<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8638</id>
    <title>Important: krb5 security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:50:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8638" id="RHSA-2022:8638" type="rhsa" title="RHSA-2022:8638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42898" id="CVE-2022-42898" type="cve" title="CVE-2022-42898"/>
      <reference href="https://bugzilla.redhat.com/2140960" id="2140960" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-8638.html" id="ALSA-2022:8638" type="self" title="ALSA-2022:8638"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="krb5-server" version="1.18.2" release="22.el8_7" epoch="0" arch="i686" src="krb5-1.18.2-22.el8_7.src.rpm">
          <filename>krb5-server-1.18.2-22.el8_7.i686.rpm</filename>
          <sum type="sha256">38a05afc6b191d5352e9f9bbea04d54136be75300f6833c5d8fedece2be64bbc</sum>
        </package>
        <package name="krb5-libs" version="1.18.2" release="22.el8_7" epoch="0" arch="i686" src="krb5-1.18.2-22.el8_7.src.rpm">
          <filename>krb5-libs-1.18.2-22.el8_7.i686.rpm</filename>
          <sum type="sha256">555f1be76d58751b8440b006d4b2d12bf17fd3930d8f5bf6923357b903186af3</sum>
        </package>
        <package name="krb5-server-ldap" version="1.18.2" release="22.el8_7" epoch="0" arch="i686" src="krb5-1.18.2-22.el8_7.src.rpm">
          <filename>krb5-server-ldap-1.18.2-22.el8_7.i686.rpm</filename>
          <sum type="sha256">740662fe2a606878e3a167ceda05e49727461367bbec5e78343bd99a9fe556cc</sum>
        </package>
        <package name="krb5-pkinit" version="1.18.2" release="22.el8_7" epoch="0" arch="i686" src="krb5-1.18.2-22.el8_7.src.rpm">
          <filename>krb5-pkinit-1.18.2-22.el8_7.i686.rpm</filename>
          <sum type="sha256">7f04dc683c76cdcea617114febd738535bd25ba8d9910330d1ae019942dffdce</sum>
        </package>
        <package name="libkadm5" version="1.18.2" release="22.el8_7" epoch="0" arch="i686" src="krb5-1.18.2-22.el8_7.src.rpm">
          <filename>libkadm5-1.18.2-22.el8_7.i686.rpm</filename>
          <sum type="sha256">ae2532174476928171e1cc3e34155b16d7d1a4b8896a13d09826f383ee759a66</sum>
        </package>
        <package name="krb5-devel" version="1.18.2" release="22.el8_7" epoch="0" arch="i686" src="krb5-1.18.2-22.el8_7.src.rpm">
          <filename>krb5-devel-1.18.2-22.el8_7.i686.rpm</filename>
          <sum type="sha256">b3875cfd85013302f2f5a8b1880d79baebadddacefad9a1f64d922c12e427e22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7108</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-11-14 17:20:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: Out of bounds access during table rename (CVE-2020-35527)
* sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7108" id="RHSA-2022:7108" type="rhsa" title="RHSA-2022:7108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-35525" id="CVE-2020-35525" type="cve" title="CVE-2020-35525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-35527" id="CVE-2020-35527" type="cve" title="CVE-2020-35527"/>
      <reference href="https://bugzilla.redhat.com/2122324" id="2122324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122329" id="2122329" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7108.html" id="ALSA-2022:7108" type="self" title="ALSA-2022:7108"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="sqlite-libs" version="3.26.0" release="16.el8_6" epoch="0" arch="i686" src="sqlite-3.26.0-16.el8_6.src.rpm">
          <filename>sqlite-libs-3.26.0-16.el8_6.i686.rpm</filename>
          <sum type="sha256">36f33d93758ba662e4edf68c11597138f1b82a8aad52d9d44f25aed99c66a0cc</sum>
        </package>
        <package name="sqlite" version="3.26.0" release="16.el8_6" epoch="0" arch="i686" src="sqlite-3.26.0-16.el8_6.src.rpm">
          <filename>sqlite-3.26.0-16.el8_6.i686.rpm</filename>
          <sum type="sha256">c1fad5391415f6c1fd8de0c5091cd58ef54994721b7db9d95dc28673ce4b00b4</sum>
        </package>
        <package name="sqlite-doc" version="3.26.0" release="16.el8_6" epoch="0" arch="noarch" src="sqlite-3.26.0-16.el8_6.src.rpm">
          <filename>sqlite-doc-3.26.0-16.el8_6.noarch.rpm</filename>
          <sum type="sha256">ee02ee1a4075f5a723e8ab1985cebdc4329ba0f18b82d665e5db166d6e348075</sum>
        </package>
        <package name="sqlite-devel" version="3.26.0" release="16.el8_6" epoch="0" arch="i686" src="sqlite-3.26.0-16.el8_6.src.rpm">
          <filename>sqlite-devel-3.26.0-16.el8_6.i686.rpm</filename>
          <sum type="sha256">f05692979595f98f7761baad83354a05dfdb999840a07e010bb618ada9604f00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0103</id>
    <title>Moderate: expat security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:35:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: use-after free caused by overeager destruction of a shared DTD in
XML_ExternalEntityParserCreate (CVE-2022-43680)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0103" id="RHSA-2023:0103" type="rhsa" title="RHSA-2023:0103"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43680" id="CVE-2022-43680" type="cve" title="CVE-2022-43680"/>
      <reference href="https://bugzilla.redhat.com/2140059" id="2140059" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0103.html" id="ALSA-2023:0103" type="self" title="ALSA-2023:0103"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="expat-devel" version="2.2.5" release="10.el8_7.1" epoch="0" arch="i686" src="expat-2.2.5-10.el8_7.1.src.rpm">
          <filename>expat-devel-2.2.5-10.el8_7.1.i686.rpm</filename>
          <sum type="sha256">029664f0e5dfe6750c26b22190d6d4addbc6daad798a4f1f0ac733826f58e28e</sum>
        </package>
        <package name="expat" version="2.2.5" release="10.el8_7.1" epoch="0" arch="i686" src="expat-2.2.5-10.el8_7.1.src.rpm">
          <filename>expat-2.2.5-10.el8_7.1.i686.rpm</filename>
          <sum type="sha256">9098d48a06d87ce181bbbdd7f0d412228fb51781567d1ec08baca103c7946278</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0100</id>
    <title>Moderate: systemd security and bug fix update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 10:52:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security and bug fix update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: buffer overrun in format_timespan() function (CVE-2022-3821)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* ShutdownWatchdogSec value is not taken into account on reboot (BZ#2127170)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0100" id="RHSA-2023:0100" type="rhsa" title="RHSA-2023:0100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3821" id="CVE-2022-3821" type="cve" title="CVE-2022-3821"/>
      <reference href="https://bugzilla.redhat.com/2139327" id="2139327" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0100.html" id="ALSA-2023:0100" type="self" title="ALSA-2023:0100"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="systemd-libs" version="239" release="68.el8_7.1" epoch="0" arch="i686" src="systemd-239-68.el8_7.1.src.rpm">
          <filename>systemd-libs-239-68.el8_7.1.i686.rpm</filename>
          <sum type="sha256">990aa96537d938db1027386532d5d1915807d5d1fb263020d7af882fc2b7ebcb</sum>
