<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5249</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-cross-headers is now available for AlmaLinux 9.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966)
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643)
* SR-IOV performance &gt; 50% degradation (BZ#2074830)
* fix data corruption caused by dm-integrity (BZ#2082187)
* SCTP client-side peeloff issues [almalinux-9] (BZ#2084044)
* TCP connection fails in a asymmetric routing situation (BZ#2085480)
* Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963)
* spec: Fix separate tools build (BZ#2090852)
* call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255)
* Mark ThunderX NIC driver as unmaintained (BZ#2092638)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5249" id="RHSA-2022:5249" type="rhsa" title="RHSA-2022:5249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1012" id="CVE-2022-1012" type="cve" title="CVE-2022-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1729" id="CVE-2022-1729" type="cve" title="CVE-2022-1729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1966" id="CVE-2022-1966" type="cve" title="CVE-2022-1966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27666" id="CVE-2022-27666" type="cve" title="CVE-2022-27666"/>
      <reference href="https://bugzilla.redhat.com/2061633" id="2061633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064604" id="2064604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2086753" id="2086753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092427" id="2092427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5249.html" id="ALSA-2022:5249" type="self" title="ALSA-2022:5249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="kernel-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-core-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">1973204a12f772cabbbf6f828d44270c0aebfa76cde8e0bb13478a6a9cf15cc1</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">24264b2d6eb85e23df8faf7bac42fe19928e5e37c6ebfbc0741da102fa392aa2</sum>
        </package>
        <package name="kernel-debug-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2459f9c5274396bee3933ccab6349d2de9cb32cd4d37f1e7c5156d53bd9e752f</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3755ecc0139e5e5b73e1114ae3642e345f52b1a329dd5b433e7afbc8bd26007e</sum>
        </package>
        <package name="kernel-tools-libs" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-tools-libs-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3b48d28230eab4f6042d0b1b8865421f7c6dac7111ccb3c04f6eccb4706e9d3c</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">414a934a4a0755bbd611979f739f7b292603fd145bdb2c06c2ea7450879356f2</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">4663351dd15bd542878824e76fc535f2760aed8b63790d6bd5196b9c374e1dea</sum>
        </package>
        <package name="kernel-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-modules-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">488bd1cc7ba1150569a6c8f0dfd472a927a64166d0ebc53c5a3131e9c71fe016</sum>
        </package>
        <package name="kernel-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-modules-extra-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">61c72357ca827002864b8c3b0741503f26b4f1e6fafe53a6d947532aa2432e8e</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">70c139630107375863d21b843fc7d8ed0642dd5c4a1ea911849b457995124dfb</sum>
        </package>
        <package name="kernel-debug" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7be3a3dc1dd85e34d430a444dc5c9c306e9d6085804059de7d2c8becb3ff965b</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7e450e4be54e447fe989840e1f62239b9eb70b320a08440afcbc49086b4f38ed</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca</sum>
        </package>
        <package name="kernel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">864d2631ed16b69edfa9eacea9bf3d39cc4cbd5a73125183836651f5a1a96bd0</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>python3-perf-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">90ddf05e5e061db41b9bcd34be991c624da18a2649b9c68840517db936eb4120</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">92e55cc526633d6c580bae63f800f10ae544f445249c1e5f47980a6122e7e905</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-extra-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">97d17f1ac6000c8a8872492a11abae29868487e40b17979780b73778ed8176b8</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b36fdf835203dca1c5b0d554fbb96a0ff27937e4998a0a09393b21ff88981195</sum>
        </package>
        <package name="bpftool" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>bpftool-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d20599cdde45282d6f9c799120e1587445299d8effecf93b1c458403f41ddec8</sum>
        </package>
        <package name="kernel-tools" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-tools-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e650469c4d74b601aa2ae274418123b726638d26e32c46b127bcb6265acf9fef</sum>
        </package>
        <package name="kernel-debug-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-core-5.14.0-70.17.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f7c7b0da3e8d1846170717a17cf7f70131df1667f5f4ae0af86f6526a6256674</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5252</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:29:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libarchive-devel is now available for AlmaLinux 9.</summary>
    <description>The libarchive programming library can create and read several different
streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images.
Libarchive is used notably in the bsdtar utility, scripting language bindings
such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
(CVE-2022-26280)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5252" id="RHSA-2022:5252" type="rhsa" title="RHSA-2022:5252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26280" id="CVE-2022-26280" type="cve" title="CVE-2022-26280"/>
      <reference href="https://bugzilla.redhat.com/2071931" id="2071931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5252.html" id="ALSA-2022:5252" type="self" title="ALSA-2022:5252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="libarchive" version="3.5.3" release="2.el9_0" epoch="0" arch="aarch64" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-3.5.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">155491dded2a1576be137bef4d2289693ab1d1c706e03d83f00bf898869f39cd</sum>
        </package>
        <package name="bsdtar" version="3.5.3" release="2.el9_0" epoch="0" arch="aarch64" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>bsdtar-3.5.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">28d76814b85119baadaa92702e877cfb0daa48561d26af6a240197b14d39bfbf</sum>
        </package>
        <package name="libarchive-devel" version="3.5.3" release="2.el9_0" epoch="0" arch="aarch64" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-devel-3.5.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f1df8b4c8417ba417697bb6b9c4f8a33753d157a95ab2dd613d568bf8c689bb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5257</id>
    <title>Moderate: libinput security update</title>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-07-21 17:40:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libinput-devel is now available for AlmaLinux 9.</summary>
    <description>libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.
Security Fix(es):
* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5257" id="RHSA-2022:5257" type="rhsa" title="RHSA-2022:5257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1215" id="CVE-2022-1215" type="cve" title="CVE-2022-1215"/>
      <reference href="https://bugzilla.redhat.com/2074952" id="2074952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5257.html" id="ALSA-2022:5257" type="self" title="ALSA-2022:5257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="libinput" version="1.19.3" release="2.el9_0" epoch="0" arch="aarch64" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-1.19.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7446f72679817160ab134136345579b5db0845ec21b65e2dc8eefce096940c2f</sum>
        </package>
        <package name="libinput-devel" version="1.19.3" release="2.el9_0" epoch="0" arch="aarch64" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-devel-1.19.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">83b676e0c1946352dba5b6d36349bb5d1f80822acf98a2143c34bb8384250aa4</sum>
        </package>
        <package name="libinput-utils" version="1.19.3" release="2.el9_0" epoch="0" arch="aarch64" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-utils-1.19.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e9636a15a5931ae4a41782ce213794d9afcbbb130aafbffb9376618f2286af8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5695</id>
    <title>Important: java-11-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-11-openjdk-demo-fastdebug is now available for AlmaLinux 9.</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084777)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-11] (BZ#2099915)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-11] (BZ#2107866)
* Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-11] (BZ#2107868)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5695" id="RHSA-2022:5695" type="rhsa" title="RHSA-2022:5695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5695.html" id="ALSA-2022:5695" type="self" title="ALSA-2022:5695"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">021e39f308968d922ebaa0545c2a756b90a012ac71e16ab6ed7a61a8dbe7026a</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">08e564f853519dfb3785d62e9f3b54bc8392770528d5689fdb5f17d5cb2f9527</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">124bc56877f6a1b7adca954a2027908194f424b496498637e746e3c06421ab34</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">1afaab660240cea1d982d19dfdff88780625b060ac40afbbc8ca773738123c15</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">1c20b85ab21695ce04b9783864f586bd09ca1f20a7814017247d6acf5004a72f</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">28e8a092370355f3eaed00446f7f8f527dfae185f64dd856601d9ff5db774022</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">49edc25edea0fe09f3eda8702c399ec61d20a0bc3040d32d7b2af46c3257c9ad</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">4aec530d59bd5ffde2b117ac2993c5c2ccf63347584e5e8c8772927a2d0d8f51</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5dd0bd4bc5bf20159a3980049e4cefb2506b7df2918885686ebf13a0b0dd1e4a</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">60d5f51f9ea3cb4a1d66d53d7ff570f03ceac17d057068ac14c8c0afe197c4a7</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">65e60063b72b7bb2ec05bec64b8e351b61556f66d001c5f72c0622eada48e072</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">690d8d7f337dc0d293ecc1106f71a1e177e4466971258fde47e528cb664e8c55</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7f178f3b586ce1624d850c1450b29d13e1635697a6be7d43e044523d2a9f4587</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">81d2e216cabc56e78154add60556d04aaddd2f8ccb4f35b298ff480d08b5475e</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8628a2b920f22be23ecc9b5efa3f5616d01df1736960c683a68c6f7928e235dc</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8918c6a66c0d13e953d1a8694b34b7fc119ff4fb8dd806cf3a59550b7352c656</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8f4b913f223800919f810cdedf53ff52be861f2e0e21cf67774ede3677e5b9da</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9239feb81c52164a8640624489b22566b7799b99ef6eed404126360339d1e90d</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bc53aad1730b290fdc3efd632cd1cee18d111379ebaf82d778d7e48f38898e2e</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">cf01e2727b3214c43b4df2ac973d52c0ba7099df2121cf974df461f969051541</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e03da2cfaf40b83601add6336963a3b68f41fbe51c91803d11aca5812c39fe4f</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ee9a302d6582f14d7e3f9c581eadfdc70580f9696b2a59efb2de3926ddf47bb7</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-11.0.16.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f59abc3ebe1d133beafdae2cf43c1d1f25ceb05d18e4bc9cebcf144e7ac79026</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5709</id>
    <title>Important: java-1.8.0-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-openjdk-demo-fastdebug is now available for AlmaLinux 9.</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk (1.8.0.342.b07). (BZ#2084776)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-8] (BZ#2099916)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-8] (BZ#2107956)
* Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-8] (BZ#2107958)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5709" id="RHSA-2022:5709" type="rhsa" title="RHSA-2022:5709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5709.html" id="ALSA-2022:5709" type="self" title="ALSA-2022:5709"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.342.b07-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">016c0c76cdcb9e6561492bf3c35a2cedde2695d2d3573cb0ca2a4fa753bf5a75</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">13e54f68938741e20c7a4f2b0e688e9d7a020dd68ea8a55a133537bdb3bbea84</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">1d5573506ba207469a24e19e1d9e16656ad23ce123699cbba5b95972676053b5</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2f7dcfbd8090f5c5b4c1c4b6dcdecd481672aacf671bc2930496269e307d67ef</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">43bd8187df04dfc07d97fb47910f51119fbe8cec30a2437278de2f9f25829405</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">43fc934b3e971d3bf6deeea265bbeb70d4cfe002255227aa13078e3dc88262ab</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">4a75ca2a7e9ba3dfbb997ce961324292dea354bb946cd721a86b52215e506657</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">55795e2d5144b2ad8fd161a8c5c835cff0783b48399c8b205f9911fd9511c02e</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">62ed8b234dd41cb5da9e477a061fb157384caa31c75e49601e8e4bdb45b6a2a9</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">65f3bb2e57497d0604a012c2963375d26620fd4bbc208d7ba31add2493d58fa9</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">89731d39b9f406779e49f5b31338d11ed108354c6fc33fffae824a75939e7840</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ad0a803a01a8a6509a4ae6a2edcd5c3339c06b484fdd11fa9be36123107eeb7b</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b064f1e72fe6bc3ea466eed81d457758f85dc915844d0c6be4d8b745cd95778c</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b69900b4f3d8d0f1d27611fdb3dbc82c72dd21c7dd97cb637d34a3e18d109626</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b7aed5fbdb3d6beb5a28b9ce85c48d33da741e6e10e016aa2a97d436a1c0666c</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.342.b07-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bc2ce7c6832e2fb2c60b46cb5284a3c3bbb1e4e1c377e7001a75645cd6bad5d6</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.342.b07-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">eef6d2e8806b1e7e959d8ea2224f3ff6f2aa5e4802e5b61ddcebf3adad114d9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5736</id>
    <title>Important: java-17-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-27 00:00:00"/>
    <updated date="2022-08-05 17:19:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security, bug fix, and enhancement update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-17-openjdk (17.0.4.0.8). (BZ#2084779)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
* OpenJDK: random exponentials issue (Libraries, 8283875) (CVE-2022-21549)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previous AlmaLinux builds of OpenJDK 17 altered the arguments passed to sun.security.pkcs11.wrapper.PKCS11.getInstance() in order to facilitate FIPS support. This build adds an additional form of the method, retaining the original arguments, so that applications which depend on this internal method continue to function with AlmaLinux builds of OpenJDK. (BZ#2099919)
* With previous AlmaLinux builds of OpenJDK 17, Mac key generation and import would fail due to the lack of the CKA_SIGN attribute on the key. This attribute is now added as part of the NSS FIPS configuration. (BZ#2105395)
* With the release of AlmaLinux, a change was made so that disabling OpenJDK FIPS mode required the use of both the -Djava.security.disableSystemPropertiesFile=true and -Dcom.AlmaLinux.fips=false options, with the intention that FIPS mode could be controlled independently of system security properties. This change has now been reverted and only -Djava.security.disableSystemPropertiesFile=true is required to disable FIPS mode, as in AlmaLinux. (BZ#2107941)
* Previous AlmaLinux builds of OpenJDK 17 running in FIPS mode with a SecurityManager would fail due to a lack of module access permissions. This has now been corrected. (BZ#2107943)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5736" id="RHSA-2022:5736" type="rhsa" title="RHSA-2022:5736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21549" id="CVE-2022-21549" type="cve" title="CVE-2022-21549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108547" id="2108547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5736.html" id="ALSA-2022:5736" type="self" title="ALSA-2022:5736"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="java-17-openjdk-headless" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2ef141ae996191fe833e1e78b150d990d3a6c3462e132218d1c8a63119a5f629</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">37d549cd95384b7f9ff7bfe29acbd13dfe54d5df6776fdaee2f947e67f4b7a9c</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">51f05ad89cd1c32bdac79ea258c551c18e8119c98c96e761610fe8004d619c81</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5227f7d43c3176cad97208a62984c1637eeef1ebb7356916ee34aa141a099b1b</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">56c0516eb1e521c6a5d7abab68c129d148c05daf51fac2b1ff311ccffccc5ad5</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">58bbb5fce4c43c518fc60b12d0ad37dead79937d3b5c334fec0714559794a399</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5afb5eae76028f9c0862b9d41955a571d42f318ff2ac7f16c2e7509630a9febe</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5b78636c828e5b4ab9e9ca7223ddf3b3e1d87eb2ba714115a205955d1fb6dc79</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">6239b02ae30d74913b5d67d0cf7adc117e4fb66cb50ec054822e32662cb7fb95</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">6279e8c2514b95e7c19644794cef2efe6e14397dd78b459db33a15752d86b4c4</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">648308f626f817ebe8888676f256c891b7a7789cf44edbbcc314b06b1ba57700</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">995995c7daa771ba9aa034ee29981544ea2367a1748ad6514977b5ff85871f97</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">aac358a1c551e5e4b93e1ea1b2814b65179d6a0a0cbcf6466c32e5253ca1f065</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">abe5a1e1e24224eed90d14a49a8afcd34bde7e675ed2c93ef54877e38818dd30</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ae687b0946b405aaf9da438153023b5123e340f808e52b187dfd57d8b906e89d</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b4402503754a28e8e90a7ada107dbd1e1c99edb9240ebfed8fa209b19d6f67c4</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b82d534bcd3e609e5718ae2d6f10ce4580a646e7a2e4662e86e95a70cf431d23</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">caf25c6f124f2fe59efaa5899fbe9deddc8222f0e0f5eece9c9848873b689d95</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">cd74dcb3d0eb2928fdd0fb16c72881934a0d86a1a9c466c4b35155ead8114fef</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">df3efeed575ce8a9e1c76bf2ea3cb4350c95884c7d83b3ddb8029f62fbc35ba7</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f5d6870addf32cd8c8b512b647a55979cdc195ab088dd15d3e2ebd4cb1834605</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">fa7ada42802a43f13fd34ea30084abdd9460825db9a245bb6ac5515a98687847</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.4.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">fefe99f806e34b68d1f9e5b7463f7ebd698f2e67ef229da3081a28c97ead0409</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5948</id>
    <title>Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 07:01:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 
The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5).
Security Fix(es):
* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)
* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)
* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)
* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)
* mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052)
* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)
* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)
* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)
* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)
* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)
* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)
* mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382)
* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)
* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)
* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)
* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)
* mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444)
* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)
* mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)
* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)
* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)
* mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451)
* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)
* mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455)
* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)
* mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)
* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)
* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)
* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)
* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)
* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)
* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5948" id="RHSA-2022:5948" type="rhsa" title="RHSA-2022:5948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46659" id="CVE-2021-46659" type="cve" title="CVE-2021-46659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46661" id="CVE-2021-46661" type="cve" title="CVE-2021-46661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46663" id="CVE-2021-46663" type="cve" title="CVE-2021-46663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46664" id="CVE-2021-46664" type="cve" title="CVE-2021-46664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46665" id="CVE-2021-46665" type="cve" title="CVE-2021-46665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46668" id="CVE-2021-46668" type="cve" title="CVE-2021-46668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46669" id="CVE-2021-46669" type="cve" title="CVE-2021-46669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24048" id="CVE-2022-24048" type="cve" title="CVE-2022-24048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24050" id="CVE-2022-24050" type="cve" title="CVE-2022-24050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24051" id="CVE-2022-24051" type="cve" title="CVE-2022-24051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24052" id="CVE-2022-24052" type="cve" title="CVE-2022-24052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27376" id="CVE-2022-27376" type="cve" title="CVE-2022-27376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27377" id="CVE-2022-27377" type="cve" title="CVE-2022-27377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27378" id="CVE-2022-27378" type="cve" title="CVE-2022-27378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27379" id="CVE-2022-27379" type="cve" title="CVE-2022-27379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27380" id="CVE-2022-27380" type="cve" title="CVE-2022-27380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27381" id="CVE-2022-27381" type="cve" title="CVE-2022-27381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27382" id="CVE-2022-27382" type="cve" title="CVE-2022-27382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27383" id="CVE-2022-27383" type="cve" title="CVE-2022-27383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27384" id="CVE-2022-27384" type="cve" title="CVE-2022-27384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27386" id="CVE-2022-27386" type="cve" title="CVE-2022-27386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27387" id="CVE-2022-27387" type="cve" title="CVE-2022-27387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27444" id="CVE-2022-27444" type="cve" title="CVE-2022-27444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27445" id="CVE-2022-27445" type="cve" title="CVE-2022-27445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27446" id="CVE-2022-27446" type="cve" title="CVE-2022-27446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27447" id="CVE-2022-27447" type="cve" title="CVE-2022-27447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27448" id="CVE-2022-27448" type="cve" title="CVE-2022-27448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27449" id="CVE-2022-27449" type="cve" title="CVE-2022-27449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27451" id="CVE-2022-27451" type="cve" title="CVE-2022-27451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27452" id="CVE-2022-27452" type="cve" title="CVE-2022-27452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27455" id="CVE-2022-27455" type="cve" title="CVE-2022-27455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27456" id="CVE-2022-27456" type="cve" title="CVE-2022-27456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27457" id="CVE-2022-27457" type="cve" title="CVE-2022-27457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27458" id="CVE-2022-27458" type="cve" title="CVE-2022-27458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31622" id="CVE-2022-31622" type="cve" title="CVE-2022-31622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31623" id="CVE-2022-31623" type="cve" title="CVE-2022-31623"/>
      <reference href="https://bugzilla.redhat.com/2049302" id="2049302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050017" id="2050017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050022" id="2050022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050024" id="2050024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050026" id="2050026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050032" id="2050032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050034" id="2050034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068211" id="2068211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068233" id="2068233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068234" id="2068234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2069833" id="2069833" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074817" id="2074817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074947" id="2074947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074949" id="2074949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074951" id="2074951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074966" id="2074966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074981" id="2074981" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074987" id="2074987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074996" id="2074996" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074999" id="2074999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075005" id="2075005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075006" id="2075006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075691" id="2075691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075692" id="2075692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075693" id="2075693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075694" id="2075694" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075695" id="2075695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075696" id="2075696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075697" id="2075697" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075699" id="2075699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075700" id="2075700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075701" id="2075701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076144" id="2076144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076145" id="2076145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092354" id="2092354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092360" id="2092360" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5948.html" id="ALSA-2022:5948" type="self" title="ALSA-2022:5948"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="mariadb-devel" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-devel-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">146b0b5217618b0304f10a2470a8d5e0db6a99349d360b6807e62181f5475b3d</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-galera-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2898ec19d2d60a138ab94f958ee9c6e9697e8aa391b0f955262f781ef3871786</sum>
        </package>
        <package name="mariadb-test" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-test-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">62c8765ac5fa9cb1770372d8976b45f4151feefb69c5f129c318d3cea0309c8f</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-gssapi-server-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7ea1c913b46a136a7d4e14f098df4b5807f087e3dac31b6f1eb8a88886c012a0</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-utils-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8d3c8ba61504aa400c720710447d7045847fc7dc8e2b3b269101527070668a91</sum>
        </package>
        <package name="mariadb-backup" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-backup-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8e5f4d8090355278e37fc867d90ade26c74ac2c0634d0c0765a3049779dc7183</sum>
        </package>
        <package name="mariadb" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">90d775365b1bc7f942897f52eda13aceae35d5ce070d4f81c8e5568cee8a029a</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-errmsg-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">949affc68b2ba63c6dfc8f013355993428418522563fac9a6e5c56d04162ae57</sum>
        </package>
        <package name="mariadb-common" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-common-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9c27720372d9e0a4c631360e9c759879c0eddcc6c51727f9fd09577cc9578b2b</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b1e67dc923d61ed166201cecd3c02e333474085bd5ce030977a14fe6d3f95807</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-devel-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bfad67f9e719f3a6daba746d8c53914062e6e4fa08c97f3e757d0ae0cab7736e</sum>
        </package>
        <package name="mariadb-server" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d24d51d575b134585808f34e94614723bf800892096dd341b9c9d6e1c0a01ce9</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e7a273a6fefd860ced01f729101ede60affa572c340092b0fc59cb6aef52555a</sum>
        </package>
        <package name="mariadb-pam" version="10.5.16" release="2.el9_0" epoch="3" arch="aarch64" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-pam-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ef635d8b59ee8d5aa89775faf8ca51fd3b5fcdc1ed47688323405649fc35bac1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6003</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 21:25:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248)
* Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253)
* FIPS module identification via name and version (BZ#2093384)
* gfs2: File corruption with large writes when memory is tight (BZ#2097306)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251)
* AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740)
* Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903)
* Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854)
* Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858)
* lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085)
* OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974)
Enhancement(s):
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6003" id="RHSA-2022:6003" type="rhsa" title="RHSA-2022:6003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0494" id="CVE-2022-0494" type="cve" title="CVE-2022-0494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://bugzilla.redhat.com/2039448" id="2039448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6003.html" id="ALSA-2022:6003" type="self" title="ALSA-2022:6003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="perf" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0eb7d9f0ac3b9ebf57b4dcddacd068258fee009b0300672fc73bf3f3cc76d398</sum>
        </package>
        <package name="bpftool" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>bpftool-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">11aa8fa25cb0c86c0ab9afacf0e49327a08b3f1e182a1c1badca56ad515ad620</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">19067b58234778af03dc1406968e83cf7204c772247fe6aae0e902dbba9e8dc6</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa</sum>
        </package>
        <package name="kernel-tools" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-tools-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">26ac1360ed36248958f0de911dfd8bf26e3ad9dd1a4c08aff8162876ee8a4488</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-extra-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3250c002bd3b0347f3de952c640d748b07483ac0d4eab7eba1ad3ac752b6c80e</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">39d1f784e6bbf88689a9763ad782f1b6f0ba8ec671dd5674554ea7f00f940580</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>python3-perf-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">53e1c95cf5302d8faed0e19d40a82fa484de071da8bcec5e63454206229fea62</sum>
        </package>
        <package name="kernel-debug" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">57a43bf16f0f7452f58d392c7069c7b99e1ce8a8acbb25a62444de6829e4c6be</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">63b490aa9b228111f6f36c302ed5737345ea88ae035fb6fe7247773d1cf56815</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">668d6a0f0fe6242b48cdd4dab0f049e001921cc2391e4dfd34883a3370a9d4ea</sum>
        </package>
        <package name="kernel-tools-libs" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-tools-libs-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">847fd130e86944fb479b00add486721c88153b4d7ef8c43d5b55206e183e15ec</sum>
        </package>
        <package name="kernel-debug-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-core-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8ba59e43825dd20f3a745af5affdd9b39ba789ae033f1f82ba09862c902597b0</sum>
        </package>
        <package name="kernel-debug-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9001e8067883c7162f730f7a59594b27445a65b3939a57f4de1edb9cf1ed5ac0</sum>
        </package>
        <package name="kernel-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-modules-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">92c8eae307a024835f76633b28309131b7ad94a310ac34f09996f5e4d8afe301</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">aa0abc40b0a702614d2552fd79af91780b200c9aac5a8b41251763dabf0f2e60</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c83bb3cfbc792bb291787b81cb79e2f56d54e18f6e3b3eb03fab25526b0a06c1</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">cf2afe0a1ed9572489a002a48a9dd7870e27f1d44a7685efea4d867e43565da2</sum>
        </package>
        <package name="kernel-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-modules-extra-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d844866b6542a3631d9782d11e96fd310ab9bf3083e19faa462559cec49efb27</sum>
        </package>
        <package name="kernel-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-core-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e2ac0f626e2caaced755854b37aa4b3ffb16c524811e657a1b8204ba096918cd</sum>
        </package>
        <package name="kernel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-5.14.0-70.22.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">fecda1093c65036388813c1ccac5eade9a95fd44ffa2a209ec02b7a17a14b7c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6043</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2022-08-10 00:00:00"/>
    <updated date="2022-08-10 21:11:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.
Security Fix(es):
* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6043" id="RHSA-2022:6043" type="rhsa" title="RHSA-2022:6043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34716" id="CVE-2022-34716" type="cve" title="CVE-2022-34716"/>
      <reference href="https://bugzilla.redhat.com/2115183" id="2115183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6043.html" id="ALSA-2022:6043" type="self" title="ALSA-2022:6043"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="dotnet-templates-6.0" version="6.0.108" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-templates-6.0-6.0.108-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">14b9c40c3cbc91fe5249b37ccb12aa078b854105d92e42fab556ffbad5739739</sum>
        </package>
        <package name="dotnet-host" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-host-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">180aefec52d84913ed741857cd97305eb364801b970ca56378671a68f1c74791</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.108" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.108-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2201cc2fb37ab21d6166ae81436a7ed6749203f4baabbfbf13fa007654828da2</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">372a53f55a185f528216c118155c8a273d44277a34a8f956ba7443ef58b72af9</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">593db43af07af8352960c8851598520851f0b2d1d08b8a40d288e5fb6b2518c4</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">84ed309a949327c12735e0b5163964a69b503e8852fd32a5b37fcf6618707aa3</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b2e794ed699181106b23a47c633643d1dbfe6bef9229105cc0c1227d13ae9241</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b9a58208d487d93908239c5f40801472afff52b267306c993ef44547b8683ca7</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.8-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ba2327c99a34d124c23f09ded9f36b25dce6b478e1f3ddc390b881f3fad1f405</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.108" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.108-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d2f0b328aab7eba192d65b4710177a1fc3b942d8bfe5c6ae22c65a8a1b96f0be</sum>
        </package>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.108" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e316e57bb13b902d053a8c57cbc24893cfde705eea5bb648a6c5e080a84e546a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6521</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-09-14 00:00:00"/>
    <updated date="2022-10-14 09:06:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6521" id="RHSA-2022:6521" type="rhsa" title="RHSA-2022:6521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38013" id="CVE-2022-38013" type="cve" title="CVE-2022-38013"/>
      <reference href="https://bugzilla.redhat.com/2125124" id="2125124" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6521.html" id="ALSA-2022:6521" type="self" title="ALSA-2022:6521"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.109" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2c1b5d67fcded9417e13396a4a32138eb73e5dea4e46138d90df9a063e324701</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6585</id>
    <title>Moderate: ruby security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:17:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428)

Security Fix(es):

* Ruby: Double free in Regexp compilation (CVE-2022-28738)
* Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6585" id="RHSA-2022:6585" type="rhsa" title="RHSA-2022:6585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28738" id="CVE-2022-28738" type="cve" title="CVE-2022-28738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739"/>
      <reference href="https://bugzilla.redhat.com/2075685" id="2075685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075687" id="2075687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6585.html" id="ALSA-2022:6585" type="self" title="ALSA-2022:6585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="ruby-doc" version="3.0.4" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-doc-3.0.4-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">c5aa94f05bb1afcbd2618a66cc942c7ed10a4ef69aae59317f0d3d7ee3173120</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6590</id>
    <title>Moderate: mysql security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:05:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589)

Security Fix(es):

* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413)
* mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415)
* mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423)
* mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444)
* mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)
* mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457)
* mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460)
* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569)
* mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515)
* mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539)
* mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534)
* mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Default logrotate set to wrong log file (BZ#2122592)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6590" id="RHSA-2022:6590" type="rhsa" title="RHSA-2022:6590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21412" id="CVE-2022-21412" type="cve" title="CVE-2022-21412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21413" id="CVE-2022-21413" type="cve" title="CVE-2022-21413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21414" id="CVE-2022-21414" type="cve" title="CVE-2022-21414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21415" id="CVE-2022-21415" type="cve" title="CVE-2022-21415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21417" id="CVE-2022-21417" type="cve" title="CVE-2022-21417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21418" id="CVE-2022-21418" type="cve" title="CVE-2022-21418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21423" id="CVE-2022-21423" type="cve" title="CVE-2022-21423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21425" id="CVE-2022-21425" type="cve" title="CVE-2022-21425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21427" id="CVE-2022-21427" type="cve" title="CVE-2022-21427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21435" id="CVE-2022-21435" type="cve" title="CVE-2022-21435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21436" id="CVE-2022-21436" type="cve" title="CVE-2022-21436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21437" id="CVE-2022-21437" type="cve" title="CVE-2022-21437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21438" id="CVE-2022-21438" type="cve" title="CVE-2022-21438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21440" id="CVE-2022-21440" type="cve" title="CVE-2022-21440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21444" id="CVE-2022-21444" type="cve" title="CVE-2022-21444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21451" id="CVE-2022-21451" type="cve" title="CVE-2022-21451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21452" id="CVE-2022-21452" type="cve" title="CVE-2022-21452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21454" id="CVE-2022-21454" type="cve" title="CVE-2022-21454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21455" id="CVE-2022-21455" type="cve" title="CVE-2022-21455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21457" id="CVE-2022-21457" type="cve" title="CVE-2022-21457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21459" id="CVE-2022-21459" type="cve" title="CVE-2022-21459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21460" id="CVE-2022-21460" type="cve" title="CVE-2022-21460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21462" id="CVE-2022-21462" type="cve" title="CVE-2022-21462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21478" id="CVE-2022-21478" type="cve" title="CVE-2022-21478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21479" id="CVE-2022-21479" type="cve" title="CVE-2022-21479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21509" id="CVE-2022-21509" type="cve" title="CVE-2022-21509"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21515" id="CVE-2022-21515" type="cve" title="CVE-2022-21515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21517" id="CVE-2022-21517" type="cve" title="CVE-2022-21517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21522" id="CVE-2022-21522" type="cve" title="CVE-2022-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21525" id="CVE-2022-21525" type="cve" title="CVE-2022-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21526" id="CVE-2022-21526" type="cve" title="CVE-2022-21526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21527" id="CVE-2022-21527" type="cve" title="CVE-2022-21527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21528" id="CVE-2022-21528" type="cve" title="CVE-2022-21528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21529" id="CVE-2022-21529" type="cve" title="CVE-2022-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21530" id="CVE-2022-21530" type="cve" title="CVE-2022-21530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21531" id="CVE-2022-21531" type="cve" title="CVE-2022-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21534" id="CVE-2022-21534" type="cve" title="CVE-2022-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21537" id="CVE-2022-21537" type="cve" title="CVE-2022-21537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21538" id="CVE-2022-21538" type="cve" title="CVE-2022-21538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21539" id="CVE-2022-21539" type="cve" title="CVE-2022-21539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21547" id="CVE-2022-21547" type="cve" title="CVE-2022-21547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21553" id="CVE-2022-21553" type="cve" title="CVE-2022-21553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21556" id="CVE-2022-21556" type="cve" title="CVE-2022-21556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21569" id="CVE-2022-21569" type="cve" title="CVE-2022-21569"/>
      <reference href="https://bugzilla.redhat.com/2082636" id="2082636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082637" id="2082637" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082638" id="2082638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082639" id="2082639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082640" id="2082640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082641" id="2082641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082642" id="2082642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082643" id="2082643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082644" id="2082644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082645" id="2082645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082646" id="2082646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082647" id="2082647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082648" id="2082648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082649" id="2082649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082650" id="2082650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082651" id="2082651" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082652" id="2082652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082653" id="2082653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082654" id="2082654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082655" id="2082655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082656" id="2082656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082657" id="2082657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082658" id="2082658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082659" id="2082659" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115282" id="2115282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115283" id="2115283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115284" id="2115284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115285" id="2115285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115286" id="2115286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115287" id="2115287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115288" id="2115288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115289" id="2115289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115290" id="2115290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115291" id="2115291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115292" id="2115292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115293" id="2115293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115294" id="2115294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115295" id="2115295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115296" id="2115296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115297" id="2115297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115298" id="2115298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115299" id="2115299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115300" id="2115300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115301" id="2115301" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6590.html" id="ALSA-2022:6590" type="self" title="ALSA-2022:6590"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="mysql-libs" version="8.0.30" release="3.el9_0" epoch="0" arch="aarch64" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-libs-8.0.30-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8cdae27f9d14fa0221b251e4363e85b450d158fc8cb797c724b74f4e64b7e77f</sum>
        </package>
        <package name="mysql-devel" version="8.0.30" release="3.el9_0" epoch="0" arch="aarch64" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-devel-8.0.30-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">91864d57d84d35645c45f16e8de468e6dd11f0b24c567465cf9c1f5fb0056aaa</sum>
        </package>
        <package name="mysql-test" version="8.0.30" release="3.el9_0" epoch="0" arch="aarch64" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-test-8.0.30-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d611483961041025657d778b0b95123a0af2d2cdf7ac6260eb57576a7700c8f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6610</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-14 13:22:38"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918)
* kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* RDMA/mlx5: Fix number of allocated XLT entries (BZ#2092270)
* mlx5, Setup hanged when run test-route-nexthop-object.sh (BZ#2092535)
* many call traces from unchecked MSR access error: WRMSR to 0x199 in amazon i4.32xlarge instance (BZ#2099417)
* X86/platform/UV: Kernel Support Fixes for UV5 platform (BZ#2107732)
* block layer: fixes for md sync slow and softlockup at blk_mq_sched_dispatch_requests [9.0.0.z] (BZ#2111395)
* Fixes for NVMe/TCP dereferences an invalid, non-canonical pointer, kernel panic (BZ#2117755)
* Adding missing nvme fix to AlmaLinux-9.1 (BZ#2117756)
* nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue) (BZ#2118698)
* Important ice bug fixes (BZ#2119290)
* Power 9/ppc64le Incorrect Socket(s) &amp; "Core(s) per socket" reported by lscpu command. (BZ#2121719)

Enhancement(s):

