<updates>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2682</id>
    <title>new packages: protobuf-c</title>
    <issued date="2022-05-17 06:23:51" />
    <updated date="2023-02-02 13:55:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for protobuf-c.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057348" id="2057348" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2682" id="RLBA-2022:2682" type="self" title="RLBA-2022:2682" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="protobuf-c-compiler" arch="aarch64" epoch="0" version="1.3.3" release="12.el9" src="protobuf-c-1.3.3-12.el9.src.rpm">
          <filename>protobuf-c-compiler-1.3.3-12.el9.aarch64.rpm</filename>
          <sum type="sha256">0bc397b9f0b8857be4d5343145bcfbc04980a67f3e076ab9adcec1ec166bf803</sum>
        </package>
        <package name="protobuf-c-devel" arch="aarch64" epoch="0" version="1.3.3" release="12.el9" src="protobuf-c-1.3.3-12.el9.src.rpm">
          <filename>protobuf-c-devel-1.3.3-12.el9.aarch64.rpm</filename>
          <sum type="sha256">840520e9c9508da5f049775d11e6cbff79ff21bf0cbc7ff76f5aa7edd5a77570</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3906</id>
    <title>new packages: ModemManager</title>
    <issued date="2022-05-17 07:45:35" />
    <updated date="2023-02-02 13:55:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ModemManager.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1996716" id="1996716" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2009318" id="2009318" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2011990" id="2011990" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3906" id="RLBA-2022:3906" type="self" title="RLBA-2022:3906" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ModemManager-devel" arch="aarch64" epoch="0" version="1.18.2" release="3.el9" src="ModemManager-1.18.2-3.el9.src.rpm">
          <filename>ModemManager-devel-1.18.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">1fe67e5b70614609813a9dbddee95ae0958a738d6c4200afdd05ead439b15093</sum>
        </package>
        <package name="ModemManager-glib-devel" arch="aarch64" epoch="0" version="1.18.2" release="3.el9" src="ModemManager-1.18.2-3.el9.src.rpm">
          <filename>ModemManager-glib-devel-1.18.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c5a24d1c988edd58c330f3cf363409f75affab52c159d424599bd6e9f2c1fea2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3916</id>
    <title>new packages: fonts-rpm-macros</title>
    <issued date="2022-05-17 07:46:36" />
    <updated date="2025-10-17 21:51:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fonts-rpm-macros.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2004882" id="2004882" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3916" id="RLBA-2022:3916" type="self" title="RLBA-2022:3916" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fonts-rpm-macros" arch="noarch" epoch="1" version="2.0.5" release="7.el9.1" src="fonts-rpm-macros-2.0.5-7.el9.1.src.rpm">
          <filename>fonts-rpm-macros-2.0.5-7.el9.1.noarch.rpm</filename>
          <sum type="sha256">8ccbcc8437fc2e6bdb7da7e914d733ca4440d972b906d970449ccf2a09f079ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3921</id>
    <title>new packages: libsemanage</title>
    <issued date="2022-05-17 07:46:52" />
    <updated date="2023-02-02 13:55:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsemanage.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003550" id="2003550" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2049191" id="2049191" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3921" id="RLBA-2022:3921" type="self" title="RLBA-2022:3921" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsemanage-devel" arch="aarch64" epoch="0" version="3.3" release="2.el9" src="libsemanage-3.3-2.el9.src.rpm">
          <filename>libsemanage-devel-3.3-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f87c41c4518a118860ee4994d1f0c4b1a8ef1f944db9fa3895537b98c074c9b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3931</id>
    <title>new packages: glib2</title>
    <issued date="2022-05-17 07:48:07" />
    <updated date="2023-02-02 13:55:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glib2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1910092" id="1910092" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2014624" id="2014624" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3931" id="RLBA-2022:3931" type="self" title="RLBA-2022:3931" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glib2-static" arch="aarch64" epoch="0" version="2.68.4" release="5.el9" src="glib2-2.68.4-5.el9.src.rpm">
          <filename>glib2-static-2.68.4-5.el9.aarch64.rpm</filename>
          <sum type="sha256">278d682e5a196a09bbdd9467edec31038f713272960286276a10a9540971e301</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3935</id>
    <title>new packages: fuse</title>
    <issued date="2022-05-17 07:48:16" />
    <updated date="2023-02-02 13:55:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fuse.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1984778" id="1984778" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3935" id="RLBA-2022:3935" type="self" title="RLBA-2022:3935" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fuse-devel" arch="aarch64" epoch="0" version="2.9.9" release="15.el9" src="fuse-2.9.9-15.el9.src.rpm">
          <filename>fuse-devel-2.9.9-15.el9.aarch64.rpm</filename>
          <sum type="sha256">6bedd93d92c52b432a3c0721eb75a1a2e8f270738e1592f62c5a8ae898eaa336</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3938</id>
    <title>new packages: libxmlb</title>
    <issued date="2022-05-17 07:48:24" />
    <updated date="2023-02-02 13:55:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libxmlb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3938" id="RLBA-2022:3938" type="self" title="RLBA-2022:3938" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxmlb-devel" arch="aarch64" epoch="0" version="0.3.3" release="1.el9" src="libxmlb-0.3.3-1.el9.src.rpm">
          <filename>libxmlb-devel-0.3.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">44d261431d269f3e0f57fffaba6bc38c0e5e83269b7a7b5b133a9f6b6ed751ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3939</id>
    <title>new packages: libgusb</title>
    <issued date="2022-05-17 07:48:27" />
    <updated date="2023-02-02 13:55:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgusb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3939" id="RLBA-2022:3939" type="self" title="RLBA-2022:3939" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgusb-devel" arch="aarch64" epoch="0" version="0.3.8" release="1.el9" src="libgusb-0.3.8-1.el9.src.rpm">
          <filename>libgusb-devel-0.3.8-1.el9.aarch64.rpm</filename>
          <sum type="sha256">96f8508367bc21a71db00436f70c7252c335299d700af00b938315704e91ca53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3940</id>
    <title>new packages: gobject-introspection</title>
    <issued date="2022-05-17 07:48:32" />
    <updated date="2023-02-02 13:55:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gobject-introspection.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3940" id="RLBA-2022:3940" type="self" title="RLBA-2022:3940" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gobject-introspection-devel" arch="aarch64" epoch="0" version="1.68.0" release="10.el9" src="gobject-introspection-1.68.0-10.el9.src.rpm">
          <filename>gobject-introspection-devel-1.68.0-10.el9.aarch64.rpm</filename>
          <sum type="sha256">fe01b4f18764d52fb0e32874eeb7183e8169f2fba918a28bf14974c990efd3d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:3950</id>
    <title>new packages: RDMA stack</title>
    <issued date="2022-05-17 07:49:49" />
    <updated date="2023-02-02 13:55:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mpitests, ucx, rdma-core, mstflint, libvma, libpsm2, fabtests, openmpi, perftest, eth-tools, mpich, libfabric.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1948337" id="1948337" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1991185" id="1991185" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015389" id="2015389" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015392" id="2015392" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015394" id="2015394" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015398" id="2015398" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015402" id="2015402" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015404" id="2015404" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015405" id="2015405" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2020061" id="2020061" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2024548" id="2024548" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2034948" id="2034948" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2055184" id="2055184" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:3950" id="RLEA-2022:3950" type="self" title="RLEA-2022:3950" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfabric-devel" arch="aarch64" epoch="0" version="1.14.0" release="1.el9" src="libfabric-1.14.0-1.el9.src.rpm">
          <filename>libfabric-devel-1.14.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">875e602b49275fc2b9a204e007048a81ca000000296d9ff044e98392eecf30a3</sum>
        </package>
        <package name="python3-mpich" arch="aarch64" epoch="0" version="3.4.2" release="1.el9" src="mpich-3.4.2-1.el9.src.rpm">
          <filename>python3-mpich-3.4.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2c8b8183141106518a29a86143840dba4001eb03462457343378a9ed24edc343</sum>
        </package>
        <package name="python3-openmpi" arch="aarch64" epoch="1" version="4.1.1" release="5.el9" src="openmpi-4.1.1-5.el9.src.rpm">
          <filename>python3-openmpi-4.1.1-5.el9.aarch64.rpm</filename>
          <sum type="sha256">1dae40124be5836fc7fdd5142d2d844c911a9ffc39c9489953c83d335035b8d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3962</id>
    <title>new packages: libcomps</title>
    <issued date="2022-05-17 07:51:41" />
    <updated date="2025-10-17 21:54:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libcomps.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3962" id="RLBA-2022:3962" type="self" title="RLBA-2022:3962" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libcomps-devel" arch="aarch64" epoch="0" version="0.1.18" release="1.el9" src="libcomps-0.1.18-1.el9.src.rpm">
          <filename>libcomps-devel-0.1.18-1.el9.aarch64.rpm</filename>
          <sum type="sha256">befe750022326c41944dff24c3a762f8324dd7df6b08db30b8dc5b51cc9d99d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3964</id>
    <title>new packages: kmod</title>
    <issued date="2022-05-17 07:51:48" />
    <updated date="2023-02-02 13:55:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kmod.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1985100" id="1985100" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3964" id="RLBA-2022:3964" type="self" title="RLBA-2022:3964" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kmod-devel" arch="aarch64" epoch="0" version="28" release="7.el9" src="kmod-28-7.el9.src.rpm">
          <filename>kmod-devel-28-7.el9.aarch64.rpm</filename>
          <sum type="sha256">ad6e2b995bba79ab33e55135bd4edc91eb4f07862a3868d0970c2da4b5e4026d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3975</id>
    <title>new packages: json-c</title>
    <issued date="2022-05-17 07:52:52" />
    <updated date="2025-10-17 21:54:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for json-c.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2001067" id="2001067" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3975" id="RLBA-2022:3975" type="self" title="RLBA-2022:3975" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="json-c-devel" arch="aarch64" epoch="0" version="0.14" release="11.el9" src="json-c-0.14-11.el9.src.rpm">
          <filename>json-c-devel-0.14-11.el9.aarch64.rpm</filename>
          <sum type="sha256">52c07a5031940eeb45f353a6deb1e5d4a4e1e77daf7f7299880ecdcab326913c</sum>
        </package>
        <package name="json-c-doc" arch="noarch" epoch="0" version="0.14" release="11.el9" src="json-c-0.14-11.el9.src.rpm">
          <filename>json-c-doc-0.14-11.el9.noarch.rpm</filename>
          <sum type="sha256">e3b3c4fb56fcd74820d10d0c5fca18529c7c9f0c519dc4f891813b826b7030e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3983</id>
    <title>new packages: pcsc-lite</title>
    <issued date="2022-05-17 07:53:41" />
    <updated date="2023-02-02 13:55:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pcsc-lite.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2017828" id="2017828" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3983" id="RLBA-2022:3983" type="self" title="RLBA-2022:3983" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pcsc-lite-devel" arch="aarch64" epoch="0" version="1.9.4" release="1.el9" src="pcsc-lite-1.9.4-1.el9.src.rpm">
          <filename>pcsc-lite-devel-1.9.4-1.el9.aarch64.rpm</filename>