        </package>
        <package name="systemd-devel" version="239" release="68.el8_7.1" epoch="0" arch="i686" src="systemd-239-68.el8_7.1.src.rpm">
          <filename>systemd-devel-239-68.el8_7.1.i686.rpm</filename>
          <sum type="sha256">c5bf59d5a2c44b2390cfcff0da6db02f22a4eefb1d63b57b116e8b7fec63f0f5</sum>
        </package>
        <package name="systemd-container" version="239" release="68.el8_7.1" epoch="0" arch="i686" src="systemd-239-68.el8_7.1.src.rpm">
          <filename>systemd-container-239-68.el8_7.1.i686.rpm</filename>
          <sum type="sha256">cd9449f05c4b224a05a4ee95dfdcb6de708f8868ebea9dd5f8c4197fa28e39ef</sum>
        </package>
        <package name="systemd" version="239" release="68.el8_7.1" epoch="0" arch="i686" src="systemd-239-68.el8_7.1.src.rpm">
          <filename>systemd-239-68.el8_7.1.i686.rpm</filename>
          <sum type="sha256">d718f876443d1cf97ec76dcd605961add702fbd4bafb43f3f9f320d240493bda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0838</id>
    <title>Important: samba security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:23:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0838" id="RHSA-2023:0838" type="rhsa" title="RHSA-2023:0838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0838.html" id="ALSA-2023:0838" type="self" title="ALSA-2023:0838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="samba-common" version="4.16.4" release="4.el8_7" epoch="0" arch="noarch" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-common-4.16.4-4.el8_7.noarch.rpm</filename>
          <sum type="sha256">1ec3db2f9e83db5e1e6620ec5b5a292909f48c65ff268a6669460f6964e08490</sum>
        </package>
        <package name="python3-samba" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>python3-samba-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">4ce82144097618689c1aedf84fde8298e0bdf4411f34a7b280dd1dac9b8b965d</sum>
        </package>
        <package name="libwbclient" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>libwbclient-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">68a95de5c31470690f1aa9dda09ed394c62e90cd6eadf8ff722a8392d6fa5276</sum>
        </package>
        <package name="samba-pidl" version="4.16.4" release="4.el8_7" epoch="0" arch="noarch" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-pidl-4.16.4-4.el8_7.noarch.rpm</filename>
          <sum type="sha256">6a4439c3923ac35905dda10e63c475a1dc5ad2c6484fb318b1182a2b2d41ebce</sum>
        </package>
        <package name="samba-winbind-modules" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-winbind-modules-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">7df29286ee3826e68ae2038bd83007912fb0f23e1a9130ad555b6b68a36ff71d</sum>
        </package>
        <package name="samba-common-libs" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-common-libs-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">8b8fabef95a9f4b69a1a9aa8d582233ccc685891a19789bef1f252c021e4ed1a</sum>
        </package>
        <package name="samba-client-libs" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-client-libs-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">dbe1344f4e6e9e85d187573393662f56694d767a95485ee512d116944caeac8a</sum>
        </package>
        <package name="samba-libs" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-libs-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">e5d12791fe05a8573a419ea272557de61d4b8a4979adb523be574dd2b021c6ac</sum>
        </package>
        <package name="libsmbclient" version="4.16.4" release="4.el8_7" epoch="0" arch="i686" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>libsmbclient-4.16.4-4.el8_7.i686.rpm</filename>
          <sum type="sha256">ebab028e0259e377f28f5f6c1d7ac610bfe3c3805736cf6d996d5217bb577a5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0101</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:10:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux8.4 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127849)
* vfio zero page mappings fail after 2M instances (BZ#2128515)
* ice: Driver Update up to 5.19 (BZ#2130992)
* atlantic: missing hybernate/resume fixes (BZ#2131935)
* Bluefield 2 DPU would crash and reboot due to a kernel panic (BZ#2134084)
* Fix issue that enables STABLE_WRITES by default and causes performance regressions (BZ#2135813)
* ice: Intel E810 PTP clock glitching (BZ#2136036)
* ice: configure link-down-on-close on and change interface mtu to 9000,the interface can't up (BZ#2136216)
* ice: dump additional CSRs for Tx hang debugging (BZ#2136513)
* ice,iavf: system panic during sriov sriov_test_cntvf_reboot testing (BZ#2137270)
* After upgrading to ocp4.11.1, our dpdk application using vlan strip offload is not working (BZ#2138157)
* i40e: orphaned-leaky memory when interacting with driver memory parameters (BZ#2138205)
* WARNING: CPU: 0 PID: 9637 at kernel/time/hrtimer.c:1309 hrtimer_start_range_ns+0x35d/0x400 (BZ#2138953)
* DELL EMC 8.6-RT: System is not booting into RT Kernel with perc12. (BZ#2139216)
* Lenovo 8.7: The VGA display shows no signal when install AlmaLinux8.7 (BZ#2140152)
* Host Pod -&gt; NodePort Service traffic (Host Backend - Same Node) Flow Iperf Cannot Pass Traffic (BZ#2141878)
* mlx5_core: mlx5_cmd_check messages scrolling with hardware offload enabled (BZ#2141957)
* net/ice: VIRTCHNL_OP_CONFIG_VSI_QUEUES command handling failure with in-tree driver (BZ#2142017)
* AlmaLinux:8.6+ IBM Partner issue - Loopback driver with ABORT_TASKS causing hangs in scsi eh, this bug was cloned for AlmaLinux8.6 and need this patch in 8.6+ (BZ#2144583)
* AMdCLIENT 8.8: The kernel command line parameter "nomodeset" not working properly (BZ#2145218)
* Path loss during Volume Ownership Change on AlmaLinux 8.7 SAS (BZ#2147374)
* net/ice: OP_SET_RSS_HENA command not supported with in-tree driver (BZ#2148130)
* iavf panic: iavf 0000:ca:01.0: Failed to init adminq: -53 (BZ#2149081)
* Intel 8.8 iavf: Driver Update (bugfixes) (BZ#2149742)
* Azure AlmaLinux-8 PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150912)
* AlmaLinux-8.7: System fails to boot with soft lockup while loading/unloading an unsigned (E) kernel module. (BZ#2152206)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0101" id="RHSA-2023:0101" type="rhsa" title="RHSA-2023:0101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0101.html" id="ALSA-2023:0101" type="self" title="ALSA-2023:0101"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.10.1.el8_7" epoch="0" arch="noarch" src="kernel-4.18.0-425.10.1.el8_7.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-425.10.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">2265248019aefb0789c8d98bc734e986e561d6d68abe9d165fa3ad3be81c4e84</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.10.1.el8_7" epoch="0" arch="noarch" src="kernel-4.18.0-425.10.1.el8_7.src.rpm">
          <filename>kernel-doc-4.18.0-425.10.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">d117f1e9f3043dd034cd508d9b444be73f2f9cf265e49112fbb70637fe497648</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1566</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-05 12:50:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel panic on reboot due to a bug in mei_wdt module (BZ#2139770)
