41549ea85ca1055af3c41097bd8a67caeb9d8d3b89ebf92f2c6639c18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18465</id>
    <title>Important: edk2 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:33:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18465" id="RHSA-2026:18465" type="rhsa" title="RHSA-2026:18465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2296" id="CVE-2025-2296" type="cve" title="CVE-2025-2296"/>
      <reference href="https://bugzilla.redhat.com/2420637" id="2420637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-18465.html" id="ALSA-2026:18465" type="self" title="ALSA-2026:18465"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="edk2-ovmf" version="20251114" release="5.el10_2" epoch="0" arch="noarch" src="edk2-20251114-5.el10_2.src.rpm">
          <filename>edk2-ovmf-20251114-5.el10_2.noarch.rpm</filename>
          <sum type="sha256">0440f37c3dfa7d8ed89074f19a592ec31ae69caf218c9c023a8e521cbedd1c05</sum>
        </package>
        <package name="edk2-aarch64" version="20251114" release="5.el10_2" epoch="0" arch="noarch" src="edk2-20251114-5.el10_2.src.rpm">
          <filename>edk2-aarch64-20251114-5.el10_2.noarch.rpm</filename>
          <sum type="sha256">661e753247f1f87f60b2ab15a15e98b65bd5218f23543c33c5087b94428cc7aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18556</id>
    <title>Moderate: unbound security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: DNSBomb vulnerability (CVE-2024-33655)
  * unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18556" id="RHSA-2026:18556" type="rhsa" title="RHSA-2026:18556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33655" id="CVE-2024-33655" type="cve" title="CVE-2024-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11411" id="CVE-2025-11411" type="cve" title="CVE-2025-11411"/>
      <reference href="https://bugzilla.redhat.com/2279942" id="2279942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405706" id="2405706" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-18556.html" id="ALSA-2026:18556" type="self" title="ALSA-2026:18556"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="unbound-devel" version="1.24.2" release="7.el10" epoch="0" arch="ppc64le" src="unbound-1.24.2-7.el10.src.rpm">
          <filename>unbound-devel-1.24.2-7.el10.ppc64le.rpm</filename>
          <sum type="sha256">be19bcc98a10489309184ec21de83f73dece198fcba6dce2f44173026760afd8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19009</id>
    <title>Important: postgresql18 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql18 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory (CVE-2026-2007)
  * postgresql: PostgreSQL oidvector discloses a few bytes of memory (CVE-2026-2003)
  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19009" id="RHSA-2026:19009" type="rhsa" title="RHSA-2026:19009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2003" id="CVE-2026-2003" type="cve" title="CVE-2026-2003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2007" id="CVE-2026-2007" type="cve" title="CVE-2026-2007"/>
      <reference href="https://bugzilla.redhat.com/2439320" id="2439320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439322" id="2439322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19009.html" id="ALSA-2026:19009" type="self" title="ALSA-2026:19009"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="postgresql18-test-rpm-macros" version="18.3" release="1.el10_2" epoch="0" arch="noarch" src="postgresql18-18.3-1.el10_2.src.rpm">
          <filename>postgresql18-test-rpm-macros-18.3-1.el10_2.noarch.rpm</filename>
          <sum type="sha256">e9147c3a255628bd463c0f2320a7d06550e3494a0ceb08582a56325aabc74712</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19010</id>
    <title>Important: postgresql16 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql16 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: PostgreSQL oidvector discloses a few bytes of memory (CVE-2026-2003)
  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19010" id="RHSA-2026:19010" type="rhsa" title="RHSA-2026:19010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2003" id="CVE-2026-2003" type="cve" title="CVE-2026-2003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439322" id="2439322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19010.html" id="ALSA-2026:19010" type="self" title="ALSA-2026:19010"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="postgresql-test-rpm-macros" version="16.13" release="1.el10_2" epoch="0" arch="noarch" src="postgresql16-16.13-1.el10_2.src.rpm">
          <filename>postgresql-test-rpm-macros-16.13-1.el10_2.noarch.rpm</filename>
          <sum type="sha256">d4481b8a457194d72857697fc9d4be3eea8b3c7d0946949734ed60169bef4a82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19017</id>
    <title>Important: podman security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
  * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19017" id="RHSA-2026:19017" type="rhsa" title="RHSA-2026:19017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34986" id="CVE-2026-34986" type="cve" title="CVE-2026-34986"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455470" id="2455470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19017.html" id="ALSA-2026:19017" type="self" title="ALSA-2026:19017"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.8.2" release="1.el10_2.alma.1" epoch="7" arch="ppc64le" src="podman-5.8.2-1.el10_2.alma.1.src.rpm">
          <filename>podman-tests-5.8.2-1.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">88725138574d75c49244926b327e4b369d8856294dc03c8232bb3daa6b7467e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19019</id>
    <title>Important: python3.14 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:33:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.14 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)
  * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19019" id="RHSA-2026:19019" type="rhsa" title="RHSA-2026:19019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5713" id="CVE-2026-5713" type="cve" title="CVE-2026-5713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458239" id="2458239" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19019.html" id="ALSA-2026:19019" type="self" title="ALSA-2026:19019"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3.14-debug" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-debug-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">115aed4f3804dd650bc4c611a1e4874a62f23e596819feab31fa3baf8f4b35f6</sum>
        </package>
        <package name="python3.14-freethreading-libs" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-libs-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">2cd5ede64dabcac8ba13d4d86f72903083cc36d603bfe89274eac08991e1d4e0</sum>
        </package>
        <package name="python3.14-freethreading-debug" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-debug-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">30fcd8b4c760bce2103f334d6a64aedbd5e811bfb6f59a3e5b0fd24d20e8b1a0</sum>
        </package>
        <package name="python3.14-freethreading-idle" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-idle-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">60a9e31f3efdb610bc19e79fdb89581863060a73882d0409c2a7be6632622d1d</sum>
        </package>
        <package name="python3.14-freethreading-devel" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-devel-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">77669ddb3af9a2baccf4aed67e9951e401cb1a6e8d67d3b46513fbb9063d507b</sum>
        </package>
        <package name="python3.14-freethreading-test" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-test-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">78350f02a7b2011f77ce0411c11b8ce9336ddee8c52efc6d8478ba6c73d1378e</sum>
        </package>
        <package name="python3.14-idle" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-idle-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">791ef4511e3e20cd33b7a4b37372e36f8ce99e69599e5ab8e00032b465abea1d</sum>
        </package>
        <package name="python3.14-freethreading-tkinter" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-tkinter-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">c3f769454d8f2e424d6b776e08465e75e50c9ab52b96a8d5bbf3e504b92a3b01</sum>
        </package>
        <package name="python3.14-test" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-test-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">cff07a5f6c726ec385bbb79273522d79e56e1a1af6093aa0f06abe46032dac83</sum>
        </package>
        <package name="python3.14-freethreading" version="3.14.4" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.14-3.14.4-2.el10_2.src.rpm">
          <filename>python3.14-freethreading-3.14.4-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">de649e63909dd66ced536c1827fed2bbe5b397fadf4c2d092c0d21706c4703a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19024</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19024" id="RHSA-2026:19024" type="rhsa" title="RHSA-2026:19024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2922" id="CVE-2026-2922" type="cve" title="CVE-2026-2922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447500" id="2447500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19024.html" id="ALSA-2026:19024" type="self" title="ALSA-2026:19024"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.26.7" release="2.el10_2" epoch="0" arch="ppc64le" src="gstreamer1-plugins-bad-free-1.26.7-2.el10_2.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">1497aa9e7b7c0822fc0109ff1cbae687a58b34680a48093df91908bc657f906f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19053</id>
    <title>Moderate: freeipmi security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeipmi security update</summary>
    <description>The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.  