          <sum type="sha256">7f09b1875311f47a0e9520110050dbfdd286914e08d50953ab37122cbb8188ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:3986</id>
    <title>new packages: ipset</title>
    <issued date="2022-05-17 07:53:52" />
    <updated date="2023-02-02 13:55:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipset.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2022:3986" id="RLEA-2022:3986" type="self" title="RLEA-2022:3986" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ipset-devel" arch="aarch64" epoch="0" version="7.11" release="6.el9" src="ipset-7.11-6.el9.src.rpm">
          <filename>ipset-devel-7.11-6.el9.aarch64.rpm</filename>
          <sum type="sha256">464e3e352999d8d24f68c0c57bea04077023bc83008074e331b24239b391fce0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3987</id>
    <title>new packages: libdb</title>
    <issued date="2022-05-17 07:53:55" />
    <updated date="2023-02-02 13:55:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2002186" id="2002186" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2026417" id="2026417" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3987" id="RLBA-2022:3987" type="self" title="RLBA-2022:3987" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdb-cxx" arch="aarch64" epoch="0" version="5.3.28" release="53.el9" src="libdb-5.3.28-53.el9.src.rpm">
          <filename>libdb-cxx-5.3.28-53.el9.aarch64.rpm</filename>
          <sum type="sha256">2a143edbbf1fd2c1cf1efcd42ecfede84b9bcd2c2c389c8b81dd15085a217495</sum>
        </package>
        <package name="libdb-cxx-devel" arch="aarch64" epoch="0" version="5.3.28" release="53.el9" src="libdb-5.3.28-53.el9.src.rpm">
          <filename>libdb-cxx-devel-5.3.28-53.el9.aarch64.rpm</filename>
          <sum type="sha256">7ddfedc21b66b95ac74315f983926936c4e5a793c0ef0eabe3a5a4b1c5e43417</sum>
        </package>
        <package name="libdb-devel-doc" arch="noarch" epoch="0" version="5.3.28" release="53.el9" src="libdb-5.3.28-53.el9.src.rpm">
          <filename>libdb-devel-doc-5.3.28-53.el9.noarch.rpm</filename>
          <sum type="sha256">b743f2065d46a14b686c79f9d02b49d149ce3519d7921192f324a886852ca4da</sum>
        </package>
        <package name="libdb-sql" arch="aarch64" epoch="0" version="5.3.28" release="53.el9" src="libdb-5.3.28-53.el9.src.rpm">
          <filename>libdb-sql-5.3.28-53.el9.aarch64.rpm</filename>
          <sum type="sha256">a01e21fc94924541ebe73dd2a75945291a0a2f5dd6b3103cc69dedd78c3162fd</sum>
        </package>
        <package name="libdb-sql-devel" arch="aarch64" epoch="0" version="5.3.28" release="53.el9" src="libdb-5.3.28-53.el9.src.rpm">
          <filename>libdb-sql-devel-5.3.28-53.el9.aarch64.rpm</filename>
          <sum type="sha256">ee8f142192baac07e310eeb9dd442cdb05956baa58c2568c206e9e6eceee1ee8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3990</id>
    <title>new packages: trace-cmd</title>
    <issued date="2022-05-17 07:54:16" />
    <updated date="2023-02-02 13:55:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for trace-cmd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3990" id="RLBA-2022:3990" type="self" title="RLBA-2022:3990" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtracecmd-devel" arch="aarch64" epoch="0" version="0" release="9.el9" src="trace-cmd-2.9.2-9.el9.src.rpm">
          <filename>libtracecmd-devel-0-9.el9.aarch64.rpm</filename>
          <sum type="sha256">984a0cd9cf93a9690fb14328369c80145dd10f26bdabace12790a4f66aa9503c</sum>
        </package>
        <package name="libtracecmd-devel" arch="aarch64" epoch="0" version="0" release="9.el9_0" src="trace-cmd-2.9.2-9.el9.src.rpm">
          <filename>libtracecmd-devel-0-9.el9_0.aarch64.rpm</filename>
          <sum type="sha256">6e0c3713289d60acc28193f9b33095c54cdd2e61ceafb268c7ee021fe956fe70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4002</id>
    <title>new packages: jansson</title>
    <issued date="2022-05-17 07:55:49" />
    <updated date="2025-10-17 21:54:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jansson.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2001066" id="2001066" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4002" id="RLBA-2022:4002" type="self" title="RLBA-2022:4002" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jansson-devel" arch="aarch64" epoch="0" version="2.14" release="1.el9" src="jansson-2.14-1.el9.src.rpm">
          <filename>jansson-devel-2.14-1.el9.aarch64.rpm</filename>
          <sum type="sha256">44a5e28010e474ba9198f8fb388cec47063f10bd384975d245a81a3e2ce60bb5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4008</id>
    <title>new packages: snappy</title>
    <issued date="2022-05-17 07:56:41" />
    <updated date="2023-02-02 13:55:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for snappy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4008" id="RLBA-2022:4008" type="self" title="RLBA-2022:4008" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="snappy-devel" arch="aarch64" epoch="0" version="1.1.8" release="8.el9" src="snappy-1.1.8-8.el9.src.rpm">
          <filename>snappy-devel-1.1.8-8.el9.aarch64.rpm</filename>
          <sum type="sha256">5a2e128482e0bd70641fb5734d70213c03dcec1c8aef955328f18d9efa519acd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4011</id>
    <title>new packages: libtalloc</title>
    <issued date="2022-05-17 07:56:49" />
    <updated date="2023-02-02 13:55:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtalloc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2013581" id="2013581" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4011" id="RLBA-2022:4011" type="self" title="RLBA-2022:4011" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtalloc-devel" arch="aarch64" epoch="0" version="2.3.3" release="1.el9" src="libtalloc-2.3.3-1.el9.src.rpm">
          <filename>libtalloc-devel-2.3.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">f62ab82d4f893dd8e8a8768af547c429f0b461cddf762ee453b13ea87bcc15f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4034</id>
    <title>new packages: libtracefs</title>
    <issued date="2022-05-17 07:58:33" />
    <updated date="2023-02-02 13:55:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtracefs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2038853" id="2038853" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4034" id="RLBA-2022:4034" type="self" title="RLBA-2022:4034" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtracefs-devel" arch="aarch64" epoch="0" version="1.0.2" release="7.el9" src="libtracefs-1.0.2-7.el9.src.rpm">
          <filename>libtracefs-devel-1.0.2-7.el9.aarch64.rpm</filename>
          <sum type="sha256">e0ccf68f513e1d6514f05db1cb0c267c631f1489d7d45d088573a8462b255d0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4038</id>
    <title>new packages: sysfsutil</title>
    <issued date="2022-05-17 07:58:50" />
    <updated date="2025-10-17 21:51:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sysfsutils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2043148" id="2043148" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4038" id="RLBA-2022:4038" type="self" title="RLBA-2022:4038" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsysfs-devel" arch="aarch64" epoch="0" version="2.1.1" release="10.el9" src="sysfsutils-2.1.1-10.el9.src.rpm">
          <filename>libsysfs-devel-2.1.1-10.el9.aarch64.rpm</filename>
          <sum type="sha256">199122d6f6f9261d6436671bce55139047e4c9cd89280920f64a7e5330b2fecd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4068</id>
    <title>new packages: gpgme</title>
    <issued date="2022-05-17 08:00:33" />
    <updated date="2025-10-17 21:51:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gpgme.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2035319" id="2035319" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4068" id="RLBA-2022:4068" type="self" title="RLBA-2022:4068" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gpgme-devel" arch="aarch64" epoch="0" version="1.15.1" release="6.el9" src="gpgme-1.15.1-6.el9.src.rpm">
          <filename>gpgme-devel-1.15.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">581249f1c79ff9dc3b0adab83016c3141e2d58f8bcf3fb4553895214a62aa3f6</sum>
        </package>
        <package name="gpgmepp-devel" arch="aarch64" epoch="0" version="1.15.1" release="6.el9" src="gpgme-1.15.1-6.el9.src.rpm">
          <filename>gpgmepp-devel-1.15.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">9ba99b8b04518c50be112bd8613dd0c09a3c8787671d9a268a596b83d9616606</sum>
        </package>
        <package name="qgpgme" arch="aarch64" epoch="0" version="1.15.1" release="6.el9" src="gpgme-1.15.1-6.el9.src.rpm">
          <filename>qgpgme-1.15.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">cd7b7727c0fbdb22a32975f6282c8c314a0390813f2864f64e83e68898f3a9d1</sum>
        </package>
        <package name="qgpgme-devel" arch="aarch64" epoch="0" version="1.15.1" release="6.el9" src="gpgme-1.15.1-6.el9.src.rpm">
          <filename>qgpgme-devel-1.15.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">ada57a4687de825aa0ba218eca12e41187e1aecabb92e96f8c71427d90cd5c9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4075</id>
    <title>new packages: texinfo</title>
    <issued date="2022-05-17 08:01:17" />
    <updated date="2025-10-17 21:54:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for texinfo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4075" id="RLBA-2022:4075" type="self" title="RLBA-2022:4075" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="texinfo" arch="aarch64" epoch="0" version="6.7" release="15.el9" src="texinfo-6.7-15.el9.src.rpm">
          <filename>texinfo-6.7-15.el9.aarch64.rpm</filename>
          <sum type="sha256">bd22b8b7cf89ceaca45578de22a5c5dbf7c490c438a3ec1ec27c75318fde4a46</sum>
        </package>
        <package name="texinfo-tex" arch="aarch64" epoch="0" version="6.7" release="15.el9" src="texinfo-6.7-15.el9.src.rpm">
          <filename>texinfo-tex-6.7-15.el9.aarch64.rpm</filename>
          <sum type="sha256">d62941fac442d30d35b0a84d0531783ec443b1a04c542828052f109021c4f95b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4091</id>
    <title>new packages: avahi</title>
    <issued date="2022-05-17 08:02:10" />
    <updated date="2023-02-02 13:55:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for avahi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044643" id="2044643" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4091" id="RLBA-2022:4091" type="self" title="RLBA-2022:4091" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="avahi-compat-howl" arch="aarch64" epoch="0" version="0.8" release="12.el9" src="avahi-0.8-12.el9.src.rpm">
          <filename>avahi-compat-howl-0.8-12.el9.aarch64.rpm</filename>
          <sum type="sha256">dd20371ba6e0346f84ef7ba50797dda280cb3c802f940d0912f81192c770f71d</sum>
        </package>
        <package name="avahi-compat-howl-devel" arch="aarch64" epoch="0" version="0.8" release="12.el9" src="avahi-0.8-12.el9.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-12.el9.aarch64.rpm</filename>
          <sum type="sha256">c5b20cfe6a9262ccf89131fe2a178ac948df53ec1e7e14436be0537e74fdca81</sum>
        </package>
        <package name="avahi-compat-libdns_sd" arch="aarch64" epoch="0" version="0.8" release="12.el9" src="avahi-0.8-12.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-12.el9.aarch64.rpm</filename>
          <sum type="sha256">4bd8a2973c17eb5916bafc977b676d92b5dd1196d86cffe7994fb3374a9bead6</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" arch="aarch64" epoch="0" version="0.8" release="12.el9" src="avahi-0.8-12.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-12.el9.aarch64.rpm</filename>
          <sum type="sha256">22894092eeba8b6fbab255de788393864212169326bbb9d575851741561178a6</sum>
        </package>
        <package name="avahi-devel" arch="aarch64" epoch="0" version="0.8" release="12.el9" src="avahi-0.8-12.el9.src.rpm">
          <filename>avahi-devel-0.8-12.el9.aarch64.rpm</filename>
          <sum type="sha256">9f923bb904376a07dc967b3d90ceca4d72c7e78cdb025147d96bd88bb9ba25bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4105</id>
    <title>new packages: cracklib</title>
    <issued date="2022-05-17 08:03:20" />
    <updated date="2025-10-17 21:54:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cracklib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4105" id="RLBA-2022:4105" type="self" title="RLBA-2022:4105" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cracklib-devel" arch="aarch64" epoch="0" version="2.9.6" release="27.el9" src="cracklib-2.9.6-27.el9.src.rpm">
          <filename>cracklib-devel-2.9.6-27.el9.aarch64.rpm</filename>
          <sum type="sha256">d7d07290226b44c9731e43fcc8f474dab7a099ae235e3877096bb6cc72c7a465</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4123</id>
    <title>new packages: fwupd</title>
    <issued date="2022-05-17 08:04:29" />
    <updated date="2023-02-02 13:55:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fwupd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2007520" id="2007520" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4123" id="RLBA-2022:4123" type="self" title="RLBA-2022:4123" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fwupd-devel" arch="aarch64" epoch="0" version="1.7.4" release="2.el9_0" src="fwupd-1.7.4-2.el9_0.src.rpm">