* AlmaLinux8: Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142170)
* AMDSERVER 8.7: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151275)
* AlmaLinux-8.8: Update RDMA core to Linux v6.0 (BZ#2161750)
* Kernel panic observed during VxFS module unload (BZ#2162763)
* Client not able to connect to rhel server: SYN is answered by chalange ACK and RST is ignored (BZ#2165587)
* AlmaLinux8.4: s390/kexec: fix ipl report address for kdump (BZ#2166296)
* kvm-unit-test reports unhandled exception on AMD (BZ#2166362)
* Windows Server 2019 guest randomly pauses with "KVM: entry failed, hardware error 0x80000021" (BZ#2166368)
* Unable to get QinQ working with ConnectX-4 Lx in SR-IOV scenario (BZ#2166665)
* panic in fib6_rule_suppress+0x22 with custom xdp prog involved in (BZ#2167602)
* net/mlx5e: Fix use-after-free when reverting termination table (BZ#2167640)
* AlmaLinux 8.7: EEH injection failed to recover on Mellanox adapter. (BZ#2167645)
* mlx5: lag and sriov fixes (BZ#2167647)
* AlmaLinux8.4:  dasd: fix no record found for raw_track_access (BZ#2167776)
* GSS: Set of fixes in ceph kernel module to prevent OCS node kernel crash -  blocklist the kclient when receiving corrupted snap trace (BZ#2168896)
* Azure AlmaLinux8 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170228)
* fast_isolate_freepages scans out of target zone (BZ#2170576)
* Backport Request for locking/rwsem commits (BZ#2170939)
* ipv6 traffic stop when an sriov vf have ipv6 address (BZ#2172550)
* Hyper-V AlmaLinux8.8: Update MANA driver (BZ#2173103)

Enhancement(s):

* Intel 8.8 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168384)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1566" id="RHSA-2023:1566" type="rhsa" title="RHSA-2023:1566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1566.html" id="ALSA-2023:1566" type="self" title="ALSA-2023:1566"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.19.2.el8_7" epoch="0" arch="noarch" src="kernel-4.18.0-425.19.2.el8_7.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-425.19.2.el8_7.noarch.rpm</filename>
          <sum type="sha256">18a2c5de44e31e9533041e967d031bca2c393585c922c84b5ba36c6bc5084781</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.19.2.el8_7" epoch="0" arch="noarch" src="kernel-4.18.0-425.19.2.el8_7.src.rpm">
          <filename>kernel-doc-4.18.0-425.19.2.el8_7.noarch.rpm</filename>
          <sum type="sha256">c854d5ff8d8937e011a803f09da52dee27c9d0b0ca7f8531445d9687dea41e48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0049</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2023-01-09 00:00:00"/>
    <updated date="2023-01-10 10:17:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass (CVE-2022-2601)
* grub2: Heap based out-of-bounds write when redering certain unicode sequences (CVE-2022-3775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0049" id="RHSA-2023:0049" type="rhsa" title="RHSA-2023:0049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2601" id="CVE-2022-2601" type="cve" title="CVE-2022-2601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3775" id="CVE-2022-3775" type="cve" title="CVE-2022-3775"/>
      <reference href="https://bugzilla.redhat.com/2112975" id="2112975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2138880" id="2138880" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0049.html" id="ALSA-2023:0049" type="self" title="ALSA-2023:0049"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="grub2-ppc64le-modules" version="2.02" release="142.el8_7.1.alma" epoch="1" arch="noarch" src="grub2-2.02-142.el8_7.1.alma.src.rpm">
          <filename>grub2-ppc64le-modules-2.02-142.el8_7.1.alma.noarch.rpm</filename>
          <sum type="sha256">07dedffa05e3f77f66bd7c0eede31d17d8a83d5f08e575cb685ecf89a8435f44</sum>
        </package>
        <package name="grub2-pc-modules" version="2.02" release="142.el8_7.1.alma" epoch="1" arch="noarch" src="grub2-2.02-142.el8_7.1.alma.src.rpm">
          <filename>grub2-pc-modules-2.02-142.el8_7.1.alma.noarch.rpm</filename>
          <sum type="sha256">1f498423530ddf56a17f00d8165f281e7e569489c7f197660829717d63bccb62</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.02" release="142.el8_7.1.alma" epoch="1" arch="noarch" src="grub2-2.02-142.el8_7.1.alma.src.rpm">
          <filename>grub2-efi-aa64-modules-2.02-142.el8_7.1.alma.noarch.rpm</filename>
          <sum type="sha256">5dbc38e4224729c081976227a7cc2d3fb872f07897282b0317e39981771efed2</sum>
        </package>
        <package name="grub2-common" version="2.02" release="142.el8_7.1.alma" epoch="1" arch="noarch" src="grub2-2.02-142.el8_7.1.alma.src.rpm">
          <filename>grub2-common-2.02-142.el8_7.1.alma.noarch.rpm</filename>
          <sum type="sha256">99fa27d0de31508b804d1cdbc459438242226838132a519ae4efae2137ab4886</sum>
        </package>
        <package name="grub2-efi-ia32-modules" version="2.02" release="142.el8_7.1.alma" epoch="1" arch="noarch" src="grub2-2.02-142.el8_7.1.alma.src.rpm">
          <filename>grub2-efi-ia32-modules-2.02-142.el8_7.1.alma.noarch.rpm</filename>
          <sum type="sha256">c8b353c72a78fb00bf9a0c97aafcdd3719208724c1b26d34cb01c014b4884c04</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.02" release="142.el8_7.1.alma" epoch="1" arch="noarch" src="grub2-2.02-142.el8_7.1.alma.src.rpm">
          <filename>grub2-efi-x64-modules-2.02-142.el8_7.1.alma.noarch.rpm</filename>
          <sum type="sha256">ddc342a40988a080b508fe5e82b85b18b217c56ba7caa823758c9bcfb9cb0e72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0832</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 17:56:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134586)
* Hardware error: RIP: copy_user_enhanced_fast_string+0xe (BZ#2137592)
* Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel (BZ#2139580)
* MEI support for Alder Lake-S (BZ#2141783)
* Host Pod -&gt; Cluster IP Service traffic (Pod Backend - Different Node) Flow Iperf Cannot Connect (BZ#2141959)
* AlmaLinux8.7: Xorg cannot display resolution higher than 1024x768 on system using ast graphics driver (BZ#2149287)
* Intel 8.7 Bug: OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2149474)
* i40e,iavf: SR-IOV VF devices send GARP with wrong MAC address (BZ#2149745)
* AlmaLinux8.4 - boot: Add secure boot trailer (BZ#2151530)
* error 524 from seccomp(2) when trying to load filter (BZ#2152138)
* Workqueue: WQ_MEM_RECLAIM iscsi_ctrl_1:98 __iscsi_unbind_session [scsi_transport_iscsi] (BZ#2152734)
* Connectivity issue with vDPA driver (BZ#2152912)
* High Load average due to cfs cpu throttling (BZ#2153108)
* The "kernel BUG at mm/usercopy.c:103!" from BZ 2041529 is back on rhel-8.5 (BZ#2153230)
* AlmaLinux8: tick storm on nohz (isolated) CPU cores (BZ#2153653)
* kernel BUG: scheduling while atomic: crio/7295/0x00000002 (BZ#2154460)
* Azure AlmaLinux 8 z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2155272)
* Azure: VM Deployment Failures Patch Request (BZ#2155280)
* Azure vPCI AlmaLinux-8: add the support of multi-MSI (BZ#2155289)
* MSFT MANA NET Patch AlmaLinux-8: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155437)
* GSS: OCP 4.10.30 node crash after ODF upgrade : unable to handle kernel NULL pointer dereference at 0000000000000000 : ceph_get_snap_realm+0x68/0xa0 [ceph] (BZ#2155797)