Security Fix(es):  

  * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19053" id="RHSA-2026:19053" type="rhsa" title="RHSA-2026:19053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33554" id="CVE-2026-33554" type="cve" title="CVE-2026-33554"/>
      <reference href="https://bugzilla.redhat.com/2450778" id="2450778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19053.html" id="ALSA-2026:19053" type="self" title="ALSA-2026:19053"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="freeipmi-devel" version="1.6.17" release="1.el10_2" epoch="0" arch="ppc64le" src="freeipmi-1.6.17-1.el10_2.src.rpm">
          <filename>freeipmi-devel-1.6.17-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">ff9ff02248e1a64bf27dba0528a1178e7647883de96f488513e176bb116807fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19061</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437)
  * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19061" id="RHSA-2026:19061" type="rhsa" title="RHSA-2026:19061"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4437" id="CVE-2026-4437" type="cve" title="CVE-2026-4437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4438" id="CVE-2026-4438" type="cve" title="CVE-2026-4438"/>
      <reference href="https://bugzilla.redhat.com/2449777" id="2449777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449783" id="2449783" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19061.html" id="ALSA-2026:19061" type="self" title="ALSA-2026:19061"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="glibc-nss-devel" version="2.39" release="121.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-121.el10_2.alma.1.src.rpm">
          <filename>glibc-nss-devel-2.39-121.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">1bac887711c40a2c930a88d4bce738716b4a03ad4dd6f468859645bf4bd53ac7</sum>
        </package>
        <package name="glibc-benchtests" version="2.39" release="121.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-121.el10_2.alma.1.src.rpm">
          <filename>glibc-benchtests-2.39-121.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">9049cfe4a9a3f54aa8457c2d93d5f3a0789fc9fe5395ee1fee839f4c7c399256</sum>
        </package>
        <package name="nss_hesiod" version="2.39" release="121.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-121.el10_2.alma.1.src.rpm">
          <filename>nss_hesiod-2.39-121.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">b45bab9674ae19d56399f9fc4e532e6c9f80a58cc91ddf46431d542b09384d04</sum>
        </package>
        <package name="nss_db" version="2.39" release="121.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-121.el10_2.alma.1.src.rpm">
          <filename>nss_db-2.39-121.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">d4f77b9586270b521525a71a5aafab14f199c8017dce6b121ff59ea5949d4e56</sum>
        </package>
        <package name="glibc-static" version="2.39" release="121.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-121.el10_2.alma.1.src.rpm">
          <filename>glibc-static-2.39-121.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">e7fa9e437921d940a648ae6a707412478df37c4580cfe80cf57d7dcbfe5ce351</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19064</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19064" id="RHSA-2026:19064" type="rhsa" title="RHSA-2026:19064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13837" id="CVE-2025-13837" type="cve" title="CVE-2025-13837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15282" id="CVE-2025-15282" type="cve" title="CVE-2025-15282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0672" id="CVE-2026-0672" type="cve" title="CVE-2026-0672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418084" id="2418084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431366" id="2431366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431374" id="2431374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19064.html" id="ALSA-2026:19064" type="self" title="ALSA-2026:19064"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-test" version="3.12.13" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.12-3.12.13-2.el10_2.src.rpm">
          <filename>python3-test-3.12.13-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">4167f71d57137810af143021ed6875c5302c579480851117777c9f7ec2df26ae</sum>
        </package>
        <package name="python3-debug" version="3.12.13" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.12-3.12.13-2.el10_2.src.rpm">
          <filename>python3-debug-3.12.13-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">7236a788813630c8f6e4223428bece1370132c6208cba041a3d0c57319b09977</sum>
        </package>
        <package name="python3-idle" version="3.12.13" release="2.el10_2" epoch="0" arch="ppc64le" src="python3.12-3.12.13-2.el10_2.src.rpm">
          <filename>python3-idle-3.12.13-2.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">a49d816928d73ed8ce87ea3eb863a614c0284e65e4388b8388852bd73286309c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19074</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)
  * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677)
  * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19074" id="RHSA-2026:19074" type="rhsa" title="RHSA-2026:19074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23060" id="CVE-2026-23060" type="cve" title="CVE-2026-23060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31677" id="CVE-2026-31677" type="cve" title="CVE-2026-31677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2436779" id="2436779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461763" id="2461763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19074.html" id="ALSA-2026:19074" type="self" title="ALSA-2026:19074"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="211.7.3.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.7.3.el10_2.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-211.7.3.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">27d35efc521c61cd4a1b7c680f214edf950420b58f12bbd06e0e8f9b586ca745</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="211.7.3.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.7.3.el10_2.src.rpm">
          <filename>kernel-cross-headers-6.12.0-211.7.3.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">66d600ac768026f8eaddd539a56ee296c3f75a6f6696d2bf06a3ac095c2cf135</sum>
        </package>
        <package name="libperf" version="6.12.0" release="211.7.3.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.7.3.el10_2.src.rpm">