* lscpu does not show all of the support AMX flags (amx_int8, amx_bf16)  (BZ#2108203)
* ice: Driver Update (BZ#2108204)
* iavf: Driver Update (BZ#2119477)
* i40e: Driver Update (BZ#2119479)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6610" id="RHSA-2022:6610" type="rhsa" title="RHSA-2022:6610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2078" id="CVE-2022-2078" type="cve" title="CVE-2022-2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34918" id="CVE-2022-34918" type="cve" title="CVE-2022-34918"/>
      <reference href="https://bugzilla.redhat.com/2096178" id="2096178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104423" id="2104423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6610.html" id="ALSA-2022:6610" type="self" title="ALSA-2022:6610"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-70.26.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0ab86ed45a95a6ee7ee06c2a23bcae50ef930543487598664bbfd242c22406d2</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.26.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3b14469a9d9002aa5ad0bb20ad8add0d9555e2e07f5b415157178af3163b2cc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6763</id>
    <title>Important: bind security update</title>
    <issued date="2022-10-03 00:00:00"/>
    <updated date="2022-10-14 16:04:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)
* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6763" id="RHSA-2022:6763" type="rhsa" title="RHSA-2022:6763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128600" id="2128600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6763.html" id="ALSA-2022:6763" type="self" title="ALSA-2022:6763"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="bind-devel" version="9.16.23" release="1.el9_0.1" epoch="32" arch="aarch64" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-devel-9.16.23-1.el9_0.1.aarch64.rpm</filename>
          <sum type="sha256">554042dbd95f1e0249beeed93709b4c8943e52532a8a74a66d694d81e2b04b46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6913</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 00:00:00"/>
    <updated date="2022-10-19 07:54:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6913" id="RHSA-2022:6913" type="rhsa" title="RHSA-2022:6913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6913.html" id="ALSA-2022:6913" type="self" title="ALSA-2022:6913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.110" release="1.el9_0" epoch="0" arch="aarch64" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.110-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3401965051207c3da4f81fd96d86b544a8ac3466377658f9de7a5fc739eacf20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6999</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-9] (BZ#2132934)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6999" id="RHSA-2022:6999" type="rhsa" title="RHSA-2022:6999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6999.html" id="ALSA-2022:6999" type="self" title="ALSA-2022:6999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0988e240cf793761279dbbf997a1c9175917f42d3261af1d9a920f3c85ba0888</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">129832609145cdae735b6d7b3dcd282017cb3dc36b2fa4f88b2f46099ac1254f</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">16eb708033b384e680050d21509166f15620d94c00f13f38673d47f927f6a6da</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3b0d5f1da20502094b579fe0d22bb8fb565628bf3e8d75d5f005860d92e3ed5c</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3f48db204cbc365b6620d90711df1b9aa0e6da85ef544bf594bcde614dd8bf37</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">4e22fe62f2975371a1cc575bac3f1bcec10445eaf99f0023c11eac7440ce054c</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">6185d93a2acbe695f0ae9fc42c9fed71366ffc3aed4ef5e20848e9d228fa99bd</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">890800e57b4cb0591bc7825759abff4092e130cadd9230808c81959aef845827</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8bd7d3e05f530d11e0c98a509240f0a80d610be514355782230420976477d32f</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9453009219390924ca1d1916e1bc6d3a6a700a315b6d8d64be8258067afa0785</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">a5f4c0e49bbc139a7c0f249d1126004f4b026cb5870bf1b0a93a0f474767eff3</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b4ddb51ce286076e7eb25237a3fc67b605b247c5166d56f3d882506d57a1b781</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b5e7b6b00e4cb181a8813fa064747b4b4e04545960931cf423fca71b92ed3f77</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ec6cfd81866616e786ac17da8502c9173191f2d00e83580dbe4b1ac7cce60b6c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7007</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2022-10-21 08:42:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7007" id="RHSA-2022:7007" type="rhsa" title="RHSA-2022:7007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7007.html" id="ALSA-2022:7007" type="self" title="ALSA-2022:7007"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">1891b268b2af2a88c20b242bb584e63b6fd3f327706cf7e587d53b9faf8679d6</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2223d22966b186143c46e5016319ee7859b538bba772ed39ffbf40c536c91a74</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">4740c40a027eb7992ec7aab464885cc73afa409d798ccbdce85606ff356e735b</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">841489e95b5f0f99ac2d88ae124f370b979eee980e5ea4c566129bd7bbbffaab</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8bd02b8c6c8d80dfc3e47a7df37ebb5f9f4fb9b3b3429babe084747cd68b1f25</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">933e3951b776e2e848b4f8c76e322862f0475561c76214848a03c5c90ccc2511</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">954d0446ca569522d2cb4367eb8d97433723d770e8dc6a08914e1e72502c7bb9</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">a8af64b1c2430a58df92633a99155fc4d8df21315406483ac269da3075c06cee</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c51a6f19a364a2d122d32c8ddb28a6e6e0aa37adc5c372cc3038af03558c1044</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f4f2bbcdfe52d9a331a8b2a8fb5a7a86cf9db8490c6f4f177b017e84b40ce2d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7013</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-9] (BZ#2131865)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7013" id="RHSA-2022:7013" type="rhsa" title="RHSA-2022:7013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7013.html" id="ALSA-2022:7013" type="self" title="ALSA-2022:7013"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">013ee061c020b104ebc4a20d2ab56a6b6c80d9306530d3240bad345d9e535973</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0e856dcbd892325850c546a51c2c603703d166332d6d7ce3dc3de117df494644</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">20de53348ba21edd5e777c2059e71b180c5947fc5e81231b603a76701b4b9f33</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">423c1cf6d8bea144e32b8b8505dce15ca8cf3f6ae6fba4444cbf7da6ed5f8a03</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">54f4d076114f3b014aabe7b0cbf4fe137783ba645af700e80683571a7aa72066</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">737ab1e1ddbbedc07e152e68c0441ef72ce3257a7d30bce7d85c9e3740c66cf7</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">91e1bf53d65974297558fc927711961ef1321b85190186b7350cbc2ef76b2c18</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">950277b30399482afdcc134b1ef3ed492abdb4dbbe22d890309423d6b017cf78</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b0661d644da0e554108a47be96973acd8e78e04a46ad6369388020330a4b9c6e</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c1647f610c413cf29dbc94e7b0aad478ba096a0220694e57dd86bb4083edfb32</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">dd180613ae33a9ea7358c41dc99278e6dddbadf85251262ab0076c8ab0989a32</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e242ea64f0a7fef97524f23e0d74c669dd905d85a2bc37542aff03c18f61a1e6</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e29263888d66c87bacae2bdf492476ff262cfdfc58fc6c2143bd2a7bf31f569a</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e95f9e9288857941bc5cf206bc66cf520e7aed86e39bf8dba3cb4b642afd42db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7090</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 00:00:00"/>
    <updated date="2022-10-26 12:07:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7090" id="RHSA-2022:7090" type="rhsa" title="RHSA-2022:7090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515"/>
      <reference href="https://bugzilla.redhat.com/2135610" id="2135610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7090.html" id="ALSA-2022:7090" type="self" title="ALSA-2022:7090"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="libksba-devel" version="1.5.1" release="5.el9_0" epoch="0" arch="aarch64" src="libksba-1.5.1-5.el9_0.src.rpm">
          <filename>libksba-devel-1.5.1-5.el9_0.aarch64.rpm</filename>
          <sum type="sha256">696574c4d227e766f2f78434cd768d8d6e8ea1bf196237b488a5920d650b3b55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7185</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 06:53:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>device-mapper-multipath security update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7185" id="RHSA-2022:7185" type="rhsa" title="RHSA-2022:7185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41974" id="CVE-2022-41974" type="cve" title="CVE-2022-41974"/>
      <reference href="https://bugzilla.redhat.com/2133988" id="2133988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7185.html" id="ALSA-2022:7185" type="self" title="ALSA-2022:7185"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.7" release="7.el9_0.1" epoch="0" arch="aarch64" src="device-mapper-multipath-0.8.7-7.el9_0.1.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-7.el9_0.1.aarch64.rpm</filename>
          <sum type="sha256">f2d8f00ca56bfb823aec9904a3fcbc8c779af0b3be75eb1b8089552f3dbb256e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7314</id>
    <title>Moderate: zlib security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-02 21:25:38"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zlib security update</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7314" id="RHSA-2022:7314" type="rhsa" title="RHSA-2022:7314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7314.html" id="ALSA-2022:7314" type="self" title="ALSA-2022:7314"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="zlib-static" version="1.2.11" release="32.el9_0" epoch="0" arch="aarch64" src="zlib-1.2.11-32.el9_0.src.rpm">
          <filename>zlib-static-1.2.11-32.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bd022652eb8dd26837ac7bc1ea3dd7391c9cbe8029faa26f1d04777d86d379be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7318</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 11:11:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653)
* execve exit tracepoint not called (BZ#2106661)
* Matrox black screen on VGA output on some systems. (BZ#2112017)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129)
* watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857)
* Update cifs to 5.16 (BZ#2127858)
* Bad page state in process qemu-kvm  pfn:68a74600 (BZ#2127859)
* vfio zero page mappings fail after 2M instances (BZ#2128791)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970)

Enhancement(s):

* Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7318" id="RHSA-2022:7318" type="rhsa" title="RHSA-2022:7318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2585" id="CVE-2022-2585" type="cve" title="CVE-2022-2585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114874" id="2114874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7318.html" id="ALSA-2022:7318" type="self" title="ALSA-2022:7318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-70.30.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b22c85bf734d378e4cb9961c8c3556c60f6c6333f28c71f19dc646b3ff03d90e</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="aarch64" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.30.1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bf20506f8be24b62f91448ced38d7c8f994cce4415f75e2285a0532bd7e14898</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7323</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 06:47:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7323" id="RHSA-2022:7323" type="rhsa" title="RHSA-2022:7323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7323.html" id="ALSA-2022:7323" type="self" title="ALSA-2022:7323"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="python3-debug" version="3.9.10" release="3.el9_0" epoch="0" arch="aarch64" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-debug-3.9.10-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">357a5a2c139039ea9daa15b7669c4f7ed347c42b9c6d6621fb49c7439cf18c69</sum>
        </package>
        <package name="python3-test" version="3.9.10" release="3.el9_0" epoch="0" arch="aarch64" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-test-3.9.10-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">36ab69a0b41b67d89b58f30baf7900d92c80adb858ff3b8b4467bdd8bf68c34a</sum>
        </package>
        <package name="python3-idle" version="3.9.10" release="3.el9_0" epoch="0" arch="aarch64" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-idle-3.9.10-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">a588a9c5a74b52eca41d3b1b7a005527438dc7f41014ceacffc04365525adf02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7329</id>
    <title>Moderate: lua security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 06:47:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7329" id="RHSA-2022:7329" type="rhsa" title="RHSA-2022:7329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33099" id="CVE-2022-33099" type="cve" title="CVE-2022-33099"/>
      <reference href="https://bugzilla.redhat.com/2104427" id="2104427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7329.html" id="ALSA-2022:7329" type="self" title="ALSA-2022:7329"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_default</name>
        <package name="lua-devel" version="5.4.2" release="4.el9_0.3" epoch="0" arch="aarch64" src="lua-5.4.2-4.el9_0.3.src.rpm">
          <filename>lua-devel-5.4.2-4.el9_0.3.aarch64.rpm</filename>
          <sum type="sha256">361e8fe0d5c2819cee386139009d1c1affb30d55d4c5b835ec4b94d01914a705</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7958</id>
    <title>Low: libguestfs security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:40:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libguestfs security, bug fix, and enhancement update</summary>
    <description>The libguestfs packages contain a library used for accessing and modifying virtual machine disk images.

Security Fix(es):

* libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7958" id="RHSA-2022:7958" type="rhsa" title="RHSA-2022:7958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2211" id="CVE-2022-2211" type="cve" title="CVE-2022-2211"/>
      <reference href="https://bugzilla.redhat.com/2100862" id="2100862" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7958.html" id="ALSA-2022:7958" type="self" title="ALSA-2022:7958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="ocaml-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>ocaml-libguestfs-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">2c513a41db8d74470ca50685df870a7ec7c7a446295895fecfa6898a27441b09</sum>
        </package>
        <package name="libguestfs-gobject" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-gobject-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">344af5b5d34908e12404cd2d86d21810bbaad136b335ea1bca4fa436bdb36090</sum>
        </package>
        <package name="ruby-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>ruby-libguestfs-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">4b426cc9c9f8956e7b46dc42710eb07e9b4e6e615bc9827bfb07e348eb897b93</sum>
        </package>
        <package name="libguestfs-devel" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-devel-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">6349f33d95dbc75ec7741cc2fcc9b569375f85a83bffcf3072694d15a5953987</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">802361861e5283084fc0680acaf3f1138d1923648540629c9ea69dca5a5f769a</sum>
        </package>
        <package name="lua-guestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>lua-guestfs-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">86f10ffd38bd5c34588e8276c109d26d69a8c5c6d870a25f168f7e68b2fead6c</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.48.4" release="2.el9.alma" epoch="1" arch="noarch" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.48.4-2.el9.alma.noarch.rpm</filename>
          <sum type="sha256">af4f710b4de913c305b93516d4b72c70a6d6bea6926c1d220a9b862364554647</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.48.4" release="2.el9.alma" epoch="1" arch="noarch" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.48.4-2.el9.alma.noarch.rpm</filename>
          <sum type="sha256">c70d6eb341fe0eca9d22773d7e0310f3848bfed5973fc92f46cd0df16dcb3cdf</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">c9dcfdc12adff14d5b15c7453848fcf55f7d7513d37c7053938b2c12eea89175</sum>
        </package>
        <package name="php-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="aarch64" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>php-libguestfs-1.48.4-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">e815929a281b21614c08c74c3c3d5d14a1a35b75cf7d3b093e454d1a214b24d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7970</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:28:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7970" id="RHSA-2022:7970" type="rhsa" title="RHSA-2022:7970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570"/>
      <reference href="https://bugzilla.redhat.com/2049429" id="2049429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7970.html" id="ALSA-2022:7970" type="self" title="ALSA-2022:7970"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="protobuf-devel" version="3.14.0" release="13.el9" epoch="0" arch="aarch64" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-devel-3.14.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">1485b4350f93a92f354972e2f44526f1872229d93a5458628583f4f95e4c918f</sum>
        </package>
        <package name="protobuf-lite-devel" version="3.14.0" release="13.el9" epoch="0" arch="aarch64" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">4a0e2bb1e2c5177cc6988a8f4479ebbc78354f53d14bfd14762a52abd25e7d66</sum>
        </package>
        <package name="protobuf-compiler" version="3.14.0" release="13.el9" epoch="0" arch="aarch64" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-compiler-3.14.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">fa247da7c3435edf761d85ec790cdcc6f2f1445a7dc8b34f02f61c22304dc7b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7979</id>
    <title>Low: speex security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:19:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>speex security update</summary>
    <description>Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.

Security Fix(es):

* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7979" id="RHSA-2022:7979" type="rhsa" title="RHSA-2022:7979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-23903" id="CVE-2020-23903" type="cve" title="CVE-2020-23903"/>
      <reference href="https://bugzilla.redhat.com/2024250" id="2024250" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7979.html" id="ALSA-2022:7979" type="self" title="ALSA-2022:7979"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="speex-devel" version="1.2.0" release="11.el9" epoch="0" arch="aarch64" src="speex-1.2.0-11.el9.src.rpm">
          <filename>speex-devel-1.2.0-11.el9.aarch64.rpm</filename>
          <sum type="sha256">9f6cb8b1bdf0c1fa169c07a2bcd2d8921ae4d65c62900e48da56b7b4ae7115dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8003</id>
    <title>Low: libvirt security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:14:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libvirt security, bug fix, and enhancement update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313)

Security Fix(es):

* libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8003" id="RHSA-2022:8003" type="rhsa" title="RHSA-2022:8003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0897" id="CVE-2022-0897" type="cve" title="CVE-2022-0897"/>
      <reference href="https://bugzilla.redhat.com/2063883" id="2063883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8003.html" id="ALSA-2022:8003" type="self" title="ALSA-2022:8003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libvirt-devel" version="8.5.0" release="7.el9_1" epoch="0" arch="aarch64" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-devel-8.5.0-7.el9_1.aarch64.rpm</filename>
          <sum type="sha256">5da087da08726b65dfb84a21dc242e5ef34d58b341cca97ffd377836137e376f</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.5.0" release="7.el9_1" epoch="0" arch="aarch64" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-lock-sanlock-8.5.0-7.el9_1.aarch64.rpm</filename>
          <sum type="sha256">dbf75fa429ced213b693377c4ae4066bc0006bf11258c1f79b3cda4739bd082e</sum>
        </package>
        <package name="libvirt-docs" version="8.5.0" release="7.el9_1" epoch="0" arch="aarch64" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-docs-8.5.0-7.el9_1.aarch64.rpm</filename>
          <sum type="sha256">deffceefc1b4cd9bcb9a2fbd77c2abee11d521cd8f3d7812d4db7a4c8b5eadf4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8022</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:02:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security and bug fix update</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8022" id="RHSA-2022:8022" type="rhsa" title="RHSA-2022:8022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255"/>
      <reference href="https://bugzilla.redhat.com/2055505" id="2055505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8022.html" id="ALSA-2022:8022" type="self" title="ALSA-2022:8022"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="qt5-devel" version="5.15.3" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.3-1.el9.src.rpm">
          <filename>qt5-devel-5.15.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">9ebc6c52b9d1433612ea6bf67d160c769264f1496832e938e054352bab4405f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8062</id>
    <title>Moderate: unbound security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:46:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security, bug fix, and enhancement update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2087120)

Security Fix(es):

* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30698)
* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8062" id="RHSA-2022:8062" type="rhsa" title="RHSA-2022:8062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30698" id="CVE-2022-30698" type="cve" title="CVE-2022-30698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30699" id="CVE-2022-30699" type="cve" title="CVE-2022-30699"/>
      <reference href="https://bugzilla.redhat.com/2116725" id="2116725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2116729" id="2116729" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8062.html" id="ALSA-2022:8062" type="self" title="ALSA-2022:8062"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="unbound-devel" version="1.16.2" release="2.el9" epoch="0" arch="aarch64" src="unbound-1.16.2-2.el9.src.rpm">
          <filename>unbound-devel-1.16.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">15832725c65683e48d200773d774e33b31ed6bea28fec80f1356b01a20d2d5fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8068</id>
    <title>Moderate: bind security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:33:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8068" id="RHSA-2022:8068" type="rhsa" title="RHSA-2022:8068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064513" id="2064513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8068.html" id="ALSA-2022:8068" type="self" title="ALSA-2022:8068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="bind-doc" version="9.16.23" release="5.el9_1" epoch="32" arch="noarch" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-doc-9.16.23-5.el9_1.noarch.rpm</filename>
          <sum type="sha256">7f2b5ebe8235b3d3a50a33d977b33607b5f6be05132c0d35d411e1b8c0c17f3e</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="5.el9_1" epoch="32" arch="aarch64" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-devel-9.16.23-5.el9_1.aarch64.rpm</filename>
          <sum type="sha256">8db02396707d0be5710d5d3dfdaf4e5de469492299153fda6d382990317a5fb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8078</id>
    <title>Moderate: flac security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:24:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8078" id="RHSA-2022:8078" type="rhsa" title="RHSA-2022:8078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-0561" id="CVE-2021-0561" type="cve" title="CVE-2021-0561"/>
      <reference href="https://bugzilla.redhat.com/2057776" id="2057776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8078.html" id="ALSA-2022:8078" type="self" title="ALSA-2022:8078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="flac" version="1.3.3" release="10.el9" epoch="0" arch="aarch64" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-1.3.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">7418bcd64f5a8ef729d675378eadfc7c0fd2c4d9ba1ff4fa3893eb7f42b910ef</sum>
        </package>
        <package name="flac-devel" version="1.3.3" release="10.el9" epoch="0" arch="aarch64" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-devel-1.3.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">ded71c30e5edc5b09ddb28ff410c8db19faff7503d9239a59ef2d5ed3e9d6a14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8139</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:00:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>wavpack security update</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8139" id="RHSA-2022:8139" type="rhsa" title="RHSA-2022:8139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269"/>
      <reference href="https://bugzilla.redhat.com/2064457" id="2064457" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8139.html" id="ALSA-2022:8139" type="self" title="ALSA-2022:8139"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="wavpack-devel" version="5.4.0" release="5.el9" epoch="0" arch="aarch64" src="wavpack-5.4.0-5.el9.src.rpm">
          <filename>wavpack-devel-5.4.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">7703f0abbcf207d2efb0beeb4498aac10a5bcdcb41df70903f139e6eb513603f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8151</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:55:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8151" id="RHSA-2022:8151" type="rhsa" title="RHSA-2022:8151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337"/>
      <reference href="https://bugzilla.redhat.com/2087190" id="2087190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8151.html" id="ALSA-2022:8151" type="self" title="ALSA-2022:8151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="poppler-devel" version="21.01.0" release="13.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">8f263f6ee501e4c3e677539097904acfb2d4e2931559cada927a139068cacb9d</sum>
        </package>
        <package name="poppler-qt5-devel" version="21.01.0" release="13.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">ca2bb3d27ece214af6f5ac9c242e1ad3d002eb39942e65b39829e8021254e4b0</sum>
        </package>
        <package name="poppler-cpp-devel" version="21.01.0" release="13.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">fc19a1b56310b7174674256b8ff1177187f67e90f3a7f18c6c7a86e50ec947dd</sum>
        </package>
        <package name="poppler-glib-devel" version="21.01.0" release="13.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">fc8afa88a99b8b9cb21619cf0ba0c5be0eab6af2bf52cfa11e9ae0802cab1309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8194</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:47:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
* libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
* libtiff: reachable assertion (CVE-2022-0865)
* libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
* libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
* libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
* libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
* tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908)
* tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)
* libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8194" id="RHSA-2022:8194" type="rhsa" title="RHSA-2022:8194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0561" id="CVE-2022-0561" type="cve" title="CVE-2022-0561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0562" id="CVE-2022-0562" type="cve" title="CVE-2022-0562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0865" id="CVE-2022-0865" type="cve" title="CVE-2022-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0891" id="CVE-2022-0891" type="cve" title="CVE-2022-0891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0908" id="CVE-2022-0908" type="cve" title="CVE-2022-0908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0909" id="CVE-2022-0909" type="cve" title="CVE-2022-0909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0924" id="CVE-2022-0924" type="cve" title="CVE-2022-0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1354" id="CVE-2022-1354" type="cve" title="CVE-2022-1354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1355" id="CVE-2022-1355" type="cve" title="CVE-2022-1355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22844" id="CVE-2022-22844" type="cve" title="CVE-2022-22844"/>
      <reference href="https://bugzilla.redhat.com/2042603" id="2042603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054494" id="2054494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054495" id="2054495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064145" id="2064145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064146" id="2064146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064148" id="2064148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064406" id="2064406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064411" id="2064411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074404" id="2074404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074415" id="2074415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8194.html" id="ALSA-2022:8194" type="self" title="ALSA-2022:8194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libtiff-tools" version="4.4.0" release="2.el9" epoch="0" arch="aarch64" src="libtiff-4.4.0-2.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1456434f7778d5d204c0c47f728f3e5078184488e837283ff60f427b38a80e37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8207</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:39:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8207" id="RHSA-2022:8207" type="rhsa" title="RHSA-2022:8207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122"/>
      <reference href="https://bugzilla.redhat.com/2067052" id="2067052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8207.html" id="ALSA-2022:8207" type="self" title="ALSA-2022:8207"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="openjpeg2-tools" version="2.4.0" release="7.el9" epoch="0" arch="aarch64" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">2e424013141fe356d2bc7d16058582a0789adef3d404d3d333cd6476b53dddbd</sum>
        </package>
        <package name="openjpeg2-devel" version="2.4.0" release="7.el9" epoch="0" arch="aarch64" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">3655ef2d95841b2b062acfe6619efa463f02840fefc86f11db22ebe7b9a1e8ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8208</id>
    <title>Moderate: dovecot security and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:32:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security and enhancement update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8208" id="RHSA-2022:8208" type="rhsa" title="RHSA-2022:8208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550"/>
      <reference href="https://bugzilla.redhat.com/2105070" id="2105070" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8208.html" id="ALSA-2022:8208" type="self" title="ALSA-2022:8208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="dovecot-devel" version="2.3.16" release="7.el9" epoch="1" arch="aarch64" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-devel-2.3.16-7.el9.aarch64.rpm</filename>
          <sum type="sha256">6c187e3b25d29372f86753803435b984763febbbe022b0840ba5e5c5e11b3c15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8221</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:36:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8221" id="RHSA-2022:8221" type="rhsa" title="RHSA-2022:8221"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8221.html" id="ALSA-2022:8221" type="self" title="ALSA-2022:8221"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="11.el9" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-11.el9.aarch64.rpm</filename>
          <sum type="sha256">09fe4a440216cca03f6940a6977cec0abf542e9d1768daf263a3f7868c6e6cbc</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="11.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-11.el9.noarch.rpm</filename>
          <sum type="sha256">4e2b11caa9b1ede84bff1d50b6074841cd4ea148cfa780ae8267b2a485e75219</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8252</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 15:48:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8252" id="RHSA-2022:8252" type="rhsa" title="RHSA-2022:8252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795"/>
      <reference href="https://bugzilla.redhat.com/2072912" id="2072912" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8252.html" id="ALSA-2022:8252" type="self" title="ALSA-2022:8252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="yajl-devel" version="2.1.0" release="21.el9" epoch="0" arch="aarch64" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">77bb19f4420d72a2f118921a076e94592d5921116ecdfad4849bf4702d24dbb4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8267</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:56:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280)
* kernel info leak issue in pfkey_register (CVE-2022-1353)
* use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
* incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
* incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nf_tables disallow binding to already bound chain (CVE-2022-39190)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8267" id="RHSA-2022:8267" type="rhsa" title="RHSA-2022:8267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1280" id="CVE-2022-1280" type="cve" title="CVE-2022-1280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1353" id="CVE-2022-1353" type="cve" title="CVE-2022-1353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1679" id="CVE-2022-1679" type="cve" title="CVE-2022-1679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1998" id="CVE-2022-1998" type="cve" title="CVE-2022-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21123" id="CVE-2022-21123" type="cve" title="CVE-2022-21123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21125" id="CVE-2022-21125" type="cve" title="CVE-2022-21125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21166" id="CVE-2022-21166" type="cve" title="CVE-2022-21166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23816" id="CVE-2022-23816" type="cve" title="CVE-2022-23816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23825" id="CVE-2022-23825" type="cve" title="CVE-2022-23825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29900" id="CVE-2022-29900" type="cve" title="CVE-2022-29900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29901" id="CVE-2022-29901" type="cve" title="CVE-2022-29901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39190" id="CVE-2022-39190" type="cve" title="CVE-2022-39190"/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2052312" id="2052312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066819" id="2066819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2071022" id="2071022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084125" id="2084125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090226" id="2090226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090237" id="2090237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090240" id="2090240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090241" id="2090241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103148" id="2103148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103153" id="2103153" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129152" id="2129152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8267.html" id="ALSA-2022:8267" type="self" title="ALSA-2022:8267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.6.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2034b963c7a97fead4a1a784ac5a281d308d6c8c352051005d7398283e02e717</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.6.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d02bb4161e8cc0ebe5367e2e07251b3dafd93f7101b941758e941fdf1854955b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8317</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:54:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487)

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8317" id="RHSA-2022:8317" type="rhsa" title="RHSA-2022:8317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8317.html" id="ALSA-2022:8317" type="self" title="ALSA-2022:8317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="samba-test" version="4.16.4" release="101.el9" epoch="0" arch="aarch64" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-test-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">0d2a2d6bbdfaf18a201df05a4b9735012c3f6292b006248f9ee1199d22abaa5e</sum>
        </package>
        <package name="samba-devel" version="4.16.4" release="101.el9" epoch="0" arch="aarch64" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-devel-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">392ebf2b4714a0f81f5dac190b3754c9edb25861054780743fefd309bc9d8b35</sum>
        </package>
        <package name="libwbclient-devel" version="4.16.4" release="101.el9" epoch="0" arch="aarch64" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libwbclient-devel-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">c3a9c539aea8da83fa41ed7efd0280407a1098cd2bef57bfa721ae42e77d9f90</sum>
        </package>
        <package name="samba-pidl" version="4.16.4" release="101.el9" epoch="0" arch="noarch" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-pidl-4.16.4-101.el9.noarch.rpm</filename>
          <sum type="sha256">ce4265a141b1855237a79ba6d86e8df379190f78d7ff3073272640f269cc5889</sum>
        </package>
        <package name="samba-test-libs" version="4.16.4" release="101.el9" epoch="0" arch="aarch64" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-test-libs-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">d2e2e140bbd5f8aecd069952549e4ed7bcd1ed5c89c2d68330db057673ec04b4</sum>
        </package>
        <package name="libsmbclient-devel" version="4.16.4" release="101.el9" epoch="0" arch="aarch64" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libsmbclient-devel-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">f4ff45e026c6d7b87627b51e685660d959fa42d2703d5d7fabe22182f57a470e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8318</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:42:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libldb security, bug fix, and enhancement update</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8318" id="RHSA-2022:8318" type="rhsa" title="RHSA-2022:8318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746"/>
      <reference href="https://bugzilla.redhat.com/2108215" id="2108215" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8318.html" id="ALSA-2022:8318" type="self" title="ALSA-2022:8318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libldb-devel" version="2.5.2" release="1.el9" epoch="0" arch="aarch64" src="libldb-2.5.2-1.el9.src.rpm">
          <filename>libldb-devel-2.5.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ae9e286ffebf0ca29feecd1dfb903a7ce65358eddcb5543b374686c5ecb7eeeb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8353</id>
    <title>Moderate: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 22:22:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249)

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8353" id="RHSA-2022:8353" type="rhsa" title="RHSA-2022:8353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8353.html" id="ALSA-2022:8353" type="self" title="ALSA-2022:8353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="python3-test" version="3.9.14" release="1.el9" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-test-3.9.14-1.el9.aarch64.rpm</filename>
          <sum type="sha256">533efed275892bd5deeca3acc4a0f5c8a33c355586ed881cf1f7463b8df706c7</sum>
        </package>
        <package name="python3-debug" version="3.9.14" release="1.el9" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-debug-3.9.14-1.el9.aarch64.rpm</filename>
          <sum type="sha256">94592c5c619b6904e18be04ca2c1f3a25d8b47ed421142257ca253640d595dd0</sum>
        </package>
        <package name="python3-idle" version="3.9.14" release="1.el9" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-idle-3.9.14-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ca9f56bb94b6c4c137886e78e96223517c04397d5076edd698c0d22cb127d21d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8400</id>
    <title>Moderate: libtirpc security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:06:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtirpc security update</summary>
    <description>The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages.

Security Fix(es):

* libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8400" id="RHSA-2022:8400" type="rhsa" title="RHSA-2022:8400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46828" id="CVE-2021-46828" type="cve" title="CVE-2021-46828"/>
      <reference href="https://bugzilla.redhat.com/2109352" id="2109352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8400.html" id="ALSA-2022:8400" type="self" title="ALSA-2022:8400"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libtirpc-devel" version="1.3.3" release="0.el9" epoch="0" arch="aarch64" src="libtirpc-1.3.3-0.el9.src.rpm">
          <filename>libtirpc-devel-1.3.3-0.el9.aarch64.rpm</filename>
          <sum type="sha256">eb539c16c8cfe5eab722c31c51a5ecc64ccc0833f6b6964c76498d7ab64b9235</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8415</id>
    <title>Low: mingw-gcc security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:02:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>mingw-gcc security and bug fix update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

* gcc: uncontrolled recursion in libiberty/rust-demangle.c (CVE-2021-46195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8415" id="RHSA-2022:8415" type="rhsa" title="RHSA-2022:8415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46195" id="CVE-2021-46195" type="cve" title="CVE-2021-46195"/>
      <reference href="https://bugzilla.redhat.com/2046300" id="2046300" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8415.html" id="ALSA-2022:8415" type="self" title="ALSA-2022:8415"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="mingw32-cpp" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-cpp-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">2a508c78b99a6d6bcb31cfd9193e7c0da6b7baf845377259121daf6b9e4a0031</sum>
        </package>
        <package name="mingw32-gcc-c++" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-gcc-c++-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">3b9826fb98cdcdc82c5104bfd71c7e9de34d43622062daa332f4e74123105bdd</sum>
        </package>
        <package name="mingw32-libgcc" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-libgcc-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">4d1c69f92da8ba67f94f4507ec4c5eaeff1fafaf6dee85fe8c9a912f5ead8a33</sum>
        </package>
        <package name="mingw32-gcc" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-gcc-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">5d54c407524fc4428dc2d4a0e7d8afdf992713048f645d5af9d3eb8bbc7e4bdb</sum>
        </package>
        <package name="mingw64-gcc-c++" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-gcc-c++-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">83de7acca1af74d2f851841c09dc71faed6911def2fc46d6a9499163b95e7148</sum>
        </package>
        <package name="mingw64-gcc" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-gcc-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">b28446c4171fdd5ed9bca96b383b8978b42e23e96be41a7cc904428a384f4bc9</sum>
        </package>
        <package name="mingw64-cpp" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-cpp-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">c96af03662a136f729106f64e58f5150e02bd4254b7821ee8e91f6a1ffbaadcc</sum>
        </package>
        <package name="mingw64-libgcc" version="12.0.1" release="11.2.el9" epoch="0" arch="aarch64" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-libgcc-12.0.1-11.2.el9.aarch64.rpm</filename>
          <sum type="sha256">d4508023fca590c09073fc2b097c122183b45956f33bfd32c274e83e95b998ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8434</id>
    <title>Moderate: dotnet7.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 13:06:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2. 

