<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13916</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-05-06 00:00:00"/>
    <updated date="2026-05-06 15:27:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
  * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13916" id="RHSA-2026:13916" type="rhsa" title="RHSA-2026:13916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-30922" id="CVE-2026-30922" type="cve" title="CVE-2026-30922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32597" id="CVE-2026-32597" type="cve" title="CVE-2026-32597"/>
      <reference href="https://bugzilla.redhat.com/2447194" id="2447194" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448553" id="2448553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-13916.html" id="ALSA-2026:13916" type="self" title="ALSA-2026:13916"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-devel-rpms__10_0_default">
        <name>almalinux-10-for-s390x-devel-rpms__10_0_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.16.0" release="13.el10_1.4" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.4.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.16.0-13.el10_1.4.noarch.rpm</filename>
          <sum type="sha256">1bb21e363c275364c5569b7c6ab8587207b8c3d19c8a54beebef3fe9f16ebfe9</sum>
        </package>
        <package name="fence-agents-lpar" version="4.16.0" release="13.el10_1.4" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.4.src.rpm">
          <filename>fence-agents-lpar-4.16.0-13.el10_1.4.noarch.rpm</filename>
          <sum type="sha256">a8fbaee61f5ddaf0cf9bffcc118db4826a5a05bc25b785eb579b59dcf34ee783</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1905</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 08:19:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1905" id="RHSA-2026:1905" type="rhsa" title="RHSA-2026:1905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1905.html" id="ALSA-2026:1905" type="self" title="ALSA-2026:1905"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-devel-rpms__10_0_default">
        <name>almalinux-10-for-s390x-devel-rpms__10_0_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.16.0" release="13.el10_1.2" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.2.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.16.0-13.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">1140a0126790eadfec370897887672c9d16efc30a74b7d56bbcf575a28c6849e</sum>
        </package>
        <package name="fence-agents-lpar" version="4.16.0" release="13.el10_1.2" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.2.src.rpm">
          <filename>fence-agents-lpar-4.16.0-13.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">c14f47ca04e62c592419b32c0df598be7c63242ccc82effa09c1fcc73d8983df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4649</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2026-03-16 00:00:00"/>
    <updated date="2026-03-19 15:01:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4649" id="RHSA-2026:4649" type="rhsa" title="RHSA-2026:4649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61662" id="CVE-2025-61662" type="cve" title="CVE-2025-61662"/>
      <reference href="https://bugzilla.redhat.com/2414683" id="2414683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4649.html" id="ALSA-2026:4649" type="self" title="ALSA-2026:4649"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-devel-rpms__10_0_default">
        <name>almalinux-10-for-s390x-devel-rpms__10_0_default</name>
        <package name="grub2-ppc64le-modules" version="2.12" release="29.el10_1.2.alma.1" epoch="1" arch="noarch" src="grub2-2.12-29.el10_1.2.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.12-29.el10_1.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">7fb74d1d103ac7dea7046f6dac6dc7a7832ee0d726af1b4472c9d69b5c35305c</sum>
        </package>
        <package name="grub2-pc-modules" version="2.12" release="29.el10_1.2.alma.1" epoch="1" arch="noarch" src="grub2-2.12-29.el10_1.2.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.12-29.el10_1.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">d3355bd4dd743099f1ddaad918e54c33cfee355313ed56f2faca99c6da911857</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A003</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:17:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A003.html" id="ALSA-2026:A003" type="self" title="ALSA-2026:A003"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-devel-rpms__10_0_default">
        <name>almalinux-10-for-s390x-devel-rpms__10_0_default</name>
        <package name="kernel-debug-modules-partner" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-debug-modules-partner-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">41c534dc27703d5a5df67d755c3b62ad93b46e24417cc49fb21f5d9ab124fabe</sum>
        </package>
        <package name="libperf-devel" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>libperf-devel-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">55b30fcf23af085b84da7c4a43ddebea9db3e0af93d6cb81c8d91242ed526348</sum>
        </package>
        <package name="kernel-selftests-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-selftests-internal-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">58ed2d7d4e86d4500754abccc5c8b9be8630b5c9326a72b30236446f0abd5914</sum>
        </package>
        <package name="kernel-modules-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-modules-internal-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">7ba0d5bd7f08e4ece05b1f5ccdfc548fa99489aa3c65c9fc66c8cfa0d94b8993</sum>
        </package>
        <package name="kernel-modules-partner" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-modules-partner-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">8bf3912453b866c410fd4e61f187fad97d3e776241b6ff9935f7ef613b36774f</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-debug-modules-internal-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">b228256d00eb69ba37383c2f1b59223a192e8665c87a8ee4004995bc0d6e468f</sum>
        </package>
        <package name="kernel-zfcpdump-modules-partner" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-partner-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">c90f6a93559625a0c226daa092ab776114c92a39ac3cfb31c86cb11fb6d398be</sum>
        </package>
        <package name="kernel-zfcpdump-modules-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-internal-6.12.0-124.52.2.el10_1.s390x.rpm</filename>
          <sum type="sha256">cb215443b8413db3eb768e7e9da19cb09705579c48360d5dad2b4e7357963221</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>