          <filename>fwupd-devel-1.7.4-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8ef8e7a2d370c664e59255b90d230f5d7b6607ecc8918eb58f8e1bc828671d7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4124</id>
    <title>new packages: gcab</title>
    <issued date="2022-05-17 08:04:31" />
    <updated date="2025-10-17 21:54:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gcab.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4124" id="RLBA-2022:4124" type="self" title="RLBA-2022:4124" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgcab1-devel" arch="aarch64" epoch="0" version="1.4" release="6.el9" src="gcab-1.4-6.el9.src.rpm">
          <filename>libgcab1-devel-1.4-6.el9.aarch64.rpm</filename>
          <sum type="sha256">8c99983b18e29777d2b6f3e41ac7c792c5abee04fc923e32c5a861874c377ebc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4125</id>
    <title>new packages: gdbm</title>
    <issued date="2022-05-17 08:04:39" />
    <updated date="2023-02-02 13:55:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gdbm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4125" id="RLBA-2022:4125" type="self" title="RLBA-2022:4125" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gdbm" arch="aarch64" epoch="1" version="1.19" release="4.el9" src="gdbm-1.19-4.el9.src.rpm">
          <filename>gdbm-1.19-4.el9.aarch64.rpm</filename>
          <sum type="sha256">413de3ee07befc30e9396651dd3b88bc7d0b5cdbc6935f8546ecf32baf2125c8</sum>
        </package>
        <package name="gdbm-devel" arch="aarch64" epoch="1" version="1.19" release="4.el9" src="gdbm-1.19-4.el9.src.rpm">
          <filename>gdbm-devel-1.19-4.el9.aarch64.rpm</filename>
          <sum type="sha256">399d5205373f8eddb398f9cb03424ea264055d84d5c0fe8ce918ba670567d19a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:4019</id>
    <title>new packages: ima-evm-utils</title>
    <issued date="2022-05-17 07:57:31" />
    <updated date="2023-02-02 13:55:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ima-evm-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2026028" id="2026028" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:4019" id="RLEA-2022:4019" type="self" title="RLEA-2022:4019" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ima-evm-utils-devel" arch="aarch64" epoch="0" version="1.4" release="4.el9" src="ima-evm-utils-1.4-4.el9.src.rpm">
          <filename>ima-evm-utils-devel-1.4-4.el9.aarch64.rpm</filename>
          <sum type="sha256">ddafbe1a3dd1212e4d4ba9643a61844ee0e66312da5276432a182bfe87719645</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4031</id>
    <title>new packages: libtraceevent</title>
    <issued date="2022-05-17 07:58:25" />
    <updated date="2023-02-02 13:55:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtraceevent.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2036852" id="2036852" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2037125" id="2037125" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4031" id="RLBA-2022:4031" type="self" title="RLBA-2022:4031" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtraceevent-devel" arch="aarch64" epoch="0" version="1.1.1" release="8.el9" src="libtraceevent-1.1.1-8.el9.src.rpm">
          <filename>libtraceevent-devel-1.1.1-8.el9.aarch64.rpm</filename>
          <sum type="sha256">0788d05b6005414278dd2d097414b6f36778d448a0ba08e728a9c2a2c0750db1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4050</id>
    <title>new packages: efivar</title>
    <issued date="2022-05-17 07:59:29" />
    <updated date="2023-02-02 13:55:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for efivar.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2005516" id="2005516" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2030807" id="2030807" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4050" id="RLBA-2022:4050" type="self" title="RLBA-2022:4050" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="efivar-devel" arch="aarch64" epoch="0" version="38" release="2.el9" src="efivar-38-2.el9.src.rpm">
          <filename>efivar-devel-38-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1720a6938e1f8eee99017fae30506726c6db2354487fdb17b4004143d43023c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4066</id>
    <title>new packages: pyparsing</title>
    <issued date="2022-05-17 08:00:28" />
    <updated date="2025-10-17 21:54:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pyparsing.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2058304" id="2058304" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4066" id="RLBA-2022:4066" type="self" title="RLBA-2022:4066" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pyparsing-doc" arch="noarch" epoch="0" version="2.4.7" release="9.el9" src="pyparsing-2.4.7-9.el9.src.rpm">
          <filename>pyparsing-doc-2.4.7-9.el9.noarch.rpm</filename>
          <sum type="sha256">138a284cf40b57d3c00e3377961f5f4eb7e3e3f033e44012f41135bb25bfc559</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4151</id>
    <title>new packages: libassuan</title>
    <issued date="2022-05-17 08:05:56" />
    <updated date="2025-10-17 21:54:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libassuan.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4151" id="RLBA-2022:4151" type="self" title="RLBA-2022:4151" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libassuan-devel" arch="aarch64" epoch="0" version="2.5.5" release="3.el9" src="libassuan-2.5.5-3.el9.src.rpm">
          <filename>libassuan-devel-2.5.5-3.el9.aarch64.rpm</filename>
          <sum type="sha256">be5ab544beb936c661e944314e63a315faa5011de27463882238853e72606c9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4153</id>
    <title>new packages: libconfig</title>
    <issued date="2022-05-17 08:06:17" />
    <updated date="2025-10-17 21:54:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libconfig.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4153" id="RLBA-2022:4153" type="self" title="RLBA-2022:4153" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libconfig-devel" arch="aarch64" epoch="0" version="1.7.2" release="9.el9" src="libconfig-1.7.2-9.el9.src.rpm">
          <filename>libconfig-devel-1.7.2-9.el9.aarch64.rpm</filename>
          <sum type="sha256">c5c3d996271003c6a386a83e7a0a0c507b2671504e9dd518c6978ad9d0b3345b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4154</id>
    <title>new packages: libdaemon</title>
    <issued date="2022-05-17 08:06:19" />
    <updated date="2025-10-17 21:54:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdaemon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4154" id="RLBA-2022:4154" type="self" title="RLBA-2022:4154" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdaemon-devel" arch="aarch64" epoch="0" version="0.14" release="23.el9" src="libdaemon-0.14-23.el9.src.rpm">
          <filename>libdaemon-devel-0.14-23.el9.aarch64.rpm</filename>
          <sum type="sha256">ca16205c4a22e0cb80b90ae91813a7e5e0ea065a7a4424a162cf3c530e36f85d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4160</id>
    <title>new packages: libfido2</title>
    <issued date="2022-05-17 08:06:56" />
    <updated date="2023-02-02 13:56:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libfido2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4160" id="RLBA-2022:4160" type="self" title="RLBA-2022:4160" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfido2-devel" arch="aarch64" epoch="0" version="1.6.0" release="7.el9" src="libfido2-1.6.0-7.el9.src.rpm">
          <filename>libfido2-devel-1.6.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">b88aa35ab7ce8f87d2b80ea6d2981c9ed34811275916c6409e6c6ce51117c9ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4161</id>
    <title>new packages: libgudev</title>
    <issued date="2022-05-17 08:06:59" />
    <updated date="2025-10-17 21:51:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgudev.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4161" id="RLBA-2022:4161" type="self" title="RLBA-2022:4161" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgudev-devel" arch="aarch64" epoch="0" version="237" release="1.el9" src="libgudev-237-1.el9.src.rpm">
          <filename>libgudev-devel-237-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5811bf5bf3a291edca5073d3e079130cd3a3f00efe29efe8feb67eb13a9a6a9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4163</id>
    <title>new packages: libjcat</title>
    <issued date="2022-05-17 08:07:03" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libjcat.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4163" id="RLBA-2022:4163" type="self" title="RLBA-2022:4163" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libjcat-devel" arch="aarch64" epoch="0" version="0.1.6" release="3.el9" src="libjcat-0.1.6-3.el9.src.rpm">
          <filename>libjcat-devel-0.1.6-3.el9.aarch64.rpm</filename>
          <sum type="sha256">93281c9948e1112f4a790feb043d6916ead422447ea6286e44061404fd2df23d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4166</id>
    <title>new packages: libmnl</title>
    <issued date="2022-05-17 08:07:11" />
    <updated date="2023-02-02 13:56:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmnl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4166" id="RLBA-2022:4166" type="self" title="RLBA-2022:4166" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmnl-devel" arch="aarch64" epoch="0" version="1.0.4" release="15.el9" src="libmnl-1.0.4-15.el9.src.rpm">
          <filename>libmnl-devel-1.0.4-15.el9.aarch64.rpm</filename>
          <sum type="sha256">537319e8a7e149ce67db46c7cc67d7884174766bbbdbcbf3a61478af32b10a1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4169</id>
    <title>new packages: libnetfilter_conntrack</title>
    <issued date="2022-05-17 08:07:45" />
    <updated date="2023-02-02 13:56:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnetfilter_conntrack.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4169" id="RLBA-2022:4169" type="self" title="RLBA-2022:4169" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnetfilter_conntrack-devel" arch="aarch64" epoch="0" version="1.0.8" release="4.el9" src="libnetfilter_conntrack-1.0.8-4.el9.src.rpm">
          <filename>libnetfilter_conntrack-devel-1.0.8-4.el9.aarch64.rpm</filename>
          <sum type="sha256">febdd3e936a5c1da24c6fd89f1968630d1ce9d4480fdc20483e9ddd4afe9846c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4170</id>
    <title>new packages: libnfnetlink</title>
    <issued date="2022-05-17 08:07:47" />
    <updated date="2023-02-02 13:56:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnfnetlink.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4170" id="RLBA-2022:4170" type="self" title="RLBA-2022:4170" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnfnetlink-devel" arch="aarch64" epoch="0" version="1.0.1" release="21.el9" src="libnfnetlink-1.0.1-21.el9.src.rpm">
          <filename>libnfnetlink-devel-1.0.1-21.el9.aarch64.rpm</filename>
          <sum type="sha256">605ee0d54953a4b3712abad47c4e412fb97b2255b657b4e8a491d0b9d80c85f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4173</id>
    <title>new packages: libpcap</title>
    <issued date="2022-05-17 08:07:54" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpcap.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4173" id="RLBA-2022:4173" type="self" title="RLBA-2022:4173" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpcap-devel" arch="aarch64" epoch="4" version="1.10.0" release="4.el9" src="libpcap-1.10.0-4.el9.src.rpm">
          <filename>libpcap-devel-1.10.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">62371e7be85b3fce3a8c9453573b7344bc88a59ceb0ba005800176092b1e04a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4174</id>
    <title>new packages: libpciaccess</title>
    <issued date="2022-05-17 08:07:57" />
    <updated date="2023-02-02 13:56:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpciaccess.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4174" id="RLBA-2022:4174" type="self" title="RLBA-2022:4174" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpciaccess-devel" arch="aarch64" epoch="0" version="0.16" release="6.el9" src="libpciaccess-0.16-6.el9.src.rpm">
          <filename>libpciaccess-devel-0.16-6.el9.aarch64.rpm</filename>
          <sum type="sha256">85144d14a9e3fef1eba1078143f50a0d165d58bd03f212353e63d643f580af07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4175</id>
    <title>new packages: libpeas</title>
    <issued date="2022-05-17 08:07:59" />
    <updated date="2025-10-17 21:51:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4175" id="RLBA-2022:4175" type="self" title="RLBA-2022:4175" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpeas-devel" arch="aarch64" epoch="0" version="1.30.0" release="4.el9" src="libpeas-1.30.0-4.el9.src.rpm">
          <filename>libpeas-devel-1.30.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">ae03e0dcff186e6a03413bb4bf11208dca900affa82c11bfcc75e27c071e56de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4178</id>