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134641)

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8434" id="RHSA-2022:8434" type="rhsa" title="RHSA-2022:8434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8434.html" id="ALSA-2022:8434" type="self" title="ALSA-2022:8434"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.100" release="0.5.rc2.el9_1" epoch="0" arch="aarch64" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.100-0.5.rc2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b82377846343b1f2e6d25df6da35696e7938949cc79887fc60090b466bcc012c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8493</id>
    <title>Important: python3.9 security update</title>
    <issued date="2022-11-16 00:00:00"/>
    <updated date="2022-11-17 11:27:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8493" id="RHSA-2022:8493" type="rhsa" title="RHSA-2022:8493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42919" id="CVE-2022-42919" type="cve" title="CVE-2022-42919"/>
      <reference href="https://bugzilla.redhat.com/2138705" id="2138705" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8493.html" id="ALSA-2022:8493" type="self" title="ALSA-2022:8493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="python3-idle" version="3.9.14" release="1.el9_1.1" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">2cf3e1c9164f6771f99ce2ef9a8e7cfa1b38c73f29e97e4e0560577e2187c354</sum>
        </package>
        <package name="python3-debug" version="3.9.14" release="1.el9_1.1" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">3e14628205982ef5b80def3884101898116f58a37e90de4522ee7b6d56d4c158</sum>
        </package>
        <package name="python3-test" version="3.9.14" release="1.el9_1.1" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">97fad320156284174038180e0773607870aab260905f9493a8895f4708b9cad9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8643</id>
    <title>Important: varnish security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:44:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: Request Forgery Vulnerability (CVE-2022-45060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8643" id="RHSA-2022:8643" type="rhsa" title="RHSA-2022:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45060" id="CVE-2022-45060" type="cve" title="CVE-2022-45060"/>
      <reference href="https://bugzilla.redhat.com/2141844" id="2141844" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8643.html" id="ALSA-2022:8643" type="self" title="ALSA-2022:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="varnish-devel" version="6.6.2" release="2.el9_1.1" epoch="0" arch="aarch64" src="varnish-6.6.2-2.el9_1.1.src.rpm">
          <filename>varnish-devel-6.6.2-2.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">7c4beeebf942e4699bbde45b92950d638a9b54c33d6a7c736b5378dfb52f21c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0077</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-12 19:37:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154459)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0077" id="RHSA-2023:0077" type="rhsa" title="RHSA-2023:0077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538"/>
      <reference href="https://bugzilla.redhat.com/2158342" id="2158342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0077.html" id="ALSA-2023:0077" type="self" title="ALSA-2023:0077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.113" release="1.el9_1" epoch="0" arch="aarch64" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.113-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e935d0c6b13896e348f80afcd0954e99f7aa7030413d5a756bb953f5e809da18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0194</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-9] (BZ#2153097)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0194" id="RHSA-2023:0194" type="rhsa" title="RHSA-2023:0194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0194.html" id="ALSA-2023:0194" type="self" title="ALSA-2023:0194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">031ff190e9bb820d21b86181ea4a72cb0933b77e073490c31a65daf6794999ca</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">0a708adfe80303bb57a87c6d35f373b8fa76ca3dde378dc037092dea4f003f75</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">37a5c83360f1639236e1d53a5b3cfc1a83a0f49098af2101b872dc593c1f4add</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">54da442f2c93b79399e148c0e5f0f1cf07c76d98b4bb208082f2bf56a1e5c192</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">595d68bee2d30c316fa64e0ab55dce49fc4f6bd57c70a73220ebae0983e87caf</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">59a8e7ea3887aadb015693554d50f3c47bd1393e59ab6e72f25547ce7a0fa0b0</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">67777a8fea404b5aa7220b98b17883dd3d703e6f2990f120716ad6bdcc27709a</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">695fbc16ff6067ca45e5c991577cdb7ab12c1cf9f4fe04a227faedd66f3842a0</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">727593393f6860f8d52804b0363c9bf2134e694b09a620d399954b9be5c835a2</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">807b25dc16cde1b7fb950111c8a2831f51cf54c7a983b83bb578464a5b61a9a2</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">937d1e5e5e9e6c1300aaa1aa31cc396a3f19a3b0f5ac0a285d2b5299e7ae0cd0</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">ad444886032ca101460385da677e4d25e6c6d585716d369cead563aa77c60a8e</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c5a6470dc8ed5d2609721dc1cca299fe0d725ea45a12b56d5f4040cd997a337a</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">cb40008aedaf207fdd1bd20abd4b088bf5344edb7f35500aaec5c28bc867c590</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0202</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-9] (BZ#2157798)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0202" id="RHSA-2023:0202" type="rhsa" title="RHSA-2023:0202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0202.html" id="ALSA-2023:0202" type="self" title="ALSA-2023:0202"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">29c1a320154760f2eabd8d6b00e122a4844196d341f0ce7da3cf8dcaa9e2c31d</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2b3a2ae5f320b684c816191b2f5dc9c08a3de7232d1b70e8182a1e8b8df5640b</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3de6adcecb525574b3eac0134230a0444fa72cfb08ad378a1ac98160c5fcae34</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">4bbeb40d49bba2a832658cdae2d57335ab0361a70de5b7b6525a1d8fe0ec1b8c</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">58ab16dce95eda0232cae251797b69e91106384af57d11cfacef2979576e7430</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">9e62514f98d621c893fe7fa0f45ff932983f60d77f95e716fb9985f5f83fba77</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a42cd0c818b0b09dcb13e748896facd2a5702c7d71120b17a705844081dadb5f</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a764266a040633f5592400095d1bf3572d7a9292d8aec013e3c994b2d4bddaa2</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">aa8a0a540571f7ba30b8ffb9483f4202c4c89cc5373d6f7f45410b4c20127758</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b78fffeb17c94a5759f005e2405fa95f41371361bb5a364dc46f1940e0529dcc</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">bd2ae7aac7ff3b688cdbb0f8f9d002a5eb3f7d5250d16f84ec0d0f574109eccd</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">be47f18adb5e2e70548fd7779d623b8b826156c58410d3247cf412a2457d9881</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">bf0f741d92071ac154b79cb82a8be44065bf3fad4c6e7f36510728c9a6d23018</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f9e0ca8b1f10b12335f1ecb00bd580eb6bc1daf270a99004f0a88b308d22726f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0210</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-01-26 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) [almalinux-9] (BZ#2159912)
* solr broken due to access denied ("java.io.FilePermission" "/etc/pki/java/cacerts" "read") [almalinux-9, openjdk-8] (BZ#2163594)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0210" id="RHSA-2023:0210" type="rhsa" title="RHSA-2023:0210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21830" id="CVE-2023-21830" type="cve" title="CVE-2023-21830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160490" id="2160490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0210.html" id="ALSA-2023:0210" type="self" title="ALSA-2023:0210"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">05fb06f665c908bd42f51411f0977b263c8acdd559abb1c5f8b00c250deeeb38</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">06c565d8ece1cb4f758f7a1281d551880bbd5665e0388a43e400a586251511e5</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">16a8b892bb6fde157ca46eb56cc40e4ba9a3e01184e18e750f879c93512f95f7</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">218afbcdb6d0d85bce4d15947b137d1b30aed3a7690c88180c7003322adea1ab</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">8faa4a4a64e0aca0a03e308b86aabee17c90687a26dec45412000bb941c888e6</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">9b9b06f804c22dab522c0a79fa4bcddee49b46562037f690574951d19a36257a</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">9cfad89e667fff38c2cb72bed13baca6c9d331557c250bff30760f64690d1dc7</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">9f97450c56ed2f6851de1b86c40736168970fbbee53554139450941b933a9185</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">cee4e3b42e07626b7ff65502330c33923ffde988a5ec6ec69bc87d8b1492109a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.362.b09-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e3e5aaba2ff5594937211300101d28aa507fd84b1f8a1ff93c61065e3b4feb5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0302</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 11:36:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0302" id="RHSA-2023:0302" type="rhsa" title="RHSA-2023:0302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953"/>
      <reference href="https://bugzilla.redhat.com/2103222" id="2103222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122789" id="2122789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122792" id="2122792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122799" id="2122799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134432" id="2134432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0302.html" id="ALSA-2023:0302" type="self" title="ALSA-2023:0302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libtiff-tools" version="4.4.0" release="5.el9_1" epoch="0" arch="aarch64" src="libtiff-4.4.0-5.el9_1.src.rpm">
          <filename>libtiff-tools-4.4.0-5.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b9e520a1d90d0a1f5f32092c5a2b1a52420d5e1e5c3841bd788f6cf40319cc7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0334</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 16:35:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)
* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)
* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel 9.2: Important iavf bug fixes (BZ#2127884)
* vfio zero page mappings fail after 2M instances (BZ#2128514)
* nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359)
* ice: Driver Update to 5.19 (BZ#2132070)
* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588)
* drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619)
* updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914)
* DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213)
* No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153)
* Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168)
* ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976)
* fatal error: error in backend: Branch target out of insn range (BZ#2144902)
* AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217)
* Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910)
* Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605)
* DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0334" id="RHSA-2023:0334" type="rhsa" title="RHSA-2023:0334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2959" id="CVE-2022-2959" type="cve" title="CVE-2022-2959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3077" id="CVE-2022-3077" type="cve" title="CVE-2022-3077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103681" id="2103681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123309" id="2123309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0334.html" id="ALSA-2023:0334" type="self" title="ALSA-2023:0334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.12.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3cec21ee6c7f2e3df42233024e006d282f73457e4b4b0c6adb5c0c1606a69382</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.12.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e999cd85c758ab0da6c545f602acc15a76dc07a01eeee86069b980a14af03805</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0340</id>
    <title>Moderate: bash security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:46:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bash security update</summary>
    <description>The bash packages provide Bash (Bourne-again shell), which is the default shell for AlmaLinux.

Security Fix(es):

* bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0340" id="RHSA-2023:0340" type="rhsa" title="RHSA-2023:0340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3715" id="CVE-2022-3715" type="cve" title="CVE-2022-3715"/>
      <reference href="https://bugzilla.redhat.com/2126720" id="2126720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0340.html" id="ALSA-2023:0340" type="self" title="ALSA-2023:0340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="bash-devel" version="5.1.8" release="6.el9_1" epoch="0" arch="aarch64" src="bash-5.1.8-6.el9_1.src.rpm">
          <filename>bash-devel-5.1.8-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">509098e78501114b84c181e16e303b01b90fb3f421848f3583d4d7250e0ee95e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0626</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 16:00:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0626" id="RHSA-2023:0626" type="rhsa" title="RHSA-2023:0626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629"/>
      <reference href="https://bugzilla.redhat.com/2161571" id="2161571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0626.html" id="ALSA-2023:0626" type="self" title="ALSA-2023:0626"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libksba-devel" version="1.5.1" release="6.el9_1" epoch="0" arch="aarch64" src="libksba-1.5.1-6.el9_1.src.rpm">
          <filename>libksba-devel-1.5.1-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">47fc3964dcd6a7a72b7a849425307979d34123abbfaa016c8c8c230f00ddee92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0951</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379)
* kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083)
* AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085)
* AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274)
* qla2xxx NVMe-FC:  WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178)
* Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277)
* Scheduler Update (almalinux9.2) (BZ#2153792)
* AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305)
* MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145)
* Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459)
* Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930)
* The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815)
* AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344)
* CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418)
* block layer: update with upstream v6.0 (BZ#2162535)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0951" id="RHSA-2023:0951" type="rhsa" title="RHSA-2023:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3564" id="CVE-2022-3564" type="cve" title="CVE-2022-3564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4379" id="CVE-2022-4379" type="cve" title="CVE-2022-4379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0179" id="CVE-2023-0179" type="cve" title="CVE-2023-0179"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150999" id="2150999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152807" id="2152807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161713" id="2161713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0951.html" id="ALSA-2023:0951" type="self" title="ALSA-2023:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.18.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3f74ffff57b4d2bccbe96abf43d3907ed6d4ad351e52e95c4f6c3698da3bfa0c</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.18.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">93216810fc6d01f502dbfe3cc6ffb6b52c5fd52e0c449f832283d3a965f79ef4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0953</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:45:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0953" id="RHSA-2023:0953" type="rhsa" title="RHSA-2023:0953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0953.html" id="ALSA-2023:0953" type="self" title="ALSA-2023:0953"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="python3-idle" version="3.9.14" release="1.el9_1.2" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.2.aarch64.rpm</filename>
          <sum type="sha256">62fc3a2fc14a8a301e0dae38ca9e8edf6aefe5c89d851433b3f4fc3316d810b7</sum>
        </package>
        <package name="python3-test" version="3.9.14" release="1.el9_1.2" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.2.aarch64.rpm</filename>
          <sum type="sha256">6c4b9818d86e2f87132ac7cd15c23717c4eca378cf2bc213bbd7377fa63bc527</sum>
        </package>
        <package name="python3-debug" version="3.9.14" release="1.el9_1.2" epoch="0" arch="aarch64" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.2.aarch64.rpm</filename>
          <sum type="sha256">c663c044f057ecabcb8ca2fa0e19c6aca42c9d539892a0d02c7f038b3951f4b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0957</id>
    <title>Moderate: lua security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:03:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964)
* lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0957" id="RHSA-2023:0957" type="rhsa" title="RHSA-2023:0957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43519" id="CVE-2021-43519" type="cve" title="CVE-2021-43519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44964" id="CVE-2021-44964" type="cve" title="CVE-2021-44964"/>
      <reference href="https://bugzilla.redhat.com/2047672" id="2047672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064772" id="2064772" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0957.html" id="ALSA-2023:0957" type="self" title="ALSA-2023:0957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="lua-devel" version="5.4.4" release="2.el9_1" epoch="0" arch="aarch64" src="lua-5.4.4-2.el9_1.src.rpm">
          <filename>lua-devel-5.4.4-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">af247c7fabfb4e334a00aceeb15bbbd25bf098229a5516137aa685389c21dc36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1068</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2023-03-06 00:00:00"/>
    <updated date="2023-03-06 21:05:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1068" id="RHSA-2023:1068" type="rhsa" title="RHSA-2023:1068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46822" id="CVE-2021-46822" type="cve" title="CVE-2021-46822"/>
      <reference href="https://bugzilla.redhat.com/2100044" id="2100044" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1068.html" id="ALSA-2023:1068" type="self" title="ALSA-2023:1068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="turbojpeg" version="2.0.90" release="6.el9_1" epoch="0" arch="aarch64" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>turbojpeg-2.0.90-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">076aca82fd3dfe13b6e95e025af4fab3827f6e1bf355a28b78a8658dd50bb930</sum>
        </package>
        <package name="turbojpeg-devel" version="2.0.90" release="6.el9_1" epoch="0" arch="aarch64" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>turbojpeg-devel-2.0.90-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">346428ef19f69997bf40ec5e906c63b6b8802377e265ab6dd19f968ba58bd485</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1470</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-03-27 00:00:00"/>
    <updated date="2023-03-27 21:59:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880)
* Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766)
* AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528)
* kernel-rt-debug: WARNING: possible circular locking dependency detected (&amp;n-&gt;list_lock-&gt;&amp;p-&gt;pi_lock-&gt;&amp;lock-&gt;wait_lock) (BZ#2160614)
* Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105)
* AlmaLinux9.0 -  s390/kexec: fix ipl report address for kdump (BZ#2166903)
* libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956)
* Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227)

Enhancement(s):

* IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304)
* Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1470" id="RHSA-2023:1470" type="rhsa" title="RHSA-2023:1470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156322" id="2156322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1470.html" id="ALSA-2023:1470" type="self" title="ALSA-2023:1470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.22.2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">249fdadd7e9e8db3e7c6e54e9efa1ca6627db1915ace5edfceafb420b7fcc55c</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.22.2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">aa444e408cac5b03af737c9d637bc91f7f108b93cf6ca464f9ab18de9824a8d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1693</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 13:52:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)
* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1693" id="RHSA-2023:1693" type="rhsa" title="RHSA-2023:1693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2625" id="CVE-2022-2625" type="cve" title="CVE-2022-2625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://bugzilla.redhat.com/2113825" id="2113825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1693.html" id="ALSA-2023:1693" type="self" title="ALSA-2023:1693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="postgresql-test" version="13.10" release="1.el9_1" epoch="0" arch="aarch64" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-test-13.10-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">0592d779335bfcf25e4ed6c33af14a0bc9c834e171d7ec18cb4673808b09ccbe</sum>
        </package>
        <package name="postgresql-private-devel" version="13.10" release="1.el9_1" epoch="0" arch="aarch64" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-private-devel-13.10-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">0c259345917a131905bc4087a9518b46cfc8674bd3c177a3cd4c6239f2b1a64d</sum>
        </package>
        <package name="postgresql-docs" version="13.10" release="1.el9_1" epoch="0" arch="aarch64" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-docs-13.10-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">56c4d80f05e7e111c2c2424ac86c40b605d4a74af40dd78583c0e932c57c4567</sum>
        </package>
        <package name="postgresql-server-devel" version="13.10" release="1.el9_1" epoch="0" arch="aarch64" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-server-devel-13.10-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">bffc7a7c71bcbace6d091b55d91b208c9d498c6a5cb7032d68b03e8c3555f78b</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.10" release="1.el9_1" epoch="0" arch="aarch64" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-upgrade-devel-13.10-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f247059b6356ee236a57981fe07e5b73d02a3533b9f958fb61afde68f012357a</sum>
        </package>
        <package name="postgresql-static" version="13.10" release="1.el9_1" epoch="0" arch="aarch64" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-static-13.10-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f7afd58cb370fa3d60e96f85e4814f7985f32920142971e025fd28b8e51c8856</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1703</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:34:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361)
* AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1703" id="RHSA-2023:1703" type="rhsa" title="RHSA-2023:1703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1703.html" id="ALSA-2023:1703" type="self" title="ALSA-2023:1703"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.23.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b2da46afa91dbbd4a2816ddc45f48eb63088544d01e8aee0996d2613db73c4f6</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="aarch64" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.23.1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c2a68394f4248b9e550ce167cfc827811cb88a26b0fe432597d57fb963fc6c48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1879</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-19 00:00:00"/>
    <updated date="2023-04-20 15:45:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804)
* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811)
* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1879" id="RHSA-2023:1879" type="rhsa" title="RHSA-2023:1879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1879.html" id="ALSA-2023:1879" type="self" title="ALSA-2023:1879"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2f136e2032b18659cc22e620b55d7fc4b4527bdce6a78f3fd7216a8d62e3d281</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">73de238423300b349eb9ad97fce9a44e580b24e182a8a36b1f991b99cc593e93</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7585511a7bf99b82d52ab2073b2f95f36464d5a904e6e5d0ce58975f726d0225</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7bcc03ce7f635cd21240b4a0190f03ca865c4dcda7e57217b1cdfd4eebb4d016</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">8daf52bc356e97b65ea6e01d916d3ecba9650559d65402c70a2a0cb0606bd620</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a43b99cb612727de687da8129b15474231a2c913c6a899a5eb3e76017d8039aa</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a4a35f7aaa121c64d80198a7500c71c45c03bb6ca2b7d8ffb4fe5111c5f9e76c</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">ac624cd0b29607b64bc228e9364e229709fe8d9d4290440d8a5b4a9d6c8dc248</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b668f6776026c27a584f98f843377c6fa183848d11c6936e5f41e51398ad11f9</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">bf1245005ff17c2c073f5c47132558c49a8b4e2be25988096ea37ca0ec24b77a</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c691b309971da06124fa6168705384fc23f1b2cfcc019eff29e22834bef49a1a</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c6e46171f44a7cc3a39f8343a9aa271660006f304fed8d5caba0e6b922989280</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c84ccc29be3b2e9ff3c4fd225ea7c58f428bef8420f307b63dcbc5d0efffdefb</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d4effce4d36d2bfb85ef87bbdc612daad57921c25dff53659fcd1561750633b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1880</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-19 00:00:00"/>
    <updated date="2023-04-20 15:55:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1880" id="RHSA-2023:1880" type="rhsa" title="RHSA-2023:1880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1880.html" id="ALSA-2023:1880" type="self" title="ALSA-2023:1880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">04a63e1cb8e3e29a57df3ce30cad922d58f4ab3e2161825c8b59c402f998c317</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">0e34a4ae278eb46756ca00d51c27438981b4f360e56459540db630ecbc8d9f70</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">43e591b1e17e67f431511521cb0ffb0574000bfc43753b2b5d7a5f8b6e66a8e1</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">486e05590152f289c1fb2574a092b9ffbbc362ad4728b1ea4f805e0aafbbfbee</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">62a8d8dab9bb2c0780096036ec4ddd613ac820c11dccc52072635fe8a75c8b63</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">66d5de3c6978ee46ca7e8de61c1c33e18e4ca4fd8b0f338665174a66a64d98f3</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7a0be70dd9e4a9241a97c854bb7af1cf1ab43da7c3360c4c86eaeecf1f7fccff</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7e1e0ce7c231e58cccd52b5f5331aff8ed5afd8bb72bf647d732cb96f6b35a8e</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">87486a9dd4eb6d593d9cc9d6af03e3aa920d1d84cd19d025bf2180578999ff10</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">900aa9eb339306516f6480ed24a594134ac32703a9e712d5b3f9100b2386f139</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b01c0ea676cfc3d6354dca7380e02ca626efefc0588bcad923a216da8321cbe5</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b5c78ace287f0facc4a4c4a53da2655ec131338897d461be8f98f34abec7e51e</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c19ccc2522367c01b004c7d3fb2ad2e09c4bf95e85ee1a812a5262d263047977</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">ecd3d59158affeef67d0e0e78d8929e0e217fb3ee075c543aea0a4caed7d5c17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1909</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-04-25 00:00:00"/>
    <updated date="2023-05-02 23:24:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1909" id="RHSA-2023:1909" type="rhsa" title="RHSA-2023:1909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1909.html" id="ALSA-2023:1909" type="self" title="ALSA-2023:1909"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">05482484e8ce52af76093507c24a2c56f541d42b12725531995e416800e2129f</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">39b04df432deed4213e0d7706ebd410df51bbb6297bdc789b6a5c6ed3df3da9a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">477de5566680dc7e6fda3af8f8df173829d545fa3546a37975bc854538972b76</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">57fa4af68285ab323a01769b069d420ec29868f44ec080cdd1085874f66b029d</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">622d78f8aee15d9707cae9a908695117d091f871232a364f9f78eaebfd79e18b</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">6d113eeb1cee1eebdd08a584b786c431814c8bda23f425891008c5308df857ce</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">971a9b6b2649baca8129b37ced550624d8a2696ad6ae0a08c309ad25288d1514</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a75e1338e21a0aef356ea3e170f4b413dc722c690e81408b2a26436c32025375</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d72b35e74c199adc2c794f441860231088297ee180bce24e43170d1d2c990e26</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">de9f25203c2b9b606eda8bbba5654ff1106fedf81a6e18b2d099e6f64c528c61</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2127</id>
    <title>Important: samba security update</title>
    <issued date="2023-05-04 00:00:00"/>
    <updated date="2023-05-05 10:51:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2127" id="RHSA-2023:2127" type="rhsa" title="RHSA-2023:2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2127.html" id="ALSA-2023:2127" type="self" title="ALSA-2023:2127"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_1_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_1_default</name>
        <package name="libsmbclient-devel" version="4.16.4" release="103.el9_1" epoch="0" arch="aarch64" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libsmbclient-devel-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">11ae941889f86069a183cd0f47e277a28eb8319a42d71a3f87ac0c53899eb7e2</sum>
        </package>
        <package name="libwbclient-devel" version="4.16.4" release="103.el9_1" epoch="0" arch="aarch64" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libwbclient-devel-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">23f089f6d45bdcc042e262bcd92c8d75fe6169c9c308b7190959b2607698102b</sum>
        </package>
        <package name="samba-test-libs" version="4.16.4" release="103.el9_1" epoch="0" arch="aarch64" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-test-libs-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">596cb35f936f06787c3837ff7c023b51097dbcd88ff24b0ddde12f4acded2edc</sum>
        </package>
        <package name="samba-test" version="4.16.4" release="103.el9_1" epoch="0" arch="aarch64" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-test-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7a1c6b749ad85f3f04291658f24a9c97fe2879127f8016313bcb9e1bbe674ee1</sum>
        </package>
        <package name="samba-devel" version="4.16.4" release="103.el9_1" epoch="0" arch="aarch64" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-devel-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7be63a02c69642885a38ca9f40f0574950e7179c09a0cd1b90090833231aa438</sum>
        </package>
        <package name="samba-pidl" version="4.16.4" release="103.el9_1" epoch="0" arch="noarch" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-pidl-4.16.4-103.el9_1.noarch.rpm</filename>
          <sum type="sha256">c48c0aef3685e93ad6b4c179b446ee741ca10c2e8490e8c61364eac2f8b8440b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2165</id>
    <title>Important: edk2 security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 17:08:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security, bug fix, and enhancement update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
* edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation (CVE-2021-38578)
* openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
* openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
* openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2165" id="RHSA-2023:2165" type="rhsa" title="RHSA-2023:2165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-38578" id="CVE-2021-38578" type="cve" title="CVE-2021-38578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4304" id="CVE-2022-4304" type="cve" title="CVE-2022-4304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4450" id="CVE-2022-4450" type="cve" title="CVE-2022-4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0215" id="CVE-2023-0215" type="cve" title="CVE-2023-0215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0286" id="CVE-2023-0286" type="cve" title="CVE-2023-0286"/>
      <reference href="https://bugzilla.redhat.com/1960321" id="1960321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164440" id="2164440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164487" id="2164487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164492" id="2164492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164494" id="2164494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2165.html" id="ALSA-2023:2165" type="self" title="ALSA-2023:2165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="edk2-ovmf" version="20221207gitfff6d81270b5" release="9.el9_2" epoch="0" arch="noarch" src="edk2-20221207gitfff6d81270b5-9.el9_2.src.rpm">
          <filename>edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.noarch.rpm</filename>
          <sum type="sha256">3cf7d77ad2e87fb283447992c4f5b4474e6e3cd46f19d8416b62644de5d475f0</sum>
        </package>
        <package name="edk2-tools-doc" version="20221207gitfff6d81270b5" release="9.el9_2" epoch="0" arch="noarch" src="edk2-20221207gitfff6d81270b5-9.el9_2.src.rpm">
          <filename>edk2-tools-doc-20221207gitfff6d81270b5-9.el9_2.noarch.rpm</filename>
          <sum type="sha256">88fdd6252e0556b1732a5dcd546d6e5d581e2f2f0156472f6779bd95e8b8ca10</sum>
        </package>
        <package name="edk2-tools" version="20221207gitfff6d81270b5" release="9.el9_2" epoch="0" arch="aarch64" src="edk2-20221207gitfff6d81270b5-9.el9_2.src.rpm">
          <filename>edk2-tools-20221207gitfff6d81270b5-9.el9_2.aarch64.rpm</filename>
          <sum type="sha256">ce69facb48ba1ba68470471c4067d52286e52d3983abf6ac57f7e83b75260f77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2166</id>
    <title>Moderate: freeradius security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 17:13:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeradius security and bug fix update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
* freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
* freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2166" id="RHSA-2023:2166" type="rhsa" title="RHSA-2023:2166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41859" id="CVE-2022-41859" type="cve" title="CVE-2022-41859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41860" id="CVE-2022-41860" type="cve" title="CVE-2022-41860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41861" id="CVE-2022-41861" type="cve" title="CVE-2022-41861"/>
      <reference href="https://bugzilla.redhat.com/2078483" id="2078483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078485" id="2078485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078487" id="2078487" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2166.html" id="ALSA-2023:2166" type="self" title="ALSA-2023:2166"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="freeradius-rest" version="3.0.21" release="37.el9" epoch="0" arch="aarch64" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-rest-3.0.21-37.el9.aarch64.rpm</filename>
          <sum type="sha256">2fc665d88e0716fde84751eddcfc8f1f8552df305ea18527cd0710c0d54107c9</sum>
        </package>
        <package name="freeradius-postgresql" version="3.0.21" release="37.el9" epoch="0" arch="aarch64" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-postgresql-3.0.21-37.el9.aarch64.rpm</filename>
          <sum type="sha256">a1e883da11b8fadfbe3409b275e9f75ea61ff396d69f6f21051da481eb41f91d</sum>
        </package>
        <package name="freeradius-unixODBC" version="3.0.21" release="37.el9" epoch="0" arch="aarch64" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-unixODBC-3.0.21-37.el9.aarch64.rpm</filename>
          <sum type="sha256">a28479e6f09397a93313292dd85c36d8bd8b342c9232617c15d37855d62b2c3f</sum>
        </package>
        <package name="freeradius-mysql" version="3.0.21" release="37.el9" epoch="0" arch="aarch64" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-mysql-3.0.21-37.el9.aarch64.rpm</filename>
          <sum type="sha256">afaf2f5c693e69ff19880e99d3570ed13996638210668d97fbd22333bb7ee3bc</sum>
        </package>
        <package name="freeradius-perl" version="3.0.21" release="37.el9" epoch="0" arch="aarch64" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-perl-3.0.21-37.el9.aarch64.rpm</filename>
          <sum type="sha256">bef5e50603b2a7c5ca1f54fdd2aef31dc38681da10316e37244bcfc3cef0102d</sum>
        </package>
        <package name="freeradius-sqlite" version="3.0.21" release="37.el9" epoch="0" arch="aarch64" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-sqlite-3.0.21-37.el9.aarch64.rpm</filename>
          <sum type="sha256">ded83ffc252c599b31b5d413529e8bc59b9a9d7bbe98010a8d03e5e63b43f200</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2248</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:19:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2248" id="RHSA-2023:2248" type="rhsa" title="RHSA-2023:2248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2248.html" id="ALSA-2023:2248" type="self" title="ALSA-2023:2248"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="17.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-17.el9.noarch.rpm</filename>
          <sum type="sha256">3b231953962ef28c2c50afd8c6fc428361b8e1316ccbe683f1cfb5c063cd4d87</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="17.el9" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-17.el9.aarch64.rpm</filename>
          <sum type="sha256">ee5f0bc1dcff4d309b00834055a5afdba5695822e0cd9a4e4501e72a0b4d0212</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2259</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 08:29:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2259" id="RHSA-2023:2259" type="rhsa" title="RHSA-2023:2259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38784" id="CVE-2022-38784" type="cve" title="CVE-2022-38784"/>
      <reference href="https://bugzilla.redhat.com/2124527" id="2124527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2259.html" id="ALSA-2023:2259" type="self" title="ALSA-2023:2259"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="poppler-glib-devel" version="21.01.0" release="14.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-14.el9.aarch64.rpm</filename>
          <sum type="sha256">787f1ec87b01867149c65c627463824a222dc9d966003c40227059d96cf827c5</sum>
        </package>
        <package name="poppler-devel" version="21.01.0" release="14.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-devel-21.01.0-14.el9.aarch64.rpm</filename>
          <sum type="sha256">868dfca2bcce61ff7a2e418a951443b92231ff60b3a6ee5cf60932176c17a309</sum>
        </package>
        <package name="poppler-cpp-devel" version="21.01.0" release="14.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-14.el9.aarch64.rpm</filename>
          <sum type="sha256">9ac0c3d166ac1160b1c42bd3ad87bacd088626457384b8577a771421b3ef0e9b</sum>
        </package>
        <package name="poppler-qt5-devel" version="21.01.0" release="14.el9" epoch="0" arch="aarch64" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-14.el9.aarch64.rpm</filename>
          <sum type="sha256">dd42cadcfa979ecf1d985b78e47a45ac27917c90e171309cf74ae249835d67f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2261</id>
    <title>Moderate: bind security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:55:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)
* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2261" id="RHSA-2023:2261" type="rhsa" title="RHSA-2023:2261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3736" id="CVE-2022-3736" type="cve" title="CVE-2022-3736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3924" id="CVE-2022-3924" type="cve" title="CVE-2022-3924"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164038" id="2164038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164039" id="2164039" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2261.html" id="ALSA-2023:2261" type="self" title="ALSA-2023:2261"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="bind-doc" version="9.16.23" release="11.el9" epoch="32" arch="noarch" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-doc-9.16.23-11.el9.noarch.rpm</filename>
          <sum type="sha256">89aa2e6a4d42f3636b882c4f0a7b97379335821cf7298757b760024b54a49ca6</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="11.el9" epoch="32" arch="aarch64" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-devel-9.16.23-11.el9.aarch64.rpm</filename>
          <sum type="sha256">d795962ea8f43e403d6cc66bd9b4659a3aa3a21f9e6798e7c0cedbaf37a3ec83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2326</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:35:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)
* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)
* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)
* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)
* freerdp: division by zero in urbdrc channel (CVE-2022-39318)
* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)
* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)
* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)
* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2326" id="RHSA-2023:2326" type="rhsa" title="RHSA-2023:2326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39282" id="CVE-2022-39282" type="cve" title="CVE-2022-39282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39283" id="CVE-2022-39283" type="cve" title="CVE-2022-39283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39316" id="CVE-2022-39316" type="cve" title="CVE-2022-39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39317" id="CVE-2022-39317" type="cve" title="CVE-2022-39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39318" id="CVE-2022-39318" type="cve" title="CVE-2022-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39319" id="CVE-2022-39319" type="cve" title="CVE-2022-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39320" id="CVE-2022-39320" type="cve" title="CVE-2022-39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39347" id="CVE-2022-39347" type="cve" title="CVE-2022-39347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41877" id="CVE-2022-41877" type="cve" title="CVE-2022-41877"/>
      <reference href="https://bugzilla.redhat.com/2134713" id="2134713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134717" id="2134717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143642" id="2143642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143643" id="2143643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143644" id="2143644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143645" id="2143645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143646" id="2143646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143647" id="2143647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143648" id="2143648" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2326.html" id="ALSA-2023:2326" type="self" title="ALSA-2023:2326"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="freerdp-devel" version="2.4.1" release="5.el9" epoch="2" arch="aarch64" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>freerdp-devel-2.4.1-5.el9.aarch64.rpm</filename>
          <sum type="sha256">1c60d72fc592b911678a375de6b8e461548e11ca18903c5298b1c51b6e47432a</sum>
        </package>
        <package name="libwinpr-devel" version="2.4.1" release="5.el9" epoch="2" arch="aarch64" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>libwinpr-devel-2.4.1-5.el9.aarch64.rpm</filename>
          <sum type="sha256">e847db36cf50f1ee79816f64caa4e6074311c6b6e02706c7678c65f5280f6570</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2340</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:12:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570)
* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598)
* libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599)
* libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626)
* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
* libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)
* libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)
* libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774)
* libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2340" id="RHSA-2023:2340" type="rhsa" title="RHSA-2023:2340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3570" id="CVE-2022-3570" type="cve" title="CVE-2022-3570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3597" id="CVE-2022-3597" type="cve" title="CVE-2022-3597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3598" id="CVE-2022-3598" type="cve" title="CVE-2022-3598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3599" id="CVE-2022-3599" type="cve" title="CVE-2022-3599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3626" id="CVE-2022-3626" type="cve" title="CVE-2022-3626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3627" id="CVE-2022-3627" type="cve" title="CVE-2022-3627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3970" id="CVE-2022-3970" type="cve" title="CVE-2022-3970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4645" id="CVE-2022-4645" type="cve" title="CVE-2022-4645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30774" id="CVE-2023-30774" type="cve" title="CVE-2023-30774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30775" id="CVE-2023-30775" type="cve" title="CVE-2023-30775"/>
      <reference href="https://bugzilla.redhat.com/2142734" id="2142734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142736" id="2142736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142738" id="2142738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142740" id="2142740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142741" id="2142741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142742" id="2142742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148918" id="2148918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176220" id="2176220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187139" id="2187139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187141" id="2187141" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2340.html" id="ALSA-2023:2340" type="self" title="ALSA-2023:2340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libtiff-tools" version="4.4.0" release="7.el9" epoch="0" arch="aarch64" src="libtiff-4.4.0-7.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">e0b9e73f23a55e29ec12618866cb78170a1090e137c4e0dcce9e3eb8de8b8018</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2370</id>
    <title>Moderate: unbound security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 05:10:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2370" id="RHSA-2023:2370" type="rhsa" title="RHSA-2023:2370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3204" id="CVE-2022-3204" type="cve" title="CVE-2022-3204"/>
      <reference href="https://bugzilla.redhat.com/2128947" id="2128947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2370.html" id="ALSA-2023:2370" type="self" title="ALSA-2023:2370"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="unbound-devel" version="1.16.2" release="3.el9" epoch="0" arch="aarch64" src="unbound-1.16.2-3.el9.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">02485406f79f3a6ecb70260782a6dffe000aa1a7e7b54afadac3f418b6a533d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2373</id>
    <title>Moderate: wireshark security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:46:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security and bug fix update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: f5ethtrailer Infinite loop in legacy style dissector (CVE-2022-3190)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2373" id="RHSA-2023:2373" type="rhsa" title="RHSA-2023:2373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3190" id="CVE-2022-3190" type="cve" title="CVE-2022-3190"/>
      <reference href="https://bugzilla.redhat.com/2152061" id="2152061" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2373.html" id="ALSA-2023:2373" type="self" title="ALSA-2023:2373"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="wireshark-devel" version="3.4.10" release="4.el9" epoch="1" arch="aarch64" src="wireshark-3.4.10-4.el9.src.rpm">
          <filename>wireshark-devel-3.4.10-4.el9.aarch64.rpm</filename>
          <sum type="sha256">ecc03cb75a5e4b7de753b0183d471bee3e19bd04e59f8ed62b63ae7048e25348</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2458</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:34:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
* cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
* use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882)
* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
* out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435)
* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
* memory leak in ipv6_renew_options() (CVE-2022-3524)
* data races around icsk-&gt;icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
* data races around sk-&gt;sk_prot (CVE-2022-3567)
* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
* use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)
* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
* mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128)
* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
* lockdown bypass using IMA (CVE-2022-21505)
* double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)
* network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743)
* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
* Denial of service in beacon protection for P2P-device (CVE-2022-42722)
* memory corruption in usbmon driver (CVE-2022-43750)
* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
* use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)
* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
* denial of service in tipc_conn_close (CVE-2023-1382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2458" id="RHSA-2023:2458" type="rhsa" title="RHSA-2023:2458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-26341" id="CVE-2021-26341" type="cve" title="CVE-2021-26341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33655" id="CVE-2021-33655" type="cve" title="CVE-2021-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1462" id="CVE-2022-1462" type="cve" title="CVE-2022-1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1789" id="CVE-2022-1789" type="cve" title="CVE-2022-1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1882" id="CVE-2022-1882" type="cve" title="CVE-2022-1882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20141" id="CVE-2022-20141" type="cve" title="CVE-2022-20141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21505" id="CVE-2022-21505" type="cve" title="CVE-2022-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2196" id="CVE-2022-2196" type="cve" title="CVE-2022-2196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2663" id="CVE-2022-2663" type="cve" title="CVE-2022-2663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28388" id="CVE-2022-28388" type="cve" title="CVE-2022-28388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3028" id="CVE-2022-3028" type="cve" title="CVE-2022-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33743" id="CVE-2022-33743" type="cve" title="CVE-2022-33743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3435" id="CVE-2022-3435" type="cve" title="CVE-2022-3435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3522" id="CVE-2022-3522" type="cve" title="CVE-2022-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3524" id="CVE-2022-3524" type="cve" title="CVE-2022-3524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3566" id="CVE-2022-3566" type="cve" title="CVE-2022-3566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3567" id="CVE-2022-3567" type="cve" title="CVE-2022-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3619" id="CVE-2022-3619" type="cve" title="CVE-2022-3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3623" id="CVE-2022-3623" type="cve" title="CVE-2022-3623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3625" id="CVE-2022-3625" type="cve" title="CVE-2022-3625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3628" id="CVE-2022-3628" type="cve" title="CVE-2022-3628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3640" id="CVE-2022-3640" type="cve" title="CVE-2022-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3707" id="CVE-2022-3707" type="cve" title="CVE-2022-3707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39188" id="CVE-2022-39188" type="cve" title="CVE-2022-39188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39189" id="CVE-2022-39189" type="cve" title="CVE-2022-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4128" id="CVE-2022-4128" type="cve" title="CVE-2022-4128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4129" id="CVE-2022-4129" type="cve" title="CVE-2022-4129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41674" id="CVE-2022-41674" type="cve" title="CVE-2022-41674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42703" id="CVE-2022-42703" type="cve" title="CVE-2022-42703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42720" id="CVE-2022-42720" type="cve" title="CVE-2022-42720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42721" id="CVE-2022-42721" type="cve" title="CVE-2022-42721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42722" id="CVE-2022-42722" type="cve" title="CVE-2022-42722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42896" id="CVE-2022-42896" type="cve" title="CVE-2022-42896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43750" id="CVE-2022-43750" type="cve" title="CVE-2022-43750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47929" id="CVE-2022-47929" type="cve" title="CVE-2022-47929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0394" id="CVE-2023-0394" type="cve" title="CVE-2023-0394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0461" id="CVE-2023-0461" type="cve" title="CVE-2023-0461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0590" id="CVE-2023-0590" type="cve" title="CVE-2023-0590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1195" id="CVE-2023-1195" type="cve" title="CVE-2023-1195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1382" id="CVE-2023-1382" type="cve" title="CVE-2023-1382"/>
      <reference href="https://bugzilla.redhat.com/2061703" id="2061703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073091" id="2073091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078466" id="2078466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089701" id="2089701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090723" id="2090723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106830" id="2106830" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107924" id="2107924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108691" id="2108691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114937" id="2114937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122228" id="2122228" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123056" id="2123056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124788" id="2124788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130141" id="2130141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133483" id="2133483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133490" id="2133490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134377" id="2134377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134380" id="2134380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134451" id="2134451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134506" id="2134506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134517" id="2134517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134528" id="2134528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137979" id="2137979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139610" id="2139610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143893" id="2143893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143943" id="2143943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144720" id="2144720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147364" id="2147364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150947" id="2150947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150960" id="2150960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150979" id="2150979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151270" id="2151270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154171" id="2154171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154235" id="2154235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160023" id="2160023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162120" id="2162120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165721" id="2165721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165741" id="2165741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168246" id="2168246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176192" id="2176192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177371" id="2177371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2458.html" id="ALSA-2023:2458" type="self" title="ALSA-2023:2458"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="aarch64" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-cross-headers-5.14.0-284.11.1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">287a4d0b1267b2d63c40ce78874463467f1d240b7618c6f5636ba8176753cfbe</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="aarch64" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-284.11.1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">fcf3c99b12a4dd84ba09584530cadb64ba8b5bcfd72dfe6943499da97f46a1e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2459</id>
    <title>Moderate: device-mapper-multipath security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:16:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>device-mapper-multipath security and bug fix update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2459" id="RHSA-2023:2459" type="rhsa" title="RHSA-2023:2459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41973" id="CVE-2022-41973" type="cve" title="CVE-2022-41973"/>
      <reference href="https://bugzilla.redhat.com/2123894" id="2123894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2459.html" id="ALSA-2023:2459" type="self" title="ALSA-2023:2459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.7" release="20.el9" epoch="0" arch="aarch64" src="device-mapper-multipath-0.8.7-20.el9.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-20.el9.aarch64.rpm</filename>
          <sum type="sha256">dd4a2d670b81cffffcd0d4ae26a724e0d25595390cff4d6a0cfa2a66ec93611d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2487</id>
    <title>Moderate: fwupd security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 02:42:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fwupd security and bug fix update</summary>
    <description>The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)
* shim: 3rd party shim allow secure boot bypass (CVE-2022-34301)
* shim: 3rd party shim allow secure boot bypass (CVE-2022-34302)
* shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2487" id="RHSA-2023:2487" type="rhsa" title="RHSA-2023:2487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3287" id="CVE-2022-3287" type="cve" title="CVE-2022-3287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34301" id="CVE-2022-34301" type="cve" title="CVE-2022-34301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34302" id="CVE-2022-34302" type="cve" title="CVE-2022-34302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34303" id="CVE-2022-34303" type="cve" title="CVE-2022-34303"/>
      <reference href="https://bugzilla.redhat.com/2120687" id="2120687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120699" id="2120699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120701" id="2120701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129904" id="2129904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2487.html" id="ALSA-2023:2487" type="self" title="ALSA-2023:2487"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="fwupd-devel" version="1.8.10" release="2.el9.alma" epoch="0" arch="aarch64" src="fwupd-1.8.10-2.el9.alma.src.rpm">
          <filename>fwupd-devel-1.8.10-2.el9.alma.aarch64.rpm</filename>
          <sum type="sha256">02313cd6679ce7e0618f491980066da10d4c7197d853f926fe7a6c6cf91b3095</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2519</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:40:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2519" id="RHSA-2023:2519" type="rhsa" title="RHSA-2023:2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2519.html" id="ALSA-2023:2519" type="self" title="ALSA-2023:2519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="samba-test-libs" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-test-libs-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">029daaa52c2a2012edf11b3ac5ae066779b67b5bb85799542b322fd6a0f0232d</sum>
        </package>
        <package name="python3-samba-devel" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>python3-samba-devel-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">0b37c7bf46fc2e2d8e9ccdcd655c6b769d1e297b1ca5fdd909c47db62e5a7e39</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-devel-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">2cb5b917dc2d2f039c5ec99852e7f7e5d48a9aa26110f3934f7f0b2475fdfde8</sum>
        </package>
        <package name="samba-pidl" version="4.17.5" release="102.el9" epoch="0" arch="noarch" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-pidl-4.17.5-102.el9.noarch.rpm</filename>
          <sum type="sha256">39aaadaf78a1fa8a0747154fca75e17ac1ed358cd6d47644f2ec50e7303a1e81</sum>
        </package>
        <package name="python3-samba-test" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>python3-samba-test-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">49da02e19065649eba24f173522a612cee8fbfa45ea9ff830b0b6080c16e54e5</sum>
        </package>
        <package name="libsmbclient-devel" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libsmbclient-devel-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">d6643a8291fc5daeb6a1ffb4957cbe18571d3c2b1a4d4c2ec37acabfe4b4a851</sum>
        </package>
        <package name="samba-test" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-test-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">d887d83184453d5cc1ff22f084a8975a0e2ace17141d16c060625746a55c1601</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libnetapi-devel-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">f5bc679a2715adb4d74279c083d21e50504e3e16623f1216d2df759bd54b9357</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="102.el9" epoch="0" arch="aarch64" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libwbclient-devel-4.17.5-102.el9.aarch64.rpm</filename>
          <sum type="sha256">f6c2a17262f22806effd89fea444daee093869e25cfb2725021ee49c028237f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2532</id>
    <title>Low: libarchive security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 01:18:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2532" id="RHSA-2023:2532" type="rhsa" title="RHSA-2023:2532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36227" id="CVE-2022-36227" type="cve" title="CVE-2022-36227"/>
      <reference href="https://bugzilla.redhat.com/2144972" id="2144972" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2532.html" id="ALSA-2023:2532" type="self" title="ALSA-2023:2532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libarchive-devel" version="3.5.3" release="4.el9" epoch="0" arch="aarch64" src="libarchive-3.5.3-4.el9.src.rpm">
          <filename>libarchive-devel-3.5.3-4.el9.aarch64.rpm</filename>
          <sum type="sha256">728c9e27fa15a7e65734c65067cd33d075dd1558856270fc503f3cd4290358e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2582</id>
    <title>Low: lua security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:51:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overread (CVE-2022-28805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2582" id="RHSA-2023:2582" type="rhsa" title="RHSA-2023:2582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28805" id="CVE-2022-28805" type="cve" title="CVE-2022-28805"/>
      <reference href="https://bugzilla.redhat.com/2073884" id="2073884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2582.html" id="ALSA-2023:2582" type="self" title="ALSA-2023:2582"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="lua-devel" version="5.4.4" release="3.el9" epoch="0" arch="aarch64" src="lua-5.4.4-3.el9.src.rpm">
          <filename>lua-devel-5.4.4-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f2d7ab675516c5dee02f6063118da0e1b57b5f3e2306a0cabbee9d24f65f410b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2589</id>
    <title>Moderate: autotrace security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:40:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>autotrace security update</summary>
    <description>AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2589" id="RHSA-2023:2589" type="rhsa" title="RHSA-2023:2589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32323" id="CVE-2022-32323" type="cve" title="CVE-2022-32323"/>
      <reference href="https://bugzilla.redhat.com/2107471" id="2107471" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2589.html" id="ALSA-2023:2589" type="self" title="ALSA-2023:2589"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="autotrace" version="0.31.1" release="65.el9" epoch="0" arch="aarch64" src="autotrace-0.31.1-65.el9.src.rpm">
          <filename>autotrace-0.31.1-65.el9.aarch64.rpm</filename>
          <sum type="sha256">98920a9c44565e12c779c3dfa173b00c038ad0b4234143c269931d72874d4d44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2592</id>
    <title>Moderate: golang-github-cpuguy83-md2man security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:31:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang-github-cpuguy83-md2man security, bug fix, and enhancement update</summary>
    <description>go-md2man converts markdown into roff (man pages).