          <filename>libperf-6.12.0-211.7.3.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">98f666afab915a59244ddbe31d37fb7dd0144c2e16a060f6efb0a536afa01438</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19125</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19125" id="RHSA-2026:19125" type="rhsa" title="RHSA-2026:19125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19125.html" id="ALSA-2026:19125" type="self" title="ALSA-2026:19125"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.9" release="4.el10_2" epoch="0" arch="ppc64le" src="xorg-x11-server-Xwayland-24.1.9-4.el10_2.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">e6532780bd5822a021f993172285d87c02ccb5c28fcc4cc627eedd59c4071be5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19126</id>
    <title>Important: yggdrasil security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yggdrasil security update</summary>
    <description>yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19126" id="RHSA-2026:19126" type="rhsa" title="RHSA-2026:19126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456338" id="2456338" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19126.html" id="ALSA-2026:19126" type="self" title="ALSA-2026:19126"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="yggdrasil-devel" version="0.4.9" release="4.el10_2" epoch="0" arch="ppc64le" src="yggdrasil-0.4.9-4.el10_2.src.rpm">
          <filename>yggdrasil-devel-0.4.9-4.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">8c93a2dcd6a7284bce9994588610c0125935d6f5a56a6a542422e92f4e5b387c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19141</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19141" id="RHSA-2026:19141" type="rhsa" title="RHSA-2026:19141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19141.html" id="ALSA-2026:19141" type="self" title="ALSA-2026:19141"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="PackageKit-glib-devel" version="1.2.8" release="8.el10_2" epoch="0" arch="ppc64le" src="PackageKit-1.2.8-8.el10_2.src.rpm">
          <filename>PackageKit-glib-devel-1.2.8-8.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">269b2bb1070398ab1754121b8ba3cda3414b89db8c7e11dbeb008eab6a0af618</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19143</id>
    <title>Moderate: libsoup3 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server (CVE-2026-4271)
  * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19143" id="RHSA-2026:19143" type="rhsa" title="RHSA-2026:19143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4271" id="CVE-2026-4271" type="cve" title="CVE-2026-4271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5119" id="CVE-2026-5119" type="cve" title="CVE-2026-5119"/>
      <reference href="https://bugzilla.redhat.com/2448044" id="2448044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452932" id="2452932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19143.html" id="ALSA-2026:19143" type="self" title="ALSA-2026:19143"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_2.11" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_2.11.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_2.11.noarch.rpm</filename>
          <sum type="sha256">e9c9aacec423d69703716502eee70d36997b031b05b8cdd423d46cbd4cf7206c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19148</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19148" id="RHSA-2026:19148" type="rhsa" title="RHSA-2026:19148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19148.html" id="ALSA-2026:19148" type="self" title="ALSA-2026:19148"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="glib2-static" version="2.80.4" release="12.el10_2.13" epoch="0" arch="ppc64le" src="glib2-2.80.4-12.el10_2.13.src.rpm">
          <filename>glib2-static-2.80.4-12.el10_2.13.ppc64le.rpm</filename>
          <sum type="sha256">bc15b42bbb81847fe3bf8c35674aef1011a5a41cb562c3f8adbb3d3ead691ea9</sum>
        </package>
        <package name="glib2-doc" version="2.80.4" release="12.el10_2.13" epoch="0" arch="ppc64le" src="glib2-2.80.4-12.el10_2.13.src.rpm">
          <filename>glib2-doc-2.80.4-12.el10_2.13.ppc64le.rpm</filename>
          <sum type="sha256">cd2b5c3b11ce189a8a3d681cafa6b7522f8ba9f81be1d4dbc8a7b3ffd5f98fae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19149</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19149" id="RHSA-2026:19149" type="rhsa" title="RHSA-2026:19149"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19149.html" id="ALSA-2026:19149" type="self" title="ALSA-2026:19149"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dovecot-devel" version="2.3.21" release="19.el10_2" epoch="1" arch="ppc64le" src="dovecot-2.3.21-19.el10_2.src.rpm">
          <filename>dovecot-devel-2.3.21-19.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">b1e8b8c74b69b8ddb2b6e3d2afbaca97ae5290a5a2716e1b490f96a4d2ebe867</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19150</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19150" id="RHSA-2026:19150" type="rhsa" title="RHSA-2026:19150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19150.html" id="ALSA-2026:19150" type="self" title="ALSA-2026:19150"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libtiff-tools" version="4.6.0" release="8.el10_2.1" epoch="0" arch="ppc64le" src="libtiff-4.6.0-8.el10_2.1.src.rpm">
          <filename>libtiff-tools-4.6.0-8.el10_2.1.ppc64le.rpm</filename>
          <sum type="sha256">bb9e9cdbc63ace0df2b356a9b055386c635e018a78ad0f8ef59489dcf6c097ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19151</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19151" id="RHSA-2026:19151" type="rhsa" title="RHSA-2026:19151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19151.html" id="ALSA-2026:19151" type="self" title="ALSA-2026:19151"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="jq-devel" version="1.7.1" release="11.el10_2.2" epoch="0" arch="ppc64le" src="jq-1.7.1-11.el10_2.2.src.rpm">
          <filename>jq-devel-1.7.1-11.el10_2.2.ppc64le.rpm</filename>
          <sum type="sha256">89cca2f1f474b862fbe6d742cb7c393fc4da76e1dfb850c0432900b9ed5f1724</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19154</id>
    <title>Important: giflib security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19154" id="RHSA-2026:19154" type="rhsa" title="RHSA-2026:19154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19154.html" id="ALSA-2026:19154" type="self" title="ALSA-2026:19154"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="giflib-devel" version="5.2.1" release="24.el10_2" epoch="0" arch="ppc64le" src="giflib-5.2.1-24.el10_2.src.rpm">
          <filename>giflib-devel-5.2.1-24.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">7c032fb8f62968ef2348e17222476285f9795c1261bf9c01994d8a88dc7a555f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19159</id>
    <title>Critical: nginx security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19159" id="RHSA-2026:19159" type="rhsa" title="RHSA-2026:19159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42945" id="CVE-2026-42945" type="cve" title="CVE-2026-42945"/>