    <title>new packages: libproxy</title>
    <issued date="2022-05-17 08:08:06" />
    <updated date="2025-10-17 21:51:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libproxy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4178" id="RLBA-2022:4178" type="self" title="RLBA-2022:4178" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libproxy-devel" arch="aarch64" epoch="0" version="0.4.15" release="35.el9" src="libproxy-0.4.15-35.el9.src.rpm">
          <filename>libproxy-devel-0.4.15-35.el9.aarch64.rpm</filename>
          <sum type="sha256">1ca721f88249fa2b2afc493f6f442f79aaba6371278265ef2105bdb7b22846bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4180</id>
    <title>new packages: libpwquality</title>
    <issued date="2022-05-17 08:08:18" />
    <updated date="2025-10-17 21:51:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpwquality.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4180" id="RLBA-2022:4180" type="self" title="RLBA-2022:4180" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpwquality-devel" arch="aarch64" epoch="0" version="1.4.4" release="8.el9" src="libpwquality-1.4.4-8.el9.src.rpm">
          <filename>libpwquality-devel-1.4.4-8.el9.aarch64.rpm</filename>
          <sum type="sha256">f678130b964895379652e6933473bc81500ffcd19b7579779209ffdba8222efb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4181</id>
    <title>new packages: librhsm</title>
    <issued date="2022-05-17 08:08:21" />
    <updated date="2023-02-02 13:56:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librhsm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4181" id="RLBA-2022:4181" type="self" title="RLBA-2022:4181" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librhsm-devel" arch="aarch64" epoch="0" version="0.0.3" release="7.el9" src="librhsm-0.0.3-7.el9.src.rpm">
          <filename>librhsm-devel-0.0.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">a54c20f5dd9a76eb633106f5740f2e75fb23ad5597aa57911209f9cb16ed8690</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4182</id>
    <title>new packages: libsigsegv</title>
    <issued date="2022-05-17 08:08:23" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsigsegv.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4182" id="RLBA-2022:4182" type="self" title="RLBA-2022:4182" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsigsegv-devel" arch="aarch64" epoch="0" version="2.13" release="4.el9" src="libsigsegv-2.13-4.el9.src.rpm">
          <filename>libsigsegv-devel-2.13-4.el9.aarch64.rpm</filename>
          <sum type="sha256">31debd2babded01c6691b652f5c16c16578956b9c976c8600d2442526ae08b29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4187</id>
    <title>new packages: libunistring</title>
    <issued date="2022-05-17 08:08:57" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libunistring.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4187" id="RLBA-2022:4187" type="self" title="RLBA-2022:4187" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libunistring-devel" arch="aarch64" epoch="0" version="0.9.10" release="15.el9" src="libunistring-0.9.10-15.el9.src.rpm">
          <filename>libunistring-devel-0.9.10-15.el9.aarch64.rpm</filename>
          <sum type="sha256">472a482e80ef97036cd6fdaac3a2208bd867ce66b79d5a0305d166ff542e7d99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4189</id>
    <title>new packages: libutempter</title>
    <issued date="2022-05-17 08:09:07" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libutempter.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4189" id="RLBA-2022:4189" type="self" title="RLBA-2022:4189" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libutempter-devel" arch="aarch64" epoch="0" version="1.2.1" release="6.el9" src="libutempter-1.2.1-6.el9.src.rpm">
          <filename>libutempter-devel-1.2.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">b2bdd860bc4c1472057b3184ea1d8508d0691bc35046fa1e69486a6958efb0ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4192</id>
    <title>new packages: libxcrypt</title>
    <issued date="2022-05-17 08:09:31" />
    <updated date="2025-10-17 21:51:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libxcrypt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4192" id="RLBA-2022:4192" type="self" title="RLBA-2022:4192" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxcrypt-static" arch="aarch64" epoch="0" version="4.4.18" release="3.el9" src="libxcrypt-4.4.18-3.el9.src.rpm">
          <filename>libxcrypt-static-4.4.18-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c1790a96e11c0765290f824166edfb77dd9fc2c973cb874b0afac8fd1314b574</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4193</id>
    <title>new packages: libyaml</title>
    <issued date="2022-05-17 08:09:33" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libyaml.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4193" id="RLBA-2022:4193" type="self" title="RLBA-2022:4193" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libyaml-devel" arch="aarch64" epoch="0" version="0.2.5" release="7.el9" src="libyaml-0.2.5-7.el9.src.rpm">
          <filename>libyaml-devel-0.2.5-7.el9.aarch64.rpm</filename>
          <sum type="sha256">2512b5b36b27cf8705e8fc1e2d4c708e258fb2c8ad3217eca4eb24ae28c08c8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4196</id>
    <title>new packages: lmdb</title>
    <issued date="2022-05-17 08:09:52" />
    <updated date="2025-10-17 21:54:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lmdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4196" id="RLBA-2022:4196" type="self" title="RLBA-2022:4196" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lmdb" arch="aarch64" epoch="0" version="0.9.29" release="3.el9" src="lmdb-0.9.29-3.el9.src.rpm">
          <filename>lmdb-0.9.29-3.el9.aarch64.rpm</filename>
          <sum type="sha256">846546ba41b2eabb949ee93db70416dfe8bfd8318b8b9c62906d2c0ee83f8abc</sum>
        </package>
        <package name="lmdb-devel" arch="aarch64" epoch="0" version="0.9.29" release="3.el9" src="lmdb-0.9.29-3.el9.src.rpm">
          <filename>lmdb-devel-0.9.29-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f4b943d457913a364bd363486778c34543b2129b306d3169a2e0dce367020233</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4225</id>
    <title>new packages: nghttp2</title>
    <issued date="2022-05-17 08:11:48" />
    <updated date="2023-02-02 13:56:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nghttp2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4225" id="RLBA-2022:4225" type="self" title="RLBA-2022:4225" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnghttp2-devel" arch="aarch64" epoch="0" version="1.43.0" release="5.el9" src="nghttp2-1.43.0-5.el9.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">f03cd5f7c042ea047e2bcac1ecbde07139eeec273abad8e0680940d672fd3858</sum>
        </package>
        <package name="nghttp2" arch="aarch64" epoch="0" version="1.43.0" release="5.el9" src="nghttp2-1.43.0-5.el9.src.rpm">
          <filename>nghttp2-1.43.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">5e1846967e2aa4e514cf4bc424539ee1f0bef739815329ffdb1e8edc8b00f8e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4226</id>
    <title>new packages: npth</title>
    <issued date="2022-05-17 08:11:50" />
    <updated date="2025-10-17 21:54:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for npth.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4226" id="RLBA-2022:4226" type="self" title="RLBA-2022:4226" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="npth-devel" arch="aarch64" epoch="0" version="1.6" release="8.el9" src="npth-1.6-8.el9.src.rpm">
          <filename>npth-devel-1.6-8.el9.aarch64.rpm</filename>
          <sum type="sha256">081cdc61adc218712667adf8fad1b777ebca8ca68b398e2f1efb679477405ef0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4229</id>
    <title>new packages: opensm</title>
    <issued date="2022-05-17 08:12:18" />
    <updated date="2025-10-17 21:51:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opensm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4229" id="RLBA-2022:4229" type="self" title="RLBA-2022:4229" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opensm-devel" arch="aarch64" epoch="0" version="3.3.24" release="2.el9" src="opensm-3.3.24-2.el9.src.rpm">
          <filename>opensm-devel-3.3.24-2.el9.aarch64.rpm</filename>
          <sum type="sha256">177bb0c064469155aa466a97747f194ab303622f147a452645e0f32d7a39488f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4235</id>
    <title>new packages: pcre</title>
    <issued date="2022-05-17 08:12:59" />
    <updated date="2023-02-02 13:56:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pcre.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4235" id="RLBA-2022:4235" type="self" title="RLBA-2022:4235" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pcre-static" arch="aarch64" epoch="0" version="8.44" release="3.el9.3" src="pcre-8.44-3.el9.3.src.rpm">
          <filename>pcre-static-8.44-3.el9.3.aarch64.rpm</filename>
          <sum type="sha256">a4b8547cb47d5d9c44205415756f1c61b5ccc76de42301fa49c24ab231457f8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4241</id>
    <title>new packages: ppp</title>
    <issued date="2022-05-17 08:13:12" />
    <updated date="2025-10-17 21:54:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ppp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4241" id="RLBA-2022:4241" type="self" title="RLBA-2022:4241" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ppp-devel" arch="aarch64" epoch="0" version="2.4.9" release="5.el9" src="ppp-2.4.9-5.el9.src.rpm">
          <filename>ppp-devel-2.4.9-5.el9.aarch64.rpm</filename>
          <sum type="sha256">aab32272dc5030423e525096a7713e5899bafeaf6a4a9cb82d36d52e00529031</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4247</id>
    <title>new packages: python-dateutil</title>
    <issued date="2022-05-17 08:13:35" />
    <updated date="2023-02-02 13:56:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-dateutil.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4247" id="RLBA-2022:4247" type="self" title="RLBA-2022:4247" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python-dateutil-doc" arch="noarch" epoch="1" version="2.8.1" release="6.el9" src="python-dateutil-2.8.1-6.el9.src.rpm">
          <filename>python-dateutil-doc-2.8.1-6.el9.noarch.rpm</filename>
          <sum type="sha256">79617fa279ecb194bfcfc885e2a2eb9d6fb37066536e8685ddf9b43b0facd0f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4167</id>
    <title>new packages: libmodulemd</title>
    <issued date="2022-05-17 08:07:40" />
    <updated date="2025-10-17 21:51:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmodulemd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4167" id="RLBA-2022:4167" type="self" title="RLBA-2022:4167" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmodulemd-devel" arch="aarch64" epoch="0" version="2.13.0" release="2.el9" src="libmodulemd-2.13.0-2.el9.src.rpm">
          <filename>libmodulemd-devel-2.13.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3307dfef53335d970e4aeddb5333b371cefb51778303c241d5f46c40d448e1de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4197</id>
    <title>new packages: lockdev</title>
    <issued date="2022-05-17 08:09:54" />
    <updated date="2025-10-14 08:18:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lockdev.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4197" id="RLBA-2022:4197" type="self" title="RLBA-2022:4197" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lockdev-devel" arch="aarch64" epoch="0" version="1.0.4" release="0.37.20111007git.el9" src="lockdev-1.0.4-0.37.20111007git.el9.src.rpm">
          <filename>lockdev-devel-1.0.4-0.37.20111007git.el9.aarch64.rpm</filename>
          <sum type="sha256">81dcf3ecd4b3bc9ff54f4a913368f889cee695e6431eae514e979efa167be31d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:4570</id>
    <title>new packages: libreoffice:flatpak</title>
    <issued date="2022-05-17 08:33:59" />