Security Fix(es):

* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2592" id="RHSA-2023:2592" type="rhsa" title="RHSA-2023:2592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2592.html" id="ALSA-2023:2592" type="self" title="ALSA-2023:2592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="golang-github-cpuguy83-md2man" version="2.0.2" release="4.el9" epoch="0" arch="aarch64" src="golang-github-cpuguy83-md2man-2.0.2-4.el9.src.rpm">
          <filename>golang-github-cpuguy83-md2man-2.0.2-4.el9.aarch64.rpm</filename>
          <sum type="sha256">521aa2918f29b6dafff48a407a0bf64abad13727640ab0709e2bcd7be061f612</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2621</id>
    <title>Important: mysql security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:14:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177731, BZ#2177732)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2621" id="RHSA-2023:2621" type="rhsa" title="RHSA-2023:2621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21594" id="CVE-2022-21594" type="cve" title="CVE-2022-21594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21599" id="CVE-2022-21599" type="cve" title="CVE-2022-21599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21604" id="CVE-2022-21604" type="cve" title="CVE-2022-21604"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21608" id="CVE-2022-21608" type="cve" title="CVE-2022-21608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21611" id="CVE-2022-21611" type="cve" title="CVE-2022-21611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21617" id="CVE-2022-21617" type="cve" title="CVE-2022-21617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21625" id="CVE-2022-21625" type="cve" title="CVE-2022-21625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21632" id="CVE-2022-21632" type="cve" title="CVE-2022-21632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21633" id="CVE-2022-21633" type="cve" title="CVE-2022-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21637" id="CVE-2022-21637" type="cve" title="CVE-2022-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21640" id="CVE-2022-21640" type="cve" title="CVE-2022-21640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39400" id="CVE-2022-39400" type="cve" title="CVE-2022-39400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39408" id="CVE-2022-39408" type="cve" title="CVE-2022-39408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39410" id="CVE-2022-39410" type="cve" title="CVE-2022-39410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21836" id="CVE-2023-21836" type="cve" title="CVE-2023-21836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21863" id="CVE-2023-21863" type="cve" title="CVE-2023-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21864" id="CVE-2023-21864" type="cve" title="CVE-2023-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21865" id="CVE-2023-21865" type="cve" title="CVE-2023-21865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21867" id="CVE-2023-21867" type="cve" title="CVE-2023-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21868" id="CVE-2023-21868" type="cve" title="CVE-2023-21868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21869" id="CVE-2023-21869" type="cve" title="CVE-2023-21869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21870" id="CVE-2023-21870" type="cve" title="CVE-2023-21870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21871" id="CVE-2023-21871" type="cve" title="CVE-2023-21871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21873" id="CVE-2023-21873" type="cve" title="CVE-2023-21873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21874" id="CVE-2023-21874" type="cve" title="CVE-2023-21874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21875" id="CVE-2023-21875" type="cve" title="CVE-2023-21875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21876" id="CVE-2023-21876" type="cve" title="CVE-2023-21876"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21877" id="CVE-2023-21877" type="cve" title="CVE-2023-21877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21878" id="CVE-2023-21878" type="cve" title="CVE-2023-21878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21879" id="CVE-2023-21879" type="cve" title="CVE-2023-21879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21880" id="CVE-2023-21880" type="cve" title="CVE-2023-21880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21881" id="CVE-2023-21881" type="cve" title="CVE-2023-21881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21882" id="CVE-2023-21882" type="cve" title="CVE-2023-21882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21883" id="CVE-2023-21883" type="cve" title="CVE-2023-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21887" id="CVE-2023-21887" type="cve" title="CVE-2023-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21912" id="CVE-2023-21912" type="cve" title="CVE-2023-21912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21917" id="CVE-2023-21917" type="cve" title="CVE-2023-21917"/>
      <reference href="https://bugzilla.redhat.com/2142861" id="2142861" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142863" id="2142863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142865" id="2142865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142868" id="2142868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142869" id="2142869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142870" id="2142870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142871" id="2142871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142872" id="2142872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142873" id="2142873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142875" id="2142875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142877" id="2142877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142879" id="2142879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142880" id="2142880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142881" id="2142881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162268" id="2162268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162270" id="2162270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162271" id="2162271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162272" id="2162272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162274" id="2162274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162275" id="2162275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162276" id="2162276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162277" id="2162277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162278" id="2162278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162280" id="2162280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162281" id="2162281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162282" id="2162282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162283" id="2162283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162284" id="2162284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162285" id="2162285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162286" id="2162286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162287" id="2162287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162288" id="2162288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162289" id="2162289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162290" id="2162290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162291" id="2162291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188110" id="2188110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188112" id="2188112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2621.html" id="ALSA-2023:2621" type="self" title="ALSA-2023:2621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="mysql-devel" version="8.0.32" release="1.el9_2" epoch="0" arch="aarch64" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-devel-8.0.32-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">425e7b5e2f1fac862f379a7b39422a8e6d9146e80719b3a698581b2e87550f2c</sum>
        </package>
        <package name="mysql-libs" version="8.0.32" release="1.el9_2" epoch="0" arch="aarch64" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-libs-8.0.32-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">be1a689452d853e8ec3201eea74888fda6a14b5e6f8bcd46df96ca7c23444303</sum>
        </package>
        <package name="mysql-test" version="8.0.32" release="1.el9_2" epoch="0" arch="aarch64" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-test-8.0.32-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">fc2d375076303ffbbd80717d06df14188a333ba2e029b689fc02615c563d6389</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3423</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 05:52:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3423" id="RHSA-2023:3423" type="rhsa" title="RHSA-2023:3423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805"/>
      <reference href="https://bugzilla.redhat.com/2203051" id="2203051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3423.html" id="ALSA-2023:3423" type="self" title="ALSA-2023:3423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="cups-filters-devel" version="1.28.7" release="11.el9_2.1" epoch="0" arch="aarch64" src="cups-filters-1.28.7-11.el9_2.1.src.rpm">
          <filename>cups-filters-devel-1.28.7-11.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">5c3b5df66ebe548568be972c712e9d5b01b5d62ec57bc7df3f39f78c247e2bf4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3581</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:17:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3581" id="RHSA-2023:3581" type="rhsa" title="RHSA-2023:3581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3581.html" id="ALSA-2023:3581" type="self" title="ALSA-2023:3581"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.118" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.118-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">32631bac7fdad191ef05477b5a6f4929cf32492984761f5766305fe3d4c71a70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3585</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:05:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3585" id="RHSA-2023:3585" type="rhsa" title="RHSA-2023:3585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3585.html" id="ALSA-2023:3585" type="self" title="ALSA-2023:3585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3.11-idle" version="3.11.2" release="2.el9_2.1" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">2dfdad022c680d87e0fcfd5dc2e7737c00579ab2d5fb2a2c37174f9bde830712</sum>
        </package>
        <package name="python3.11-test" version="3.11.2" release="2.el9_2.1" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-test-3.11.2-2.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">5d303c1ab53cdcef4af65331369ef6ec64ef54f564ae814b19ffb402ef30b228</sum>
        </package>
        <package name="python3.11-debug" version="3.11.2" release="2.el9_2.1" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">748bc1d8b480c2cc31fba24bd974f1c1e5a2f4a476b99e2cbfde18efe2d44824</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3592</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:38:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3592" id="RHSA-2023:3592" type="rhsa" title="RHSA-2023:3592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32032" id="CVE-2023-32032" type="cve" title="CVE-2023-32032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212615" id="2212615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3592.html" id="ALSA-2023:3592" type="self" title="ALSA-2023:3592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.107" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.107-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">52074f3d429a78a91f72edf3d6af26f39a41922838320a7f51d74b8e7390c288</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3595</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:37:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3595" id="RHSA-2023:3595" type="rhsa" title="RHSA-2023:3595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3595.html" id="ALSA-2023:3595" type="self" title="ALSA-2023:3595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3-idle" version="3.9.16" release="1.el9_2.1" epoch="0" arch="aarch64" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-idle-3.9.16-1.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">0db7352708e453899d41ee30ff0c676d6a5db6f046ba0711ffd7a6d068e51101</sum>
        </package>
        <package name="python3-test" version="3.9.16" release="1.el9_2.1" epoch="0" arch="aarch64" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-test-3.9.16-1.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">3d142427dc050a03327d25073aa5ea85a9d5c84cbe3625523b43508dfe4a062c</sum>
        </package>
        <package name="python3-debug" version="3.9.16" release="1.el9_2.1" epoch="0" arch="aarch64" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-debug-3.9.16-1.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">4afe6ccb139bd6b989a767202ae800d1bf526f24a7abe92dbf4b12bb6d794e77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3661</id>
    <title>Important: texlive security update</title>
    <issued date="2023-06-19 00:00:00"/>
    <updated date="2023-06-23 17:59:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>texlive security update</summary>
    <description>The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.

Security Fix(es):

* texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3661" id="RHSA-2023:3661" type="rhsa" title="RHSA-2023:3661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32700" id="CVE-2023-32700" type="cve" title="CVE-2023-32700"/>
      <reference href="https://bugzilla.redhat.com/2208943" id="2208943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3661.html" id="ALSA-2023:3661" type="self" title="ALSA-2023:3661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="texlive-gnu-freefont" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-gnu-freefont-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">16c75f425a783945efc0d78b91bf1ea50b85ae1c0a2699dfa7710075d8c68c96</sum>
        </package>
        <package name="texlive-lib-devel" version="20200406" release="26.el9_2" epoch="9" arch="aarch64" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lib-devel-20200406-26.el9_2.aarch64.rpm</filename>
          <sum type="sha256">d0406709e277b997ba49a8ff94b6117355894eb6d4dffe3a9bc8ce2689a0c1d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3711</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 15:36:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)
* libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)
* libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)
* libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)
* libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)
* libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3711" id="RHSA-2023:3711" type="rhsa" title="RHSA-2023:3711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0795" id="CVE-2023-0795" type="cve" title="CVE-2023-0795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0796" id="CVE-2023-0796" type="cve" title="CVE-2023-0796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0797" id="CVE-2023-0797" type="cve" title="CVE-2023-0797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0798" id="CVE-2023-0798" type="cve" title="CVE-2023-0798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0799" id="CVE-2023-0799" type="cve" title="CVE-2023-0799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804"/>
      <reference href="https://bugzilla.redhat.com/2163606" id="2163606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170119" id="2170119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170146" id="2170146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170151" id="2170151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170157" id="2170157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170162" id="2170162" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170167" id="2170167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170172" id="2170172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170178" id="2170178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170187" id="2170187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170192" id="2170192" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3711.html" id="ALSA-2023:3711" type="self" title="ALSA-2023:3711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libtiff-tools" version="4.4.0" release="8.el9_2" epoch="0" arch="aarch64" src="libtiff-4.4.0-8.el9_2.src.rpm">
          <filename>libtiff-tools-4.4.0-8.el9_2.aarch64.rpm</filename>
          <sum type="sha256">03bd37b719d0026f2a029fcd9a9513ec64c952de857160d394b2193cc17d2c10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3714</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 15:06:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3714" id="RHSA-2023:3714" type="rhsa" title="RHSA-2023:3714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3714.html" id="ALSA-2023:3714" type="self" title="ALSA-2023:3714"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="postgresql-docs" version="13.11" release="1.el9_2" epoch="0" arch="aarch64" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-docs-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">98262c6cc3fb8e9fbb70c4f362906e1378cf4d792565f946e64df5089574f3da</sum>
        </package>
        <package name="postgresql-server-devel" version="13.11" release="1.el9_2" epoch="0" arch="aarch64" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-server-devel-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">a66c3a49311215074079e14d1c767dab1c0cdc288cc9de8c6a05743d692e7390</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.11" release="1.el9_2" epoch="0" arch="aarch64" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-upgrade-devel-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">bcad68d016b9a8c7aaec2ceab8986b500f5ed036c682c3e144f723d32cbbbed8</sum>
        </package>
        <package name="postgresql-static" version="13.11" release="1.el9_2" epoch="0" arch="aarch64" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-static-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">ca1698ecacecbc8728487a9e62e293521643247bb17f1b04eecebb652e80734c</sum>
        </package>
        <package name="postgresql-test" version="13.11" release="1.el9_2" epoch="0" arch="aarch64" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-test-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">e3f056d27931b48aea233303cbe5f849c10b87d5b236ca018b8ed8bcc0e16a35</sum>
        </package>
        <package name="postgresql-private-devel" version="13.11" release="1.el9_2" epoch="0" arch="aarch64" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-private-devel-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">e47cb53372a11cb4815fe77d91a68107cc03fb01fc29ac59434bb15b4a4c2f1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3715</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 14:54:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3715" id="RHSA-2023:3715" type="rhsa" title="RHSA-2023:3715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700"/>
      <reference href="https://bugzilla.redhat.com/2203653" id="2203653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3715.html" id="ALSA-2023:3715" type="self" title="ALSA-2023:3715"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="10.2.el9_2" epoch="0" arch="aarch64" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-lock-sanlock-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">2081600d5a728738b221a43977ec6ef1919cbd5657caf191d06b644ecda71e24</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="10.2.el9_2" epoch="0" arch="aarch64" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-client-qemu-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">31a0dad7e339d1bb06fbc54484af152ff4c83a6815700dd666335bf4f5a2a2e9</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="10.2.el9_2" epoch="0" arch="aarch64" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-docs-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">859b03e414e6917abb44fc21b84a7b5a33914a33a7f71ede405be14c04e0083a</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="10.2.el9_2" epoch="0" arch="aarch64" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-devel-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">aa1779f1ddd783d61f1767a61159abbbe0a3738dc1ae9d9a0fcfbec217fbceac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3723</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-07-11 20:32:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)
* kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)
* Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)
* kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
* kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)
* kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel QAT Update - (kernel changes) (BZ#2176846)
* RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857)
* In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727)
* Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723)
* Azure AlmaLinux 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186822)
* AlmaLinux 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536)
* Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709)
* kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655)
* fix page end in filemap_get_read_batch (BZ#2189349)
* AlmaLinux 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348)
* wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585)
* ice: high CPU usage with GNSS or ptp4l (BZ#2203154)
* AlmaLinux 9 "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2203178)
* Dying percpu kworkers cause issues on isolated CPUs [almalinux-9] (BZ#2203229)
* FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335)
* perf errors - "event syntax error: 'unc_p_delayed_c_state_abort_core5'" b'_ value too big for format, maximum is 255' (BZ#2207471)
* AlmaLinux 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208242)
* cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong unlock before return from cifs_tree_connect (BZ#2209045)
* AlmaLinux 9 x86_64, kdump 2nd kernel will randomly panic on "kvm-08-guest25.hv2" (BZ#2210614)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3723" id="RHSA-2023:3723" type="rhsa" title="RHSA-2023:3723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2002" id="CVE-2023-2002" type="cve" title="CVE-2023-2002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2124" id="CVE-2023-2124" type="cve" title="CVE-2023-2124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2194" id="CVE-2023-2194" type="cve" title="CVE-2023-2194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2235" id="CVE-2023-2235" type="cve" title="CVE-2023-2235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28466" id="CVE-2023-28466" type="cve" title="CVE-2023-28466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32233" id="CVE-2023-32233" type="cve" title="CVE-2023-32233"/>
      <reference href="https://bugzilla.redhat.com/2179000" id="2179000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187308" id="2187308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187439" id="2187439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188396" id="2188396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192589" id="2192589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196105" id="2196105" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3723.html" id="ALSA-2023:3723" type="self" title="ALSA-2023:3723"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="aarch64" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-284.18.1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">11247ee58e2b5014cba04cbddbf65a0e92fd396bfa40a720b45fe78346d9558f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4057</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:21:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219634)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4057" id="RHSA-2023:4057" type="rhsa" title="RHSA-2023:4057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4057.html" id="ALSA-2023:4057" type="self" title="ALSA-2023:4057"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.109" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">b2b485d6746fffbd7c73e9fca7d28e5ba2807f043ee69c64c5b9d9c741025147</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4060</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-13 21:20:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219640)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4060" id="RHSA-2023:4060" type="rhsa" title="RHSA-2023:4060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4060.html" id="ALSA-2023:4060" type="self" title="ALSA-2023:4060"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.120" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.120-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">b1d0f1b324707b02a059ee4c670ac290e6f46e93bab4a8fd8bc1686c5ec919ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4099</id>
    <title>Important: bind security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 08:38:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4099" id="RHSA-2023:4099" type="rhsa" title="RHSA-2023:4099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4099.html" id="ALSA-2023:4099" type="self" title="ALSA-2023:4099"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="bind-doc" version="9.16.23" release="11.el9_2.1" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-doc-9.16.23-11.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">3626cfa861e4506dc542b852affac40020461c645de4b287336e8be7112c589f</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="11.el9_2.1" epoch="32" arch="aarch64" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-devel-9.16.23-11.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">f2c5450eebeeace2cbb1031ca7c5a459e587c545905c74ea4065b62727d2cccd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4158</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:32:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4158" id="RHSA-2023:4158" type="rhsa" title="RHSA-2023:4158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4158.html" id="ALSA-2023:4158" type="self" title="ALSA-2023:4158"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-11-openjdk-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">04f0edb7c78d1a85b8d02943f0a13b751a68672d7682322822b8529e9dd3415a</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1516a435b9475261f10117741ce9a48dda12a9e1d50c1d63050f848602d337ba</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2c8a5accb3d1718bdb77ca99eaaa92fb27f9faa2680c23adfd5577c51973bab9</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3c0c2cc912db074518c23fdd5ae946ed7278a101b15b6bb6768536011ffa5363</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4d668cd6d252cc653daa9eb052109f724dd0bef759e6fa25c4057e07ab8f8f20</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5130f89fc90a1253dfe14153e17cd07a816f09f1a4a189144efc05cee427b99c</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">58380d323660208d5c4ad0db7375069d658418d8d2297fa0278da6d99f9de265</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a7d25a93ec13b5c70947ade6474f3c8563fa071180da1f65e3965d9b79017cfd</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ab224c5908f5da973d32f4525c2110d6457add4069d5f42985b602cb06ead661</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b0d8c9f2629e4dad764d9b5e8ad077b999cc4c6b5cd9baa2c2144e1b0e0eb379</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c05303b3e99bf109962b08f03813d48be268c10fb3b52fd8938ab1ba3366db6e</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">dce99ccae34309510e08218eb893d18990112bdb4a3c203c5f55ac425a309599</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e50c1f8818a924efbf74b07f6227fc3dd9e2f93f9baa72eb56e51eaa36652a88</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f34d410b36f90a948d86276274e5ad441b4c9073304b56bfc6bf10d1e3cb31f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4177</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:20:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4177" id="RHSA-2023:4177" type="rhsa" title="RHSA-2023:4177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22044" id="CVE-2023-22044" type="cve" title="CVE-2023-22044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221642" id="2221642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4177.html" id="ALSA-2023:4177" type="self" title="ALSA-2023:4177"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0d8e7b8faf89e0be5a42e6366f1f91cfa0812e0f59e9d191071d4ba3916ce291</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">28bb54e9a41a4fe31cb194b1d670b3546887678c4a47f7ce9c3de02f5ba3b324</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">34289710829d5043699d8db6a08450eff2a5200c84dfa74c4e5425c73bb685ed</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">53bb39ca020e76b43b91007285868fd0ab6d2a31c849bb07529e42f245c5cc08</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5bfe226ecb16fbb71d4a5558ab3e6dfd2ebd00f05d7a91427c26703306b76770</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5c927d9f506b1ea53d1d9b880ec56ae75a69b876b09731c5328fd68efa1bef2d</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">96b71e843587127671f2cce95f5d886af4c0aa0755af87215f190d2956b6b40a</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">97d704a48f33897c3c0addf3102ab6772e7dd91f1611b5a924f29ff291b784c0</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a3fb7bf05471e78e1b39c847f61647abc8ce0df5faa904eb10d91016a1574c63</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">bf1f3672221b4da5b8fa839285dd41c4106341c14738c187bad5fd32f428f49e</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d5ca0d4ccb3652aa013512654591001b8ee22a541b8358a62baf1c7ca27f7b52</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d762eb1865b287824ee1d516aea138fee5bebef990a9ee2ac3ae728d6fc317f0</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d9aa813cca3aed7ebc6acb1296b21e171c0a866f54cda5e6e192674452fc2797</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ef080ae49d451bf28554135907e0b1d40c71faba4aadb6584a9a0b18d9b1156d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4178</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:09:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-9] (BZ#2220662)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4178" id="RHSA-2023:4178" type="rhsa" title="RHSA-2023:4178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4178.html" id="ALSA-2023:4178" type="self" title="ALSA-2023:4178"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">16f3f421eeb22f4afdff7cb33427ae150fb69688fd09595fcfc420c15a72e75a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4559d613c10c95fa40541dd3173566595fd6e8b0e361977511a46ed42891f8da</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4adf106b6751df6378f45d9def49939ec17f725d70f26a1002565bbc460457db</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">63cdcc47aebfaa48654be22445c95bbc19481cd87aa50e09d60499f82176bd86</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6cef3f4c9e7d8d568f3aca3f1f6eeb847ff165d0eb352618d6e4ec24219d96be</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">716965c5e489ff9ee80489de788ceeeaf815179a0b260b78f1205597c0c4fb30</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8121b95e537950262401485349ea54abd40c9668f380df933a237ff56000000c</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">894f49a9af7d0cfdb624ca76dcd914319ce17b3435d544f193a05f437992ab4e</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">960fd92abced68cce4755209fb0b1d85f7afdd39d26bb8b4f8631672bc9a2b51</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ec580705021db557da3ef6bb1b365af348c7458ac4ae9fba9bdcfc0d49a9949b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4325</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 11:47:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223600)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4325" id="RHSA-2023:4325" type="rhsa" title="RHSA-2023:4325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4325.html" id="ALSA-2023:4325" type="self" title="ALSA-2023:4325"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libsmbclient-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libsmbclient-devel-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">1b673dbf69df6155f9384ce2d0d7c126cf00363f30e00912c7b2912e8cba0acc</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libwbclient-devel-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">277ba39e8363dd775c2b1dca5ea78caf36dc20a54c094644695a93fca3d02037</sum>
        </package>
        <package name="python3-samba-test" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>python3-samba-test-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">3d23e10cebf054e756a73c848a4c2255da50db6a569451ad4485a9e0cd0fe908</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-devel-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">664181be5248d781b63f79f866fc96707eac16a593d67bba26df423ef38e0d4e</sum>
        </package>
        <package name="samba-test-libs" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-test-libs-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">94c0deddc9f684a64e1fd6326c165d17a43882dee04510ca6f5d9b40e462ecca</sum>
        </package>
        <package name="samba-pidl" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="noarch" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-pidl-4.17.5-103.el9_2.alma.noarch.rpm</filename>
          <sum type="sha256">a5359420cdecee730be12c0b6671254d313b1999e65343f668df6c6fbf625afc</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libnetapi-devel-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">d6033207abb343876c1a68df59983ae554360466448765142791be0077c517b6</sum>
        </package>
        <package name="python3-samba-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>python3-samba-devel-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">df99b39bf478ce1f95304712b948425fc648d3d268526d7049b5550492e6b8b2</sum>
        </package>
        <package name="samba-test" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="aarch64" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-test-4.17.5-103.el9_2.alma.aarch64.rpm</filename>
          <sum type="sha256">ecb04b7bf14e60f44bdd374ffe1d32051a2e7fd68e05a409dded453f51752380</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4377</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-08 13:12:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: out-of-bounds write caused by unclear skb-&gt;cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4377" id="RHSA-2023:4377" type="rhsa" title="RHSA-2023:4377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45869" id="CVE-2022-45869" type="cve" title="CVE-2022-45869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0458" id="CVE-2023-0458" type="cve" title="CVE-2023-0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1998" id="CVE-2023-1998" type="cve" title="CVE-2023-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3090" id="CVE-2023-3090" type="cve" title="CVE-2023-3090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35788" id="CVE-2023-35788" type="cve" title="CVE-2023-35788"/>
      <reference href="https://bugzilla.redhat.com/2151317" id="2151317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187257" id="2187257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193219" id="2193219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215768" id="2215768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218672" id="2218672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4377.html" id="ALSA-2023:4377" type="self" title="ALSA-2023:4377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="aarch64" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-284.25.1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">2aadf36f2b83289cdb69a86d40959a2d2567e24ffaab19309aaa291835da60ee</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="aarch64" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-cross-headers-5.14.0-284.25.1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">fed6bb23a4cc8263df8efea71e94a6d3f803850688c96b2c809218fbf542d352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4642</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:47:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4642" id="RHSA-2023:4642" type="rhsa" title="RHSA-2023:4642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4642.html" id="ALSA-2023:4642" type="self" title="ALSA-2023:4642"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.110" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.110-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">af0cccd4d3c72f569f4bf56f359fb98e8786cdfb3e2ce3ce83b6b46e0652d1bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4644</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:24:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4644" id="RHSA-2023:4644" type="rhsa" title="RHSA-2023:4644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4644.html" id="ALSA-2023:4644" type="self" title="ALSA-2023:4644"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.121" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.121-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">9e24315e2f1f0626d22517aafa8bb7115f17e637d774cb325b22c0a92aae4b24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5048</id>
    <title>Important: flac security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 09:07:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5048" id="RHSA-2023:5048" type="rhsa" title="RHSA-2023:5048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-22219" id="CVE-2020-22219" type="cve" title="CVE-2020-22219"/>
      <reference href="https://bugzilla.redhat.com/2235489" id="2235489" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5048.html" id="ALSA-2023:5048" type="self" title="ALSA-2023:5048"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="flac-devel" version="1.3.3" release="10.el9_2.1" epoch="0" arch="aarch64" src="flac-1.3.3-10.el9_2.1.src.rpm">
          <filename>flac-devel-1.3.3-10.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">591f4838bf4930208fc51df86a85600c0e46c283d2aa4f8ae6e3991959dd8ac0</sum>
        </package>
        <package name="flac" version="1.3.3" release="10.el9_2.1" epoch="0" arch="aarch64" src="flac-1.3.3-10.el9_2.1.src.rpm">
          <filename>flac-1.3.3-10.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">96a143cb2d55c0ef0bf9eaf3f6a499b5fdbba12191cfb2f0acfa6fee1deac018</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5069</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 08:08:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (5.14.0).