      <reference href="https://bugzilla.redhat.com/2477116" id="2477116" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19159.html" id="ALSA-2026:19159" type="self" title="ALSA-2026:19159"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="nginx-mod-devel" version="1.26.3" release="6.el10_2.3" epoch="2" arch="ppc64le" src="nginx-1.26.3-6.el10_2.3.src.rpm">
          <filename>nginx-mod-devel-1.26.3-6.el10_2.3.ppc64le.rpm</filename>
          <sum type="sha256">5868e578eecf25f41a7d7e696232b3838fb4f9179b2f3eba88d72696efd046ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19560</id>
    <title>Important: libsndfile security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-05-26 12:28:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19560" id="RHSA-2026:19560" type="rhsa" title="RHSA-2026:19560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-37555" id="CVE-2026-37555" type="cve" title="CVE-2026-37555"/>
      <reference href="https://bugzilla.redhat.com/2463856" id="2463856" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19560.html" id="ALSA-2026:19560" type="self" title="ALSA-2026:19560"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsndfile-devel" version="1.2.2" release="6.el10_2.1" epoch="0" arch="ppc64le" src="libsndfile-1.2.2-6.el10_2.1.src.rpm">
          <filename>libsndfile-devel-1.2.2-6.el10_2.1.ppc64le.rpm</filename>
          <sum type="sha256">6ab0a0e31bb606720f96ae5300b82a9c8cadbfecec866e7a2e28ddcf2f448b8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19569</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-06-07 18:12:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
  * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
  * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
  * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19569" id="RHSA-2026:19569" type="rhsa" title="RHSA-2026:19569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56603" id="CVE-2024-56603" type="cve" title="CVE-2024-56603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68724" id="CVE-2025-68724" type="cve" title="CVE-2025-68724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23401" id="CVE-2026-23401" type="cve" title="CVE-2026-23401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31408" id="CVE-2026-31408" type="cve" title="CVE-2026-31408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31607" id="CVE-2026-31607" type="cve" title="CVE-2026-31607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43128" id="CVE-2026-43128" type="cve" title="CVE-2026-43128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/2334439" id="2334439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424886" id="2424886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453803" id="2453803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455334" id="2455334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461521" id="2461521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467144" id="2467144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477015" id="2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477802" id="2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-19569.html" id="ALSA-2026:19569" type="self" title="ALSA-2026:19569"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="211.16.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.16.1.el10_2.src.rpm">
          <filename>libperf-6.12.0-211.16.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">6254220858d49f05012b59b2dca251ac5331e6fba5bd20c97c19d6d923c7f167</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="211.16.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.16.1.el10_2.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-211.16.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">85911ae6fcd307815e2ad70ad994ccc46a5f3be10ae544d2605a2d234bed2ff3</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="211.16.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.16.1.el10_2.src.rpm">
          <filename>kernel-cross-headers-6.12.0-211.16.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">db19d010d68e26872681c633424e559ca858b3002b9cbe76c6b2b95b41e2e3e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20594</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 13:09:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20594" id="RHSA-2026:20594" type="rhsa" title="RHSA-2026:20594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4046" id="CVE-2026-4046" type="cve" title="CVE-2026-4046"/>
      <reference href="https://bugzilla.redhat.com/2453117" id="2453117" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-20594.html" id="ALSA-2026:20594" type="self" title="ALSA-2026:20594"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="glibc-nss-devel" version="2.39" release="124.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-124.el10_2.alma.1.src.rpm">
          <filename>glibc-nss-devel-2.39-124.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">14937bd493a0a678d3667c522f12414636e2e819f950c9764bd1da95f4c0630b</sum>
        </package>
        <package name="nss_db" version="2.39" release="124.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-124.el10_2.alma.1.src.rpm">
          <filename>nss_db-2.39-124.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">290b990277f201f2dd3dd0aad7d33be4a5b888f42e96f6249144b8d59af774ed</sum>
        </package>
        <package name="glibc-static" version="2.39" release="124.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-124.el10_2.alma.1.src.rpm">
          <filename>glibc-static-2.39-124.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">5dcd916ffa76cdd6908a9261978f7c42d3f8e5572070bf2509076481180db2d4</sum>
        </package>
        <package name="glibc-benchtests" version="2.39" release="124.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-124.el10_2.alma.1.src.rpm">
          <filename>glibc-benchtests-2.39-124.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">645adf6b8f76c1b7ca2099f13bd47ecf95e4cefed02114a322fe6592eaf6cb4b</sum>
        </package>
        <package name="nss_hesiod" version="2.39" release="124.el10_2.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-124.el10_2.alma.1.src.rpm">
          <filename>nss_hesiod-2.39-124.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">837d9bb3328c146f1e6619250ff95e90719e986d0deab2c701b3c36027330ddb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20606</id>
    <title>Important: ruby4.0 security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-06-04 10:20:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby4.0 security update</summary>
    <description>Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.  