* Error in /usr/src/kernels/4.18.0-423.el8.x86_64/scripts/kernel-doc script causing irdma build to fail (BZ#2157905)
* AlmaLinux8.8: Backport upstream patches to reduce memory cgroup memory consumption and OOM problem (BZ#2157922)
* The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158813)
* ethtool -m results in an out-of-bounds slab write in the be2net driver (BZ#2160182)
* (AlmaLinux OpenShift)Error downloading big ZIP files inside pod on power OCP and pod getting restarted (BZ#2160221)
* i40e/iavf: VF reset task fails "Never saw reset" with 5 second timeout per VF (BZ#2160460)
* iavf: It takes long time to create multiple VF interfaces and the VF interface names are not consistent (BZ#2163257)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0832" id="RHSA-2023:0832" type="rhsa" title="RHSA-2023:0832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41222" id="CVE-2022-41222" type="cve" title="CVE-2022-41222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2138818" id="2138818" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0832.html" id="ALSA-2023:0832" type="self" title="ALSA-2023:0832"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.13.1.el8_7" epoch="0" arch="noarch" src="kernel-4.18.0-425.13.1.el8_7.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-425.13.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">6ffccb5b0f55abf091e050631c3e5d78bad77c7ddbd9cc859bb6ab5c8828d2b9</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.13.1.el8_7" epoch="0" arch="noarch" src="kernel-4.18.0-425.13.1.el8_7.src.rpm">
          <filename>kernel-doc-4.18.0-425.13.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">f5ee6c4e8aab5b63a4794f0c33405c8f7b5709a5ed182f73b04c9ef90aa852b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0625</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 15:52:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0625" id="RHSA-2023:0625" type="rhsa" title="RHSA-2023:0625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629"/>
      <reference href="https://bugzilla.redhat.com/2161571" id="2161571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0625.html" id="ALSA-2023:0625" type="self" title="ALSA-2023:0625"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="libksba" version="1.3.5" release="9.el8_7" epoch="0" arch="i686" src="libksba-1.3.5-9.el8_7.src.rpm">
          <filename>libksba-1.3.5-9.el8_7.i686.rpm</filename>
          <sum type="sha256">7396bc9ffead99a000c83445bd5635cd661fd9faaac43a1e8316415b0473659f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7715</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 20:22:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: Incorrect server side include parsing can lead to XSS (CVE-2016-3709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7715" id="RHSA-2022:7715" type="rhsa" title="RHSA-2022:7715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2016-3709" id="CVE-2016-3709" type="cve" title="CVE-2016-3709"/>
      <reference href="https://bugzilla.redhat.com/2112766" id="2112766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7715.html" id="ALSA-2022:7715" type="self" title="ALSA-2022:7715"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="libxml2" version="2.9.7" release="15.el8" epoch="0" arch="i686" src="libxml2-2.9.7-15.el8.src.rpm">
          <filename>libxml2-2.9.7-15.el8.i686.rpm</filename>
          <sum type="sha256">4b728f3e40eee5e72f77c1a9712c4c173f40c36da46457e71772263bedec6912</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1140</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-03-07 00:00:00"/>
    <updated date="2023-03-13 10:55:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: HTTP multi-header compression denial of service (CVE-2023-23916)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1140" id="RHSA-2023:1140" type="rhsa" title="RHSA-2023:1140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23916" id="CVE-2023-23916" type="cve" title="CVE-2023-23916"/>
      <reference href="https://bugzilla.redhat.com/2167815" id="2167815" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1140.html" id="ALSA-2023:1140" type="self" title="ALSA-2023:1140"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="libcurl-devel" version="7.61.1" release="25.el8_7.3" epoch="0" arch="i686" src="curl-7.61.1-25.el8_7.3.src.rpm">
          <filename>libcurl-devel-7.61.1-25.el8_7.3.i686.rpm</filename>
          <sum type="sha256">101fe72e9f68978cd9965f00b3e7f09ac583e642d352a4b072e25ea740793283</sum>
        </package>
        <package name="libcurl-minimal" version="7.61.1" release="25.el8_7.3" epoch="0" arch="i686" src="curl-7.61.1-25.el8_7.3.src.rpm">
          <filename>libcurl-minimal-7.61.1-25.el8_7.3.i686.rpm</filename>
          <sum type="sha256">3b275a9e919c978760e6616d034de77def719eb3d74a81553b934736a99947e5</sum>
        </package>
        <package name="libcurl" version="7.61.1" release="25.el8_7.3" epoch="0" arch="i686" src="curl-7.61.1-25.el8_7.3.src.rpm">
          <filename>libcurl-7.61.1-25.el8_7.3.i686.rpm</filename>
          <sum type="sha256">7d6b580613bfe18cf919219bcbfddecfd717ce374e8144a0d88570b1a027b291</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7793</id>
    <title>Moderate: rsync security and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 19:39:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rsync security and enhancement update</summary>
    <description>The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7793" id="RHSA-2022:7793" type="rhsa" title="RHSA-2022:7793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7793.html" id="ALSA-2022:7793" type="self" title="ALSA-2022:7793"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="rsync-daemon" version="3.1.3" release="19.el8" epoch="0" arch="noarch" src="rsync-3.1.3-19.el8.src.rpm">
          <filename>rsync-daemon-3.1.3-19.el8.noarch.rpm</filename>
          <sum type="sha256">758716c818a4e8bd764b3c40b618915679654f9be1be3c933abf2719462b8b9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0173</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-01-16 00:00:00"/>
    <updated date="2023-01-16 12:33:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)
* libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0173" id="RHSA-2023:0173" type="rhsa" title="RHSA-2023:0173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40303" id="CVE-2022-40303" type="cve" title="CVE-2022-40303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40304" id="CVE-2022-40304" type="cve" title="CVE-2022-40304"/>
      <reference href="https://bugzilla.redhat.com/2136266" id="2136266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136288" id="2136288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0173.html" id="ALSA-2023:0173" type="self" title="ALSA-2023:0173"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="libxml2" version="2.9.7" release="15.el8_7.1" epoch="0" arch="i686" src="libxml2-2.9.7-15.el8_7.1.src.rpm">
          <filename>libxml2-2.9.7-15.el8_7.1.i686.rpm</filename>