    <updated date="2023-02-02 13:56:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for zaf, hyphen-uk, libpagemaker, hyphen-ca, hunspell-et, hyphen-eu, hyphen-ga, libvisio, raptor2, hunspell-ta, mythes-nl, hunspell-lt, hunspell-sk, ongres-scram, hunspell-hu, libshout, hunspell-nso, poppler, hunspell-nl, hunspell-hi, openjpeg2, libabw, hunspell-es, hunspell-sv, hyphen-sv, hyphen-te, google-carlito-fonts, hunspell-br, hunspell-ml, hyphen-pl, hunspell-pl, hyphen-el, hyphen-ru, hunspell-bg, hyphen-es, mythes-ro, hyphen-as, libloader, libmspub, dconf, mythes-en, libreoffice-voikko, hunspell-de, hunspell-id, hunspell-eu, libexttextcat, hyphen-da, pentaho-libxml, redland, hunspell-kn, libcmis, libepubgen, libodfgen, hunspell-fr, hunspell-th, hunspell-zu, xmlsec1, libnumbertext, hyphen-gu, libreoffice, hyphen-nl, hyphen-ro, libfontenc, librevenge, libwpg, hyphen-it, mythes-it, libmwaw, ttmkfdir, postgresql-jdbc, hunspell-sr, hunspell-ga, hunspell-ro, openoffice-lv, lksctp-tools, mythes-sk, mythes-cs, hyphen-cy, libformula, liblayout, clucene, hunspell-hr, mythes-ru, hunspell-gl, hyphen-ta, mythes-da, hunspell-tn, libqxp, lpsolve, hunspell-gu, mythes-pt, mythes-sl, libetonyek, hyphen-lt, google-noto-fonts, hunspell-ar, neon, librtas, hyphen-sk, hunspell-cy, boost, hunspell-ko, hunspell-si, flute, hunspell-pt, hyphen-fa, libzmf, hunspell-nr, hunspell-pa, hunspell-ve, mythes-ca, sac, hunspell-it, hyphen-bg, gstreamer1-plugins-good, openoffice.org-dict-cs_CZ, hyphen-gl, hyphen-hu, taglib, bitmap-fonts, libwps, hyphen-de, libbase, hunspell-af, hunspell-or, mythes-ga, xorg-x11-fonts, hunspell-no, hunspell-kk, libvoikko, mythes-sv, hunspell-el, hyphen-id, hunspell-da, libwpd, hunspell-ss, hunspell-ts, hyphen-bn, hyphen-sl, libeot, mythes-fr, hunspell-te, mythes-pl, pentaho-reporting-flow-engine, mythes-de, mythes-es, hunspell-as, hunspell-fa, hyphen, hunspell-uk, mythes-el, hyphen-hi, mythes-hu, hyphen-or, hyphen-mr, hunspell-xh, hyphen-pa, libserializer, poppler-data, hunspell-mr, hspell, hunspell-st, hunspell-ru, libfreehand, hunspell-ca, hyphen-fr, hunspell-bn, gstreamer1-plugins-base, twolame, libcdr, Box2D, liborcus, hyphen-ml, hunspell-sl, javapackages-tools, librepository, libstaroffice, libfonts, v4l-utils, rasqal, voikko-fi, hyphen-kn, mythes-uk, mythes-bg, hyphen-pt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2022:4570" id="RLEA-2022:4570" type="self" title="RLEA-2022:4570" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="boost-b2" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-b2-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">3249afb2395a8b8ca4bb856c8ce5181a31a115b4b1c3a95de6940c43455dd50b</sum>
        </package>
        <package name="boost-build" arch="noarch" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-build-1.75.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">2cbb38bd227ac4e187f8848f154584d448c79d21dee848d962e42cf679e433a4</sum>
        </package>
        <package name="boost-doc" arch="noarch" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-doc-1.75.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">7db36f73613f065039507e2553779a3cf988ea84baea59d1a73f3840e79ad900</sum>
        </package>
        <package name="boost-doctools" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-doctools-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">dd6024aec9111fb9fff9937600621aeefa66351a32e785e77991351d97fd3145</sum>
        </package>
        <package name="boost-examples" arch="noarch" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-examples-1.75.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">32468100dd6f4411b14201907754b02c2269a76932ca4d9d449126fffbe37c67</sum>
        </package>
        <package name="boost-static" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-static-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">72440c3272d5b7062b04338c78239a4170826c76a2b6f727d3399d702e5dafbe</sum>
        </package>
        <package name="clucene-core-devel" arch="aarch64" epoch="0" version="2.3.3.4" release="42.20130812.e8e3d20git.el9" src="clucene-2.3.3.4-42.20130812.e8e3d20git.el9.src.rpm">
          <filename>clucene-core-devel-2.3.3.4-42.20130812.e8e3d20git.el9.aarch64.rpm</filename>
          <sum type="sha256">407136bfdb2c11ce5109e5f9128d5eb7d818448b473703d8925e0ca9222a8d8f</sum>
        </package>
        <package name="dconf-devel" arch="aarch64" epoch="0" version="0.40.0" release="6.el9" src="dconf-0.40.0-6.el9.src.rpm">
          <filename>dconf-devel-0.40.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">27d14f0cd3ae3269e2a9e7a7a66ef68ced5f1d3fa4193ad6440e60c9e27dc6c4</sum>
        </package>
        <package name="javapackages-generators" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>javapackages-generators-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">317fc46d3cc3e33dcfe658399f568188524051eaa2e11422ebda2b054b7c0d30</sum>
        </package>
        <package name="javapackages-local" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>javapackages-local-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">8eabb02f23814c7dd3fcd61acef39ed52fd559d11161e6366fa3c9cce30586a8</sum>
        </package>
        <package name="libeot" arch="aarch64" epoch="0" version="0.01" release="18.el9" src="libeot-0.01-18.el9.src.rpm">
          <filename>libeot-0.01-18.el9.aarch64.rpm</filename>
          <sum type="sha256">6dcd26e7b498b9a3c2078f56b45cfd27f834ab1d4210a791aa79a05c8574638d</sum>
        </package>
        <package name="libetonyek-devel" arch="aarch64" epoch="0" version="0.1.10" release="2.el9" src="libetonyek-0.1.10-2.el9.src.rpm">
          <filename>libetonyek-devel-0.1.10-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3c8b67169ab92eff65836175033a57ac3229d0d4bd1586ff9cfaf4ce544ac01f</sum>
        </package>
        <package name="libfontenc-devel" arch="aarch64" epoch="0" version="1.1.3" release="17.el9" src="libfontenc-1.1.3-17.el9.src.rpm">
          <filename>libfontenc-devel-1.1.3-17.el9.aarch64.rpm</filename>
          <sum type="sha256">631c347fe7a67e2621617d249289b1ea5071a1af64c91f1091df0157141c67a3</sum>
        </package>
        <package name="libodfgen-devel" arch="aarch64" epoch="0" version="0.1.8" release="4.el9" src="libodfgen-0.1.8-4.el9.src.rpm">
          <filename>libodfgen-devel-0.1.8-4.el9.aarch64.rpm</filename>
          <sum type="sha256">2906fa4bb807a7423b51aa22d8fa9a887192c3f6ca068846a1b05db9868b146e</sum>
        </package>
        <package name="librevenge-devel" arch="aarch64" epoch="0" version="0.0.4" release="22.el9" src="librevenge-0.0.4-22.el9.src.rpm">
          <filename>librevenge-devel-0.0.4-22.el9.aarch64.rpm</filename>
          <sum type="sha256">c2d197beba2cb75239af5cbe9bca70db2f05c9d9314891e3f1d5343dcc70bfc4</sum>
        </package>
        <package name="libshout-devel" arch="aarch64" epoch="0" version="2.4.3" release="7.el9" src="libshout-2.4.3-7.el9.src.rpm">
          <filename>libshout-devel-2.4.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">5e1af2e46a5301c9f34626483516dcb9c430885952855157f5c14c593f63ab84</sum>
        </package>
        <package name="libv4l-devel" arch="aarch64" epoch="0" version="1.20.0" release="5.el9" src="v4l-utils-1.20.0-5.el9.src.rpm">
          <filename>libv4l-devel-1.20.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">885378d8783da55b5a7a64deb5745f61d5b89b7ac9911faecc4b9205364309bd</sum>
        </package>
        <package name="libvisio-devel" arch="aarch64" epoch="0" version="0.1.7" release="9.el9" src="libvisio-0.1.7-9.el9.src.rpm">
          <filename>libvisio-devel-0.1.7-9.el9.aarch64.rpm</filename>
          <sum type="sha256">f4bf5d016f918afdc7ee62beee2b83a70657f87d3ff4f11f33cdba50de42bcec</sum>
        </package>
        <package name="libvoikko-devel" arch="aarch64" epoch="0" version="4.3" release="7.el9" src="libvoikko-4.3-7.el9.src.rpm">
          <filename>libvoikko-devel-4.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">70053a0d076781af4e9847b1d01e24a714bbd1b1f531412b52a1899a1e426521</sum>
        </package>
        <package name="libwpd-devel" arch="aarch64" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-devel-0.10.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">d913a91f5e225b883aa517d8b05d4e8e411a755d6391336bc267b51ce40204de</sum>
        </package>
        <package name="libwpd-doc" arch="noarch" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-doc-0.10.3-10.el9.noarch.rpm</filename>
          <sum type="sha256">cf1cafa034c873ca0728f3d265a585a12f2fe820388cf525b9407d7a7ff7d3b4</sum>
        </package>
        <package name="libwpg-devel" arch="aarch64" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-devel-0.3.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ea1d595370cb449e69909f4873f3b2767b4fff7395c2cbfee6318fb652c0c326</sum>
        </package>
        <package name="libwpg-doc" arch="noarch" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-doc-0.3.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">612575a87c0c960172ba28ba334437243e5e8df6ae17b42d55d999fe31dac0a0</sum>
        </package>
        <package name="libwps-devel" arch="aarch64" epoch="0" version="0.4.12" release="4.el9" src="libwps-0.4.12-4.el9.src.rpm">
          <filename>libwps-devel-0.4.12-4.el9.aarch64.rpm</filename>
          <sum type="sha256">5f623d9ec9c1ae83ee39cddd18b6ac35d5be99e463abb665946d247d1f5018d3</sum>
        </package>
        <package name="libwps-doc" arch="noarch" epoch="0" version="0.4.12" release="4.el9" src="libwps-0.4.12-4.el9.src.rpm">
          <filename>libwps-doc-0.4.12-4.el9.noarch.rpm</filename>
          <sum type="sha256">a57cc3f098bec98c980281bf98395ecd53c2f63d364e03fabd653f02ca29a8cf</sum>
        </package>
        <package name="maven-local" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>maven-local-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">1ba14e27ad8c7fa5b901dd6301622a414cca16776ecf2e76fd06d80c523d3878</sum>
        </package>
        <package name="neon-devel" arch="aarch64" epoch="0" version="0.31.2" release="11.el9" src="neon-0.31.2-11.el9.src.rpm">
          <filename>neon-devel-0.31.2-11.el9.aarch64.rpm</filename>
          <sum type="sha256">095a73f8063bdf20163211c8e44ee6284d8b153c3d056240ef8c90404d60fbef</sum>
        </package>
        <package name="openjpeg2-devel" arch="aarch64" epoch="0" version="2.4.0" release="6.el9" src="openjpeg2-2.4.0-6.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6617ecd084efe3095911af30a46f0206a251b61db87a06e634c0b2c0c42bfe0b</sum>
        </package>
        <package name="openjpeg2-tools" arch="aarch64" epoch="0" version="2.4.0" release="6.el9" src="openjpeg2-2.4.0-6.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">75fca791cdbafa8efd182506b4edbdec1061a2d0fd8f6eee7790ba3dfa862ab3</sum>
        </package>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">8c33feaa0ed6d4f579e98a6be7ebe9f2f2558dc16dd1f4b2505ab1db59931053</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">3071715dfce440384820f1284a119ea675a510c5c3303a1a2bcec844bf482b83</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">f1cf4baf778a2d7c511bee376e17bde67c9b936671b2440b98992edc37020fea</sum>
        </package>
        <package name="poppler-qt5" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-qt5-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">43b0282d32194c1e29f015f20044cb1214fa43802dac4da2086b0de705ba1196</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">57cb69117721a44abfb8ebec5742eec98200053478924583ff2425487d5a5528</sum>
        </package>
        <package name="python3-javapackages" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>python3-javapackages-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">899b9fe1a14b98ebda8c57b4624ec45ce522e8683e2a8b987932c8aadb5eb8a2</sum>
        </package>
        <package name="raptor2-devel" arch="aarch64" epoch="0" version="2.0.15" release="30.el9" src="raptor2-2.0.15-30.el9.src.rpm">
          <filename>raptor2-devel-2.0.15-30.el9.aarch64.rpm</filename>
          <sum type="sha256">74d2f985d35631ff6803faf444eb6e288ca168f46546601c1a4c33f6d50018ea</sum>
        </package>
        <package name="rasqal-devel" arch="aarch64" epoch="0" version="0.9.33" release="18.el9" src="rasqal-0.9.33-18.el9.src.rpm">
          <filename>rasqal-devel-0.9.33-18.el9.aarch64.rpm</filename>
          <sum type="sha256">428a21bf2f1fff8485f24f87a97fa75c86b4ab791a55e92bead0240cd15804ec</sum>
        </package>
        <package name="redland-devel" arch="aarch64" epoch="0" version="1.0.17" release="29.el9" src="redland-1.0.17-29.el9.src.rpm">
          <filename>redland-devel-1.0.17-29.el9.aarch64.rpm</filename>
          <sum type="sha256">20b31c37d1699bda5d3f395d3426a4685b2350ee13386e36ac900fc092363eb7</sum>
        </package>
        <package name="taglib-devel" arch="aarch64" epoch="0" version="1.12" release="6.el9" src="taglib-1.12-6.el9.src.rpm">
          <filename>taglib-devel-1.12-6.el9.aarch64.rpm</filename>
          <sum type="sha256">302edef8009de60952bbea22d4192bc70db6406445db778ffc8a4b9921def0d7</sum>
        </package>
        <package name="twolame-devel" arch="aarch64" epoch="0" version="0.3.13" release="19.el9" src="twolame-0.3.13-19.el9.src.rpm">
          <filename>twolame-devel-0.3.13-19.el9.aarch64.rpm</filename>
          <sum type="sha256">86ba074c8dabc035c21e7e9842ea4ab318ad15647596fe8782795937a0ce4d98</sum>
        </package>
        <package name="xmlsec1-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">173bf7b0b92fd87a1ba2a9de8cb7393970990e79024ccc4985b4588b28358132</sum>
        </package>
        <package name="xmlsec1-gcrypt" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gcrypt-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">bbcf0e81746775754d83c3f06b59b85dcede2324085a8f487a9acbb9b3f52ad7</sum>
        </package>
        <package name="xmlsec1-gnutls" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gnutls-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">76784a298ad5c53ebca60c66969ad00049d793cf214c60d2f2bb9ce588221485</sum>
        </package>
        <package name="xmlsec1-gnutls-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gnutls-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">23867d3938ab3d16a854caaee7a20b8226e245bcf48126d553704d612c3c5086</sum>
        </package>