Security Fix(es):  

  * ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210)
  * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20606" id="RHSA-2026:20606" type="rhsa" title="RHSA-2026:20606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33210" id="CVE-2026-33210" type="cve" title="CVE-2026-33210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41316" id="CVE-2026-41316" type="cve" title="CVE-2026-41316"/>
      <reference href="https://bugzilla.redhat.com/2449871" id="2449871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461369" id="2461369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-20606.html" id="ALSA-2026:20606" type="self" title="ALSA-2026:20606"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="ruby4.0-doc" version="4.0.3" release="34.el10_2" epoch="0" arch="noarch" src="ruby4.0-4.0.3-34.el10_2.src.rpm">
          <filename>ruby4.0-doc-4.0.3-34.el10_2.noarch.rpm</filename>
          <sum type="sha256">911ec6ffa66042849dff4c20c6e9c57e452e38797a2d1cb88fb1289d50cb3f4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20693</id>
    <title>Moderate: mysql8.4 security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 12:56:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20693" id="RHSA-2026:20693" type="rhsa" title="RHSA-2026:20693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21998" id="CVE-2026-21998" type="cve" title="CVE-2026-21998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22001" id="CVE-2026-22001" type="cve" title="CVE-2026-22001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22002" id="CVE-2026-22002" type="cve" title="CVE-2026-22002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22004" id="CVE-2026-22004" type="cve" title="CVE-2026-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22005" id="CVE-2026-22005" type="cve" title="CVE-2026-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22009" id="CVE-2026-22009" type="cve" title="CVE-2026-22009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22015" id="CVE-2026-22015" type="cve" title="CVE-2026-22015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22017" id="CVE-2026-22017" type="cve" title="CVE-2026-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34270" id="CVE-2026-34270" type="cve" title="CVE-2026-34270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34271" id="CVE-2026-34271" type="cve" title="CVE-2026-34271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34276" id="CVE-2026-34276" type="cve" title="CVE-2026-34276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34303" id="CVE-2026-34303" type="cve" title="CVE-2026-34303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34304" id="CVE-2026-34304" type="cve" title="CVE-2026-34304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34308" id="CVE-2026-34308" type="cve" title="CVE-2026-34308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35236" id="CVE-2026-35236" type="cve" title="CVE-2026-35236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35237" id="CVE-2026-35237" type="cve" title="CVE-2026-35237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35238" id="CVE-2026-35238" type="cve" title="CVE-2026-35238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35239" id="CVE-2026-35239" type="cve" title="CVE-2026-35239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35240" id="CVE-2026-35240" type="cve" title="CVE-2026-35240"/>
      <reference href="https://bugzilla.redhat.com/2460274" id="2460274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460275" id="2460275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460276" id="2460276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460279" id="2460279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460295" id="2460295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460312" id="2460312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460315" id="2460315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460316" id="2460316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460323" id="2460323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460324" id="2460324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460325" id="2460325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460326" id="2460326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460329" id="2460329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460335" id="2460335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460342" id="2460342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460344" id="2460344" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460348" id="2460348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460356" id="2460356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460358" id="2460358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-20693.html" id="ALSA-2026:20693" type="self" title="ALSA-2026:20693"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="mysql8.4-test-data" version="8.4.9" release="1.el10_2.alma.1" epoch="0" arch="noarch" src="mysql8.4-8.4.9-1.el10_2.alma.1.src.rpm">
          <filename>mysql8.4-test-data-8.4.9-1.el10_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">a5be777ac4cdff32f536e30c86ffbc34a9b78111f5b470d6b9f2e07464021123</sum>
        </package>
        <package name="mysql8.4-devel" version="8.4.9" release="1.el10_2.alma.1" epoch="0" arch="ppc64le" src="mysql8.4-8.4.9-1.el10_2.alma.1.src.rpm">
          <filename>mysql8.4-devel-8.4.9-1.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">b058aa29409c702acb7b4d6fd86f9b498b850400b535a8371025e754cb836041</sum>
        </package>
        <package name="mysql8.4-test" version="8.4.9" release="1.el10_2.alma.1" epoch="0" arch="ppc64le" src="mysql8.4-8.4.9-1.el10_2.alma.1.src.rpm">
          <filename>mysql8.4-test-8.4.9-1.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">fddab508663809d7348eedff60fe31a9e0bd0980d9b030b9694298933007cae7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21286</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-28 12:38:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es):  

  * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043)
  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21286" id="RHSA-2026:21286" type="rhsa" title="RHSA-2026:21286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34043" id="CVE-2026-34043" type="cve" title="CVE-2026-34043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2453284" id="2453284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-21286.html" id="ALSA-2026:21286" type="self" title="ALSA-2026:21286"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.127" release="1.el10_2" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.127-1.el10_2.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">4d1a9d014e8b6ef8dcb3220e3b5e355d330cde41c1c8ec2bc685f2179942b62a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21557</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-06-08 09:59:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)
  * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)
  * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)
  * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  * kernel: mm/page_alloc: clear page-&gt;private in free_pages_prepare() (CVE-2026-43303)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21557" id="RHSA-2026:21557" type="rhsa" title="RHSA-2026:21557"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56645" id="CVE-2024-56645" type="cve" title="CVE-2024-56645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68183" id="CVE-2025-68183" type="cve" title="CVE-2025-68183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23375" id="CVE-2026-23375" type="cve" title="CVE-2026-23375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23392" id="CVE-2026-23392" type="cve" title="CVE-2026-23392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23455" id="CVE-2026-23455" type="cve" title="CVE-2026-23455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31684" id="CVE-2026-31684" type="cve" title="CVE-2026-31684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31685" id="CVE-2026-31685" type="cve" title="CVE-2026-31685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43006" id="CVE-2026-43006" type="cve" title="CVE-2026-43006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43020" id="CVE-2026-43020" type="cve" title="CVE-2026-43020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43023" id="CVE-2026-43023" type="cve" title="CVE-2026-43023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43027" id="CVE-2026-43027" type="cve" title="CVE-2026-43027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43051" id="CVE-2026-43051" type="cve" title="CVE-2026-43051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43110" id="CVE-2026-43110" type="cve" title="CVE-2026-43110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43116" id="CVE-2026-43116" type="cve" title="CVE-2026-43116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43158" id="CVE-2026-43158" type="cve" title="CVE-2026-43158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43190" id="CVE-2026-43190" type="cve" title="CVE-2026-43190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43205" id="CVE-2026-43205" type="cve" title="CVE-2026-43205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43303" id="CVE-2026-43303" type="cve" title="CVE-2026-43303"/>
      <reference href="https://bugzilla.redhat.com/2334560" id="2334560" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422699" id="2422699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451199" id="2451199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451218" id="2451218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454810" id="2454810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461757" id="2461757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461759" id="2461759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464369" id="2464369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464402" id="2464402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464455" id="2464455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464462" id="2464462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464496" id="2464496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467005" id="2467005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467014" id="2467014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467064" id="2467064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467090" id="2467090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467210" id="2467210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468091" id="2468091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-21557.html" id="ALSA-2026:21557" type="self" title="ALSA-2026:21557"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="211.18.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.18.1.el10_2.src.rpm">
          <filename>kernel-cross-headers-6.12.0-211.18.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">0b7019296c2c967fc42384c9d525f7f420ab903820a087a4b4e361a43974fe86</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="211.18.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.18.1.el10_2.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-211.18.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">601b4cf13acf7d0baf937830e630790da95608e904629e01045bed35463c090f</sum>
        </package>
        <package name="libperf" version="6.12.0" release="211.18.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.18.1.el10_2.src.rpm">
          <filename>libperf-6.12.0-211.18.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">ae0a3193e3dea2e4a402c29c48d1d8700349db02be04933a0de4d642a826b01d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21754</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-05-29 11:49:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21754" id="RHSA-2026:21754" type="rhsa" title="RHSA-2026:21754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-21754.html" id="ALSA-2026:21754" type="self" title="ALSA-2026:21754"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.117" release="1.el10_2" epoch="0" arch="ppc64le" src="dotnet9.0-9.0.117-1.el10_2.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">e9d1e8f56961ee62ae292609b7eaaab720c6d69c2f17efcee22dc49fc1f0f9bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21757</id>
    <title>Important: flatpak security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-05-29 12:28:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.  