          <sum type="sha256">f0d478a49d639f29ccebbfbf5c063cfdc7407c6ef8c806f78705178d88b016f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0096</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 08:57:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)
* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)
* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0096" id="RHSA-2023:0096" type="rhsa" title="RHSA-2023:0096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42010" id="CVE-2022-42010" type="cve" title="CVE-2022-42010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42011" id="CVE-2022-42011" type="cve" title="CVE-2022-42011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42012" id="CVE-2022-42012" type="cve" title="CVE-2022-42012"/>
      <reference href="https://bugzilla.redhat.com/2133616" id="2133616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133617" id="2133617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133618" id="2133618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0096.html" id="ALSA-2023:0096" type="self" title="ALSA-2023:0096"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="dbus-libs" version="1.12.8" release="23.el8_7.1" epoch="1" arch="i686" src="dbus-1.12.8-23.el8_7.1.src.rpm">
          <filename>dbus-libs-1.12.8-23.el8_7.1.i686.rpm</filename>
          <sum type="sha256">0cf5ba9b593dae3f2d97979cca8f175a18fdc5a0600a45fad5abf5e3d2a81e42</sum>
        </package>
        <package name="dbus-common" version="1.12.8" release="23.el8_7.1" epoch="1" arch="noarch" src="dbus-1.12.8-23.el8_7.1.src.rpm">
          <filename>dbus-common-1.12.8-23.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">47b4b5a28eacca1115828df5738cb78ecd058f56e5b4abb6adf2071fe3d5bfc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0837</id>
    <title>Moderate: systemd security and bug fix update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:15:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security and bug fix update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* systemd doesn't record messages to the journal during boot (BZ#2164049)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0837" id="RHSA-2023:0837" type="rhsa" title="RHSA-2023:0837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4415" id="CVE-2022-4415" type="cve" title="CVE-2022-4415"/>
      <reference href="https://bugzilla.redhat.com/2155515" id="2155515" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0837.html" id="ALSA-2023:0837" type="self" title="ALSA-2023:0837"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="systemd-devel" version="239" release="68.el8_7.4" epoch="0" arch="i686" src="systemd-239-68.el8_7.4.src.rpm">
          <filename>systemd-devel-239-68.el8_7.4.i686.rpm</filename>
          <sum type="sha256">0a0397f35bb8e0b40ac1128555b733793773d6135da58e0dd7798dfc33c77ec5</sum>
        </package>
        <package name="systemd-container" version="239" release="68.el8_7.4" epoch="0" arch="i686" src="systemd-239-68.el8_7.4.src.rpm">
          <filename>systemd-container-239-68.el8_7.4.i686.rpm</filename>
          <sum type="sha256">627994e40bb4adfe7b771ba14e6806333c514c295bdb7b21d2f8280a1ef61251</sum>
        </package>
        <package name="systemd" version="239" release="68.el8_7.4" epoch="0" arch="i686" src="systemd-239-68.el8_7.4.src.rpm">
          <filename>systemd-239-68.el8_7.4.i686.rpm</filename>
          <sum type="sha256">881191ab974aca36d5af4b61af9125716b9b20bdb0ae663b92350b34142dcd04</sum>
        </package>
        <package name="systemd-libs" version="239" release="68.el8_7.4" epoch="0" arch="i686" src="systemd-239-68.el8_7.4.src.rpm">
          <filename>systemd-libs-239-68.el8_7.4.i686.rpm</filename>
          <sum type="sha256">91456e6d21c8842057358170144832630959b24ddd1acf48d8a7036ccf00ba68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0116</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:46:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0116" id="RHSA-2023:0116" type="rhsa" title="RHSA-2023:0116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46848" id="CVE-2021-46848" type="cve" title="CVE-2021-46848"/>
      <reference href="https://bugzilla.redhat.com/2140058" id="2140058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0116.html" id="ALSA-2023:0116" type="self" title="ALSA-2023:0116"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="libtasn1" version="4.13" release="4.el8_7" epoch="0" arch="i686" src="libtasn1-4.13-4.el8_7.src.rpm">
          <filename>libtasn1-4.13-4.el8_7.i686.rpm</filename>
          <sum type="sha256">925e97c30c301c790d9dce2b8c918b61f5664eb9fe3b64a366fd2488db07c200</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7683</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:27:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference (CVE-2020-36558)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c (CVE-2021-30002)
* smb2_ioctl_query_info NULL Pointer Dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* use-after-free when psi trigger is destroyed while being polled (CVE-2022-2938)
* net/packet: slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* Spectre-BHB (CVE-2022-23960)
* Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* memory leak in drivers/hid/hid-elo.c (CVE-2022-27950)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7683" id="RHSA-2022:7683" type="rhsa" title="RHSA-2022:7683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36558" id="CVE-2020-36558" type="cve" title="CVE-2020-36558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-30002" id="CVE-2021-30002" type="cve" title="CVE-2021-30002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2078" id="CVE-2022-2078" type="cve" title="CVE-2022-2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23960" id="CVE-2022-23960" type="cve" title="CVE-2022-23960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27950" id="CVE-2022-27950" type="cve" title="CVE-2022-27950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2938" id="CVE-2022-2938" type="cve" title="CVE-2022-2938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://bugzilla.redhat.com/1946279" id="1946279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2062284" id="2062284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2069408" id="2069408" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2096178" id="2096178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2112693" id="2112693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120175" id="2120175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7683.html" id="ALSA-2022:7683" type="self" title="ALSA-2022:7683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="kernel-doc" version="4.18.0" release="425.3.1.el8" epoch="0" arch="noarch" src="kernel-4.18.0-425.3.1.el8.src.rpm">
          <filename>kernel-doc-4.18.0-425.3.1.el8.noarch.rpm</filename>
          <sum type="sha256">24a5a25f3cc2fd88c3f98178167595f0c85956c62d69df4d46389b2c7f1dd69f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.3.1.el8" epoch="0" arch="noarch" src="kernel-4.18.0-425.3.1.el8.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-425.3.1.el8.noarch.rpm</filename>