        <package name="xmlsec1-openssl-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-openssl-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">732db3fe3592e36b933dcab625764bb6197e4a26be755f2c026fe13b6ee0fc66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4258</id>
    <title>new packages: quota</title>
    <issued date="2022-05-17 08:14:46" />
    <updated date="2023-02-02 13:56:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for quota.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4258" id="RLBA-2022:4258" type="self" title="RLBA-2022:4258" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="quota-devel" arch="aarch64" epoch="1" version="4.06" release="6.el9" src="quota-4.06-6.el9.src.rpm">
          <filename>quota-devel-4.06-6.el9.aarch64.rpm</filename>
          <sum type="sha256">bafde90c487a785150a617b9d8389c71488b574c3a105d3e05c5aaa23f7ef801</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4282</id>
    <title>new packages: userspace-rcu</title>
    <issued date="2022-05-17 08:15:59" />
    <updated date="2025-10-17 21:54:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for userspace-rcu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4282" id="RLBA-2022:4282" type="self" title="RLBA-2022:4282" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="userspace-rcu-devel" arch="aarch64" epoch="0" version="0.12.1" release="6.el9" src="userspace-rcu-0.12.1-6.el9.src.rpm">
          <filename>userspace-rcu-devel-0.12.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">569246da397e8b8ccffce4838dab0add53f3bf7efa1ea54e5649325820964deb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7090</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 13:36:33" />
    <updated date="2023-02-02 13:56:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for libksba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2135610" id="2135610" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7090" id="RLSA-2022:7090" type="self" title="RLSA-2022:7090" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libksba-devel" arch="aarch64" epoch="0" version="1.5.1" release="5.el9_0" src="libksba-1.5.1-5.el9_0.src.rpm">
          <filename>libksba-devel-1.5.1-5.el9_0.aarch64.rpm</filename>
          <sum type="sha256">6ecbdb1abb0442b36741379899d6504501699ee02d37728875c5f4bd0f2e8538</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7329</id>
    <title>Moderate: lua security update</title>
    <issued date="2022-11-02 13:55:17" />
    <updated date="2023-02-02 13:56:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for lua.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33099" id="CVE-2022-33099" type="cve" title="CVE-2022-33099" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2104427" id="2104427" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7329" id="RLSA-2022:7329" type="self" title="RLSA-2022:7329" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lua-devel" arch="aarch64" epoch="0" version="5.4.2" release="4.el9_0.3" src="lua-5.4.2-4.el9_0.3.src.rpm">
          <filename>lua-devel-5.4.2-4.el9_0.3.aarch64.rpm</filename>
          <sum type="sha256">126101238e19657c9c15bc6d8e14c36b385c19369d02d62f8ba9b1ff60405adc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8277</id>
    <title>gcc bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:24" />
    <updated date="2023-02-02 13:56:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2063255" id="2063255" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077536" id="2077536" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8277" id="RLBA-2022:8277" type="self" title="RLBA-2022:8277" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gcc-plugin-devel" arch="aarch64" epoch="0" version="11.3.1" release="2.1.el9" src="gcc-11.3.1-2.1.el9.src.rpm">
          <filename>gcc-plugin-devel-11.3.1-2.1.el9.aarch64.rpm</filename>
          <sum type="sha256">ce70992e30a85a8023e290387b4fcfcb39787d624c3cb7beaaee24ba3e8e6a59</sum>
        </package>
        <package name="libstdc++-static" arch="aarch64" epoch="0" version="11.3.1" release="2.1.el9" src="gcc-11.3.1-2.1.el9.src.rpm">
          <filename>libstdc++-static-11.3.1-2.1.el9.aarch64.rpm</filename>
          <sum type="sha256">d3090fe40606ebfddf0ec36a3819f23e6f425f6636cde8b1d0d35a12ccfd708e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8280</id>
    <title>trace-cmd bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:29" />
    <updated date="2023-02-02 13:56:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for trace-cmd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8280" id="RLBA-2022:8280" type="self" title="RLBA-2022:8280" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtracecmd-devel" arch="aarch64" epoch="0" version="0" release="9.el9" src="trace-cmd-2.9.2-9.el9.src.rpm">
          <filename>libtracecmd-devel-0-9.el9.aarch64.rpm</filename>
          <sum type="sha256">984a0cd9cf93a9690fb14328369c80145dd10f26bdabace12790a4f66aa9503c</sum>
        </package>
        <package name="libtracecmd-devel" arch="aarch64" epoch="0" version="0" release="9.el9_0" src="trace-cmd-2.9.2-9.el9.src.rpm">
          <filename>libtracecmd-devel-0-9.el9_0.aarch64.rpm</filename>
          <sum type="sha256">6e0c3713289d60acc28193f9b33095c54cdd2e61ceafb268c7ee021fe956fe70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8289</id>
    <title>shadow-utils bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:37" />
    <updated date="2023-02-02 13:56:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for shadow-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2004911" id="2004911" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109410" id="2109410" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8289" id="RLBA-2022:8289" type="self" title="RLBA-2022:8289" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="shadow-utils-subid-devel" arch="aarch64" epoch="2" version="4.9" release="5.el9" src="shadow-utils-4.9-5.el9.src.rpm">
          <filename>shadow-utils-subid-devel-4.9-5.el9.aarch64.rpm</filename>
          <sum type="sha256">7e039c421839a6da651a7d465f3168db586509b2156a97d37cd4c8a7841c7ae6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8293</id>
    <title>libsemanage bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:40" />
    <updated date="2023-02-02 13:56:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsemanage.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2049665" id="2049665" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068085" id="2068085" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079285" id="2079285" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2104935" id="2104935" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8293" id="RLBA-2022:8293" type="self" title="RLBA-2022:8293" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsemanage-devel" arch="aarch64" epoch="0" version="3.4" release="2.el9" src="libsemanage-3.4-2.el9.src.rpm">
          <filename>libsemanage-devel-3.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d6886c823bd56aa1fe59c5de44ae9bd526b6c87093a5b3a6d5c89769deb643fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8298</id>
    <title>libsolv bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:44" />
    <updated date="2023-02-02 13:56:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsolv.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8298" id="RLBA-2022:8298" type="self" title="RLBA-2022:8298" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsolv-devel" arch="aarch64" epoch="0" version="0.7.22" release="1.el9" src="libsolv-0.7.22-1.el9.src.rpm">
          <filename>libsolv-devel-0.7.22-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4d8266245c95049387d11cf84204248e9edcee4a48cf85fffba326d6983b92bf</sum>
        </package>
        <package name="libsolv-tools" arch="aarch64" epoch="0" version="0.7.22" release="1.el9" src="libsolv-0.7.22-1.el9.src.rpm">
          <filename>libsolv-tools-0.7.22-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ea2c79aaa34e859e5579fbeba264cc73522c30811cafdf50b0f56f0608d2a804</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8312</id>
    <title>ding-libs bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:05" />
    <updated date="2025-10-17 21:54:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ding-libs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2048667" id="2048667" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8312" id="RLBA-2022:8312" type="self" title="RLBA-2022:8312" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbasicobjects-devel" arch="aarch64" epoch="0" version="0.1.1" release="53.el9" src="ding-libs-0.6.1-53.el9.src.rpm">
          <filename>libbasicobjects-devel-0.1.1-53.el9.aarch64.rpm</filename>
          <sum type="sha256">2b95f148aa7e1a5d97a3635532c99ce9e250327312b74123708bc1679b8e2541</sum>
        </package>
        <package name="libcollection-devel" arch="aarch64" epoch="0" version="0.7.0" release="53.el9" src="ding-libs-0.6.1-53.el9.src.rpm">
          <filename>libcollection-devel-0.7.0-53.el9.aarch64.rpm</filename>
          <sum type="sha256">578c8adf4a2cd52c11445ad72c306b3dd47af997032573c941384672c4ad5975</sum>
        </package>
        <package name="libini_config-devel" arch="aarch64" epoch="0" version="1.3.1" release="53.el9" src="ding-libs-0.6.1-53.el9.src.rpm">
          <filename>libini_config-devel-1.3.1-53.el9.aarch64.rpm</filename>
          <sum type="sha256">f29de0f527da45c8883db99de8c66f64e5e34efffd9d26ba6b4314775c0461c9</sum>
        </package>
        <package name="libpath_utils-devel" arch="aarch64" epoch="0" version="0.2.1" release="53.el9" src="ding-libs-0.6.1-53.el9.src.rpm">
          <filename>libpath_utils-devel-0.2.1-53.el9.aarch64.rpm</filename>
          <sum type="sha256">bf7cf5f73375c2fd5e4c4becc674d240c439cacd531a79b749e465d0d7430841</sum>
        </package>
        <package name="libref_array-devel" arch="aarch64" epoch="0" version="0.1.5" release="53.el9" src="ding-libs-0.6.1-53.el9.src.rpm">
          <filename>libref_array-devel-0.1.5-53.el9.aarch64.rpm</filename>
          <sum type="sha256">6426019bb72f84cba28eedf114b1de5a1c815e02a6c65e1898fe89dcaa5114b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8317</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 06:21:30" />
    <updated date="2023-02-02 13:56:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for samba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487)

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065376" id="2065376" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074891" id="2074891" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2076504" id="2076504" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077487" id="2077487" type="bugzilla" title="The following packages have been upgraded to a later upstream version: samba (4.16.4)." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2078838" id="2078838" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096813" id="2096813" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2097655" id="2097655" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106279" id="2106279" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2108196" id="2108196" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2121317" id="2121317" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8317" id="RLSA-2022:8317" type="self" title="RLSA-2022:8317" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsmbclient-devel" arch="aarch64" epoch="0" version="4.16.4" release="101.el9" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libsmbclient-devel-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">e4b0538611c9e7188bf2ac164c88cbc35d9708d0fa24867b6d0f86d3ebd12ed2</sum>
        </package>
        <package name="libwbclient-devel" arch="aarch64" epoch="0" version="4.16.4" release="101.el9" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libwbclient-devel-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">824e2672512bf4d48e81d6e901e3f41fe3af512850ef753d7938e124ff90ef90</sum>
        </package>
        <package name="samba-devel" arch="aarch64" epoch="0" version="4.16.4" release="101.el9" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-devel-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">1e5197fd38f29e2382b359aa57629ef24b4baeaa767b263324e45477367196ac</sum>
        </package>
        <package name="samba-pidl" arch="noarch" epoch="0" version="4.16.4" release="101.el9" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-pidl-4.16.4-101.el9.noarch.rpm</filename>
          <sum type="sha256">2a62fd23b7bc67bd4c85fd7ff2f748493c82ff8de5b0b1958238a9826188a7b4</sum>
        </package>
        <package name="samba-test" arch="aarch64" epoch="0" version="4.16.4" release="101.el9" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-test-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">bcbe62bba90ab7869d852288d834cdce5e1ebe34a82879fbda94991320775f89</sum>
        </package>
        <package name="samba-test-libs" arch="aarch64" epoch="0" version="4.16.4" release="101.el9" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-test-libs-4.16.4-101.el9.aarch64.rpm</filename>