Security Fix(es):  

  * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078)
  * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21757" id="RHSA-2026:21757" type="rhsa" title="RHSA-2026:21757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34078" id="CVE-2026-34078" type="cve" title="CVE-2026-34078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34079" id="CVE-2026-34079" type="cve" title="CVE-2026-34079"/>
      <reference href="https://bugzilla.redhat.com/2456276" id="2456276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456284" id="2456284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-21757.html" id="ALSA-2026:21757" type="self" title="ALSA-2026:21757"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="flatpak-devel" version="1.16.0" release="9.el10_2.1" epoch="0" arch="ppc64le" src="flatpak-1.16.0-9.el10_2.1.src.rpm">
          <filename>flatpak-devel-1.16.0-9.el10_2.1.ppc64le.rpm</filename>
          <sum type="sha256">ee94a4713fafaf770b1341f4076dc6cd15747072d87ccacab04726f1468ba967</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22145</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-06-01 00:00:00"/>
    <updated date="2026-06-03 07:58:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22145" id="RHSA-2026:22145" type="rhsa" title="RHSA-2026:22145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-22145.html" id="ALSA-2026:22145" type="self" title="ALSA-2026:22145"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.108" release="1.el10_2" epoch="0" arch="ppc64le" src="dotnet10.0-10.0.108-1.el10_2.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.108-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">252499aefd537a67bc6bbbc88b8d6895d2ffe6e585eaa1d868996518b703aeab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22529</id>
    <title>Moderate: libexif security update</title>
    <issued date="2026-06-02 00:00:00"/>
    <updated date="2026-06-04 14:44:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libexif security update</summary>
    <description>The libexif packages provide a library for extracting extra information from image files.  

Security Fix(es):  

  * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22529" id="RHSA-2026:22529" type="rhsa" title="RHSA-2026:22529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40386" id="CVE-2026-40386" type="cve" title="CVE-2026-40386"/>
      <reference href="https://bugzilla.redhat.com/2457689" id="2457689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-22529.html" id="ALSA-2026:22529" type="self" title="ALSA-2026:22529"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libexif-devel" version="0.6.24" release="9.el10_2.1" epoch="0" arch="ppc64le" src="libexif-0.6.24-9.el10_2.1.src.rpm">
          <filename>libexif-devel-0.6.24-9.el10_2.1.ppc64le.rpm</filename>
          <sum type="sha256">21c2726bf40c7e7e6aff88faddecd8ae6ec6c7e50c72bb6a906d5ce4f9f167c0</sum>
        </package>
        <package name="libexif-doc" version="0.6.24" release="9.el10_2.1" epoch="0" arch="ppc64le" src="libexif-0.6.24-9.el10_2.1.src.rpm">
          <filename>libexif-doc-0.6.24-9.el10_2.1.ppc64le.rpm</filename>
          <sum type="sha256">5d0b639702d7549079bb75a5f01b582e877c7ebe166adf1daa4c0fec1e1e9e23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22963</id>
    <title>Critical: samba security update</title>
    <issued date="2026-06-03 00:00:00"/>
    <updated date="2026-06-04 10:06:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.  

Security Fix(es):  

  * samba: Missing access check on reparse point operations (CVE-2026-1933)
  * samba: vfs_worm does not block directory modification (CVE-2026-2340)
  * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012)
  * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  * samba: Remote Code Execution in SAMR (CVE-2026-4408)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22963" id="RHSA-2026:22963" type="rhsa" title="RHSA-2026:22963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1933" id="CVE-2026-1933" type="cve" title="CVE-2026-1933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2340" id="CVE-2026-2340" type="cve" title="CVE-2026-2340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3012" id="CVE-2026-3012" type="cve" title="CVE-2026-3012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40170" id="CVE-2026-40170" type="cve" title="CVE-2026-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4408" id="CVE-2026-4408" type="cve" title="CVE-2026-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4480" id="CVE-2026-4480" type="cve" title="CVE-2026-4480"/>
      <reference href="https://bugzilla.redhat.com/2447317" id="2447317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447318" id="2447318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447319" id="2447319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452232" id="2452232" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2459061" id="2459061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479762" id="2479762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-22963.html" id="ALSA-2026:22963" type="self" title="ALSA-2026:22963"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="samba-pidl" version="4.23.5" release="109.el10_2" epoch="0" arch="noarch" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>samba-pidl-4.23.5-109.el10_2.noarch.rpm</filename>
          <sum type="sha256">4180231d6fcb81a083d7db024760d87997779989ac8643e34d7af50f5873ba01</sum>
        </package>
        <package name="libldb-devel" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>libldb-devel-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">442a703c350bd9369f585520f2ca543c671668ea5c923707eef6f4f3a5097548</sum>
        </package>
        <package name="samba-test" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>samba-test-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">450d3d572597e750aa74fb706ea28db61443d1a2007ad9d45187306e99b089ba</sum>
        </package>
        <package name="python3-samba-test" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>python3-samba-test-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">5a8f8c107d8ad4e4736e04574689ea99ad3b986ba880dff511978be5a20c437e</sum>
        </package>
        <package name="libnetapi-devel" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>libnetapi-devel-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">8f6a40d9468e591b1bace220751fa33658c10be0d726659b2eb18323687f1577</sum>
        </package>
        <package name="libwbclient-devel" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>libwbclient-devel-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">963fcd00bafda5e4faa022d16cbabe62e91ce7fd24bc695b49af10d854e9fd20</sum>
        </package>
        <package name="libsmbclient-devel" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>libsmbclient-devel-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">e726b82644837eac9914f7dc7e773b7be6c5557590254ad5450129c6748604f0</sum>
        </package>
        <package name="samba-devel" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>samba-devel-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">f21360b013b3bee8612585c3947386a7779b50bd8c31a9b08665bdc515643394</sum>
        </package>
        <package name="samba-test-libs" version="4.23.5" release="109.el10_2" epoch="0" arch="ppc64le" src="samba-4.23.5-109.el10_2.src.rpm">
          <filename>samba-test-libs-4.23.5-109.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">faee0255c39818135f3e436dc1b88e7bbd29f41390630e2835d88d95dc553621</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:23231</id>