Security Fix(es):

* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)
* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)
* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)
* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)
* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)
* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)
* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)
* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)
* hw: amd: Cross-Process Information Leak (CVE-2023-20593)
* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026)
* [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463)
* rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121)
* AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310)
* AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587)
* Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623)
* bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945)
* libceph: harden msgr2.1 frame segment length checks (BZ#2227070)
* Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768)
* Important iavf bug fixes July 2023 (BZ#2228156)
* [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158)
* lvconvert --splitcache, --uncache operations getting hung (BZ#2228481)
* perf: EMR core and uncore PMU support (BZ#2230175)
* NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483)
* NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488)
* [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747)
* Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850)
* [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status  SRB_STATUS_INTERNAL_ERROR  (0x30) (BZ#2231990)
* AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213)
* NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302)
* [Lenovo 9.1 bug]   AlmaLinux 9 will hang when "echo c &gt; /proc/sysrq-trigger". (BZ#2232700)
* [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64  (/proc/[pid]/wchan broken) (BZ#2233928)

Enhancement(s):

* [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270)
* [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960)
* [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170)
* [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5069" id="RHSA-2023:5069" type="rhsa" title="RHSA-2023:5069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1637" id="CVE-2023-1637" type="cve" title="CVE-2023-1637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20593" id="CVE-2023-20593" type="cve" title="CVE-2023-20593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21102" id="CVE-2023-21102" type="cve" title="CVE-2023-21102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31248" id="CVE-2023-31248" type="cve" title="CVE-2023-31248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3390" id="CVE-2023-3390" type="cve" title="CVE-2023-3390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35001" id="CVE-2023-35001" type="cve" title="CVE-2023-35001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3610" id="CVE-2023-3610" type="cve" title="CVE-2023-3610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3776" id="CVE-2023-3776" type="cve" title="CVE-2023-3776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4004" id="CVE-2023-4004" type="cve" title="CVE-2023-4004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4147" id="CVE-2023-4147" type="cve" title="CVE-2023-4147"/>
      <reference href="https://bugzilla.redhat.com/2181891" id="2181891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213260" id="2213260" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213455" id="2213455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217845" id="2217845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220892" id="2220892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220893" id="2220893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225097" id="2225097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225198" id="2225198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225239" id="2225239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225275" id="2225275" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5069.html" id="ALSA-2023:5069" type="self" title="ALSA-2023:5069"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="kernel-tools-libs-devel" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="aarch64" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">c48031630b5e3f6ebff5da16492c29c4e23274f702e760983c184a2707a5a476</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5143</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:12:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5143" id="RHSA-2023:5143" type="rhsa" title="RHSA-2023:5143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5143.html" id="ALSA-2023:5143" type="self" title="ALSA-2023:5143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.122" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">2ee8474aa75203df046a839dde9905f0a320550fc72c13b852200a89f7575a6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5146</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:35:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5146" id="RHSA-2023:5146" type="rhsa" title="RHSA-2023:5146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5146.html" id="ALSA-2023:5146" type="self" title="ALSA-2023:5146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.111" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.111-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">ea0a1a69771c5da01d0f746fe068d29cdf5cf91284c59858910c4503a66161ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5214</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-20 11:58:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libwebp security update</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5214" id="RHSA-2023:5214" type="rhsa" title="RHSA-2023:5214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5214.html" id="ALSA-2023:5214" type="self" title="ALSA-2023:5214"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libwebp-tools" version="1.2.0" release="7.el9_2" epoch="0" arch="aarch64" src="libwebp-1.2.0-7.el9_2.src.rpm">
          <filename>libwebp-tools-1.2.0-7.el9_2.aarch64.rpm</filename>
          <sum type="sha256">4d253294e35958bbc6303ab3c1afaeb5277c8af498c95b06d24ce411ccd1372e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5453</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:28:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5453" id="RHSA-2023:5453" type="rhsa" title="RHSA-2023:5453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5453.html" id="ALSA-2023:5453" type="self" title="ALSA-2023:5453"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="glibc-static" version="2.34" release="60.el9_2.7" epoch="0" arch="aarch64" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-static-2.34-60.el9_2.7.aarch64.rpm</filename>
          <sum type="sha256">3352f62f7dfb88bb51c4b0524b482cef30a427cd32c07b069b4985db8c1e065e</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="60.el9_2.7" epoch="0" arch="aarch64" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-nss-devel-2.34-60.el9_2.7.aarch64.rpm</filename>
          <sum type="sha256">3dd5ed65320b708c2db8163d7355d058b4e4f67613b16edfdaa837c03f88b4c6</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="60.el9_2.7" epoch="0" arch="aarch64" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-benchtests-2.34-60.el9_2.7.aarch64.rpm</filename>
          <sum type="sha256">89ea7d8a7667bcb5e918694ea0138bd0d92bc1a2320028e709afd57bceda1fde</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="60.el9_2.7" epoch="0" arch="aarch64" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>nss_hesiod-2.34-60.el9_2.7.aarch64.rpm</filename>
          <sum type="sha256">94cf9f3e14380f573f9f58ecbb31a47fec952b03754fdcbc8b47d95c022688de</sum>
        </package>
        <package name="nss_db" version="2.34" release="60.el9_2.7" epoch="0" arch="aarch64" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>nss_db-2.34-60.el9_2.7.aarch64.rpm</filename>
          <sum type="sha256">985437109366e72a477c3f13ef600c9c93e05fc73be269d77c0eb90b879c855b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5456</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:55:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5456" id="RHSA-2023:5456" type="rhsa" title="RHSA-2023:5456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5456.html" id="ALSA-2023:5456" type="self" title="ALSA-2023:5456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3.11-debug" version="3.11.2" release="2.el9_2.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">9d9631726ae6cd5474341aaf3686465711a3f4275b6b3c26bb44323f7bd25f81</sum>
        </package>
        <package name="python3.11-idle" version="3.11.2" release="2.el9_2.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">d0c3c36de378fc8d178615ebd720bd6bff22068f445e3f6844074731c298fb4d</sum>
        </package>
        <package name="python3.11-test" version="3.11.2" release="2.el9_2.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-test-3.11.2-2.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">e18687065f02ef0b559132daa91b1733a7870555e5f00b45a2866833bd418806</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5459</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:13:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5459" id="RHSA-2023:5459" type="rhsa" title="RHSA-2023:5459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36664" id="CVE-2023-36664" type="cve" title="CVE-2023-36664"/>
      <reference href="https://bugzilla.redhat.com/2217798" id="2217798" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5459.html" id="ALSA-2023:5459" type="self" title="ALSA-2023:5459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libgs-devel" version="9.54.0" release="10.el9_2" epoch="0" arch="aarch64" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>libgs-devel-9.54.0-10.el9_2.aarch64.rpm</filename>
          <sum type="sha256">dbe51b018516c4bdcf9be6e887111f4a9ef263276e48140f412afcb01af796a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5462</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:34:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5462" id="RHSA-2023:5462" type="rhsa" title="RHSA-2023:5462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5462.html" id="ALSA-2023:5462" type="self" title="ALSA-2023:5462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3-test" version="3.9.16" release="1.el9_2.2" epoch="0" arch="aarch64" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-test-3.9.16-1.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">04387590be55c14c42a0f56ef926e88345ecc235fb48110bd265ab9e534a5700</sum>
        </package>
        <package name="python3-debug" version="3.9.16" release="1.el9_2.2" epoch="0" arch="aarch64" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-debug-3.9.16-1.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">32b56dfebd2cbc9ff903b32051fa3190a279a1de2e286389da15d03179c0fb47</sum>
        </package>
        <package name="python3-idle" version="3.9.16" release="1.el9_2.2" epoch="0" arch="aarch64" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-idle-3.9.16-1.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">c87ee594438dbf0fcabc0ec40f5a92963c6fc21a0d6e8d9330ecbac9bb52285b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5539</id>
    <title>Important: libvpx security update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-09 19:24:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5539" id="RHSA-2023:5539" type="rhsa" title="RHSA-2023:5539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5539.html" id="ALSA-2023:5539" type="self" title="ALSA-2023:5539"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libvpx-devel" version="1.9.0" release="7.el9_2.alma.1" epoch="0" arch="aarch64" src="libvpx-1.9.0-7.el9_2.alma.1.src.rpm">
          <filename>libvpx-devel-1.9.0-7.el9_2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">2c273738b6876ddf72f259ec21e4d69f34ff5601c35cd8c5e4c83e18c07e4d42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5684</id>
    <title>Important: galera and mariadb security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 15:18:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>galera and mariadb security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).

Security Fix(es):

* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table-&gt;get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5684" id="RHSA-2023:5684" type="rhsa" title="RHSA-2023:5684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32081" id="CVE-2022-32081" type="cve" title="CVE-2022-32081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32082" id="CVE-2022-32082" type="cve" title="CVE-2022-32082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32084" id="CVE-2022-32084" type="cve" title="CVE-2022-32084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32089" id="CVE-2022-32089" type="cve" title="CVE-2022-32089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32091" id="CVE-2022-32091" type="cve" title="CVE-2022-32091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38791" id="CVE-2022-38791" type="cve" title="CVE-2022-38791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47015" id="CVE-2022-47015" type="cve" title="CVE-2022-47015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5157" id="CVE-2023-5157" type="cve" title="CVE-2023-5157"/>
      <reference href="https://bugzilla.redhat.com/2106028" id="2106028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106030" id="2106030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106034" id="2106034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106035" id="2106035" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106042" id="2106042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130105" id="2130105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163609" id="2163609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240246" id="2240246" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5684.html" id="ALSA-2023:5684" type="self" title="ALSA-2023:5684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="mariadb-test" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="aarch64" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-test-10.5.22-1.el9_2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">330d21a31b24a488ac306e9fcd0072449edd29c6c25c0babcc13eb9d52759bb9</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="aarch64" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-embedded-devel-10.5.22-1.el9_2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3455db17014a976181bf47fc5d1a61f0f4e54a9085f041484366ba9aeee1f2d6</sum>
        </package>
        <package name="mariadb-devel" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="aarch64" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-devel-10.5.22-1.el9_2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">89837b0619df8f725ad2c6723f751bc67ed855abcf64486b7368686a39f27e91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5689</id>
    <title>Important: bind security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 14:57:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5689" id="RHSA-2023:5689" type="rhsa" title="RHSA-2023:5689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5689.html" id="ALSA-2023:5689" type="self" title="ALSA-2023:5689"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="bind-doc" version="9.16.23" release="11.el9_2.2" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-doc-9.16.23-11.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">66efa77c46000b37186909a04710d2643178d4f0246f35f8d0a8c8eddd9829b0</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="11.el9_2.2" epoch="32" arch="aarch64" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-devel-9.16.23-11.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">b7519cbd39b75a4aa7590126caf9ee5b1e1048b21463a8407b916aef5d4475d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5708</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 07:29:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5708" id="RHSA-2023:5708" type="rhsa" title="RHSA-2023:5708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5708.html" id="ALSA-2023:5708" type="self" title="ALSA-2023:5708"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.123" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">4cd97f1cd8bc1d75fe0e06a2cce05fc36e72548438b1e2d5bdb795065cac943e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5711</id>
    <title>Moderate: nginx security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 07:11:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5711" id="RHSA-2023:5711" type="rhsa" title="RHSA-2023:5711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5711.html" id="ALSA-2023:5711" type="self" title="ALSA-2023:5711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="aarch64" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">68a35283e7e271b837b02106cc4f0f8896113d941693d7ee9ee92ad852015910</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5733</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 20:16:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
* OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13593)
* The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13583)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5733" id="RHSA-2023:5733" type="rhsa" title="RHSA-2023:5733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40433" id="CVE-2022-40433" type="cve" title="CVE-2022-40433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22067" id="CVE-2023-22067" type="cve" title="CVE-2023-22067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2237709" id="2237709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243637" id="2243637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5733.html" id="ALSA-2023:5733" type="self" title="ALSA-2023:5733"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">07b21f3fc2da13288e6ee8df8294f1e576fbd05d85fd2f489fb5b398bdebc679</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2ba9f146bb2d1bac29226ef3363f463f71adb4c31aa488e94c5bdf96a88240fb</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2d9e6ff5316b8828fe8683c5cb267452beaf4802a5cb23e45a6097d2d8be8646</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a972c1f54f7dae12f42d4c3e55a8bc1262b1828e9782e6e2748bf3b5e9d12df7</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">acf1c3025f8abfd0b758fc74e291db00ca4b18d8b09658471bd07b674cac1358</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">afdf734ef75dab7cf40e01cf3ffd3ee57bc60ab663b7cbad8926f2d106149d77</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b20f46417bf8e3d6746d96c1cc8c1f5090b20cead7083589ce8fdadc637c2c39</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">bd6734ecfdf8ea91f62f9e6646b481d0d45037cff4da2f767a6dad6f7061f8ff</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c3b831e2265718beb298ee72e389b2f0757602d7dbc40d3372fc3946df9e3d60</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.392.b08-3.el9.aarch64.rpm</filename>
          <sum type="sha256">d433d58485a2feebb642d92c046dd0d40246eb0ca2fe3866b7ffaeadc5aa9fbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5744</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 19:54:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237175)
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB.
* The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210)
* The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13532)
* The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13536)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5744" id="RHSA-2023:5744" type="rhsa" title="RHSA-2023:5744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5744.html" id="ALSA-2023:5744" type="self" title="ALSA-2023:5744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0a6bee1d825cd15794a49129c9d21ce5040dd049484cfd6a3bcd9befc2c1a6e0</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">217e05acbf97a85402edab1dca1cb7323afc0f4921f38592a5e4957adb3f9a4a</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2c65e4fb17fb472d787c9e36f9f61a7a139b71e56d4c261b9bd24b3fa0d8fbc2</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">31a47d51184f535b17bb8bbe8aef7bece92356e1eddbf7674d3a89978e94019e</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">74eb9d7ceb81b811d0c6f96860f961af62f2b7ecba008b84b896b64a96f620c5</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">76de4bc581e43cefc0f4948b1c980124246a754b12112068a71ffd3d194b2514</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8271201af86e5bf24a0614ba74c9b45f9e1c9deee4867bff8a54e9959cd79717</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">98f8092bbec023dd9ebc4386e592ea321599443542dcabcf114e3af820836a2e</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a18b179ed7e98dd96a0cc88e8373d3d5a66fed9401008d71c5f2eb27c9b81fee</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a7717110d155246400c0ec24bcab9dae7ecef3353fcf80384b4772839edc505c</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">be08018e347dd9d70e1867e65551da3ad4367b193434ce3e35134cd1f555152c</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d2622f7f7ac2b894239a8cd4a9a93b23602f1be71f323f48f53b8d16367598fc</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e6ba63c0bd963d843ff3e3253d723a9a09703bd405fb2a9e8201d615592181fb</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.21.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f7fd0ff57ee9d24a71c9f0c019e7d7d6084709ae634f874af4764113af604d18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5749</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 10:14:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5749" id="RHSA-2023:5749" type="rhsa" title="RHSA-2023:5749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5749.html" id="ALSA-2023:5749" type="self" title="ALSA-2023:5749"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.112" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.112-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">eee8a2196f6a601e540aae5df843efce46d0dcd30ac08cd9a5b07f63a6dd7f05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5753</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 19:28:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237185)
* The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13648)
* The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13651)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5753" id="RHSA-2023:5753" type="rhsa" title="RHSA-2023:5753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5753.html" id="ALSA-2023:5753" type="self" title="ALSA-2023:5753"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">168f7a40c58f2abd4878d33c132a75f8175211d4588a041645bcaf1760a68a58</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2d8d62f28591249e46b71fc5f962bdefe7b81e61afa44520d4db9326665ad201</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">62e90cde24dccdea5b88e41c23f8afb0047341647df5c58b61d5485917d352aa</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">70bfdf410a0d8dcbfe97b529b428724dcaa4b606d393fe7f3a09ddc2e5558156</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">734f95ffa64b0e50d97f612222b2a7a619dec2236fc901ea04b9e6815333ea76</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">84c367ff52f9f7c417ac5e834b3069a8334c090eaa9dbf5964ffaebd6cc9d9f1</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9404a83ab590555e21e330e8a288323bf26955369991d09158fb8d5cf2df32be</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a4f729e5c33dd528e3a17144808354e059196b1505acf56a4027b83422f350a6</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b19c3b76869d78de59076ecf295c05dd0f08831858247b7e20786d766dbeea56</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c1fd4fc672578c5f75029f8b1e8affe499a8daa5c41fccb664f9a2bba1cdbf40</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c30179791ce94eab71ade4112a54845561c9c56bef8b0a00a24a066679778878</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d8c56e42f62400aa717f66d78e198224fe1cadaab0fc6195dab17e3819f401c9</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d9358e0234ec7706d3067c0da62796b9e0b929c4d93cb303710910db14943688</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.9.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e341364c0994e59da0e88cfafe5d20dd3830af35734bb46e33e963cce55f9e8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5838</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 06:29:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5838" id="RHSA-2023:5838" type="rhsa" title="RHSA-2023:5838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5838.html" id="ALSA-2023:5838" type="self" title="ALSA-2023:5838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libnghttp2-devel" version="1.43.0" release="5.el9_2.1" epoch="0" arch="aarch64" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">b8c9b97c9f48be0ca732dfde5d75731b1bc1afcf5e1b84aeb9373349f1b68872</sum>
        </package>
        <package name="nghttp2" version="1.43.0" release="5.el9_2.1" epoch="0" arch="aarch64" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">feb0ded4795c8ffedfe2319e96cb926a23fbb9d4d59d7921df6c37e43f8303ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5924</id>
    <title>Important: varnish security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 07:42:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5924" id="RHSA-2023:5924" type="rhsa" title="RHSA-2023:5924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5924.html" id="ALSA-2023:5924" type="self" title="ALSA-2023:5924"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="varnish-devel" version="6.6.2" release="3.el9_2.1" epoch="0" arch="aarch64" src="varnish-6.6.2-3.el9_2.1.src.rpm">
          <filename>varnish-devel-6.6.2-3.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">2e7718164e5eb7fe70678be2cd2e77841f52a31c2f58b66b3bace81f6e2b0483</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6242</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 10:06:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6242" id="RHSA-2023:6242" type="rhsa" title="RHSA-2023:6242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6242.html" id="ALSA-2023:6242" type="self" title="ALSA-2023:6242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.124" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.124-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">12a0db26ad889963cbefa1dc369657a6c426832d57df5dd09dce3b0e3f184a32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2023:6246</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 11:04:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6246" id="RHSA-2023:6246" type="rhsa" title="RHSA-2023:6246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6246.html" id="ALSA-2023:6246" type="self" title="ALSA-2023:6246"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.113" release="1.el9_2" epoch="0" arch="aarch64" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.113-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">c029f732a41e4cfeb2d64035f1408a4dd9b981eb4b0419b67e8457540ac061e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6265</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 10:25:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6265" id="RHSA-2023:6265" type="rhsa" title="RHSA-2023:6265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43115" id="CVE-2023-43115" type="cve" title="CVE-2023-43115"/>
      <reference href="https://bugzilla.redhat.com/2241108" id="2241108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6265.html" id="ALSA-2023:6265" type="self" title="ALSA-2023:6265"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libgs-devel" version="9.54.0" release="11.el9_2" epoch="0" arch="aarch64" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>libgs-devel-9.54.0-11.el9_2.aarch64.rpm</filename>
          <sum type="sha256">0c832c71aafe9115cd34896be588d9dea1a9075138eabd82072c2725e754d80b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6330</id>
    <title>Moderate: edk2 security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:35:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security, bug fix, and enhancement update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560)
* openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6330" id="RHSA-2023:6330" type="rhsa" title="RHSA-2023:6330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-14560" id="CVE-2019-14560" type="cve" title="CVE-2019-14560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2650" id="CVE-2023-2650" type="cve" title="CVE-2023-2650"/>
      <reference href="https://bugzilla.redhat.com/1858038" id="1858038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207947" id="2207947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6330.html" id="ALSA-2023:6330" type="self" title="ALSA-2023:6330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="edk2-tools" version="20230524" release="3.el9" epoch="0" arch="aarch64" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-tools-20230524-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7a9748dcb86b262479b73eedb3d525353f454ccecfb636799c0e4474ea7330d7</sum>
        </package>
        <package name="edk2-aarch64" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-aarch64-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">7f420a2e6902aa83721973936da687385ce3f9a318f79cec650eaf58da03c9ed</sum>
        </package>
        <package name="edk2-tools-doc" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-tools-doc-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">bc4917712bdd37c686a2e9927839c2ca2f3285b9325d99e9fe4bb9eb8a68f06b</sum>
        </package>
        <package name="edk2-ovmf" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-ovmf-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">cf00362ca3ecc9d6ce43ec1f21168c8524b96b2675854692c3afd7bf709e0918</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6340</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6340" id="RHSA-2023:6340" type="rhsa" title="RHSA-2023:6340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6340.html" id="ALSA-2023:6340" type="self" title="ALSA-2023:6340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="19.el9" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-19.el9.aarch64.rpm</filename>
          <sum type="sha256">e7cde849d92eacf914a686c607928ad3bc5942cb55d98b322e4caca769b2bc69</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="19.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-19.el9.noarch.rpm</filename>
          <sum type="sha256">ed9468d65a98be100088d86f19083f24832179b05fca80ab20b7058d4b20ea55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6369</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security and bug fix update</summary>
    <description>Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6369" id="RHSA-2023:6369" type="rhsa" title="RHSA-2023:6369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32573" id="CVE-2023-32573" type="cve" title="CVE-2023-32573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33285" id="CVE-2023-33285" type="cve" title="CVE-2023-33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34410" id="CVE-2023-34410" type="cve" title="CVE-2023-34410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37369" id="CVE-2023-37369" type="cve" title="CVE-2023-37369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38197" id="CVE-2023-38197" type="cve" title="CVE-2023-38197"/>
      <reference href="https://bugzilla.redhat.com/2208135" id="2208135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209488" id="2209488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212747" id="2212747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222767" id="2222767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232173" id="2232173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6369.html" id="ALSA-2023:6369" type="self" title="ALSA-2023:6369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="qt5-devel" version="5.15.9" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.9-1.el9.src.rpm">
          <filename>qt5-devel-5.15.9-1.el9.noarch.rpm</filename>
          <sum type="sha256">14df93938a3e6baf085f3edb3deec26a56cf6eff403e27dbc124e5a0fdca69d5</sum>
        </package>
        <package name="qt5-qtbase-static" version="5.15.9" release="7.el9" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-7.el9.aarch64.rpm</filename>
          <sum type="sha256">89e697cf8df1761190fd4bfdbe4aa178c4215e9d33658e77a017ff38242c2970</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6409</id>
    <title>Moderate: libvirt security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security, bug fix, and enhancement update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)

Security Fix(es):

* libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6409" id="RHSA-2023:6409" type="rhsa" title="RHSA-2023:6409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3750" id="CVE-2023-3750" type="cve" title="CVE-2023-3750"/>
      <reference href="https://bugzilla.redhat.com/2222210" id="2222210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6409.html" id="ALSA-2023:6409" type="self" title="ALSA-2023:6409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libvirt-client-qemu" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="aarch64" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-client-qemu-9.5.0-7.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">8c36f95302c734d1c550d9d0ca23db73df120d2eb1e673c1fb65d3a0ba6b3068</sum>
        </package>
        <package name="libvirt-docs" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="aarch64" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-docs-9.5.0-7.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">8c677c4ab7d837ff747c51203ce8b191ef8ecfed2dcc8984a53f6b623a44226a</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="aarch64" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-9.5.0-7.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ef6c8f2f9b854a425c0adb12f289f1928d35d092171263a4943c9b2323787362</sum>
        </package>
        <package name="libvirt-devel" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="aarch64" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-devel-9.5.0-7.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">fd4326aee6cf8a365d32bc91b0d220bc2a352e0fdb0a84d55e15b944a599ddca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6431</id>
    <title>Moderate: libfastjson security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libfastjson security update</summary>
    <description>The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.

Security Fix(es):

* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6431" id="RHSA-2023:6431" type="rhsa" title="RHSA-2023:6431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-12762" id="CVE-2020-12762" type="cve" title="CVE-2020-12762"/>
      <reference href="https://bugzilla.redhat.com/1835253" id="1835253" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6431.html" id="ALSA-2023:6431" type="self" title="ALSA-2023:6431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libfastjson-devel" version="0.99.9" release="5.el9" epoch="0" arch="aarch64" src="libfastjson-0.99.9-5.el9.src.rpm">
          <filename>libfastjson-devel-0.99.9-5.el9.aarch64.rpm</filename>
          <sum type="sha256">1afc430711d823780142130b5b67a1a2e0f54bdd0dbffb2fee487ecb92fef569</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6469</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668)
* wireshark: Candump log file parser crash (CVE-2023-2855)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6469" id="RHSA-2023:6469" type="rhsa" title="RHSA-2023:6469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0666" id="CVE-2023-0666" type="cve" title="CVE-2023-0666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0668" id="CVE-2023-0668" type="cve" title="CVE-2023-0668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2855" id="CVE-2023-2855" type="cve" title="CVE-2023-2855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2856" id="CVE-2023-2856" type="cve" title="CVE-2023-2856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2858" id="CVE-2023-2858" type="cve" title="CVE-2023-2858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2952" id="CVE-2023-2952" type="cve" title="CVE-2023-2952"/>
      <reference href="https://bugzilla.redhat.com/2210822" id="2210822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210824" id="2210824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210829" id="2210829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210832" id="2210832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210835" id="2210835" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211406" id="2211406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6469.html" id="ALSA-2023:6469" type="self" title="ALSA-2023:6469"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="wireshark-devel" version="3.4.10" release="6.el9" epoch="1" arch="aarch64" src="wireshark-3.4.10-6.el9.src.rpm">
          <filename>wireshark-devel-3.4.10-6.el9.aarch64.rpm</filename>
          <sum type="sha256">5165ce5486a5eed3686bff73a8590d3cafee395a2092ec1637cbd710940160f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6482</id>
    <title>Moderate: librabbitmq security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>librabbitmq security update</summary>
    <description>The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

* rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6482" id="RHSA-2023:6482" type="rhsa" title="RHSA-2023:6482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35789" id="CVE-2023-35789" type="cve" title="CVE-2023-35789"/>
      <reference href="https://bugzilla.redhat.com/2215762" id="2215762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6482.html" id="ALSA-2023:6482" type="self" title="ALSA-2023:6482"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="librabbitmq-devel" version="0.11.0" release="7.el9" epoch="0" arch="aarch64" src="librabbitmq-0.11.0-7.el9.src.rpm">
          <filename>librabbitmq-devel-0.11.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">8ecb642275347f4ed7f80bde795214888d2769c0fec35e943b3463741089015c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6494</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6494" id="RHSA-2023:6494" type="rhsa" title="RHSA-2023:6494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41105" id="CVE-2023-41105" type="cve" title="CVE-2023-41105"/>
      <reference href="https://bugzilla.redhat.com/2235795" id="2235795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6494.html" id="ALSA-2023:6494" type="self" title="ALSA-2023:6494"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3.11-idle" version="3.11.5" release="1.el9_3" epoch="0" arch="aarch64" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-idle-3.11.5-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">3f2c4e2e61ce937014d6e6eb8fffc9b30a671b1a0d407cf48ea8398a4ff56a0e</sum>
        </package>
        <package name="python3.11-test" version="3.11.5" release="1.el9_3" epoch="0" arch="aarch64" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-test-3.11.5-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">a5e84d8145edc2bc1ec45ea42c5431a8b396cb39e2c8e3e671c4f109d0eec70c</sum>
        </package>
        <package name="python3.11-debug" version="3.11.5" release="1.el9_3" epoch="0" arch="aarch64" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-debug-3.11.5-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">c9b958a8ae6cdc13f0f50666edd5c02239af0e50820696eda54f290bdc2bdedc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6518</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak security, bug fix, and enhancement update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6518" id="RHSA-2023:6518" type="rhsa" title="RHSA-2023:6518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101"/>
      <reference href="https://bugzilla.redhat.com/2179219" id="2179219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179220" id="2179220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6518.html" id="ALSA-2023:6518" type="self" title="ALSA-2023:6518"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="flatpak-devel" version="1.12.8" release="1.el9" epoch="0" arch="aarch64" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-devel-1.12.8-1.el9.aarch64.rpm</filename>
          <sum type="sha256">52eaf143b3e493f2eef36591d3fdcdb81af63550b881b291dfeaa5578bc611a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6544</id>
    <title>Moderate: ghostscript security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:07:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security and bug fix update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
* ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6544" id="RHSA-2023:6544" type="rhsa" title="RHSA-2023:6544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28879" id="CVE-2023-28879" type="cve" title="CVE-2023-28879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38559" id="CVE-2023-38559" type="cve" title="CVE-2023-38559"/>
      <reference href="https://bugzilla.redhat.com/2184585" id="2184585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224367" id="2224367" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6544.html" id="ALSA-2023:6544" type="self" title="ALSA-2023:6544"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="libgs-devel" version="9.54.0" release="13.el9" epoch="0" arch="aarch64" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>libgs-devel-9.54.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">70854d8a488f06b0e7a1e1418e35286d75ea1fed2ae2fe6c5707b6e07038f85d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6551</id>
    <title>Moderate: yajl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6551" id="RHSA-2023:6551" type="rhsa" title="RHSA-2023:6551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460"/>
      <reference href="https://bugzilla.redhat.com/2221249" id="2221249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6551.html" id="ALSA-2023:6551" type="self" title="ALSA-2023:6551"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="yajl-devel" version="2.1.0" release="22.el9" epoch="0" arch="aarch64" src="yajl-2.1.0-22.el9.src.rpm">
          <filename>yajl-devel-2.1.0-22.el9.aarch64.rpm</filename>
          <sum type="sha256">263477ca542bae4ff3e41f243fcef11174ce6651fedd0c2aa7e67c4a02bb7282</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6566</id>
    <title>Moderate: libmicrohttpd security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libmicrohttpd security update</summary>
    <description>GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.

Security Fix(es):

* libmicrohttpd: remote DoS (CVE-2023-27371)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6566" id="RHSA-2023:6566" type="rhsa" title="RHSA-2023:6566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27371" id="CVE-2023-27371" type="cve" title="CVE-2023-27371"/>
      <reference href="https://bugzilla.redhat.com/2174313" id="2174313" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6566.html" id="ALSA-2023:6566" type="self" title="ALSA-2023:6566"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libmicrohttpd-doc" version="0.9.72" release="5.el9" epoch="1" arch="noarch" src="libmicrohttpd-0.9.72-5.el9.src.rpm">
          <filename>libmicrohttpd-doc-0.9.72-5.el9.noarch.rpm</filename>
          <sum type="sha256">67390759e2ec13f61ba7f59dbe3cfaa36ab3d99119dee2bb683a6e76818003ec</sum>
        </package>
        <package name="libmicrohttpd-devel" version="0.9.72" release="5.el9" epoch="1" arch="aarch64" src="libmicrohttpd-0.9.72-5.el9.src.rpm">
          <filename>libmicrohttpd-devel-0.9.72-5.el9.aarch64.rpm</filename>
          <sum type="sha256">fdcefa5dc92899e9687d949d79c5e4c2795a8a7798ff2c3f6b79df3d213ff141</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6575</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731)
* libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316)
* libtiff: memory leak in tiffcrop.c (CVE-2023-3576)
* libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c (CVE-2023-26965)
* libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6575" id="RHSA-2023:6575" type="rhsa" title="RHSA-2023:6575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26965" id="CVE-2023-26965" type="cve" title="CVE-2023-26965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26966" id="CVE-2023-26966" type="cve" title="CVE-2023-26966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2731" id="CVE-2023-2731" type="cve" title="CVE-2023-2731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3316" id="CVE-2023-3316" type="cve" title="CVE-2023-3316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3576" id="CVE-2023-3576" type="cve" title="CVE-2023-3576"/>
      <reference href="https://bugzilla.redhat.com/2207635" id="2207635" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215206" id="2215206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2216080" id="2216080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218749" id="2218749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219340" id="2219340" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6575.html" id="ALSA-2023:6575" type="self" title="ALSA-2023:6575"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libtiff-tools" version="4.4.0" release="10.el9" epoch="0" arch="aarch64" src="libtiff-4.4.0-10.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-10.el9.aarch64.rpm</filename>
          <sum type="sha256">9f3994e38bd1cad1f8bcd9b55574014b8b68da27f1451f51a99dddd101b77241</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6621</id>
    <title>Moderate: protobuf-c security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf-c security update</summary>
    <description>The protobuf-c packages provide C bindings for Google's Protocol Buffers.