          <sum type="sha256">830b9e50b5e057dd46115c25ff820672d07b0e22bad408ce066088a49e2d6873</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8318</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 06:21:32" />
    <updated date="2023-02-02 13:56:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libldb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077490" id="2077490" type="bugzilla" title="The following packages have been upgraded to a later upstream version: libldb (2.5.2)." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2108215" id="2108215" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8318" id="RLSA-2022:8318" type="self" title="RLSA-2022:8318" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libldb-devel" arch="aarch64" epoch="0" version="2.5.2" release="1.el9" src="libldb-2.5.2-1.el9.src.rpm">
          <filename>libldb-devel-2.5.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">fc3276a2ad90ac6e57b098d4e4f4e3323d4691194106c135e8b0fb1f3f7a1f80</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8319</id>
    <title>libtdb bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:33" />
    <updated date="2023-02-02 13:56:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077489" id="2077489" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8319" id="RLBA-2022:8319" type="self" title="RLBA-2022:8319" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtdb-devel" arch="aarch64" epoch="0" version="1.4.6" release="1.el9" src="libtdb-1.4.6-1.el9.src.rpm">
          <filename>libtdb-devel-1.4.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">154708b3b438b0d357e605125968329ccf71e0eb75e92bb39dc16056b47fbb3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8336</id>
    <title>libselinux bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:48" />
    <updated date="2023-02-02 13:56:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libselinux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079283" id="2079283" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8336" id="RLBA-2022:8336" type="self" title="RLBA-2022:8336" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libselinux-static" arch="aarch64" epoch="0" version="3.4" release="3.el9" src="libselinux-3.4-3.el9.src.rpm">
          <filename>libselinux-static-3.4-3.el9.aarch64.rpm</filename>
          <sum type="sha256">00b54625ffd1173eb90d90d9fec8feef4da1b1ec2c961bb8bdaa58dad449c593</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8342</id>
    <title>parted bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:55" />
    <updated date="2023-02-02 13:56:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for parted.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1999333" id="1999333" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2116505" id="2116505" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8342" id="RLBA-2022:8342" type="self" title="RLBA-2022:8342" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="parted-devel" arch="aarch64" epoch="0" version="3.5" release="2.el9" src="parted-3.5-2.el9.src.rpm">
          <filename>parted-devel-3.5-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7e68b971bf33daf5601bbf1b6b37731ca400edcb51faefa5ceb7aeaec53b1a58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8343</id>
    <title>libnftnl bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:58" />
    <updated date="2023-02-02 13:56:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnftnl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1917399" id="1917399" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8343" id="RLBA-2022:8343" type="self" title="RLBA-2022:8343" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnftnl-devel" arch="aarch64" epoch="0" version="1.2.2" release="1.el9" src="libnftnl-1.2.2-1.el9.src.rpm">
          <filename>libnftnl-devel-1.2.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">af0bb9e1ec97af4c612fdd8a6dcb598a1b8e24f908f0d01a1984d22c97d33882</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8352</id>
    <title>pygobject3 bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:21" />
    <updated date="2025-10-17 21:52:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pygobject3.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1915764" id="1915764" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8352" id="RLBA-2022:8352" type="self" title="RLBA-2022:8352" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-gobject-devel" arch="aarch64" epoch="0" version="3.40.1" release="6.el9" src="pygobject3-3.40.1-6.el9.src.rpm">
          <filename>python3-gobject-devel-3.40.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">9ef2b559e2ec8e7addd15d8ca89488dbbfaf5189ea2b4caf9da4bb09126af2a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8357</id>
    <title>ndctl bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:33" />
    <updated date="2023-02-02 13:56:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ndctl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8357" id="RLBA-2022:8357" type="self" title="RLBA-2022:8357" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="daxctl-devel" arch="aarch64" epoch="0" version="71.1" release="7.el9" src="ndctl-71.1-7.el9.src.rpm">
          <filename>daxctl-devel-71.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">fb73c5d6c8fe8645aeefb69c67b930998c0d30bad77e59c6aa5f29a58f1874c8</sum>
        </package>
        <package name="ndctl-devel" arch="aarch64" epoch="0" version="71.1" release="7.el9" src="ndctl-71.1-7.el9.src.rpm">
          <filename>ndctl-devel-71.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">a30bc14fdcaaa0e661228dcebc4e1eb0a5448b087c29ec856c168cf1059b4204</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:8359</id>
    <title>inih bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:36" />
    <updated date="2025-10-17 21:54:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for inih.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2078626" id="2078626" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:8359" id="RLEA-2022:8359" type="self" title="RLEA-2022:8359" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="inih-devel" arch="aarch64" epoch="0" version="49" release="6.el9" src="inih-49-6.el9.src.rpm">
          <filename>inih-devel-49-6.el9.aarch64.rpm</filename>
          <sum type="sha256">bc1832816a3c9437dd5495e8b9dc769c6abbcc826d68d4389d83fe89d1aa5e5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8358</id>
    <title>lvm2 bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:36" />
    <updated date="2023-02-02 13:56:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lvm2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040456" id="2040456" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059644" id="2059644" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077070" id="2077070" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2081808" id="2081808" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2087781" id="2087781" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2090391" id="2090391" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2090804" id="2090804" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2107162" id="2107162" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109351" id="2109351" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8358" id="RLBA-2022:8358" type="self" title="RLBA-2022:8358" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-devel" arch="aarch64" epoch="9" version="1.02.185" release="3.el9" src="lvm2-2.03.16-3.el9.src.rpm">
          <filename>device-mapper-devel-1.02.185-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b2ed58c0877fad5f9a645a45003427f2e888cce8c2c072f33dac92244d490fd1</sum>
        </package>
        <package name="device-mapper-event-devel" arch="aarch64" epoch="9" version="1.02.185" release="3.el9" src="lvm2-2.03.16-3.el9.src.rpm">
          <filename>device-mapper-event-devel-1.02.185-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f384131de35a8a89b941e358648a23b28809836d3ddc8029023fc16faddf97c3</sum>
        </package>
        <package name="lvm2-devel" arch="aarch64" epoch="9" version="2.03.16" release="3.el9" src="lvm2-2.03.16-3.el9.src.rpm">
          <filename>lvm2-devel-2.03.16-3.el9.aarch64.rpm</filename>
          <sum type="sha256">d016572d254da60a44a4a9feae9abb9cee83f079f743651c582bfd6d2386ff7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8364</id>
    <title>libbpf bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:40" />
    <updated date="2023-02-02 13:56:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libbpf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1990029" id="1990029" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2010428" id="2010428" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065638" id="2065638" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8364" id="RLBA-2022:8364" type="self" title="RLBA-2022:8364" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbpf-devel" arch="aarch64" epoch="2" version="0.6.0" release="1.el9" src="libbpf-0.6.0-1.el9.src.rpm">
          <filename>libbpf-devel-0.6.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">d2a7bead72c4c3725867f6a29dc1b546188bed8786e4d018e3711c84fb1644e0</sum>
        </package>
        <package name="libbpf-static" arch="aarch64" epoch="2" version="0.6.0" release="1.el9" src="libbpf-0.6.0-1.el9.src.rpm">
          <filename>libbpf-static-0.6.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2bc10a7e9a6613d404f88ab0e52c9b0fdfad6f8a8cc5a4209b1e2f774453471e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8265</id>
    <title>NetworkManager bug fix and enhancement update</title>
    <issued date="2022-11-15 06:19:51" />
    <updated date="2023-02-02 13:56:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for NetworkManager.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2027674" id="2027674" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2029636" id="2029636" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2030997" id="2030997" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050216" id="2050216" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059608" id="2059608" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062825" id="2062825" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062826" id="2062826" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070581" id="2070581" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074020" id="2074020" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077392" id="2077392" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079406" id="2079406" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079849" id="2079849" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2080928" id="2080928" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2083332" id="2083332" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2083453" id="2083453" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2083968" id="2083968" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2085382" id="2085382" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2090946" id="2090946" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092212" id="2092212" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092323" id="2092323" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092361" id="2092361" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2093175" id="2093175" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094353" id="2094353" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094380" id="2094380" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2097293" id="2097293" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2102313" id="2102313" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2117202" id="2117202" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8265" id="RLBA-2022:8265" type="self" title="RLBA-2022:8265" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="NetworkManager-libnm-devel" arch="aarch64" epoch="1" version="1.40.0" release="1.el9" src="NetworkManager-1.40.0-1.el9.src.rpm">
          <filename>NetworkManager-libnm-devel-1.40.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2e99a8d8d06a2c2e5bfa157c5863bda710652862965275d1efca4d99801fbde0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8295</id>
    <title>libdnf bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:42" />
    <updated date="2023-02-02 13:56:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdnf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062624" id="2062624" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062812" id="2062812" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8295" id="RLBA-2022:8295" type="self" title="RLBA-2022:8295" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdnf-devel" arch="aarch64" epoch="0" version="0.67.0" release="3.el9" src="libdnf-0.67.0-3.el9.src.rpm">
          <filename>libdnf-devel-0.67.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">fcadd9e6b99a10dc5dc46452dcbffe963f169aa0f590fb14746a4f5f924c6fc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8309</id>