          <sum type="sha256">b1fdf8cf3333c09d61e4b1db27bd4d3202424f947609eecf0945ae9228a52ccd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7692</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:16:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)
* expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)
* expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)
* expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)
* expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)
* expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)
* expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7692" id="RHSA-2022:7692" type="rhsa" title="RHSA-2022:7692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46143" id="CVE-2021-46143" type="cve" title="CVE-2021-46143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22822" id="CVE-2022-22822" type="cve" title="CVE-2022-22822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22823" id="CVE-2022-22823" type="cve" title="CVE-2022-22823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22824" id="CVE-2022-22824" type="cve" title="CVE-2022-22824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22825" id="CVE-2022-22825" type="cve" title="CVE-2022-22825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22826" id="CVE-2022-22826" type="cve" title="CVE-2022-22826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22827" id="CVE-2022-22827" type="cve" title="CVE-2022-22827"/>
      <reference href="https://bugzilla.redhat.com/2044455" id="2044455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044457" id="2044457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044464" id="2044464" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044467" id="2044467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044479" id="2044479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044484" id="2044484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044488" id="2044488" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7692.html" id="ALSA-2022:7692" type="self" title="ALSA-2022:7692"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="xmlrpc-c" version="1.51.0" release="8.el8" epoch="0" arch="i686" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-1.51.0-8.el8.i686.rpm</filename>
          <sum type="sha256">0c412c3b0424c80fdc4a4ed711a4d31073d7acc99a598b0d32427683618ef5ae</sum>
        </package>
        <package name="xmlrpc-c-client" version="1.51.0" release="8.el8" epoch="0" arch="i686" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-client-1.51.0-8.el8.i686.rpm</filename>
          <sum type="sha256">a18c8daf0f337b1e88a547f405b3284596974ae71b11cf0cc40e111347584cd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:4991</id>
    <title>Important: xz security update</title>
    <issued date="2022-06-13 00:00:00"/>
    <updated date="2023-03-07 17:08:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xz security update</summary>
    <description>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:4991" id="RHSA-2022:4991" type="rhsa" title="RHSA-2022:4991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1271" id="CVE-2022-1271" type="cve" title="CVE-2022-1271"/>
      <reference href="https://bugzilla.redhat.com/2073310" id="2073310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-4991.html" id="ALSA-2022:4991" type="self" title="ALSA-2022:4991"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="xz-libs" version="5.2.4" release="4.el8_6" epoch="0" arch="i686" src="xz-5.2.4-4.el8_6.src.rpm">
          <filename>xz-libs-5.2.4-4.el8_6.i686.rpm</filename>
          <sum type="sha256">576ae76bc15af9ddbe98a066ed272e22a175c992a2c678df8440c33197f45daf</sum>
        </package>
        <package name="xz-devel" version="5.2.4" release="4.el8_6" epoch="0" arch="i686" src="xz-5.2.4-4.el8_6.src.rpm">
          <filename>xz-devel-5.2.4-4.el8_6.i686.rpm</filename>
          <sum type="sha256">ac23b22995aa188dd98e08d8a9552fcf940bcaac66995739e8d9abd9817a06bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7089</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 00:00:00"/>
    <updated date="2022-11-14 17:38:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7089" id="RHSA-2022:7089" type="rhsa" title="RHSA-2022:7089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515"/>
      <reference href="https://bugzilla.redhat.com/2135610" id="2135610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7089.html" id="ALSA-2022:7089" type="self" title="ALSA-2022:7089"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="libksba" version="1.3.5" release="8.el8_6" epoch="0" arch="i686" src="libksba-1.3.5-8.el8_6.src.rpm">
          <filename>libksba-1.3.5-8.el8_6.i686.rpm</filename>
          <sum type="sha256">63dbad711859fb0c3b4c285573f31e16746d35dfde7b7c997332e63240210ada</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2023:0833</id>
    <title>Moderate: python3 security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 23:58:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0833" id="RHSA-2023:0833" type="rhsa" title="RHSA-2023:0833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0833.html" id="ALSA-2023:0833" type="self" title="ALSA-2023:0833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="python3-libs" version="3.6.8" release="48.el8_7.1.alma" epoch="0" arch="i686" src="python3-3.6.8-48.el8_7.1.alma.src.rpm">
          <filename>python3-libs-3.6.8-48.el8_7.1.alma.i686.rpm</filename>
          <sum type="sha256">5f9465db1ab460deb6a77cb6d0048ff4319c9ba032bf3f1572ffa380d57fda12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1405</id>
    <title>Important: openssl security update</title>
    <issued date="2023-03-22 00:00:00"/>
    <updated date="2023-03-23 17:30:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
* openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
* openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
* openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1405" id="RHSA-2023:1405" type="rhsa" title="RHSA-2023:1405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4304" id="CVE-2022-4304" type="cve" title="CVE-2022-4304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4450" id="CVE-2022-4450" type="cve" title="CVE-2022-4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0215" id="CVE-2023-0215" type="cve" title="CVE-2023-0215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0286" id="CVE-2023-0286" type="cve" title="CVE-2023-0286"/>
      <reference href="https://bugzilla.redhat.com/2164440" id="2164440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164487" id="2164487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164492" id="2164492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164494" id="2164494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1405.html" id="ALSA-2023:1405" type="self" title="ALSA-2023:1405"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="openssl-devel" version="1.1.1k" release="9.el8_7" epoch="1" arch="i686" src="openssl-1.1.1k-9.el8_7.src.rpm">
          <filename>openssl-devel-1.1.1k-9.el8_7.i686.rpm</filename>
          <sum type="sha256">11f5f5eabcea7df1b721c5419873f5958b2518243187a2f24cd89409d56cdddc</sum>
        </package>
        <package name="openssl-libs" version="1.1.1k" release="9.el8_7" epoch="1" arch="i686" src="openssl-1.1.1k-9.el8_7.src.rpm">