Security Fix(es):

* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6621" id="RHSA-2023:6621" type="rhsa" title="RHSA-2023:6621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48468" id="CVE-2022-48468" type="cve" title="CVE-2022-48468"/>
      <reference href="https://bugzilla.redhat.com/2186673" id="2186673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6621.html" id="ALSA-2023:6621" type="self" title="ALSA-2023:6621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="protobuf-c-compiler" version="1.3.3" release="13.el9" epoch="0" arch="aarch64" src="protobuf-c-1.3.3-13.el9.src.rpm">
          <filename>protobuf-c-compiler-1.3.3-13.el9.aarch64.rpm</filename>
          <sum type="sha256">4ece2848fd2a3d02d4af9f79d8c56c77c51a2f4c5b71816c401ccfb01775c1ea</sum>
        </package>
        <package name="protobuf-c-devel" version="1.3.3" release="13.el9" epoch="0" arch="aarch64" src="protobuf-c-1.3.3-13.el9.src.rpm">
          <filename>protobuf-c-devel-1.3.3-13.el9.aarch64.rpm</filename>
          <sum type="sha256">57bc80e7f31e347ddb10b58fe3529d23fffaafbf874fe4e3a329b9b14cbcfb90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6631</id>
    <title>Low: glib2 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>glib2 security and bug fix update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499)
* glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611)
* glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6631" id="RHSA-2023:6631" type="rhsa" title="RHSA-2023:6631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29499" id="CVE-2023-29499" type="cve" title="CVE-2023-29499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32611" id="CVE-2023-32611" type="cve" title="CVE-2023-32611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32665" id="CVE-2023-32665" type="cve" title="CVE-2023-32665"/>
      <reference href="https://bugzilla.redhat.com/2211827" id="2211827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211828" id="2211828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211829" id="2211829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6631.html" id="ALSA-2023:6631" type="self" title="ALSA-2023:6631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="glib2-static" version="2.68.4" release="11.el9" epoch="0" arch="aarch64" src="glib2-2.68.4-11.el9.src.rpm">
          <filename>glib2-static-2.68.4-11.el9.aarch64.rpm</filename>
          <sum type="sha256">3cf913259a1ccc62a68af14b915b3fa142a064c0020139b3036f1febb26d3eeb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6632</id>
    <title>Low: shadow-utils security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security and bug fix update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. 

Security Fix(es):

* shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6632" id="RHSA-2023:6632" type="rhsa" title="RHSA-2023:6632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4641" id="CVE-2023-4641" type="cve" title="CVE-2023-4641"/>
      <reference href="https://bugzilla.redhat.com/2215945" id="2215945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6632.html" id="ALSA-2023:6632" type="self" title="ALSA-2023:6632"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="shadow-utils-subid-devel" version="4.9" release="8.el9" epoch="2" arch="aarch64" src="shadow-utils-4.9-8.el9.src.rpm">
          <filename>shadow-utils-subid-devel-4.9-8.el9.aarch64.rpm</filename>
          <sum type="sha256">06015e0e7bc1845463d5dfe29d9e696950f26586fd9f1f946c4a4f4d48ececfa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6659</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6659" id="RHSA-2023:6659" type="rhsa" title="RHSA-2023:6659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6659.html" id="ALSA-2023:6659" type="self" title="ALSA-2023:6659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3-test" version="3.9.18" release="1.el9_3" epoch="0" arch="aarch64" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-test-3.9.18-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">4aaf197c060dbfa61f88f99c2aa6b134702cd61a78bbf9a1efaf01e6a435ffac</sum>
        </package>
        <package name="python3-idle" version="3.9.18" release="1.el9_3" epoch="0" arch="aarch64" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-idle-3.9.18-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">b16c8fc2a91cb5b1d2951b45b365516265ef9fe487bd8aecd10d6c5520ec03bd</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="1.el9_3" epoch="0" arch="aarch64" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-debug-3.9.18-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">be0cd11a6a6dc6ac913c8712c8e6dc23cd37092e95c917cd38e5b5190b5d0d95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6667</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 11:44:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6667" id="RHSA-2023:6667" type="rhsa" title="RHSA-2023:6667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6667.html" id="ALSA-2023:6667" type="self" title="ALSA-2023:6667"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="samba-test" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-test-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">2990703d2341d2b5a1ab65ef310809d66ff98e76e670392fcfeb63787c27c8dd</sum>
        </package>
        <package name="libnetapi-devel" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libnetapi-devel-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">30c7d0c8ca52f33b7b571ab59a5af7f6ab458e6abf3ab856419f2951ec5b6087</sum>
        </package>
        <package name="samba-test-libs" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-test-libs-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">5db12560e49d785349cbd02233927f1157a87eeb1f735b308eaeffd62e1d5369</sum>
        </package>
        <package name="samba-pidl" version="4.18.6" release="100.el9" epoch="0" arch="noarch" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-pidl-4.18.6-100.el9.noarch.rpm</filename>
          <sum type="sha256">612991a14c95fa2121a221b922b765cc7bec8b2556c61d9b4fec0ed42bae7173</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-devel-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">7b4da55c20a0d4b613b8011055cda111df4ea7e347a481161add925dfb4c397c</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libsmbclient-devel-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">9c66eb3164410ff0a7284ac8d8347bc65cdb4213c7e80ec69be9aca1bd32e4cd</sum>
        </package>
        <package name="python3-samba-devel" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>python3-samba-devel-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">e43fca89741f85dd8d4d16af1e25bcb2002390e7a5e956e61e06e4e9a5a68080</sum>
        </package>
        <package name="python3-samba-test" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>python3-samba-test-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">eaa69885fef98af2d483327f8cbe68889243318b0da5165293810065f7b9527c</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="100.el9" epoch="0" arch="aarch64" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libwbclient-devel-4.18.6-100.el9.aarch64.rpm</filename>
          <sum type="sha256">ee329fa3dec5d9d6fcd0f3b1aa2a67d356cb7a58bbacba7bb846c1c32cc08ec5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6685</id>
    <title>Low: tpm2-tss security and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>tpm2-tss security and enhancement update</summary>
    <description>The tpm2-tss packages provide the Intel implementation of the Trusted Platform Module (TPM) 2.0 System API library. This library enables programs to interact with TPM 2.0 devices

Security Fix(es):

* tpm2-tss: Buffer Overlow in TSS2_RC_Decode (CVE-2023-22745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6685" id="RHSA-2023:6685" type="rhsa" title="RHSA-2023:6685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22745" id="CVE-2023-22745" type="cve" title="CVE-2023-22745"/>
      <reference href="https://bugzilla.redhat.com/2162610" id="2162610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6685.html" id="ALSA-2023:6685" type="self" title="ALSA-2023:6685"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="tpm2-tss-devel" version="3.2.2" release="2.el9" epoch="0" arch="aarch64" src="tpm2-tss-3.2.2-2.el9.src.rpm">
          <filename>tpm2-tss-devel-3.2.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4fb52d1b2abe34937ff2607f162461fe361ce4d9c76dc35130421aaea70d041f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6705</id>
    <title>Low: procps-ng security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>procps-ng security and bug fix update</summary>
    <description>The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

* procps: ps buffer overflow (CVE-2023-4016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6705" id="RHSA-2023:6705" type="rhsa" title="RHSA-2023:6705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4016" id="CVE-2023-4016" type="cve" title="CVE-2023-4016"/>
      <reference href="https://bugzilla.redhat.com/2228494" id="2228494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6705.html" id="ALSA-2023:6705" type="self" title="ALSA-2023:6705"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="procps-ng-devel" version="3.3.17" release="13.el9" epoch="0" arch="aarch64" src="procps-ng-3.3.17-13.el9.src.rpm">
          <filename>procps-ng-devel-3.3.17-13.el9.aarch64.rpm</filename>
          <sum type="sha256">ff818afd0315770b33f1b5f401830cf801e9fb29033e7a78cf1bb8929f41e2ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6707</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:07:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502)
* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6707" id="RHSA-2023:6707" type="rhsa" title="RHSA-2023:6707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3502" id="CVE-2021-3502" type="cve" title="CVE-2021-3502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1946914" id="1946914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6707.html" id="ALSA-2023:6707" type="self" title="ALSA-2023:6707"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="avahi-compat-howl-devel" version="0.8" release="15.el9" epoch="0" arch="aarch64" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-15.el9.aarch64.rpm</filename>
          <sum type="sha256">5010794acfa2f5e4608c8a122ec05b798b8321686437dc57c9e1c4c62d89844f</sum>
        </package>
        <package name="avahi-glib-devel" version="0.8" release="15.el9" epoch="0" arch="aarch64" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-glib-devel-0.8-15.el9.aarch64.rpm</filename>
          <sum type="sha256">6227ba70382e0675097ede28fd131d4bb85fe0bb63a87728aea3f37a987c2cb1</sum>
        </package>
        <package name="avahi-devel" version="0.8" release="15.el9" epoch="0" arch="aarch64" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-devel-0.8-15.el9.aarch64.rpm</filename>
          <sum type="sha256">97f6498aafbf394d683212921f20e9bc8da9c0fd56cb90cf0d7fab43f44f4dd6</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.8" release="15.el9" epoch="0" arch="aarch64" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-15.el9.aarch64.rpm</filename>
          <sum type="sha256">bf4ad4953bddc1e6e98c2e5002afad5590331ad684cca0e65c4b1548b9dda4f0</sum>
        </package>
        <package name="avahi-compat-howl" version="0.8" release="15.el9" epoch="0" arch="aarch64" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-howl-0.8-15.el9.aarch64.rpm</filename>
          <sum type="sha256">c43347ed04b97d802333d24db5ed8d1f46458313f31466926f47753578acd5cf</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.8" release="15.el9" epoch="0" arch="aarch64" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-15.el9.aarch64.rpm</filename>
          <sum type="sha256">e2017f0ae9d896569c92a6f4914636522d712ae0f347d152a25893de1e9fa79f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6712</id>
    <title>Moderate: python-wheel security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:12:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-wheel security update</summary>
    <description>Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6712" id="RHSA-2023:6712" type="rhsa" title="RHSA-2023:6712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40898" id="CVE-2022-40898" type="cve" title="CVE-2022-40898"/>
      <reference href="https://bugzilla.redhat.com/2165864" id="2165864" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6712.html" id="ALSA-2023:6712" type="self" title="ALSA-2023:6712"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="python3-wheel-wheel" version="0.36.2" release="8.el9" epoch="1" arch="noarch" src="python-wheel-0.36.2-8.el9.src.rpm">
          <filename>python3-wheel-wheel-0.36.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">3d0309b1e2967adc653729a9f88ae803d2b08b950de795181354f1390ee081c9</sum>
        </package>
        <package name="python3-wheel" version="0.36.2" release="8.el9" epoch="1" arch="noarch" src="python-wheel-0.36.2-8.el9.src.rpm">
          <filename>python3-wheel-0.36.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">3e81c4451b2cefe7a23125e40c7b73abefee7630a64b19b57cce91adb41850a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6732</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6732" id="RHSA-2023:6732" type="rhsa" title="RHSA-2023:6732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43115" id="CVE-2023-43115" type="cve" title="CVE-2023-43115"/>
      <reference href="https://bugzilla.redhat.com/2241108" id="2241108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6732.html" id="ALSA-2023:6732" type="self" title="ALSA-2023:6732"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libgs-devel" version="9.54.0" release="14.el9_3" epoch="0" arch="aarch64" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>libgs-devel-9.54.0-14.el9_3.aarch64.rpm</filename>
          <sum type="sha256">4c77c5e22821d00b672f3de315c0eabf57761e0847cd791b4df9216b3459890f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6738</id>
    <title>Moderate: java-21-openjdk security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:09:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security and bug fix update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true.
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14954)
* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14962)
* Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14946)
* The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14959)
* The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14948)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6738" id="RHSA-2023:6738" type="rhsa" title="RHSA-2023:6738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6738.html" id="ALSA-2023:6738" type="self" title="ALSA-2023:6738"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">1185cbe78031709d2070a1bab907559820464944fc7d367f6a1318e7ef94a640</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">15eefb22bd008713b25fecb2e93aa81c68827bd57435543fc1ed74e20ca977d9</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">18f4cc452192da00a42cc8fa9343179633ea140cf4b5b750e78454d4612cfda1</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3b20a4292e0357a8c49121b3bc3eea4c9dc092803b8e6f7a90de884baec78229</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">45c27fe1b95880c969a83e10c56eb627bfa78aa2b4734fab034acb1d7f24c5ee</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">628b6e67cef190ab5556f18772e39bd481af538443140e9a5696bc60665e70ee</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">62ab5075122108a05c51bd82825d5b412f6280415967e59dca9d90b6a088b909</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">78f526a882eac76b39906d5f4fdd442bc5c3a8fcc01256199c4e23d68bbabc00</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7973f937bdc105774401577736514228964968018ed59b19c69399d83fc16fc8</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7e849ceb2d5e1db5c94e8f2ab05f3a081f8aa811ab136d92aa7415e446ca0ddb</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ab6117014adbd920b0cc128486cb87bf96414aa191d7aca1e8c22e7c88d3c54d</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">de35e89d93655f786c546e46dc45e63c6129ffa02d1525834f7387be4eddcb09</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e009c692cc52cbece6f684e54b57746b3d6bbb418a407497735f0636c967a395</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.1.0.12-2.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f64ec1fb6f5882607eb35e50b84dff0c65d7860c36117209d554a9b7fd95ebbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6744</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6744" id="RHSA-2023:6744" type="rhsa" title="RHSA-2023:6744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6744.html" id="ALSA-2023:6744" type="self" title="ALSA-2023:6744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libnetapi-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libnetapi-devel-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3d965d7af9a0b700d1c849311f713e892210bd0f98e6769b31293f315054c5aa</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-devel-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">454b8f8da7fcd1c52724ca79bd6e285b5a59d877f29193d06f42e392a38dc982</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libsmbclient-devel-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">50ad62835731b99ed843152713c382edb5777f834dcbd5fa0a6755aed1e65fe3</sum>
        </package>
        <package name="samba-test" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-test-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">5414b30533e40d8beb1de9a66e115c0ea54f037d177798b926d56be2c187f143</sum>
        </package>
        <package name="python3-samba-test" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>python3-samba-test-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">8fdd6400308e7561dcaf95a09a941f2f8b6bb4c6ef189a34da817e087489e8d7</sum>
        </package>
        <package name="samba-pidl" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="noarch" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-pidl-4.18.6-101.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">a354085fbc28e8f451498a06fa2c351712ff1a40a027007331bfc331b30c9272</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libwbclient-devel-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a828ce7f577dbdf80e01079581e16166d579f366cdeb90ac584a207da2dd0fdd</sum>
        </package>
        <package name="python3-samba-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>python3-samba-devel-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e386a736886882ce5333c9404b1afad8df69b10bafcdd4e16c57d0819923eee4</sum>
        </package>
        <package name="samba-test-libs" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-test-libs-4.18.6-101.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">fc4a96ff9abe9a21989386d170fce6814d867b57a9e3a3e14444b207b8ff658c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6746</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6746" id="RHSA-2023:6746" type="rhsa" title="RHSA-2023:6746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6746.html" id="ALSA-2023:6746" type="self" title="ALSA-2023:6746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_2_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_2_default</name>
        <package name="libnghttp2-devel" version="1.43.0" release="5.el9_3.1" epoch="0" arch="aarch64" src="nghttp2-1.43.0-5.el9_3.1.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">80aebb9d9b841025c63ffc171cccb861f20f41543ac92c390230da2241c605fd</sum>
        </package>
        <package name="nghttp2" version="1.43.0" release="5.el9_3.1" epoch="0" arch="aarch64" src="nghttp2-1.43.0-5.el9_3.1.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">89c013dafe253eb014003fd423940c45252c09decdfd44579d3f7962eea55838</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7253</id>
    <title>Moderate: dotnet8.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 16:42:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7253" id="RHSA-2023:7253" type="rhsa" title="RHSA-2023:7253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7253.html" id="ALSA-2023:7253" type="self" title="ALSA-2023:7253"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.100" release="2.el9_3" epoch="0" arch="aarch64" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.100-2.el9_3.aarch64.rpm</filename>
          <sum type="sha256">ae4caf255efa5af9161ab3cb52d756812e46cc63b18417df35b80585910a58f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7255</id>
    <title>Moderate: dotnet7.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 14:30:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.
  

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7255" id="RHSA-2023:7255" type="rhsa" title="RHSA-2023:7255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7255.html" id="ALSA-2023:7255" type="self" title="ALSA-2023:7255"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.114" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.114-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">9d57bab6516987ba5992c38453ece23b23905c3389e1a655fb4e370c28e42ff1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7257</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 16:32:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7257" id="RHSA-2023:7257" type="rhsa" title="RHSA-2023:7257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7257.html" id="ALSA-2023:7257" type="self" title="ALSA-2023:7257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.125" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.125-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">5b77320b47dcf12114cf3d206252e0c3850ea009eef72d30af67650b1a09d91a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7784</id>
    <title>Important: postgresql security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-14 11:47:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7784" id="RHSA-2023:7784" type="rhsa" title="RHSA-2023:7784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7784.html" id="ALSA-2023:7784" type="self" title="ALSA-2023:7784"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="postgresql-static" version="13.13" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-static-13.13-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">059e48d1778d7288c25926cdf0ef51373836d6dd14009895cfe4a4b0c602b20b</sum>
        </package>
        <package name="postgresql-server-devel" version="13.13" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-server-devel-13.13-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">3962c4ddf6535780e7b3216783ded2cb45c14c401a2fda8c456d21a682c88d89</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.13" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-devel-13.13-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">874eaa47eedbd9a86e9f98cfb185555899e7e0f9bf2e81861ead63750540f1b0</sum>
        </package>
        <package name="postgresql-docs" version="13.13" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-docs-13.13-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">b1e7ee9ad25f733905d7a1d2383f6b80cff32260bd53051fbc10f0a5a8486913</sum>
        </package>
        <package name="postgresql-private-devel" version="13.13" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-private-devel-13.13-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">ce8127387f200e099b6d1fbd4003641a7f299272a28e682b184554a452ed710f</sum>
        </package>
        <package name="postgresql-test" version="13.13" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-test-13.13-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">fb157efc7db0e36fad0f2ac49bb049bda53fd8c9d48bc2b3d32546f2839e2f45</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7791</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-14 09:39:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429)
* gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7791" id="RHSA-2023:7791" type="rhsa" title="RHSA-2023:7791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44429" id="CVE-2023-44429" type="cve" title="CVE-2023-44429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44446" id="CVE-2023-44446" type="cve" title="CVE-2023-44446"/>
      <reference href="https://bugzilla.redhat.com/2250247" id="2250247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250249" id="2250249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7791.html" id="ALSA-2023:7791" type="self" title="ALSA-2023:7791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.1" release="2.el9_3" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.1-2.el9_3.aarch64.rpm</filename>
          <sum type="sha256">06187b97d895156c30b4e678035dee5438f5f8957858aa277a609867955fdb19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0141</id>
    <title>Moderate: ipa security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 22:25:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* ipa: Invalid CSRF protection (CVE-2023-5455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0141" id="RHSA-2024:0141" type="rhsa" title="RHSA-2024:0141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5455" id="CVE-2023-5455" type="cve" title="CVE-2023-5455"/>
      <reference href="https://bugzilla.redhat.com/2242828" id="2242828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0141.html" id="ALSA-2024:0141" type="self" title="ALSA-2024:0141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="python3-ipatests" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>python3-ipatests-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">68d1ad015ab26a9ad0dbf8959a913b4646f9c03e6148457726c5c1540c1443b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0151</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:35:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0151" id="RHSA-2024:0151" type="rhsa" title="RHSA-2024:0151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0151.html" id="ALSA-2024:0151" type="self" title="ALSA-2024:0151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.115" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">e948c247da2c6b2a49cbb8427c4a2316d73707174edfd870c563006f33d62896</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0152</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:40:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0152" id="RHSA-2024:0152" type="rhsa" title="RHSA-2024:0152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0152.html" id="ALSA-2024:0152" type="self" title="ALSA-2024:0152"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.101" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.101-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">7cbf63da41d326f0c749c3fb26e31b00db4e61b39124a37af20d522207f7d113</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0156</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 22:19:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0156" id="RHSA-2024:0156" type="rhsa" title="RHSA-2024:0156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0156.html" id="ALSA-2024:0156" type="self" title="ALSA-2024:0156"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.126" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">85a981f578273f0c86a71760366158828fb2b9ec0d50d79f65eb26d4419bd9e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0249</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:58:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0249" id="RHSA-2024:0249" type="rhsa" title="RHSA-2024:0249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0249.html" id="ALSA-2024:0249" type="self" title="ALSA-2024:0249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">15a96994d90c0cfce4aaf5e1f68aca82262b12e10ae49a7135b550d85d13f177</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">53d5b5dcd5a11048c7b95d6e4b23459fd7fab33e44744865ccab930ff3dc59df</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6c8451a1309b2f8e9923fe27f61b5d88d62f64fa018ee00ceffeae319da12864</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6d16e768b943fb47584192eff84c9a8dcb48ce5b29c47f40058e4cef2aa8c2ae</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">740a47b7cb28657928847c3f125d559e303c053dfccb7d16bb78aa662a5ee624</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">76ea349c268b10251c64735fe74a4cdedbb039616ae520fbe5befc2d6553ecee</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">93b339fcf9b3aad0507d5d20ea6d397423647ece2a0ab04570d31f11b5a54aaf</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">95f78dd89b5a1823fa90c50c166d0b3604b3924d98fd5afadc91fba49fd1f47e</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">99ae549baf599be116e1f56dc35a7792b0a0c705bbc922d3eb63e5e270230009</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">bddfd9def07b6bc352bab855c4529d7e344799c991da8f3f659c82c85ccc144e</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">cb76d844fc82c8b60864de4b548862dc7cef881c11f675953dba64813d029ff0</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d31e513be01b8d3146cf509e9ef09b5c80eba2269f6ef139c977de272ea1e8b1</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">de07ad2192d0d7c51ef5fc9025afa27a15bf453c6da0775040c0938a8313c5d7</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.2.0.13-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e85d9abad7f652e1dce67364ecedb11798e0d9cfcff00d0cdd40f349263f6434</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0265</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:52:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0265" id="RHSA-2024:0265" type="rhsa" title="RHSA-2024:0265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0265.html" id="ALSA-2024:0265" type="self" title="ALSA-2024:0265"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">163ce78d7e723886743b3fa7333470c03a187f325e65ad2fa6761512bb78b544</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2509c8a3f7491f32a30e630616922b69cffb3ba01def97eb5da721189bf786ce</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">60d1d56c1272401d7fd5d2b9599f7dcd4284b596952a25bb9b73c8aadd77dc7e</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">626bc60599f4a1417c2d007e6a2301f3daf9f658b24cfbae070ebf80f0d3bb81</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">89a93516fc73ad960b1e49fb947800ac05c2ca95cca668440280bd8313b726a9</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9508908516dbeea215e951acdedc36da8dd79701ec903729d2aa29fa964731dc</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b3b50c742dd210b69e54b2024143b92d0fc33636c283db11139bc172c0f3bd8b</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b908a6b69a9e601a2853639cbf6dc9dd3049d448f6e9ef83e0d3f2d919e68580</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c57bda391cc33cb8df42b540ea47850d61a5de152e33773aeb0bd04b68751ded</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.402.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">feddcfac4d92c476079052c43ba7c7f9c2402832136a10885e438665a912bce2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0266</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-01-18 00:00:00"/>
    <updated date="2024-01-20 14:46:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0266" id="RHSA-2024:0266" type="rhsa" title="RHSA-2024:0266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0266.html" id="ALSA-2024:0266" type="self" title="ALSA-2024:0266"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">06e6c93f20ea8e0715055173608aa7a51d9fca72dcd64823057009cbe9ed3141</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2528dd8e7b027fcc2181534e63bd45694b57ab85e25d9715f432f6b3e5bb7649</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2df512313f8e15ee5d707ca4c79e2ade5f775eace49493307e940b0cb9331182</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5d7b5797843beb127556e0ebf5338f77c098c307d13af2eda1ec326cf3a02a41</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">627b0b1c8a6737ea8b1ee650dc6a80354400aabe2f71cb31474f6213d40662cb</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">768a6ae232b1a48e4a62dd6135f7bba88327c9735a72d2f4e37c1d8687b987ed</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7e9f3fe9dc15079356ea0a83d8626103cdb6cd1f65f2e9cf75034458ceabe465</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a54c64074fcdc337541fe51d4c3be7a3fc7e5d567638a0d15e55bf7b1a285b10</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ad3089fd3814efe9e5f1c36e50bbbfb085074c7df331266325e3008406c68bef</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">aeb8dccaf633b6df0edecbc2671954f90d9342ebf4bcf7f8295299fd9337a8fb</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ba2ee0c9560694b3439ae9bbe9b3e8ca09e9bdd6aa4c413f7e7b00e45b2ada26</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cbc3c1cf0a780041af07af54737a0452093c3c13be48e07868dbd97e80c57e31</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ce313894211adcb7b7b36ca10078fd19beeb6b4ffb86b33b1d44b807742848f6</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.22.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f14ae60f979c6b09082c11471215ebbb051bbb6e91412c62e6d14e7951713e5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0267</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:39:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (CVE-2024-20932)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-13930, AlmaLinux-13931, AlmaLinux-13934, AlmaLinux-13935)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0267" id="RHSA-2024:0267" type="rhsa" title="RHSA-2024:0267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20932" id="CVE-2024-20932" type="cve" title="CVE-2024-20932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257720" id="2257720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0267.html" id="ALSA-2024:0267" type="self" title="ALSA-2024:0267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3f6c8a402b428e9f65f290672d48b0b9797ea048dc5069308806de9c39d1e90f</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">450acdac27aacaffc8dcbc4fddc562e6dd6aec135a682c243fb4bad15a08ce38</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">528ca896dfc9e2e9dd0d7556db8e84521b38148ff2e348857583d8e68064d9e9</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">590a3cef5dcc2d49ed36ec89b50ac90426e9e2a8d9fe643859c87bc5dd4278eb</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5d6473f94a478b020b03dfe076b1c8e7916bb368322759d1eb1de98c92515479</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a2caeb6fdd8a4c694f5912f7115920bd50abe6fc3ea9a0ccb7fa87df28d2a18c</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a319985bf4d34f8deba73642db91f67e32fe7c3dcfb4774ced6c1a27c06ebc2c</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a3a2f4adae6026c1f4c3eb739428c783efb4c6b051782b1eb249baf6fcca69b4</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b8139fede28c6019ad7c55f4b02f00b7cd47ea83e6cdac219d055e62ab2ddada</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d37c324cf2d8423fcdab2db60e76d8aacc1906f1dfd5c3d40761911d44e972b8</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e1351204700e6801f13dc2df1355519720c5278b1efe7db73cd50ec7a5079b72</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e39c49a3a3be928422f11c75d5009ac52eb8f4436cea0569625ff8402e55eda2</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">efe631f1e88b60b83ec8989494bb1dbe98799cf09f3a56e342be31d26a288f7b</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.10.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f3b3f7084749e0c1844e4b0fe0099726b35647c0cd623d505ecf09a2610bd362</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0466</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:26:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0466" id="RHSA-2024:0466" type="rhsa" title="RHSA-2024:0466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0466.html" id="ALSA-2024:0466" type="self" title="ALSA-2024:0466"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="python3-test" version="3.9.18" release="1.el9_3.1" epoch="0" arch="aarch64" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-test-3.9.18-1.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">0bd371a9d9d4e7c972f282b2bd82f7d2381103c4c18a24c350711b762416c4e8</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="1.el9_3.1" epoch="0" arch="aarch64" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-debug-3.9.18-1.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">16201701cf9754dee56e154edb3f1b0b46e625f3910fbbe51b95ae1bb5fd956e</sum>
        </package>
        <package name="python3-idle" version="3.9.18" release="1.el9_3.1" epoch="0" arch="aarch64" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-idle-3.9.18-1.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">c87ea364d06746258677bd2ca22dde1e0fac06cabb9408ee3d514b4d2a5a849a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0805</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:17:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0805" id="RHSA-2024:0805" type="rhsa" title="RHSA-2024:0805"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0805.html" id="ALSA-2024:0805" type="self" title="ALSA-2024:0805"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.116" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.116-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">d557882b392bb7bf1da312aa89b6547ef58186188f6ac931ba3c51a2467196a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0807</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:13:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0807" id="RHSA-2024:0807" type="rhsa" title="RHSA-2024:0807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0807.html" id="ALSA-2024:0807" type="self" title="ALSA-2024:0807"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.127" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.127-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">9acebcdcb6d3e9a2b4e4f1bfab04b33f20e58407a53f64ed8721ac87ec2e5ec8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0848</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 11:50:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0848" id="RHSA-2024:0848" type="rhsa" title="RHSA-2024:0848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0848.html" id="ALSA-2024:0848" type="self" title="ALSA-2024:0848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.102" release="2.el9_3" epoch="0" arch="aarch64" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.102-2.el9_3.aarch64.rpm</filename>
          <sum type="sha256">94b283a5e22f752e2f4f042da97c096ad527e3fd283c0e4671093e6718f27dc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0951</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-02-22 00:00:00"/>
    <updated date="2024-02-28 16:06:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0951" id="RHSA-2024:0951" type="rhsa" title="RHSA-2024:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0951.html" id="ALSA-2024:0951" type="self" title="ALSA-2024:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="postgresql-private-devel" version="13.14" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-private-devel-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">1d56d3fd0df967c321db96cc16e86548d18c03817347e1d3497d1994de13e1d9</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.14" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-devel-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">4f0195c66cca0f9ad00e93d39b06916b0896e40281d01298ffda5891fb3421ac</sum>
        </package>
        <package name="postgresql-test" version="13.14" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-test-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">5398cc79d101a8503f65dc6e269d95d251749196642aa92aa469b4bc0b0ba3a7</sum>
        </package>
        <package name="postgresql-server-devel" version="13.14" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-server-devel-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">b9a13e0003cc4fa7034f9d619b4ef39b17ca90a0f246f8d9661b7292e8dff18a</sum>
        </package>
        <package name="postgresql-docs" version="13.14" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-docs-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">bea362e6b29beb78ffa802e6b2eb72aaa85440d5131da808aa38d6763aeb0822</sum>
        </package>
        <package name="postgresql-static" version="13.14" release="1.el9_3" epoch="0" arch="aarch64" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-static-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">ed22c967c6294dcb1beebe68f9d8cffd612cbacace479b5f990fc9292437b0c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0977</id>
    <title>Important: unbound security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 14:41:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0977" id="RHSA-2024:0977" type="rhsa" title="RHSA-2024:0977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0977.html" id="ALSA-2024:0977" type="self" title="ALSA-2024:0977"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="unbound-devel" version="1.16.2" release="3.el9_3.1" epoch="0" arch="aarch64" src="unbound-1.16.2-3.el9_3.1.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">93af7ac764127ea9813f25768399594c936e68b667c6b12182d389d93987e5c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1075</id>
    <title>Important: edk2 security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-05 14:53:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230)
* edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1075" id="RHSA-2024:1075" type="rhsa" title="RHSA-2024:1075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45230" id="CVE-2023-45230" type="cve" title="CVE-2023-45230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45234" id="CVE-2023-45234" type="cve" title="CVE-2023-45234"/>
      <reference href="https://bugzilla.redhat.com/2258685" id="2258685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258697" id="2258697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1075.html" id="ALSA-2024:1075" type="self" title="ALSA-2024:1075"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="edk2-ovmf" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-ovmf-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">672357e5f22af5021147da1e6ea2940970361d3219b3256dc24010fdaeeb1424</sum>
        </package>
        <package name="edk2-tools" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="aarch64" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-tools-20230524-4.el9_3.2.alma.aarch64.rpm</filename>
          <sum type="sha256">85da1cfd3ac68b41837db5960f6385ef673332aabf8d8ea21f448998b78d1f09</sum>
        </package>
        <package name="edk2-tools-doc" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-tools-doc-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">bfcb0f5d6e03f7d8b84272a53664e90bac1a421417262c4e9b2f8eefe207350d</sum>
        </package>
        <package name="edk2-aarch64" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-aarch64-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">c344e31df64e7b01343cb0aed155d8145237772f7f844a227dd8eda235c3368c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1141</id>
    <title>Moderate: mysql security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-07 19:03:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)
* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)
* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21955)
* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)
* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)
* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046)
* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053, CVE-2023-22054, CVE-2023-22056)
* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)
* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)
* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)
* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-2097, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)
* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)
* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)
* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)
* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)
* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)
* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)

Bug Fix(es):

* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1141" id="RHSA-2024:1141" type="rhsa" title="RHSA-2024:1141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4899" id="CVE-2022-4899" type="cve" title="CVE-2022-4899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21911" id="CVE-2023-21911" type="cve" title="CVE-2023-21911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21919" id="CVE-2023-21919" type="cve" title="CVE-2023-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21920" id="CVE-2023-21920" type="cve" title="CVE-2023-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21929" id="CVE-2023-21929" type="cve" title="CVE-2023-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21933" id="CVE-2023-21933" type="cve" title="CVE-2023-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21935" id="CVE-2023-21935" type="cve" title="CVE-2023-21935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21940" id="CVE-2023-21940" type="cve" title="CVE-2023-21940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21945" id="CVE-2023-21945" type="cve" title="CVE-2023-21945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21946" id="CVE-2023-21946" type="cve" title="CVE-2023-21946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21947" id="CVE-2023-21947" type="cve" title="CVE-2023-21947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21953" id="CVE-2023-21953" type="cve" title="CVE-2023-21953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21955" id="CVE-2023-21955" type="cve" title="CVE-2023-21955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21962" id="CVE-2023-21962" type="cve" title="CVE-2023-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21966" id="CVE-2023-21966" type="cve" title="CVE-2023-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21972" id="CVE-2023-21972" type="cve" title="CVE-2023-21972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21976" id="CVE-2023-21976" type="cve" title="CVE-2023-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21977" id="CVE-2023-21977" type="cve" title="CVE-2023-21977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21980" id="CVE-2023-21980" type="cve" title="CVE-2023-21980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21982" id="CVE-2023-21982" type="cve" title="CVE-2023-21982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22005" id="CVE-2023-22005" type="cve" title="CVE-2023-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22007" id="CVE-2023-22007" type="cve" title="CVE-2023-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22008" id="CVE-2023-22008" type="cve" title="CVE-2023-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22032" id="CVE-2023-22032" type="cve" title="CVE-2023-22032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22033" id="CVE-2023-22033" type="cve" title="CVE-2023-22033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22038" id="CVE-2023-22038" type="cve" title="CVE-2023-22038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22046" id="CVE-2023-22046" type="cve" title="CVE-2023-22046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22048" id="CVE-2023-22048" type="cve" title="CVE-2023-22048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22053" id="CVE-2023-22053" type="cve" title="CVE-2023-22053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22054" id="CVE-2023-22054" type="cve" title="CVE-2023-22054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22056" id="CVE-2023-22056" type="cve" title="CVE-2023-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22057" id="CVE-2023-22057" type="cve" title="CVE-2023-22057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22058" id="CVE-2023-22058" type="cve" title="CVE-2023-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22059" id="CVE-2023-22059" type="cve" title="CVE-2023-22059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22064" id="CVE-2023-22064" type="cve" title="CVE-2023-22064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22065" id="CVE-2023-22065" type="cve" title="CVE-2023-22065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22066" id="CVE-2023-22066" type="cve" title="CVE-2023-22066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22068" id="CVE-2023-22068" type="cve" title="CVE-2023-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22070" id="CVE-2023-22070" type="cve" title="CVE-2023-22070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22078" id="CVE-2023-22078" type="cve" title="CVE-2023-22078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22079" id="CVE-2023-22079" type="cve" title="CVE-2023-22079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22092" id="CVE-2023-22092" type="cve" title="CVE-2023-22092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22097" id="CVE-2023-22097" type="cve" title="CVE-2023-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22103" id="CVE-2023-22103" type="cve" title="CVE-2023-22103"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22104" id="CVE-2023-22104" type="cve" title="CVE-2023-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22110" id="CVE-2023-22110" type="cve" title="CVE-2023-22110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22111" id="CVE-2023-22111" type="cve" title="CVE-2023-22111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22112" id="CVE-2023-22112" type="cve" title="CVE-2023-22112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22113" id="CVE-2023-22113" type="cve" title="CVE-2023-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22114" id="CVE-2023-22114" type="cve" title="CVE-2023-22114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22115" id="CVE-2023-22115" type="cve" title="CVE-2023-22115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20960" id="CVE-2024-20960" type="cve" title="CVE-2024-20960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20961" id="CVE-2024-20961" type="cve" title="CVE-2024-20961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20962" id="CVE-2024-20962" type="cve" title="CVE-2024-20962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20963" id="CVE-2024-20963" type="cve" title="CVE-2024-20963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20964" id="CVE-2024-20964" type="cve" title="CVE-2024-20964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20965" id="CVE-2024-20965" type="cve" title="CVE-2024-20965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20966" id="CVE-2024-20966" type="cve" title="CVE-2024-20966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20967" id="CVE-2024-20967" type="cve" title="CVE-2024-20967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20968" id="CVE-2024-20968" type="cve" title="CVE-2024-20968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20969" id="CVE-2024-20969" type="cve" title="CVE-2024-20969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20970" id="CVE-2024-20970" type="cve" title="CVE-2024-20970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20971" id="CVE-2024-20971" type="cve" title="CVE-2024-20971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20972" id="CVE-2024-20972" type="cve" title="CVE-2024-20972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20973" id="CVE-2024-20973" type="cve" title="CVE-2024-20973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20974" id="CVE-2024-20974" type="cve" title="CVE-2024-20974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20976" id="CVE-2024-20976" type="cve" title="CVE-2024-20976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20977" id="CVE-2024-20977" type="cve" title="CVE-2024-20977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20978" id="CVE-2024-20978" type="cve" title="CVE-2024-20978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20981" id="CVE-2024-20981" type="cve" title="CVE-2024-20981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20982" id="CVE-2024-20982" type="cve" title="CVE-2024-20982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20983" id="CVE-2024-20983" type="cve" title="CVE-2024-20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20984" id="CVE-2024-20984" type="cve" title="CVE-2024-20984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20985" id="CVE-2024-20985" type="cve" title="CVE-2024-20985"/>
      <reference href="https://bugzilla.redhat.com/2179864" id="2179864" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188109" id="2188109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188113" id="2188113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188115" id="2188115" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188116" id="2188116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188117" id="2188117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188118" id="2188118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188119" id="2188119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188120" id="2188120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188121" id="2188121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188122" id="2188122" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188123" id="2188123" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188124" id="2188124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188125" id="2188125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188127" id="2188127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188128" id="2188128" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188129" id="2188129" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188130" id="2188130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188131" id="2188131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188132" id="2188132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224211" id="2224211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224212" id="2224212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224213" id="2224213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224214" id="2224214" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224215" id="2224215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224216" id="2224216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224217" id="2224217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224218" id="2224218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224219" id="2224219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224220" id="2224220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224221" id="2224221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224222" id="2224222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245014" id="2245014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245015" id="2245015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245016" id="2245016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245017" id="2245017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245018" id="2245018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245019" id="2245019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245020" id="2245020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245021" id="2245021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245022" id="2245022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245024" id="2245024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245026" id="2245026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245027" id="2245027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245028" id="2245028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245029" id="2245029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245030" id="2245030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245031" id="2245031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245032" id="2245032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245033" id="2245033" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245034" id="2245034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258771" id="2258771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258772" id="2258772" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258773" id="2258773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258774" id="2258774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258775" id="2258775" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258776" id="2258776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258777" id="2258777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258778" id="2258778" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258779" id="2258779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258780" id="2258780" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258781" id="2258781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258782" id="2258782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258783" id="2258783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258784" id="2258784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258785" id="2258785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258787" id="2258787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258788" id="2258788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258789" id="2258789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258790" id="2258790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258791" id="2258791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258792" id="2258792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258793" id="2258793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258794" id="2258794" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1141.html" id="ALSA-2024:1141" type="self" title="ALSA-2024:1141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="mysql-devel" version="8.0.36" release="1.el9_3" epoch="0" arch="aarch64" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-devel-8.0.36-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">2b6911fb740fb23a0eaad63e5952b39dee0a278b5f8eeafff5083b2a30fb5c90</sum>
        </package>
        <package name="mysql-test" version="8.0.36" release="1.el9_3" epoch="0" arch="aarch64" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-test-8.0.36-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">b4bf63dbb0c1e4112fabd9341bca4d4d403630b2033d823af90b068314770356</sum>
        </package>
        <package name="mysql-libs" version="8.0.36" release="1.el9_3" epoch="0" arch="aarch64" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-libs-8.0.36-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">bbbdca618b5c58e25626a29213032a9d2edb8fab2cb4f683740dd306ae3b967b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1239</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2024-03-07 00:00:00"/>
    <updated date="2024-03-11 11:17:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Security Fix(es):

* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1239" id="RHSA-2024:1239" type="rhsa" title="RHSA-2024:1239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0914" id="CVE-2024-0914" type="cve" title="CVE-2024-0914"/>
      <reference href="https://bugzilla.redhat.com/2260407" id="2260407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1239.html" id="ALSA-2024:1239" type="self" title="ALSA-2024:1239"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="opencryptoki-devel" version="3.21.0" release="9.el9_3.alma.1" epoch="0" arch="aarch64" src="opencryptoki-3.21.0-9.el9_3.alma.1.src.rpm">
          <filename>opencryptoki-devel-3.21.0-9.el9_3.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e71e10315b487cf3e65456e0df60801f618d8f48fbfd9e9328fe3ee92ca62326</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1309</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 10:35:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1309" id="RHSA-2024:1309" type="rhsa" title="RHSA-2024:1309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1309.html" id="ALSA-2024:1309" type="self" title="ALSA-2024:1309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.117" release="1.el9_3" epoch="0" arch="aarch64" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.117-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">126dc5d58c147c341da527879290beb60fea28b4235ad2ccdbc82c5fda5d4ab4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1310</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 12:45:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1310" id="RHSA-2024:1310" type="rhsa" title="RHSA-2024:1310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1310.html" id="ALSA-2024:1310" type="self" title="ALSA-2024:1310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.103" release="2.el9_3" epoch="0" arch="aarch64" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.103-2.el9_3.aarch64.rpm</filename>
          <sum type="sha256">e8eb10f6d79242a23cac9d40d27afa06685565987750cfc770f3158dbf3575b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1691</id>
    <title>Important: varnish security update</title>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-09 06:48:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1691" id="RHSA-2024:1691" type="rhsa" title="RHSA-2024:1691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30156" id="CVE-2024-30156" type="cve" title="CVE-2024-30156"/>
      <reference href="https://bugzilla.redhat.com/2271486" id="2271486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1691.html" id="ALSA-2024:1691" type="self" title="ALSA-2024:1691"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="varnish-devel" version="6.6.2" release="4.el9_3.1" epoch="0" arch="aarch64" src="varnish-6.6.2-4.el9_3.1.src.rpm">
          <filename>varnish-devel-6.6.2-4.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">f79763be630d36dd3608ff6c6bf78a73594757de44df12a47bfec16aa7b3a9f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1750</id>
    <title>Important: unbound security update</title>
    <issued date="2024-04-10 00:00:00"/>
    <updated date="2024-04-12 11:51:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* A vulnerability was found in Unbound due to incorrect default permissions,
allowing any process outside the unbound group to modify the unbound runtime
configuration. The default combination of the "control-use-cert: no" option with
either explicit or implicit use of an IP address in the "control-interface"
option could allow improper access. If a process can connect over localhost to
port 8953, it can alter the configuration of unbound.service. This flaw allows
an unprivileged local process to manipulate a running instance, potentially
altering forwarders, allowing them to track all queries forwarded by the local
resolver, and, in some cases, disrupting resolving altogether.

To mitigate the vulnerability, a new file
"/etc/unbound/conf.d/remote-control.conf" has been added and included in the
main unbound configuration file, "unbound.conf". The file contains two
directives that should limit access to unbound.conf:

    control-interface: "/run/unbound/control"
    control-use-cert: "yes"

For details about these directives, run "man unbound.conf".

Updating to the version of unbound provided by this advisory should, in most
cases, address the vulnerability. To verify that your configuration is not
vulnerable, use the "unbound-control status | grep control" command. If the
output contains "control(ssl)" or "control(namedpipe)", your configuration is
not vulnerable. If the command output returns only "control", the configuration
is vulnerable because it does not enforce access only to the unbound group
members. To fix your configuration, add the line "include:
/etc/unbound/conf.d/remote-control.conf" to the end of the file
"/etc/unbound/unbound.conf". If you use a custom
"/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this
file. (CVE-2024-1488)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1750" id="RHSA-2024:1750" type="rhsa" title="RHSA-2024:1750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1488" id="CVE-2024-1488" type="cve" title="CVE-2024-1488"/>
      <reference href="https://bugzilla.redhat.com/2264183" id="2264183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1750.html" id="ALSA-2024:1750" type="self" title="ALSA-2024:1750"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="unbound-devel" version="1.16.2" release="3.el9_3.5" epoch="0" arch="aarch64" src="unbound-1.16.2-3.el9_3.5.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9_3.5.aarch64.rpm</filename>
          <sum type="sha256">ae6fde936ce92199744d8bbdeda76101437f6f21cafbb91857fcc46bb85102ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1789</id>
    <title>Important: bind security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 12:58:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1789" id="RHSA-2024:1789" type="rhsa" title="RHSA-2024:1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1789.html" id="ALSA-2024:1789" type="self" title="ALSA-2024:1789"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="bind-devel" version="9.16.23" release="14.el9_3.4" epoch="32" arch="aarch64" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-devel-9.16.23-14.el9_3.4.aarch64.rpm</filename>
          <sum type="sha256">197ea72a2bc7d2805b56066752b8e3ee257003de1b11b03471cffc70a1141eb3</sum>
        </package>
        <package name="bind-doc" version="9.16.23" release="14.el9_3.4" epoch="32" arch="noarch" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-doc-9.16.23-14.el9_3.4.noarch.rpm</filename>
          <sum type="sha256">22ea42050319c6952320fdfdb1eb6f005290375161f8b1ae7f8089901182832f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1818</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-19 13:00:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1818" id="RHSA-2024:1818" type="rhsa" title="RHSA-2024:1818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1818.html" id="ALSA-2024:1818" type="self" title="ALSA-2024:1818"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">27d89071e805d19c2e53fb9a14431e19206a121348678b4187bf73456bc48b88</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5eb3245b16f74ce2348080e4156432d1a798affffb68f7fc8f01f085793a7516</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6a5099da5e54b8956253654ce0059c00ebeb416094227d471b29e27ebc93be3e</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6c7ebf277f4748e7fabe4ebfef07fae4247028d2fa2feeb49824d628c59d343f</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7f559637f8b8a6c1bf708e4f3006115a9d9169e22e895e3eccab66c665134245</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">819bd462142ba5e911f6e8c4cb02fab5aeb52a927331105aeb3ca2685f4e69bb</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d85ba838911176168616d56d15a55dbf5546cfd59e2a7057c12526d12d3843a6</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e74e5a844a551a84f78c175c757a342add68dfc0dc7a87d275f05073da11f626</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">edbe89c88ec9dbabff1a4ff0a74fbb343196ec17afd1b1b91ec67de10e3a4e2c</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f38c759df06c3d4021e64fea22fb1437252acd23200cd1d2b92a57e97d9deb1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1822</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-04-22 00:00:00"/>
    <updated date="2024-04-29 11:02:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1822" id="RHSA-2024:1822" type="rhsa" title="RHSA-2024:1822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1822.html" id="ALSA-2024:1822" type="self" title="ALSA-2024:1822"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">04f14571d21d4cf578126a2de185cc94f8d0821d159046788dd362154417b2b5</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">08b0058508dc427d28ea9b54c1b4ac2d857c69aa896298edad38be87e2352cba</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">0d58dd2ebd2d6f7f72a07e8382d1687ab591b1886cef90d342b9dad13874d7e6</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">152262d05ef1c7ff3f3b8da1fb9b19eec83a0455e35a7e211c7f5db4df352471</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">43e0167cd4d112fcec1fa72677d71d386d3b4be567b9e26917547e45c7be38db</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">73cb62fb4184de17af195ca5e44f1a90289d86abca454e2596661f4e7ab7e381</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7444c60db86283cd6c2a1f8d5013d1999edf9672ec184d4667de6ee2a9d64ee2</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7ae18c8156a50d4d569206c0e8d729a2269a48cb5561a13fbdf6fa46c7790ad8</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7bcfc9c4805857d32a2f63b4aa671076450a5b5f4f8586cc5cf16f11cef60afe</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">97b6263f22a4518d8b29ad6420d6e9c6ca7778852107c4151103eb1e79156bd1</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">9ab7fc009acbf53e10ff053b3ec9e9e4b7d0fc3c2c6b33a7a9d2de1b4e73c4b9</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">9e9fa4fb33a84c2e7a83f494dccf93dce589bba37ef3440f1d84d0485bbacb24</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">bf858f4447b650717722994083f0be043b48b315f8396fd8b08e3997a27b49cc</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">da7dcb904f8cd2dc4bcc28e6d784a37832409b3b82981c0ca5e997fff339eff9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1825</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 13:44:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1825" id="RHSA-2024:1825" type="rhsa" title="RHSA-2024:1825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1825.html" id="ALSA-2024:1825" type="self" title="ALSA-2024:1825"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0d6877b4e0ef331cbe975fec4d8baed71e871f44ebeafb9f68f9fa05a4997221</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1e7935f2c64cf3cf72eba83a0fda95ebdcf1f3743d84121d56287ff4773dd419</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">31bd6b7a671ac516b4a8be1b1784a123a7e8d9bde2dc391019bef2f9931bc8ba</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">55873640752e29f5538fd52dc4d27410695806ca65ab5e4e6cdbee5ef0a2fae6</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">57b69718e0dc38cb44490445172d1d29d7a088f7d0f2c3aa253c9a545901db1f</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">737feccd7d5d7de8e8b7124656104a330200d0817b734f3cea669999bf714ec7</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">97a29e2a69cceecd5c3b0992af68d2e4f8854a66ddd07e91cd678aa1deba6d07</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">98eab3d424edc42cc791674aaebb29ea5fe167728b1bda39f4ae16e8b97dc5ad</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9a9460d9264d0a102c93e7bbaebf109b9fee621b0d4a07d0d1b931a754c7dfe0</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a08bb26f2822e0c547f8ff427be8e643793e8a3d3d8c31f0a9dc9d9f74c78551</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a12ebfc737054a274b692cccc69ccb46771676f0dd466e12788eb4526b680f08</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a66d69c5ab7c33c387be9c3f6f9b9a16a1b416fd9ab3a16bc87faf97dfbb21ce</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ec8b7a4b425d24909c70306042ebc2a8cc6ae955867a952c9bcd480472b11b62</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.11.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f9ce56a838f9156b1320bed6bf9d86853c4403407b85b3996b84d41442385311</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1828</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-29 11:04:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1828" id="RHSA-2024:1828" type="rhsa" title="RHSA-2024:1828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1828.html" id="ALSA-2024:1828" type="self" title="ALSA-2024:1828"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_3_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_3_default</name>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">1d330d65c6749db63dca687506e1489cc3a41e1b8f755009da4baba1158f2dc2</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">48c708c5da63e83d48d002de068a6bf179b4addb4b3cab2ea08ed3b2eb3f2271</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">53a60771c8b5a4e413ec7265680881f1f6ebec335a77cfc8dc7a9032b1c725cd</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6cacdefcbfd262b6655514d445a3f01fc05bb14a97b8c98bcf869ff760244194</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">78a9ee78f21385f139262a9cae9811d93a64d3faf9a63e915f3c8a44337a2705</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">88bffd6dbfbd35e0ba028d4ba8e7e1ef9090be29314a008928fe2387373db4a0</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9df4a04d3ab0416e406e3fb2c5294772644110646dd877a1ef32e348ee170907</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">c1481d7cae0cd0902c817a024de5727fb8e097c487fd987916c152f3c6924eba</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d7e1aa3eaa31800c37f9403f0ea0f45ec2866caaab90faa01aacd36570b53607</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e35e6e79188e0a413ba6bd9e0e5c3e98f244d0f0b22bba9404b80d38c5556ae4</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e46e375a9c92b0fa63fdd04589a8c6458686752d4e8c6cef5dbd3d024c553a21</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ee311fabc9e6ee3218aaa281eb8a9da67d9a6c5a63f8fbc90baa9d47f37e5261</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f638ff6160db4581e56c1fdb9839eff71e98c6e8bf61500d8ff67e6d9db00175</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.3.0.9-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">fe58594ec075bac1df088792d38a5fb6086259f45f8cdb169ee0cc81901573d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2147</id>
    <title>Moderate: ipa security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:21:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2147" id="RHSA-2024:2147" type="rhsa" title="RHSA-2024:2147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1481" id="CVE-2024-1481" type="cve" title="CVE-2024-1481"/>
      <reference href="https://bugzilla.redhat.com/2262169" id="2262169" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2147.html" id="ALSA-2024:2147" type="self" title="ALSA-2024:2147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3-ipatests" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>python3-ipatests-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">d851142c22ff4c5d9ddf230430e8aced17c7f7736aaced76c0e7c45c4580cf6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2169</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2169" id="RHSA-2024:2169" type="rhsa" title="RHSA-2024:2169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2169.html" id="ALSA-2024:2169" type="self" title="ALSA-2024:2169"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="24.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-24.el9.noarch.rpm</filename>
          <sum type="sha256">312de6141de8edf176752f753a27b2608f335b89d5c094f576bbb86755bd521f</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="24.el9" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-24.el9.aarch64.rpm</filename>
          <sum type="sha256">a29069d1dc5ee5365ffc1d42fb9a960ff6d1f6a412c93bce4dc84799c4d12c7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2184</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2184" id="RHSA-2024:2184" type="rhsa" title="RHSA-2024:2184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33065" id="CVE-2022-33065" type="cve" title="CVE-2022-33065"/>
      <reference href="https://bugzilla.redhat.com/2238934" id="2238934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2184.html" id="ALSA-2024:2184" type="self" title="ALSA-2024:2184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libsndfile-devel" version="1.0.31" release="8.el9" epoch="0" arch="aarch64" src="libsndfile-1.0.31-8.el9.src.rpm">
          <filename>libsndfile-devel-1.0.31-8.el9.aarch64.rpm</filename>
          <sum type="sha256">b1710e80ef70fe6340f822d769bf49b3735ec859ceef8117fbe3f5ee16693dca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2199</id>
    <title>Important: pmix security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pmix security update</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2199" id="RHSA-2024:2199" type="rhsa" title="RHSA-2024:2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915"/>
      <reference href="https://bugzilla.redhat.com/2238898" id="2238898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2199.html" id="ALSA-2024:2199" type="self" title="ALSA-2024:2199"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="pmix-pmi-devel" version="3.2.3" release="5.el9" epoch="0" arch="aarch64" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-pmi-devel-3.2.3-5.el9.aarch64.rpm</filename>
          <sum type="sha256">d9da7634c37267e5773733d8e4f16aed23bd0b6bd75b6581b50ea66da6e94284</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2204</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libnbd security update</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: Malicious NBD server may crash libnbd (CVE-2023-5871)
* libnbd: Crash or misbehaviour when NBD server returns an unexpected block size (CVE-2023-5215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2204" id="RHSA-2024:2204" type="rhsa" title="RHSA-2024:2204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5215" id="CVE-2023-5215" type="cve" title="CVE-2023-5215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5871" id="CVE-2023-5871" type="cve" title="CVE-2023-5871"/>
      <reference href="https://bugzilla.redhat.com/2241041" id="2241041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247308" id="2247308" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2204.html" id="ALSA-2024:2204" type="self" title="ALSA-2024:2204"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="ocaml-libnbd-devel" version="1.18.1" release="3.el9" epoch="0" arch="aarch64" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>ocaml-libnbd-devel-1.18.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">185a1588b1fcc996d92225f8fbb0e495bdd2b9dfaa99104c29d938df9a1e7248</sum>
        </package>
        <package name="ocaml-libnbd" version="1.18.1" release="3.el9" epoch="0" arch="aarch64" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>ocaml-libnbd-1.18.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5b705511af39b9f710e93eebb1fa31d4c47f116c48559293cd831af04982eb6c</sum>
        </package>
        <package name="libnbd-devel" version="1.18.1" release="3.el9" epoch="0" arch="aarch64" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>libnbd-devel-1.18.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">9f303277fdd2334ee7c73e14b20d990e62d2819463eb26e907b2e23cdd984f8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2208</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: Incorrect offset calculation leading to DOS (CVE-2023-39350)
* freerdp: Null Pointer Dereference leading DOS in RemoteFX (CVE-2023-39351)
* freerdp: invalid offset validation leading to Out Of Bound Write (CVE-2023-39352)
* freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (CVE-2023-39356)
* freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface (CVE-2023-40186)
* freerdp: Out-of-bounds write in clear_decompress_bands_data (CVE-2023-40567)
* freerdp: Out-of-bounds write in the `progressive_decompress` function due to incorrect calculations (CVE-2023-40569)
* freerdp: buffer overflow in ncrush_decompress causes crash with crafted input (CVE-2023-40589)
* freerdp: missing offset validation leading to Out Of Bound Read (CVE-2023-39353)
* freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data (CVE-2023-39354)
* freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (CVE-2023-40181)
* freerdp: Out-of-bounds read in general_LumaToYUV444 (CVE-2023-40188)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2208" id="RHSA-2024:2208" type="rhsa" title="RHSA-2024:2208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39350" id="CVE-2023-39350" type="cve" title="CVE-2023-39350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39351" id="CVE-2023-39351" type="cve" title="CVE-2023-39351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39352" id="CVE-2023-39352" type="cve" title="CVE-2023-39352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39353" id="CVE-2023-39353" type="cve" title="CVE-2023-39353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39354" id="CVE-2023-39354" type="cve" title="CVE-2023-39354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39356" id="CVE-2023-39356" type="cve" title="CVE-2023-39356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40181" id="CVE-2023-40181" type="cve" title="CVE-2023-40181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40186" id="CVE-2023-40186" type="cve" title="CVE-2023-40186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40188" id="CVE-2023-40188" type="cve" title="CVE-2023-40188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40567" id="CVE-2023-40567" type="cve" title="CVE-2023-40567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40569" id="CVE-2023-40569" type="cve" title="CVE-2023-40569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40589" id="CVE-2023-40589" type="cve" title="CVE-2023-40589"/>
      <reference href="https://bugzilla.redhat.com/2236606" id="2236606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236650" id="2236650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236656" id="2236656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236669" id="2236669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236730" id="2236730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236750" id="2236750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236759" id="2236759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236763" id="2236763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236766" id="2236766" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236774" id="2236774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236779" id="2236779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236784" id="2236784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2208.html" id="ALSA-2024:2208" type="self" title="ALSA-2024:2208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="freerdp-devel" version="2.11.2" release="1.el9" epoch="2" arch="aarch64" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>freerdp-devel-2.11.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">c80e2a5bfcf37068b1485a313c7799779bf0a4e01bfd0deaf9f429c44311d758</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.2" release="1.el9" epoch="2" arch="aarch64" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>libwinpr-devel-2.11.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">d07b45debd13f257ec7a99995bf29936114605cceaf1130c3a7155e066d546d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2236</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:10:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: NULL pointer dereference in udevConnectListAllInterfaces() (CVE-2024-2496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2236" id="RHSA-2024:2236" type="rhsa" title="RHSA-2024:2236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2496" id="CVE-2024-2496" type="cve" title="CVE-2024-2496"/>
      <reference href="https://bugzilla.redhat.com/2269672" id="2269672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2236.html" id="ALSA-2024:2236" type="self" title="ALSA-2024:2236"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libvirt-devel" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-devel-10.0.0-6.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9117bb288584174e26df237fee13c4bd4dd6c50ce89bfdf0156817e7ee95f931</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f1bcde2960f1815c0642235d60c25a5d348d60662c38552834cc3fa2b67b0b70</sum>
        </package>
        <package name="libvirt-docs" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-docs-10.0.0-6.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f9fa6b1a4ead085171afc53e67d2b542d6d838a40e85a2c0c6c32f07e59a6e9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2264</id>
    <title>Important: edk2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)
* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)
* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)
* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)
* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)
* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)
* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)
* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2264" id="RHSA-2024:2264" type="rhsa" title="RHSA-2024:2264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36763" id="CVE-2022-36763" type="cve" title="CVE-2022-36763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36764" id="CVE-2022-36764" type="cve" title="CVE-2022-36764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3446" id="CVE-2023-3446" type="cve" title="CVE-2023-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45229" id="CVE-2023-45229" type="cve" title="CVE-2023-45229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45231" id="CVE-2023-45231" type="cve" title="CVE-2023-45231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45232" id="CVE-2023-45232" type="cve" title="CVE-2023-45232"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45233" id="CVE-2023-45233" type="cve" title="CVE-2023-45233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45235" id="CVE-2023-45235" type="cve" title="CVE-2023-45235"/>
      <reference href="https://bugzilla.redhat.com/2224962" id="2224962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257582" id="2257582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257583" id="2257583" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258677" id="2258677" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258688" id="2258688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258691" id="2258691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258694" id="2258694" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258700" id="2258700" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2264.html" id="ALSA-2024:2264" type="self" title="ALSA-2024:2264"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="edk2-ovmf" version="20231122" release="6.el9" epoch="0" arch="noarch" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9.noarch.rpm</filename>
          <sum type="sha256">c344271226d0016eca110ad5673ec0a7851704d8b9007a02e5cef91ddccbea0d</sum>
        </package>
        <package name="edk2-tools" version="20231122" release="6.el9" epoch="0" arch="aarch64" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-tools-20231122-6.el9.aarch64.rpm</filename>
          <sum type="sha256">f96de4de9f85a61df9a83dbf5500becf6c11057d56ef4459baa709c7d42871f4</sum>
        </package>
        <package name="edk2-tools-doc" version="20231122" release="6.el9" epoch="0" arch="noarch" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-tools-doc-20231122-6.el9.noarch.rpm</filename>
          <sum type="sha256">fea2aecfc1c20965950c39c0c2bf9fc32aecfd41f5c952d8f00fa41a0fe43687</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2276</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714)
* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2276" id="RHSA-2024:2276" type="rhsa" title="RHSA-2024:2276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51714" id="CVE-2023-51714" type="cve" title="CVE-2023-51714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25580" id="CVE-2024-25580" type="cve" title="CVE-2024-25580"/>
      <reference href="https://bugzilla.redhat.com/2255856" id="2255856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264423" id="2264423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2276.html" id="ALSA-2024:2276" type="self" title="ALSA-2024:2276"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="qt5-qtbase-static" version="5.15.9" release="9.el9" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-9.el9.aarch64.rpm</filename>
          <sum type="sha256">00f95069db70db375031b61f53402f567b7b219464fe541e80016d6266ce12c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2287</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
* gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2287" id="RHSA-2024:2287" type="rhsa" title="RHSA-2024:2287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50186" id="CVE-2023-50186" type="cve" title="CVE-2023-50186"/>
      <reference href="https://bugzilla.redhat.com/2254587" id="2254587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254588" id="2254588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254589" id="2254589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255639" id="2255639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2287.html" id="ALSA-2024:2287" type="self" title="ALSA-2024:2287"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.1" release="4.el9" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.aarch64.rpm</filename>
          <sum type="sha256">3a6f45baffdc4631125e5128aae6c4a096dfe2ba0a46f4b43d258c7ddc09a4d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2289</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)
* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)
* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)
* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2289" id="RHSA-2024:2289" type="rhsa" title="RHSA-2024:2289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40090" id="CVE-2022-40090" type="cve" title="CVE-2022-40090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3618" id="CVE-2023-3618" type="cve" title="CVE-2023-3618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40745" id="CVE-2023-40745" type="cve" title="CVE-2023-40745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41175" id="CVE-2023-41175" type="cve" title="CVE-2023-41175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6228" id="CVE-2023-6228" type="cve" title="CVE-2023-6228"/>
      <reference href="https://bugzilla.redhat.com/2215865" id="2215865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2234970" id="2234970" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235264" id="2235264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235265" id="2235265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240995" id="2240995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2289.html" id="ALSA-2024:2289" type="self" title="ALSA-2024:2289"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libtiff-tools" version="4.4.0" release="12.el9" epoch="0" arch="aarch64" src="libtiff-4.4.0-12.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">ea2e9ca05c42e22560ac12a7caa9259f421a418574d4e9c6ccae54b194434252</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2292</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2292" id="RHSA-2024:2292" type="rhsa" title="RHSA-2024:2292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2292.html" id="ALSA-2024:2292" type="self" title="ALSA-2024:2292"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">25c737cce851e1b403a918eadf36c1fac8450095e5855481f98ac49128b71374</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3ac7fe715baf097dd6eb2bbd2fae5a8f3c4d3aa3b5951b4c3cf38a6ca1fdf25a</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">e82f4afccb8e95685dc326b90394a797f988e6963df7d86748d2b60e27c6c1a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2295</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2295" id="RHSA-2024:2295" type="rhsa" title="RHSA-2024:2295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-29390" id="CVE-2021-29390" type="cve" title="CVE-2021-29390"/>
      <reference href="https://bugzilla.redhat.com/2235521" id="2235521" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2295.html" id="ALSA-2024:2295" type="self" title="ALSA-2024:2295"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="turbojpeg" version="2.0.90" release="7.el9" epoch="0" arch="aarch64" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>turbojpeg-2.0.90-7.el9.aarch64.rpm</filename>
          <sum type="sha256">4932044c9ac744b6941a67cb4d11504cbbbc627c3baaee3ff319ee2569b2c03a</sum>
        </package>
        <package name="turbojpeg-devel" version="2.0.90" release="7.el9" epoch="0" arch="aarch64" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>turbojpeg-devel-2.0.90-7.el9.aarch64.rpm</filename>
          <sum type="sha256">81c1b3e5c41df3615eb531c239aa71e544e92df6cf164bef7c25719cb5c70bcf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2353</id>
    <title>Moderate: mingw components security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mingw components security update</summary>
    <description>MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications.

