<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A003</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:17:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A003.html" id="ALSA-2026:A003" type="self" title="ALSA-2026:A003"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-i686-testing-rpms__10_0_default">
        <name>almalinux-10-for-i686-testing-rpms__10_0_default</name>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.52.2.el10_1.noarch.rpm</filename>
          <sum type="sha256">6ade5f744cb84c46c8ff2e6a37806c611279ccdb5bb8054773b5e974e290e64f</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.52.2.el10_1.noarch.rpm</filename>
          <sum type="sha256">ea64172280a14c03a405c0a7ffbd6d075c794f7cfe6938adb2967be740f3f012</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A006</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 14:38:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A006.html" id="ALSA-2026:A006" type="self" title="ALSA-2026:A006"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-i686-testing-rpms__10_0_default">
        <name>almalinux-10-for-i686-testing-rpms__10_0_default</name>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.55.3.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.55.3.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.55.3.el10_1.noarch.rpm</filename>
          <sum type="sha256">54592358065efa0e592d494861fc886efcc117288a0e46e4f6ce79a90d55589f</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.55.3.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.55.3.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.55.3.el10_1.noarch.rpm</filename>
          <sum type="sha256">7879f797d5bb895319adf6aee62e30d0dc8f61fba866b1af7ee83eaff8a419a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A010</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-16 00:00:00"/>
    <updated date="2026-05-16 13:18:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):
  * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300)
  * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477015" id="show_bug.cgi?id=2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477802" id="show_bug.cgi?id=2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A010.html" id="ALSA-2026:A010" type="self" title="ALSA-2026:A010"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-i686-testing-rpms__10_0_default">
        <name>almalinux-10-for-i686-testing-rpms__10_0_default</name>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.56.5.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.56.5.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.56.5.el10_1.noarch.rpm</filename>
          <sum type="sha256">57508a114acb4b9d36f36fd3a49c5a75cafde8bb1637149fccdb1ff223d3558c</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.56.5.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.56.5.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.56.5.el10_1.noarch.rpm</filename>
          <sum type="sha256">cbea24514d417add9bdfde9a80375060ebd3c921893b222fbb8d80c2130bc011</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>