          <filename>openssl-libs-1.1.1k-9.el8_7.i686.rpm</filename>
          <sum type="sha256">7cd666dea79c93990374dd2c3024226f4370dca78b22f151d6b14a3103a93576</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7105</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-11-14 17:42:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7105" id="RHSA-2022:7105" type="rhsa" title="RHSA-2022:7105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2509" id="CVE-2022-2509" type="cve" title="CVE-2022-2509"/>
      <reference href="https://bugzilla.redhat.com/2108977" id="2108977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7105.html" id="ALSA-2022:7105" type="self" title="ALSA-2022:7105"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="gnutls" version="3.6.16" release="5.el8_6" epoch="0" arch="i686" src="gnutls-3.6.16-5.el8_6.src.rpm">
          <filename>gnutls-3.6.16-5.el8_6.i686.rpm</filename>
          <sum type="sha256">5c928999c36f8386e36655919d51fae6c7ce8549944a811e6a397fae396237ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6457</id>
    <title>Moderate: python3 security update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2022-11-14 18:21:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python(mailcap): findmatch() function does not sanitise the second argument (CVE-2015-20107)
* python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6457" id="RHSA-2022:6457" type="rhsa" title="RHSA-2022:6457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0391" id="CVE-2022-0391" type="cve" title="CVE-2022-0391"/>
      <reference href="https://bugzilla.redhat.com/2047376" id="2047376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6457.html" id="ALSA-2022:6457" type="self" title="ALSA-2022:6457"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="python3-libs" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="i686" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>python3-libs-3.6.8-47.el8_6.alma.i686.rpm</filename>
          <sum type="sha256">3fcb4b16111965ebaf297da6efa024ea3385dcf07cb476c10fb9fe231355e666</sum>
        </package>
        <package name="platform-python" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="i686" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>platform-python-3.6.8-47.el8_6.alma.i686.rpm</filename>
          <sum type="sha256">551171b1f1bef7a2c000b7aece127ea74ec3ebef3c7b6e8370d02af08a596a7b</sum>
        </package>
        <package name="python3-test" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="i686" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>python3-test-3.6.8-47.el8_6.alma.i686.rpm</filename>
          <sum type="sha256">8b44fbcfbe8510211d4223da7f587b4e53b432e8c745091eb467fe905cbc61e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7720</id>
    <title>Moderate: e2fsprogs security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 20:04:05"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>e2fsprogs security and bug fix update</summary>
    <description>The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.

Security Fix(es):

* e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7720" id="RHSA-2022:7720" type="rhsa" title="RHSA-2022:7720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1304" id="CVE-2022-1304" type="cve" title="CVE-2022-1304"/>
      <reference href="https://bugzilla.redhat.com/2069726" id="2069726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7720.html" id="ALSA-2022:7720" type="self" title="ALSA-2022:7720"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="e2fsprogs-libs" version="1.45.6" release="5.el8" epoch="0" arch="i686" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>e2fsprogs-libs-1.45.6-5.el8.i686.rpm</filename>
          <sum type="sha256">1b3e835fb7bb5fa221eecbb231845560074373c366ccbdcab9c3d11cc2cadbe2</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.45.6" release="5.el8" epoch="0" arch="i686" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>e2fsprogs-devel-1.45.6-5.el8.i686.rpm</filename>
          <sum type="sha256">2540064cc5f5fe49f2265675ff2b6c6663dfaf4fb77de925d031a946eb4f287f</sum>
        </package>
        <package name="libcom_err-devel" version="1.45.6" release="5.el8" epoch="0" arch="i686" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>libcom_err-devel-1.45.6-5.el8.i686.rpm</filename>
          <sum type="sha256">35a5d03b0ce6131b849fcc714da4765dd12200405d600870c96267876f18f5ca</sum>
        </package>
        <package name="libcom_err" version="1.45.6" release="5.el8" epoch="0" arch="i686" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>libcom_err-1.45.6-5.el8.i686.rpm</filename>
          <sum type="sha256">4af2abdc96f22571b0757c8b9391caf9eb4ce04c7bc22258a79b8a310c3f82a5</sum>
        </package>
        <package name="libss" version="1.45.6" release="5.el8" epoch="0" arch="i686" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>libss-1.45.6-5.el8.i686.rpm</filename>
          <sum type="sha256">5410dc41b7fe5ff1d9d3429c74dcdf6326c197d2e60f6defe0877123301c200b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7745</id>
    <title>Moderate: freetype security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 14:26:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freetype security update</summary>
    <description>FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)
* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)
* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7745" id="RHSA-2022:7745" type="rhsa" title="RHSA-2022:7745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27404" id="CVE-2022-27404" type="cve" title="CVE-2022-27404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27405" id="CVE-2022-27405" type="cve" title="CVE-2022-27405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27406" id="CVE-2022-27406" type="cve" title="CVE-2022-27406"/>
      <reference href="https://bugzilla.redhat.com/2077985" id="2077985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077989" id="2077989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077991" id="2077991" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7745.html" id="ALSA-2022:7745" type="self" title="ALSA-2022:7745"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="freetype" version="2.9.1" release="9.el8" epoch="0" arch="i686" src="freetype-2.9.1-9.el8.src.rpm">
          <filename>freetype-2.9.1-9.el8.i686.rpm</filename>
          <sum type="sha256">a4b5a7093ebab5cd3e144715832faa8cbe5447549adc6fcc7ba96ae98677a913</sum>
        </package>
        <package name="freetype-devel" version="2.9.1" release="9.el8" epoch="0" arch="i686" src="freetype-2.9.1-9.el8.src.rpm">
          <filename>freetype-devel-2.9.1-9.el8.i686.rpm</filename>
          <sum type="sha256">b5d7582425d53fa1b991e1b3c9d615a7e408f82f9717d17a2890941248213296</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0835</id>
    <title>Moderate: python-setuptools security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:08:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-setuptools security update</summary>
    <description>The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.