Security Fix(es):

* binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2353" id="RHSA-2024:2353" type="rhsa" title="RHSA-2024:2353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1579" id="CVE-2023-1579" type="cve" title="CVE-2023-1579"/>
      <reference href="https://bugzilla.redhat.com/2180905" id="2180905" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2353.html" id="ALSA-2024:2353" type="self" title="ALSA-2024:2353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="mingw32-binutils" version="2.41" release="3.el9" epoch="0" arch="aarch64" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw32-binutils-2.41-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ad0e1d17e7d97d6a07b7286f578514fb07198d09caaa9dc0455a74f8ecd101d6</sum>
        </package>
        <package name="mingw64-binutils" version="2.41" release="3.el9" epoch="0" arch="aarch64" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw64-binutils-2.41-3.el9.aarch64.rpm</filename>
          <sum type="sha256">cea57b1eee94df051836465ffa19a94b00ffd084f3f2c286523b49f0ea888534</sum>
        </package>
        <package name="mingw-binutils-generic" version="2.41" release="3.el9" epoch="0" arch="aarch64" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw-binutils-generic-2.41-3.el9.aarch64.rpm</filename>
          <sum type="sha256">cfa530ac240af3b8885146728e1eab674e860e80147304ed8d27d8590ccf041e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2377</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2377" id="RHSA-2024:2377" type="rhsa" title="RHSA-2024:2377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770"/>
      <reference href="https://bugzilla.redhat.com/2246907" id="2246907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2377.html" id="ALSA-2024:2377" type="self" title="ALSA-2024:2377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="zziplib-devel" version="0.13.71" release="11.el9_4" epoch="0" arch="aarch64" src="zziplib-0.13.71-11.el9_4.src.rpm">
          <filename>zziplib-devel-0.13.71-11.el9_4.aarch64.rpm</filename>
          <sum type="sha256">cb096c11a45f4f18bab53030d293f52223d11fbb7547dba3add74882fb68b32e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2433</id>
    <title>Moderate: avahi security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:00:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2433" id="RHSA-2024:2433" type="rhsa" title="RHSA-2024:2433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2433.html" id="ALSA-2024:2433" type="self" title="ALSA-2024:2433"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="avahi-compat-howl-devel" version="0.8" release="20.el9" epoch="0" arch="aarch64" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-20.el9.aarch64.rpm</filename>
          <sum type="sha256">4ccb8d8923c4905318b6f30dcf4f82dc252ad8fc7a16fdeb3894f1929a56a5b0</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.8" release="20.el9" epoch="0" arch="aarch64" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-20.el9.aarch64.rpm</filename>
          <sum type="sha256">79501f390928c1c0365688e7bbb559d3318f0d6a6b290cd9975a79e8a06418dd</sum>
        </package>
        <package name="avahi-devel" version="0.8" release="20.el9" epoch="0" arch="aarch64" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-devel-0.8-20.el9.aarch64.rpm</filename>
          <sum type="sha256">89389c5f0feb95ee5867724e114848f098354cf5a57a02a6ba243211879f83a3</sum>
        </package>
        <package name="avahi-compat-howl" version="0.8" release="20.el9" epoch="0" arch="aarch64" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-howl-0.8-20.el9.aarch64.rpm</filename>
          <sum type="sha256">9697f006e8961a67cd5fb76c4977d359ebfab74b8b66bbe5e1e81f947473fba9</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.8" release="20.el9" epoch="0" arch="aarch64" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-20.el9.aarch64.rpm</filename>
          <sum type="sha256">b7969cb8ec10fef1cf4917ef9d5c1b05ed82e3fcb0531d5a0943cf73e5725445</sum>
        </package>
        <package name="avahi-glib-devel" version="0.8" release="20.el9" epoch="0" arch="aarch64" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-glib-devel-0.8-20.el9.aarch64.rpm</filename>
          <sum type="sha256">d737a1d82fbe0bbbed75c8411f8504a695e629a49c09a5d70719a00bd82c3397</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2463</id>
    <title>Moderate: systemd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2463" id="RHSA-2024:2463" type="rhsa" title="RHSA-2024:2463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7008" id="CVE-2023-7008" type="cve" title="CVE-2023-7008"/>
      <reference href="https://bugzilla.redhat.com/2222672" id="2222672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2463.html" id="ALSA-2024:2463" type="self" title="ALSA-2024:2463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="systemd-boot-unsigned" version="252" release="32.el9_4.alma.1" epoch="0" arch="aarch64" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-boot-unsigned-252-32.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a87d3265835259e61c323584a4d3a6844dafa759477db8603a47825e976f791b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2512</id>
    <title>Low: file security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>file security update</summary>
    <description>The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2512" id="RHSA-2024:2512" type="rhsa" title="RHSA-2024:2512"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48554" id="CVE-2022-48554" type="cve" title="CVE-2022-48554"/>
      <reference href="https://bugzilla.redhat.com/2235714" id="2235714" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2512.html" id="ALSA-2024:2512" type="self" title="ALSA-2024:2512"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="file-devel" version="5.39" release="16.el9" epoch="0" arch="aarch64" src="file-5.39-16.el9.src.rpm">
          <filename>file-devel-5.39-16.el9.aarch64.rpm</filename>
          <sum type="sha256">ef9c0c614a61d4e0016afbb9a4710854b2ac555f3cfdf03bd13b2506e21bbfe2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2551</id>
    <title>Important: bind security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

Bug Fix(es):

* bind-dyndb-ldap: rebuilt to adapt ABI changes in bind

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2551" id="RHSA-2024:2551" type="rhsa" title="RHSA-2024:2551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2551.html" id="ALSA-2024:2551" type="self" title="ALSA-2024:2551"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="bind-devel" version="9.16.23" release="18.el9_4.1" epoch="32" arch="aarch64" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-devel-9.16.23-18.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">61484cbd6cc643c983998d7a59dd1c34d9d888355341c6076d1042944831a565</sum>
        </package>
        <package name="bind-doc" version="9.16.23" release="18.el9_4.1" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-doc-9.16.23-18.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">f79829629665932a43bcf0575918edac6feb3858caced0cd6b7d9228d46c6ec4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2560</id>
    <title>Moderate: libvirt security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:56:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security and bug fix update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441)
* libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081)
* libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2560" id="RHSA-2024:2560" type="rhsa" title="RHSA-2024:2560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1441" id="CVE-2024-1441" type="cve" title="CVE-2024-1441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2494" id="CVE-2024-2494" type="cve" title="CVE-2024-2494"/>
      <reference href="https://bugzilla.redhat.com/2263841" id="2263841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270115" id="2270115" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2560.html" id="ALSA-2024:2560" type="self" title="ALSA-2024:2560"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libvirt-devel" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-devel-10.0.0-6.2.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">2cd9718c087ad0c4d89695ae13cdc50e3e743d262097a1d31ea00e3df0b75908</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.2.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">312c18fbd778ddc7d3a57d119b097f5a37f0c0621608ecc5642585d643f6a37b</sum>
        </package>
        <package name="libvirt-docs" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-docs-10.0.0-6.2.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">db10900291f3090a6c42b5dc0afb696451a4c4d6222f64c12abd450dbae56560</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2571</id>
    <title>Moderate: sssd security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security and bug fix update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

* socket leak (JIRA:AlmaLinux-22340)
* Passkey cannot fall back to password (JIRA:AlmaLinux-28161)
* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2571" id="RHSA-2024:2571" type="rhsa" title="RHSA-2024:2571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2571.html" id="ALSA-2024:2571" type="self" title="ALSA-2024:2571"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.4" release="6.el9_4" epoch="0" arch="aarch64" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">8015acc4cce2c19fb2654bf7b90f08ba1f5e96008b7a49a4dd6bebaaaa46bfa6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2842</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-14 00:00:00"/>
    <updated date="2024-05-16 07:52:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2842" id="RHSA-2024:2842" type="rhsa" title="RHSA-2024:2842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2842.html" id="ALSA-2024:2842" type="self" title="ALSA-2024:2842"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.105" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">acd3ea4dae34ba20db7621a9589343a1d1bba479d5db96f1257991e084bbfad8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2843</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-05-15 00:00:00"/>
    <updated date="2024-05-16 07:51:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2843" id="RHSA-2024:2843" type="rhsa" title="RHSA-2024:2843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2843.html" id="ALSA-2024:2843" type="self" title="ALSA-2024:2843"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.119" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">2123994dcca6a09c49393c55a9be3935721e2894415200c618d46f9496995e3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3339</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-28 10:18:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT
(CVE-2024-2961)
* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3339" id="RHSA-2024:3339" type="rhsa" title="RHSA-2024:3339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3339.html" id="ALSA-2024:3339" type="self" title="ALSA-2024:3339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="glibc-static" version="2.34" release="100.el9_4.2" epoch="0" arch="aarch64" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-static-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">05c44a26d074f91eb7d3b29a0cbd275029eb6bdaca4281a82e2a26667a449668</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="100.el9_4.2" epoch="0" arch="aarch64" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>nss_hesiod-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">5c15ab7933cd215af81f6229e19c18660a6e75ffe89166c210d92cf41bc606c3</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="100.el9_4.2" epoch="0" arch="aarch64" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-nss-devel-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">c0a9064906a4d1c9a8c23b1b06ad9cc8f97ea6e6210b1b34a8ead31ee8b60d72</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="100.el9_4.2" epoch="0" arch="aarch64" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-benchtests-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">c7093c7faa1a95a05daff8aaed0babff237c7d42d31c433c7be11294e49b45fd</sum>
        </package>
        <package name="nss_db" version="2.34" release="100.el9_4.2" epoch="0" arch="aarch64" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>nss_db-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">e7fc0b83ad2557e7c29937892e9fa841cd6c645201c85eb41ea415c5f0209733</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3501</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2024-05-30 00:00:00"/>
    <updated date="2024-05-30 20:12:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3501" id="RHSA-2024:3501" type="rhsa" title="RHSA-2024:3501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3501.html" id="ALSA-2024:3501" type="self" title="ALSA-2024:3501"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libnghttp2-devel" version="1.43.0" release="5.el9_4.3" epoch="0" arch="aarch64" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">0083f6b4d4c6ed52bc73e14c7ba256443401388579ab9b0cc8fa1ddff64049e0</sum>
        </package>
        <package name="nghttp2" version="1.43.0" release="5.el9_4.3" epoch="0" arch="aarch64" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">59e880af00d5249048bd2841f7216f25078d1c1721803db8a03c82a0f08d871c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3754</id>
    <title>Important: ipa security update</title>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-20 16:08:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698)
* freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3754" id="RHSA-2024:3754" type="rhsa" title="RHSA-2024:3754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2698" id="CVE-2024-2698" type="cve" title="CVE-2024-2698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3183" id="CVE-2024-3183" type="cve" title="CVE-2024-3183"/>
      <reference href="https://bugzilla.redhat.com/2270353" id="2270353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270685" id="2270685" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3754.html" id="ALSA-2024:3754" type="self" title="ALSA-2024:3754"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3-ipatests" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>python3-ipatests-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">78a871b98a4d70c7e4965a260510e083551216826811b20ae35783e13bdd5fdd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3837</id>
    <title>Important: 389-ds-base security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 06:41:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3837" id="RHSA-2024:3837" type="rhsa" title="RHSA-2024:3837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2199" id="CVE-2024-2199" type="cve" title="CVE-2024-2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3657" id="CVE-2024-3657" type="cve" title="CVE-2024-3657"/>
      <reference href="https://bugzilla.redhat.com/2267976" id="2267976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274401" id="2274401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3837.html" id="ALSA-2024:3837" type="self" title="ALSA-2024:3837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="389-ds-base-devel" version="2.4.5" release="8.el9_4" epoch="0" arch="aarch64" src="389-ds-base-2.4.5-8.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">084dc1ebc5e8c7c19a509e104be0b17715f1763d1e86d7320f256def5bfa72be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3838</id>
    <title>Moderate: ruby security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:18:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby
(3.0). (AlmaLinux-35740)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)
* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3838" id="RHSA-2024:3838" type="rhsa" title="RHSA-2024:3838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3838.html" id="ALSA-2024:3838" type="self" title="ALSA-2024:3838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="ruby-doc" version="3.0.7" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>ruby-doc-3.0.7-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">08fa7f7a8c78fdb7c1bcc7a1c92de0956e0c4e18dc0c8953ef596a1a75bec22b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3959</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:13:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3959" id="RHSA-2024:3959" type="rhsa" title="RHSA-2024:3959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462"/>
      <reference href="https://bugzilla.redhat.com/2275981" id="2275981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3959.html" id="ALSA-2024:3959" type="self" title="ALSA-2024:3959"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="flatpak-devel" version="1.12.9" release="1.el9_4" epoch="0" arch="aarch64" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-devel-1.12.9-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ce8fd5458662ecc04f3a0f216fbf5c5091dff4c1bf031619a5c15045162df7ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3999</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 11:33:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3999" id="RHSA-2024:3999" type="rhsa" title="RHSA-2024:3999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871"/>
      <reference href="https://bugzilla.redhat.com/2283508" id="2283508" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3999.html" id="ALSA-2024:3999" type="self" title="ALSA-2024:3999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libgs-devel" version="9.54.0" release="16.el9_4" epoch="0" arch="aarch64" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>libgs-devel-9.54.0-16.el9_4.aarch64.rpm</filename>
          <sum type="sha256">8936c1809679ce0f4c37123d638da766f382c2fd345bad33eef58aa79649233b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4077</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:57:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4077" id="RHSA-2024:4077" type="rhsa" title="RHSA-2024:4077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4077.html" id="ALSA-2024:4077" type="self" title="ALSA-2024:4077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.1" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">4c136de3346c7e477a001e68b6077c51e5c2ce58aec4b212797173bf469ef288</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.1" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">6add5910b9b0b5731691ce9c129f1fad5ef1ec51bfbb61c9ba44e89f2dda93a1</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.1" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">d5c8e3418065455f8b6276fd89cf1616aa469d04aee44caf5767f12cfaa76d19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4078</id>
    <title>Important: python3.9 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:58:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4078" id="RHSA-2024:4078" type="rhsa" title="RHSA-2024:4078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4078.html" id="ALSA-2024:4078" type="self" title="ALSA-2024:4078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.1" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">3528e4f493bba53ea5fe7bef446124bbb7a37bd731557b7870fa0086050291bc</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.1" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">6da7eb58647e7d942e534644976ac6a424862f60fac396d2708d83cea80c5166</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.1" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">9d9b612c0c34c8b20b044e6e9bf6afa2e98652d70a96e6c69ca5c2b686ea1882</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4439</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 09:03:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4439" id="RHSA-2024:4439" type="rhsa" title="RHSA-2024:4439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4439.html" id="ALSA-2024:4439" type="self" title="ALSA-2024:4439"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.132" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.132-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ecd29d2737176eb09397b679d960da29f5c502b90fa4f37406d3fe243552c383</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4450</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:47:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4450" id="RHSA-2024:4450" type="rhsa" title="RHSA-2024:4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4450.html" id="ALSA-2024:4450" type="self" title="ALSA-2024:4450"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.107" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.107-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">27f52f72f3d001e069b2bf45c82c6fbc44468caa78105811c78e82224fb49216</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4563</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-26 15:11:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4563" id="RHSA-2024:4563" type="rhsa" title="RHSA-2024:4563"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4563.html" id="ALSA-2024:4563" type="self" title="ALSA-2024:4563"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0c35ef5f279b490fdf9104d4860f1beaaf7ac99893e8f142ddcafbec586d6aae</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0feee955088143d98b2c3091773717afdd0ac09af503cae5a20ca34f50b62fac</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1773100c39cb7c3f7a44a5a2e1b7e0825d3494716e87a17c3b4efcda1a505812</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1aeeecfe3d6e3af5d5fe6de8bf1819c28ebc99871cff95f1ed6fda11b6f08764</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">58de7d7b3884b51603c37e4b2a41899b36a6301aab9b306338a8efb5e6db02e1</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">624fb8eb6e724908e74cb4f36dd6e3b80b9ecd0b3852270f5e16ac919a6bb8ef</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">82802b2422031340a4368753c7f075c38220c92ba65c00eab99d194a92a89c37</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ac3c84c5e2bf505c4e22753f9b167ae9202e6d61fa1b58af312950a82b677ac0</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b573829a43e0745ca3329c893f61374b9462cfdd439252a0f4fa635434aec61a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.422.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f034ccae68fe14498f22be697187d164d333225ebf95a937e591305e565709bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4567</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-07-16 00:00:00"/>
    <updated date="2024-07-26 15:21:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4567" id="RHSA-2024:4567" type="rhsa" title="RHSA-2024:4567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4567.html" id="ALSA-2024:4567" type="self" title="ALSA-2024:4567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0dd017a8df3f89e3b22bea4bff1062c82b9e1e32fbd574dc105eb3008d6737a4</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">142af121d67bb13d5f5ceca872fc456ecf1838a13bd23363b9c244a3cf72bc51</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">48e000611c98b6f69bb441f48a5c0828e2e33d5690c1f6cc815e2dd040d9ea52</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4c13599c51cb30b56a0382cb18b7ab07dbce8025aa9dce07b2c78462fde0c8e2</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5b077a8e31a4612fb9a3ac7f8cd8942165551f854617b91800169a82cfe4ab32</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6012aad4d6b5da6d6b697443cd4420bf769101e70df3913c8883c6b6ce8b6551</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6b91e39e7f26a666ab84ff8ee10374dbaa867bf9e29758ae1faae732ce217d8a</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">731913d203a955a5c364e48411de0160e88b3e605fef41933d56d1d50efe9964</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">82b98ba71097a9b7e88b58b489c13da941049f358431931d817c5cec3bdc28c3</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">974860944b765b25b59f34cbf6a5b4df9bcaa8f87fcced6513f3e63048b49f5f</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">dfcaf9dd5e5613810a666215818c25cbfc2f5505836df71bdca9ff0b98708bc3</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e761179255de1c940a250cc9f222f21a9e0844910213cdc7949577510657fb2f</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ec30da3e577d56cff6d727026c95be50b4e6cb8a3d95ba30eca6601c3374c0f6</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.24.0.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f74ba05cd99b9a30cdad294cb8105681266b644e10b257a32a05ca20a032da88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4568</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:13:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4568" id="RHSA-2024:4568" type="rhsa" title="RHSA-2024:4568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4568.html" id="ALSA-2024:4568" type="self" title="ALSA-2024:4568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3deb179a1d93ed3feddb42e87a7257343284ed18aa4053fb1ff9c735ed232f85</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4770f9088ec67851afc7d164d703e7f9825fad8ad9261d4de0940a8c9e929e71</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">72ce46ae182c867be270447b13a4e95d2bc3295c459bc36554ca7570c1570a14</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">75bf948c5fa98bec21d78bcb6476ff4194ceaa37a0953835c337dab0517c8e3c</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7bc19468bd3205d311132e5ed80bbf55fb9c9329b6f9a57f8ee440160a6eeca7</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">909fa8e8bd10a5872c110a8a05e325b61de0dfd6604360b735697a45904a8078</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a436cd548f52f7a0a920054051c1f214f176701241937d13cae415cb9acbf7f7</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d16a6517497484cfaa13e623fb4d2eb1e62f8363a1a7746d3670e8f5e2f7770c</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d27f6a0c7a4a10087bde77202345a194ba3dc879a2c849b1e8e5795471554123</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">db96d50092b99f02fba0368f133a567823ae4cc988c8fcda63c96e39414187b1</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">df30f816be639068d6845a90ee7829d7af4350beeb79814eba1d9dca332cee59</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e4af933c6c870360628519ff331c68478c796bcdad69b3497000ccc99158af6c</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ed6162e0300d86d0856d59242ff21ef2f5414536d9ec52da21f5018508cbe90d</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.12.0.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f8b0d87283c53cf41771ab22ef05a909a0acf1e405b1cafa2d11866481050978</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:20:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4573" id="RHSA-2024:4573" type="rhsa" title="RHSA-2024:4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4573.html" id="ALSA-2024:4573" type="self" title="ALSA-2024:4573"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="java-21-openjdk-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">0023a7f6999f32efeb7634570caaaa28b50b2730899a2299e452745f7a9a83e3</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">16cccac954bb84b3c04f02f043a818443338f996ff4eb02e5ba51b5c37d13cc9</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">1c6943191f295730105cb9ad606fb8a1d87356dca441a7949dc3952c6f5ac148</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">1e567e8590fdd7a3d2ec4c844b0d5af2de476632164a26f1de45f0766624eb8e</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">26ce910ec4d39cd8975806a6d4147822da2087fe68bd4cc10a3d6a15f5d213d9</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">2c59e1ef8a66cf553ce17aaf097fa95216561047c17b4c55073a154f01e08879</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">4105b5c61a9f149c564e46d983a6b090bfd0c942ab6751519e56974bea2dfc2d</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">44c50b10db711e44d85bfc4fc32745544cdd1f17189408dc2114d95451bb7c1c</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7b1bcac1e52c0935c4323005717153187cacafe2f264592b7a70f75a890f536f</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9ce079bfbc22af989c608254987f67769654daa4d8cb28e2c0d5e3386191058a</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a861187cc90e21e606d39dac2698d652af50a1e1524195787d42ff214e754581</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">be6654d820acb9fc32505781a9fdf77d0e4f99603b266e75bc2d475593ffb0e1</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e8448f9ac788a457518e16f7e02e6d08d9aa5e01d3a94c4cb1e07c1c57f50422</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.4.0.7-1.el9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f1960bc2a0e6049ddc768ede7823137c232ea40c5c1d3cc68c0be42dc6474a8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4623</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:22:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4623" id="RHSA-2024:4623" type="rhsa" title="RHSA-2024:4623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936"/>
      <reference href="https://bugzilla.redhat.com/2295867" id="2295867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4623.html" id="ALSA-2024:4623" type="self" title="ALSA-2024:4623"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="qt5-qtbase-static" version="5.15.9" release="10.el9_4" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-10.el9_4.aarch64.rpm</filename>
          <sum type="sha256">85e482552b3e5679293b9fe32b617d9c498d6c8af9b39317bfcf0b63f4be9959</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4749</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:35:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)
* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)
* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4749" id="RHSA-2024:4749" type="rhsa" title="RHSA-2024:4749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36765" id="CVE-2022-36765" type="cve" title="CVE-2022-36765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45236" id="CVE-2023-45236" type="cve" title="CVE-2023-45236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45237" id="CVE-2023-45237" type="cve" title="CVE-2023-45237"/>
      <reference href="https://bugzilla.redhat.com/2257584" id="2257584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258703" id="2258703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258706" id="2258706" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4749.html" id="ALSA-2024:4749" type="self" title="ALSA-2024:4749"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="edk2-ovmf" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">07ab65898528b14bd133dcc29037207a0575b113ba24d06b8ec9fb9a2740a4a8</sum>
        </package>
        <package name="edk2-aarch64" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">9a5248396531529aa0a93ef15d4a30176a9c18dced35b724cbc45a4b1e0b3784</sum>
        </package>
        <package name="edk2-tools" version="20231122" release="6.el9_4.2" epoch="0" arch="aarch64" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-tools-20231122-6.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">a37b1abcd086ada56a23b2fc5caf23952b18b9a7dbe8c5da55a161f9834fff01</sum>
        </package>
        <package name="edk2-tools-doc" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-tools-doc-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">c756059b460fd70f02088389aa5bc06026f457801491df61042de96189563f25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4756</id>
    <title>Moderate: libuv security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 15:07:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libuv security update</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4756" id="RHSA-2024:4756" type="rhsa" title="RHSA-2024:4756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806"/>
      <reference href="https://bugzilla.redhat.com/2263292" id="2263292" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4756.html" id="ALSA-2024:4756" type="self" title="ALSA-2024:4756"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libuv-devel" version="1.42.0" release="2.el9_4" epoch="1" arch="aarch64" src="libuv-1.42.0-2.el9_4.src.rpm">
          <filename>libuv-devel-1.42.0-2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f6b30820f6298311ae7dca875e6b8422b4bd45874b5a4eb7ed5d637321534686</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4757</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:13:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4757" id="RHSA-2024:4757" type="rhsa" title="RHSA-2024:4757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4418" id="CVE-2024-4418" type="cve" title="CVE-2024-4418"/>
      <reference href="https://bugzilla.redhat.com/2278616" id="2278616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4757.html" id="ALSA-2024:4757" type="self" title="ALSA-2024:4757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libvirt-devel" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-devel-10.0.0-6.6.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">308a7e830cd7866304da89d1447f5877bb4f0851eab9ad3d2a1158e19ab59e01</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.6.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3a705ac547e17700d342907b1a9bf190db3ab6541b93f7ee3094e23f62108b5b</sum>
        </package>
        <package name="libvirt-docs" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="aarch64" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-docs-10.0.0-6.6.el9_4.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d8bbc5c24597da98c5ad0923b9c6338ee189ca10b37f60f7464447c8c738d194</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4766</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:07:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4766" id="RHSA-2024:4766" type="rhsa" title="RHSA-2024:4766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4766.html" id="ALSA-2024:4766" type="self" title="ALSA-2024:4766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.3" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">17a60306d6dc4206383c3ca8457341d0d70fb2984a9ed3f4a1a64562cf88d511</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.3" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">89fd71106af347e943dd527a13fcb1420709911ebfb752c556c1cc725a9d2141</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.3" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">fd4ce0ca613856c35149004cbfed5c1a5bb10c0a0c83f574136e436f7e757ae8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4779</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:02:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4779" id="RHSA-2024:4779" type="rhsa" title="RHSA-2024:4779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4779.html" id="ALSA-2024:4779" type="self" title="ALSA-2024:4779"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.3" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">5e812ffcd0112d7e69acd20b24b162b6ecd9c90693992161f5b7e18c3ff8f914</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.3" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">6ac32016143fb34696cac0d732cb90f3c964457200048700502ee2dca9bc79d2</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.3" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">df8bd36c41f5f827ed4f92842d4c0df5da02ec39a0f936a68ddbfbd2aed7bf48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4935</id>
    <title>Important: freeradius security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-08-06 20:53:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freeradius security update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: forgery attack (CVE-2024-3596)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4935" id="RHSA-2024:4935" type="rhsa" title="RHSA-2024:4935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596"/>
      <reference href="https://bugzilla.redhat.com/2263240" id="2263240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4935.html" id="ALSA-2024:4935" type="self" title="ALSA-2024:4935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="freeradius-sqlite" version="3.0.21" release="40.el9_4" epoch="0" arch="aarch64" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-sqlite-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">03d44c55f7b7db7cc107850a628d67843040f80c8d27202240a36be20b5b54b9</sum>
        </package>
        <package name="freeradius-postgresql" version="3.0.21" release="40.el9_4" epoch="0" arch="aarch64" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-postgresql-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">069ace9f2e0f1b295ee984ee2831d831ec67b99011f824b25ea540afc22bb996</sum>
        </package>
        <package name="freeradius-perl" version="3.0.21" release="40.el9_4" epoch="0" arch="aarch64" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-perl-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">0726ef61f57c819680148cd6c0322068be176d18376d5d25cfd51b676212b8c3</sum>
        </package>
        <package name="freeradius-rest" version="3.0.21" release="40.el9_4" epoch="0" arch="aarch64" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-rest-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">6d43d6ad52041b34825eb8aaf7b177cb269943cde6eb548e21b6311489c9eee9</sum>
        </package>
        <package name="freeradius-unixODBC" version="3.0.21" release="40.el9_4" epoch="0" arch="aarch64" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-unixODBC-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">a09694fc3f7cf1bb61478e40889f83cbdbc3da919985b0edab34682606c4e19e</sum>
        </package>
        <package name="freeradius-mysql" version="3.0.21" release="40.el9_4" epoch="0" arch="aarch64" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-mysql-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c58812347c2683672522df4ea25b94a7dc2b3221d93b796d778556b7198491ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5192</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2024-08-12 00:00:00"/>
    <updated date="2024-08-13 06:44:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
* 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5192" id="RHSA-2024:5192" type="rhsa" title="RHSA-2024:5192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5953" id="CVE-2024-5953" type="cve" title="CVE-2024-5953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6237" id="CVE-2024-6237" type="cve" title="CVE-2024-6237"/>
      <reference href="https://bugzilla.redhat.com/2292104" id="2292104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293579" id="2293579" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5192.html" id="ALSA-2024:5192" type="self" title="ALSA-2024:5192"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="389-ds-base-devel" version="2.4.5" release="9.el9_4" epoch="0" arch="aarch64" src="389-ds-base-2.4.5-9.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-9.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e0fd820f5a57cf508707adc2ecba139fcd29961812a55696be945fdef00064ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5231</id>
    <title>Important: bind and bind-dyndb-ldap security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-28 15:57:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind and bind-dyndb-ldap security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5231" id="RHSA-2024:5231" type="rhsa" title="RHSA-2024:5231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298904" id="2298904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5231.html" id="ALSA-2024:5231" type="self" title="ALSA-2024:5231"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="bind-devel" version="9.16.23" release="18.el9_4.6" epoch="32" arch="aarch64" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-devel-9.16.23-18.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">553869277a16cfe0907b023158774c145a56152b6bb74589dacf883c7c7a70f5</sum>
        </package>
        <package name="bind-doc" version="9.16.23" release="18.el9_4.6" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-doc-9.16.23-18.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">a5ec8a6da6cd1f20a2976b83bb6408fc04182069d72450b79a1f8eac28b51e2b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5334</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-21 12:17:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5334" id="RHSA-2024:5334" type="rhsa" title="RHSA-2024:5334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5334.html" id="ALSA-2024:5334" type="self" title="ALSA-2024:5334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.108" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.108-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">fc4d2aa28570434893c5e24d04d225bc94423f2fd33693ad445cc5e23c2f1ec5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5533</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:41:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5533" id="RHSA-2024:5533" type="rhsa" title="RHSA-2024:5533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5533.html" id="ALSA-2024:5533" type="self" title="ALSA-2024:5533"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="3.el9_4.1" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-3.el9_4.1.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-3.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">131b0a0f2d74e9412a6cc9f472ba83b59d41a1569d92fe31ea3e11e061212f48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5999</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:54:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5999" id="RHSA-2024:5999" type="rhsa" title="RHSA-2024:5999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5999.html" id="ALSA-2024:5999" type="self" title="ALSA-2024:5999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="postgresql-server-devel" version="13.16" release="1.el9_4" epoch="0" arch="aarch64" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-server-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">13fce2cbaf06d3fc47e2f33eea684ae801cb9116ca25b3ae5823ea45b09e7251</sum>
        </package>
        <package name="postgresql-private-devel" version="13.16" release="1.el9_4" epoch="0" arch="aarch64" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-private-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3be16229464ba1a200cf093cda18a8cced6b8b1a56616c21b47fa5d25c3becc0</sum>
        </package>
        <package name="postgresql-test" version="13.16" release="1.el9_4" epoch="0" arch="aarch64" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-test-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3fa261e9b55cc556a7b0cacb821189e3949c1e80a4ac1f9f1db1a4084054a264</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.16" release="1.el9_4" epoch="0" arch="aarch64" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-upgrade-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">616f92b42b10529b8155f5a17c2dac472694161749d21170d25aff602f2d279f</sum>
        </package>
        <package name="postgresql-docs" version="13.16" release="1.el9_4" epoch="0" arch="aarch64" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-docs-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e800033c5eab3e33889cec204699d40e42cbef94b1e0b2695dc82565fba49d80</sum>
        </package>
        <package name="postgresql-static" version="13.16" release="1.el9_4" epoch="0" arch="aarch64" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-static-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ef09a69e1bf0339e5d34b6d6214e3bbb1d21204b78839429feaf397d234f853c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6146</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 07:39:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6146" id="RHSA-2024:6146" type="rhsa" title="RHSA-2024:6146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6146.html" id="ALSA-2024:6146" type="self" title="ALSA-2024:6146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3.12-idle" version="3.12.1" release="4.el9_4.3" epoch="0" arch="aarch64" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-idle-3.12.1-4.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">b1530a1a123df0c663c6cc49ae7588a0f634e92db04a336ee97ef626913c52a7</sum>
        </package>
        <package name="python3.12-debug" version="3.12.1" release="4.el9_4.3" epoch="0" arch="aarch64" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-debug-3.12.1-4.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">b9cbb5a615e55e4b4b6b6c1cb2d698facd3ce2acbdcfde755ab79198e2d663ab</sum>
        </package>
        <package name="python3.12-test" version="3.12.1" release="4.el9_4.3" epoch="0" arch="aarch64" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-test-3.12.1-4.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">c516d61519dbbe6fe4ec8290e008b24ecdfab5e11ce92c56caaa7cdc2350367b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6163</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:28:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6163" id="RHSA-2024:6163" type="rhsa" title="RHSA-2024:6163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6163.html" id="ALSA-2024:6163" type="self" title="ALSA-2024:6163"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.5" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.5.aarch64.rpm</filename>
          <sum type="sha256">15a5d51139501ac2dae1cf322327c4b293191f6df72576006914893ed822e171</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.5" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.5.aarch64.rpm</filename>
          <sum type="sha256">afc13b605cf45739c2e5d8d63814cc05e7be40330276c5bce1671a37608631c0</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.5" epoch="0" arch="aarch64" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.5.aarch64.rpm</filename>
          <sum type="sha256">ec62155cf74facccee4bf0a68dc0133e9dd94e415bfa93d962aa189b643eeaf8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6179</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:24:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6179" id="RHSA-2024:6179" type="rhsa" title="RHSA-2024:6179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6179.html" id="ALSA-2024:6179" type="self" title="ALSA-2024:6179"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.5" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.5.aarch64.rpm</filename>
          <sum type="sha256">1acf602dec87dd011636bc693483d5805688a7940b6af20febc8e83ff545ebd9</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.5" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.5.aarch64.rpm</filename>
          <sum type="sha256">3427ead8b10e7d6759889fbef013cbc94da21834c7c0c56f6fd31679ac20d90d</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.5" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.5.aarch64.rpm</filename>
          <sum type="sha256">4f9197e97cd47f67cdb3f77e6526fbf099357725f42509d066e1149af5bbe408</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6197</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:17:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510)
* ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869)
* ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6197" id="RHSA-2024:6197" type="rhsa" title="RHSA-2024:6197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29510" id="CVE-2024-29510" type="cve" title="CVE-2024-29510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33869" id="CVE-2024-33869" type="cve" title="CVE-2024-33869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33870" id="CVE-2024-33870" type="cve" title="CVE-2024-33870"/>
      <reference href="https://bugzilla.redhat.com/2293950" id="2293950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293958" id="2293958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293959" id="2293959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6197.html" id="ALSA-2024:6197" type="self" title="ALSA-2024:6197"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="libgs-devel" version="9.54.0" release="17.el9_4" epoch="0" arch="aarch64" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>libgs-devel-9.54.0-17.el9_4.aarch64.rpm</filename>
          <sum type="sha256">706dc43209e1913976e6b9142b078215b6ae4d6f113e1d254f2b403aed41eff5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6356</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-09-04 00:00:00"/>
    <updated date="2024-09-05 06:55:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6356" id="RHSA-2024:6356" type="rhsa" title="RHSA-2024:6356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://bugzilla.redhat.com/2305202" id="2305202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6356.html" id="ALSA-2024:6356" type="self" title="ALSA-2024:6356"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="flatpak-devel" version="1.12.9" release="3.el9_4" epoch="0" arch="aarch64" src="flatpak-1.12.9-3.el9_4.src.rpm">
          <filename>flatpak-devel-1.12.9-3.el9_4.aarch64.rpm</filename>
          <sum type="sha256">fdf42c339826cd9ea8e2c18c8842bca7b23429d1da92f0d26c272329a6555500</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6464</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2024-09-09 00:00:00"/>
    <updated date="2024-09-10 06:20:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib2: Signal subscription vulnerabilities (CVE-2024-34397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6464" id="RHSA-2024:6464" type="rhsa" title="RHSA-2024:6464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397"/>
      <reference href="https://bugzilla.redhat.com/2279632" id="2279632" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6464.html" id="ALSA-2024:6464" type="self" title="ALSA-2024:6464"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="glib2-static" version="2.68.4" release="14.el9_4.1" epoch="0" arch="aarch64" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-static-2.68.4-14.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">14e1a5824bfd15ee31b00e1ff1664609ac4a05b2acdd7670f6021ad587e6a5ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6529</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-10 00:00:00"/>
    <updated date="2024-09-11 09:48:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)
* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6529" id="RHSA-2024:6529" type="rhsa" title="RHSA-2024:6529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185"/>
      <reference href="https://bugzilla.redhat.com/2305909" id="2305909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305910" id="2305910" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6529.html" id="ALSA-2024:6529" type="self" title="ALSA-2024:6529"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dovecot-devel" version="2.3.16" release="11.el9_4.1" epoch="1" arch="aarch64" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-devel-2.3.16-11.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">e63d32e3b6c4c2ff632911daed9e65b0989885c7015f9d0b23503b9e3fddb120</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6757</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-20 13:13:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libnbd security update</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6757" id="RHSA-2024:6757" type="rhsa" title="RHSA-2024:6757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383"/>
      <reference href="https://bugzilla.redhat.com/2302865" id="2302865" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6757.html" id="ALSA-2024:6757" type="self" title="ALSA-2024:6757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="ocaml-libnbd-devel" version="1.18.1" release="4.el9_4" epoch="0" arch="aarch64" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>ocaml-libnbd-devel-1.18.1-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">0f00c0872a575d013a8caf0aa31f348c23dae0be5531c891b4edae83fbd1d038</sum>
        </package>
        <package name="ocaml-libnbd" version="1.18.1" release="4.el9_4" epoch="0" arch="aarch64" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>ocaml-libnbd-1.18.1-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">52ac10395ab1a63dafe873a32174932b22be85af313b7758f51ff8b24804b5db</sum>
        </package>
        <package name="libnbd-devel" version="1.18.1" release="4.el9_4" epoch="0" arch="aarch64" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>libnbd-devel-1.18.1-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">63e1ebfafa109487c9562ddd3bb59cffeaf9c71500329e953d153e85739eae8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7346</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-09-27 00:00:00"/>
    <updated date="2024-09-28 10:34:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7346" id="RHSA-2024:7346" type="rhsa" title="RHSA-2024:7346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176"/>
      <reference href="https://bugzilla.redhat.com/2314252" id="2314252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314253" id="2314253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7346.html" id="ALSA-2024:7346" type="self" title="ALSA-2024:7346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="cups-filters-devel" version="1.28.7" release="17.el9_4" epoch="0" arch="aarch64" src="cups-filters-1.28.7-17.el9_4.src.rpm">
          <filename>cups-filters-devel-1.28.7-17.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ecef93815a7ded59c96304ac40c03d8213ec7eb496709a4d15ceb9b8ef108684</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7867</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-11 07:48:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7867" id="RHSA-2024:7867" type="rhsa" title="RHSA-2024:7867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7867.html" id="ALSA-2024:7867" type="self" title="ALSA-2024:7867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.135" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.135-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e7237740400acf30984a8b00b363f004471dcc938e3d433e3c2fb62150e2c5c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7869</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-11 07:46:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7869" id="RHSA-2024:7869" type="rhsa" title="RHSA-2024:7869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7869.html" id="ALSA-2024:7869" type="self" title="ALSA-2024:7869"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-aarch64-crb-rpms__9_4_default">
        <name>almalinux-9-for-aarch64-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.110" release="1.el9_4" epoch="0" arch="aarch64" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.110-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">8c97270b368b9566ace69c7e13c68b7da971396ba56b6376c128941dc742ab5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>