    <title>Important: unbound security update</title>
    <issued date="2026-06-04 00:00:00"/>
    <updated date="2026-06-04 11:47:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944)
  * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959)
  * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:23231" id="RHSA-2026:23231" type="rhsa" title="RHSA-2026:23231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33278" id="CVE-2026-33278" type="cve" title="CVE-2026-33278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42944" id="CVE-2026-42944" type="cve" title="CVE-2026-42944"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42959" id="CVE-2026-42959" type="cve" title="CVE-2026-42959"/>
      <reference href="https://bugzilla.redhat.com/2479774" id="2479774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479806" id="2479806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479808" id="2479808" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-23231.html" id="ALSA-2026:23231" type="self" title="ALSA-2026:23231"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="unbound-devel" version="1.24.2" release="7.el10_2.1" epoch="0" arch="ppc64le" src="unbound-1.24.2-7.el10_2.1.src.rpm">
          <filename>unbound-devel-1.24.2-7.el10_2.1.ppc64le.rpm</filename>
          <sum type="sha256">80bae319a73de973ef63685f5f4eb5b5b725a39f13a636cc7c0d6b9339eed76c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:23329</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-04 00:00:00"/>
    <updated date="2026-06-08 09:59:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
  * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322)
  * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:23329" id="RHSA-2026:23329" type="rhsa" title="RHSA-2026:23329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38653" id="CVE-2025-38653" type="cve" title="CVE-2025-38653"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68366" id="CVE-2025-68366" type="cve" title="CVE-2025-68366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31613" id="CVE-2026-31613" type="cve" title="CVE-2026-31613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31709" id="CVE-2026-31709" type="cve" title="CVE-2026-31709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43322" id="CVE-2026-43322" type="cve" title="CVE-2026-43322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43329" id="CVE-2026-43329" type="cve" title="CVE-2026-43329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46243" id="CVE-2026-46243" type="cve" title="CVE-2026-46243"/>
      <reference href="https://bugzilla.redhat.com/2390372" id="2390372" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424881" id="2424881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461480" id="2461480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464476" id="2464476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468124" id="2468124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468131" id="2468131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481486" id="2481486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-23329.html" id="ALSA-2026:23329" type="self" title="ALSA-2026:23329"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="211.20.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.20.1.el10_2.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-211.20.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">0dd6f17dda458a557ea64e22dfbc4725bb60586daeab1b582ec07cb1f22e92e8</sum>
        </package>
        <package name="libperf" version="6.12.0" release="211.20.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.20.1.el10_2.src.rpm">
          <filename>libperf-6.12.0-211.20.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">7ec144080391441d7a870cc1b91c3e34b21a831f43a4431e4e271b9ceb04f94d</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="211.20.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.20.1.el10_2.src.rpm">
          <filename>kernel-cross-headers-6.12.0-211.20.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">ed87de11cb261a315a853b6f66a0875b73b0eeeb4dd07750b3ed653fcb47cf72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24338</id>
    <title>Important: bind security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-08 08:31:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24338" id="RHSA-2026:24338" type="rhsa" title="RHSA-2026:24338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3039" id="CVE-2026-3039" type="cve" title="CVE-2026-3039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5946" id="CVE-2026-5946" type="cve" title="CVE-2026-5946"/>
      <reference href="https://bugzilla.redhat.com/2479767" id="2479767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479771" id="2479771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-24338.html" id="ALSA-2026:24338" type="self" title="ALSA-2026:24338"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="bind-devel" version="9.18.33" release="15.el10_2.2" epoch="32" arch="ppc64le" src="bind-9.18.33-15.el10_2.2.src.rpm">
          <filename>bind-devel-9.18.33-15.el10_2.2.ppc64le.rpm</filename>
          <sum type="sha256">0ecfb0b73cee461e7d48a8bb96d27f90d8334cb5eb389b0d435d0bbb792762dd</sum>
        </package>
        <package name="bind-doc" version="9.18.33" release="15.el10_2.2" epoch="32" arch="noarch" src="bind-9.18.33-15.el10_2.2.src.rpm">
          <filename>bind-doc-9.18.33-15.el10_2.2.noarch.rpm</filename>
          <sum type="sha256">e794b480c049ceeadf03b0a2d4b32a7421120dc8f8cac56d7889077439239b1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24470</id>
    <title>Important: podman security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 08:50:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24470" id="RHSA-2026:24470" type="rhsa" title="RHSA-2026:24470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32281" id="CVE-2026-32281" type="cve" title="CVE-2026-32281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2456333" id="2456333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456338" id="2456338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-24470.html" id="ALSA-2026:24470" type="self" title="ALSA-2026:24470"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.8.2" release="3.el10_2.alma.1" epoch="7" arch="ppc64le" src="podman-5.8.2-3.el10_2.alma.1.src.rpm">
          <filename>podman-tests-5.8.2-3.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">430755868935f10c9c1bf6e37d0441c3425bd9d621b2f2c357aaad88ddd707be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24985</id>
    <title>Important: poppler security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:51:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24985" id="RHSA-2026:24985" type="rhsa" title="RHSA-2026:24985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10118" id="CVE-2026-10118" type="cve" title="CVE-2026-10118"/>
      <reference href="https://bugzilla.redhat.com/2460428" id="2460428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-24985.html" id="ALSA-2026:24985" type="self" title="ALSA-2026:24985"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="poppler-qt6-devel" version="24.02.0" release="7.el10_2.2" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_2.2.src.rpm">
          <filename>poppler-qt6-devel-24.02.0-7.el10_2.2.ppc64le.rpm</filename>
          <sum type="sha256">7a5a158f0d7f96ef75aede5cfcfb0429254fc0befc417ed7c2245fd094f31f42</sum>
        </package>