Security Fix(es):

* pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0835" id="RHSA-2023:0835" type="rhsa" title="RHSA-2023:0835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40897" id="CVE-2022-40897" type="cve" title="CVE-2022-40897"/>
      <reference href="https://bugzilla.redhat.com/2158559" id="2158559" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0835.html" id="ALSA-2023:0835" type="self" title="ALSA-2023:0835"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="python3-setuptools" version="39.2.0" release="6.el8_7.1" epoch="0" arch="noarch" src="python-setuptools-39.2.0-6.el8_7.1.src.rpm">
          <filename>python3-setuptools-39.2.0-6.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">789f0146b2dfb0a9608bbaa4cd3ee4d90e585afe2cec8baec4b45d98efc5f16d</sum>
        </package>
        <package name="platform-python-setuptools" version="39.2.0" release="6.el8_7.1" epoch="0" arch="noarch" src="python-setuptools-39.2.0-6.el8_7.1.src.rpm">
          <filename>platform-python-setuptools-39.2.0-6.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">c0d9b9b5ed4c72ea2d1a49859a50ba7952809469edc4cb6eaeaa1de528e43c5d</sum>
        </package>
        <package name="python3-setuptools-wheel" version="39.2.0" release="6.el8_7.1" epoch="0" arch="noarch" src="python-setuptools-39.2.0-6.el8_7.1.src.rpm">
          <filename>python3-setuptools-wheel-39.2.0-6.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">dcfb7c6113269c148a4b1027ec5986bbfc29e74d49a70fd60749e45bd1009821</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7790</id>
    <title>Moderate: bind security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 19:49:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7790" id="RHSA-2022:7790" type="rhsa" title="RHSA-2022:7790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7790.html" id="ALSA-2022:7790" type="self" title="ALSA-2022:7790"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="bind-export-devel" version="9.11.36" release="5.el8" epoch="32" arch="i686" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-export-devel-9.11.36-5.el8.i686.rpm</filename>
          <sum type="sha256">ba35d80e924d270edceaa568052a526c88bde8c085e74df44d167cba73db5606</sum>
        </package>
        <package name="bind-export-libs" version="9.11.36" release="5.el8" epoch="32" arch="i686" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-export-libs-9.11.36-5.el8.i686.rpm</filename>
          <sum type="sha256">feb7d7548542477755c7c9bb3f2a12a8da6b09952f336ffcdac5763c86e05aef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0110</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:22:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0110" id="RHSA-2023:0110" type="rhsa" title="RHSA-2023:0110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35737" id="CVE-2022-35737" type="cve" title="CVE-2022-35737"/>
      <reference href="https://bugzilla.redhat.com/2110291" id="2110291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0110.html" id="ALSA-2023:0110" type="self" title="ALSA-2023:0110"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="sqlite" version="3.26.0" release="17.el8_7" epoch="0" arch="i686" src="sqlite-3.26.0-17.el8_7.src.rpm">
          <filename>sqlite-3.26.0-17.el8_7.i686.rpm</filename>
          <sum type="sha256">6ad2c6c7510a71cdb8bfe00ea193245926203323a2ec60f9e555f55f99b456d8</sum>
        </package>
        <package name="sqlite-libs" version="3.26.0" release="17.el8_7" epoch="0" arch="i686" src="sqlite-3.26.0-17.el8_7.src.rpm">
          <filename>sqlite-libs-3.26.0-17.el8_7.i686.rpm</filename>
          <sum type="sha256">94b86416e006c40f145405bccedf631d9da094b68bc3371bb6282e55ae85afee</sum>
        </package>
        <package name="sqlite-doc" version="3.26.0" release="17.el8_7" epoch="0" arch="noarch" src="sqlite-3.26.0-17.el8_7.src.rpm">
          <filename>sqlite-doc-3.26.0-17.el8_7.noarch.rpm</filename>
          <sum type="sha256">a1cf46e0ed4414337d3e6f21722a2520262f0250f5c563d572f7adfe6a1ebfa7</sum>
        </package>
        <package name="sqlite-devel" version="3.26.0" release="17.el8_7" epoch="0" arch="i686" src="sqlite-3.26.0-17.el8_7.src.rpm">
          <filename>sqlite-devel-3.26.0-17.el8_7.i686.rpm</filename>
          <sum type="sha256">b7951c0876ce87c9be3f2f5112e0a7d445d3386f8b727d8f50c0067ea8afedb1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7730</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 10:54:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libldb security, bug fix, and enhancement update</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077484)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7730" id="RHSA-2022:7730" type="rhsa" title="RHSA-2022:7730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746"/>
      <reference href="https://bugzilla.redhat.com/2108215" id="2108215" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7730.html" id="ALSA-2022:7730" type="self" title="ALSA-2022:7730"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_6_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_6_default</name>
        <package name="libldb-devel" version="2.5.2" release="2.el8" epoch="0" arch="i686" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>libldb-devel-2.5.2-2.el8.i686.rpm</filename>
          <sum type="sha256">baa0285366451f189c71ea9b5598054642e2a7861cc79f64b1224c32320bcdc0</sum>
        </package>
        <package name="python3-ldb" version="2.5.2" release="2.el8" epoch="0" arch="i686" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>python3-ldb-2.5.2-2.el8.i686.rpm</filename>
          <sum type="sha256">ef76123b6185d6c9c3f300cb147c08baa4acd2485d0d20b2e0517f092b2fa4f9</sum>
        </package>
        <package name="libldb" version="2.5.2" release="2.el8" epoch="0" arch="i686" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>libldb-2.5.2-2.el8.i686.rpm</filename>
          <sum type="sha256">f127993bf1c10dcceb3d10d7c7ce4ba713c3a1036868e0d082e6433b58a5e43a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1569</id>
    <title>Moderate: gnutls security and bug fix update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-05 12:14:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security and bug fix update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* trap invalid opcode ip:7feef81809fe sp:7fee997419c0 error:0 in libgnutls.so.30.28.2[7feef8040000+1dd000] (BZ#2131152)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1569" id="RHSA-2023:1569" type="rhsa" title="RHSA-2023:1569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0361" id="CVE-2023-0361" type="cve" title="CVE-2023-0361"/>
      <reference href="https://bugzilla.redhat.com/2162596" id="2162596" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1569.html" id="ALSA-2023:1569" type="self" title="ALSA-2023:1569"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-i686-baseos-rpms__8_7_default">
        <name>almalinux-8-for-i686-baseos-rpms__8_7_default</name>
        <package name="gnutls" version="3.6.16" release="6.el8_7" epoch="0" arch="i686" src="gnutls-3.6.16-6.el8_7.src.rpm">
          <filename>gnutls-3.6.16-6.el8_7.i686.rpm</filename>
          <sum type="sha256">730e12c91ad3a8ca7fa3398821ea893ebf7ce7357f8d4de644dd8868dd4df8e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>