        <package name="poppler-devel" version="24.02.0" release="7.el10_2.2" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_2.2.src.rpm">
          <filename>poppler-devel-24.02.0-7.el10_2.2.ppc64le.rpm</filename>
          <sum type="sha256">7d71b909aa7aac914b54dc580e5bfa9fb8d5fd48d4a703e85732d8d04a6ee515</sum>
        </package>
        <package name="poppler-cpp-devel" version="24.02.0" release="7.el10_2.2" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_2.2.src.rpm">
          <filename>poppler-cpp-devel-24.02.0-7.el10_2.2.ppc64le.rpm</filename>
          <sum type="sha256">8b91300a1682d187147c145606d31ff3dc2034a68f012e7e65493912abc32837</sum>
        </package>
        <package name="poppler-glib-devel" version="24.02.0" release="7.el10_2.2" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_2.2.src.rpm">
          <filename>poppler-glib-devel-24.02.0-7.el10_2.2.ppc64le.rpm</filename>
          <sum type="sha256">8e106f8ae42ec768a2995e63bb7faeb48a7cbc59dd2d080fa673780dd75a35b0</sum>
        </package>
        <package name="poppler-glib-doc" version="24.02.0" release="7.el10_2.2" epoch="0" arch="noarch" src="poppler-24.02.0-7.el10_2.2.src.rpm">
          <filename>poppler-glib-doc-24.02.0-7.el10_2.2.noarch.rpm</filename>
          <sum type="sha256">db944170f7397aa5dc0f76041aa8a845f45fb3b697972932e97a17ef5e15cf48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25111</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:46:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25111" id="RHSA-2026:25111" type="rhsa" title="RHSA-2026:25111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-25111.html" id="ALSA-2026:25111" type="self" title="ALSA-2026:25111"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.128" release="1.el10_2" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.128-1.el10_2.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">351300a0e1afd12b1103a4001c82e5a1e11ab26b61d3a231fb2f87798ab9ace9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25112</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:44:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25112" id="RHSA-2026:25112" type="rhsa" title="RHSA-2026:25112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-25112.html" id="ALSA-2026:25112" type="self" title="ALSA-2026:25112"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.118" release="1.el10_2" epoch="0" arch="ppc64le" src="dotnet9.0-9.0.118-1.el10_2.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">5bf521ccb4c06b6a1fe17ff985786e0966444ae48d58ef5037d6cbe711dfb477</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25115</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:43:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25115" id="RHSA-2026:25115" type="rhsa" title="RHSA-2026:25115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-25115.html" id="ALSA-2026:25115" type="self" title="ALSA-2026:25115"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.109" release="1.el10_2" epoch="0" arch="ppc64le" src="dotnet10.0-10.0.109-1.el10_2.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">9ad13d30a8d0d9ca0c7c2ecdc3435e824ba9b0e5bd65ea5c263cc6e0435eef19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25191</id>
    <title>Critical: kernel security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-11 17:37:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467)
  * kernel: can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CVE-2026-31532)
  * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  * kernel: ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (CVE-2026-43037)
  * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25191" id="RHSA-2026:25191" type="rhsa" title="RHSA-2026:25191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31419" id="CVE-2026-31419" type="cve" title="CVE-2026-31419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31467" id="CVE-2026-31467" type="cve" title="CVE-2026-31467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31532" id="CVE-2026-31532" type="cve" title="CVE-2026-31532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31581" id="CVE-2026-31581" type="cve" title="CVE-2026-31581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43037" id="CVE-2026-43037" type="cve" title="CVE-2026-43037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43501" id="CVE-2026-43501" type="cve" title="CVE-2026-43501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46054" id="CVE-2026-46054" type="cve" title="CVE-2026-46054"/>
      <reference href="https://bugzilla.redhat.com/2457829" id="2457829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460616" id="2460616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461107" id="2461107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461471" id="2461471" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464351" id="2464351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480457" id="2480457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482025" id="2482025" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-25191.html" id="ALSA-2026:25191" type="self" title="ALSA-2026:25191"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="211.22.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.22.1.el10_2.src.rpm">
          <filename>libperf-6.12.0-211.22.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">e114c7929fad37394fd9c3b025c91212f3583aa904ebf49810718984f66b60ab</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="211.22.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.22.1.el10_2.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-211.22.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">ef50562bf0193d68483075b878fad6bea963e7cf23012e1d4a52bc433b06d58b</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="211.22.1.el10_2" epoch="0" arch="ppc64le" src="kernel-6.12.0-211.22.1.el10_2.src.rpm">
          <filename>kernel-cross-headers-6.12.0-211.22.1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">fb8d55dce9b0b94dc1fedc4147fc76575b9949f848e62354a40a8ba691763385</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27743</id>
    <title>Important: postgresql16 security update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 10:14:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql16 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
  * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27743" id="RHSA-2026:27743" type="rhsa" title="RHSA-2026:27743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6473" id="CVE-2026-6473" type="cve" title="CVE-2026-6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6475" id="CVE-2026-6475" type="cve" title="CVE-2026-6475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6477" id="CVE-2026-6477" type="cve" title="CVE-2026-6477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6478" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
      <reference href="https://bugzilla.redhat.com/2477439" id="2477439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477442" id="2477442" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477448" id="2477448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-27743.html" id="ALSA-2026:27743" type="self" title="ALSA-2026:27743"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="postgresql-test-rpm-macros" version="16.14" release="1.el10_2" epoch="0" arch="noarch" src="postgresql16-16.14-1.el10_2.src.rpm">
          <filename>postgresql-test-rpm-macros-16.14-1.el10_2.noarch.rpm</filename>
          <sum type="sha256">f0c9d441dd4f2c10e7ccd46c88122dd2272396a602ea50eee9f8f60032a39627</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>