    <title>jitterentropy bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:01" />
    <updated date="2023-02-02 13:56:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jitterentropy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075978" id="2075978" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8309" id="RLBA-2022:8309" type="self" title="RLBA-2022:8309" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jitterentropy-devel" arch="aarch64" epoch="0" version="3.4.0" release="1.el9" src="jitterentropy-3.4.0-1.el9.src.rpm">
          <filename>jitterentropy-devel-3.4.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">514a939cc4c958c102c47143f7f08a5bdf0720a8badb6ad4acef09ae84d29b8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8320</id>
    <title>libtevent bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:34" />
    <updated date="2023-02-02 13:56:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtevent.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077491" id="2077491" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8320" id="RLBA-2022:8320" type="self" title="RLBA-2022:8320" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtevent-devel" arch="aarch64" epoch="0" version="0.12.0" release="0.el9" src="libtevent-0.12.0-0.el9.src.rpm">
          <filename>libtevent-devel-0.12.0-0.el9.aarch64.rpm</filename>
          <sum type="sha256">5b5042eb586128c53eff42f0767550c92fc53aff9cf6752e01323ef4f792bc54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8337</id>
    <title>libsepol bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:50" />
    <updated date="2023-02-02 13:56:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsepol.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2069718" id="2069718" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079276" id="2079276" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8337" id="RLBA-2022:8337" type="self" title="RLBA-2022:8337" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsepol-static" arch="aarch64" epoch="0" version="3.4" release="1.1.el9" src="libsepol-3.4-1.1.el9.src.rpm">
          <filename>libsepol-static-3.4-1.1.el9.aarch64.rpm</filename>
          <sum type="sha256">637c436c284453ec74126c02bab3ac058fe9edd539a4c1ece64114b3930fd50f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8373</id>
    <title>librepo bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:47" />
    <updated date="2023-02-02 13:56:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librepo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077859" id="2077859" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8373" id="RLBA-2022:8373" type="self" title="RLBA-2022:8373" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librepo-devel" arch="aarch64" epoch="0" version="1.14.2" release="3.el9" src="librepo-1.14.2-3.el9.src.rpm">
          <filename>librepo-devel-1.14.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">da2f0fff2f7d9a7b1e5feacc4f5b893f8957103276a6f1296d82043a51d40216</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8372</id>
    <title>iproute bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:47" />
    <updated date="2023-02-02 13:56:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for iproute.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2058228" id="2058228" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065388" id="2065388" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068987" id="2068987" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068988" id="2068988" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074608" id="2074608" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2085411" id="2085411" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2101759" id="2101759" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8372" id="RLBA-2022:8372" type="self" title="RLBA-2022:8372" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="iproute-devel" arch="aarch64" epoch="0" version="5.18.0" release="1.el9" src="iproute-5.18.0-1.el9.src.rpm">
          <filename>iproute-devel-5.18.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">eaadacff9ded25d2e1b13d70e7328bdd6a6db5d8f18c08e21778b67170c385f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8376</id>
    <title>nfs-utils bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:50" />
    <updated date="2023-02-02 13:56:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nfs-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2001764" id="2001764" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2048023" id="2048023" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2054300" id="2054300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2081934" id="2081934" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2104406" id="2104406" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106848" id="2106848" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106896" id="2106896" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109420" id="2109420" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2112941" id="2112941" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8376" id="RLBA-2022:8376" type="self" title="RLBA-2022:8376" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnfsidmap-devel" arch="aarch64" epoch="1" version="2.5.4" release="15.el9" src="nfs-utils-2.5.4-15.el9.src.rpm">
          <filename>libnfsidmap-devel-2.5.4-15.el9.aarch64.rpm</filename>
          <sum type="sha256">6626eb62e5f887491d381143bf61d9474ffc0c85ccbac2c18812df6d1ac655c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8377</id>
    <title>libarchive bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:50" />
    <updated date="2023-02-02 13:56:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libarchive.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106651" id="2106651" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8377" id="RLBA-2022:8377" type="self" title="RLBA-2022:8377" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libarchive-devel" arch="aarch64" epoch="0" version="3.5.3" release="3.el9" src="libarchive-3.5.3-3.el9.src.rpm">
          <filename>libarchive-devel-3.5.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">34f5f62deeeb03ada9cc6d1ee7128fc6e0a1e37ff973ed4d9113b3105171c2c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8381</id>
    <title>nftables bug fix and enhancement update</title>
    <issued date="2022-11-15 06:22:59" />
    <updated date="2023-02-02 13:56:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nftables.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1658716" id="1658716" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1705732" id="1705732" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1917398" id="1917398" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8381" id="RLBA-2022:8381" type="self" title="RLBA-2022:8381" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nftables-devel" arch="aarch64" epoch="1" version="1.0.4" release="2.el9" src="nftables-1.0.4-2.el9.src.rpm">
          <filename>nftables-devel-1.0.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d36b7f8d7be9557bd3aefdf32d057e163627a39d8efb4439f10fd967ea295042</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8388</id>
    <title>bluez bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:10" />
    <updated date="2023-02-02 13:56:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bluez.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077416" id="2077416" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8388" id="RLBA-2022:8388" type="self" title="RLBA-2022:8388" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bluez-libs-devel" arch="aarch64" epoch="0" version="5.64" release="2.el9" src="bluez-5.64-2.el9.src.rpm">
          <filename>bluez-libs-devel-5.64-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cd7dfedcd877fb373d11da2f628fd53766971520e8bb1309d7353937af0416ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8394</id>
    <title>libuser bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:14" />
    <updated date="2023-02-02 13:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libuser.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2102876" id="2102876" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8394" id="RLBA-2022:8394" type="self" title="RLBA-2022:8394" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libuser-devel" arch="aarch64" epoch="0" version="0.63" release="11.el9" src="libuser-0.63-11.el9.src.rpm">
          <filename>libuser-devel-0.63-11.el9.aarch64.rpm</filename>
          <sum type="sha256">712518218891381aa01ab469f72e26f729c455588b75847b39688381097d480c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8396</id>
    <title>tpm2-tss bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:16" />
    <updated date="2023-02-02 13:56:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tpm2-tss.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8396" id="RLBA-2022:8396" type="self" title="RLBA-2022:8396" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tpm2-tss-devel" arch="aarch64" epoch="0" version="3.0.3" release="8.el9" src="tpm2-tss-3.0.3-8.el9.src.rpm">
          <filename>tpm2-tss-devel-3.0.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">a067522f448f94c464613591f630ac798c1bbb4336edf33fe52676a45799d0ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8398</id>
    <title>liblockfile bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:24" />
    <updated date="2023-02-02 13:56:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for liblockfile.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2112377" id="2112377" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8398" id="RLBA-2022:8398" type="self" title="RLBA-2022:8398" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="liblockfile-devel" arch="aarch64" epoch="0" version="1.14" release="10.el9" src="liblockfile-1.14-10.el9.src.rpm">
          <filename>liblockfile-devel-1.14-10.el9.aarch64.rpm</filename>
          <sum type="sha256">044777b8e7d5afc31679f9416e2fa409d96c6909c3c7d6b068cd2afc71c08832</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8400</id>
    <title>Moderate: libtirpc security update</title>
    <issued date="2022-11-15 06:23:29" />
    <updated date="2023-02-02 13:56:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libtirpc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages.

Security Fix(es):

* libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46828" id="CVE-2021-46828" type="cve" title="CVE-2021-46828" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109352" id="2109352" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2118157" id="2118157" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8400" id="RLSA-2022:8400" type="self" title="RLSA-2022:8400" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtirpc-devel" arch="aarch64" epoch="0" version="1.3.3" release="0.el9" src="libtirpc-1.3.3-0.el9.src.rpm">
          <filename>libtirpc-devel-1.3.3-0.el9.aarch64.rpm</filename>
          <sum type="sha256">c53e95bfdc9d7a1d62f96b0e5969e00f689457d51f313ed035bd6796d3fbdc5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8404</id>
    <title>util-linux bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:38" />
    <updated date="2023-02-02 13:56:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for util-linux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064810" id="2064810" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074486" id="2074486" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092943" id="2092943" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094216" id="2094216" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109459" id="2109459" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2117203" id="2117203" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8404" id="RLBA-2022:8404" type="self" title="RLBA-2022:8404" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfdisk-devel" arch="aarch64" epoch="0" version="2.37.4" release="9.el9" src="util-linux-2.37.4-9.el9.src.rpm">
          <filename>libfdisk-devel-2.37.4-9.el9.aarch64.rpm</filename>
          <sum type="sha256">f25baa7c6905a72f02a60a496ff309c2da516e8a9c81f9abed252c1dd854c282</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8406</id>
    <title>file bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:41" />
    <updated date="2023-02-02 13:56:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for file.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2120692" id="2120692" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2121694" id="2121694" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8406" id="RLBA-2022:8406" type="self" title="RLBA-2022:8406" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="file-devel" arch="aarch64" epoch="0" version="5.39" release="10.el9" src="file-5.39-10.el9.src.rpm">
          <filename>file-devel-5.39-10.el9.aarch64.rpm</filename>
          <sum type="sha256">04baa145cb6323672fccbaa5670f17c4215cd1eb2acf4e22c6588a02fc5fe553</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8424</id>
    <title>libreoffice:flatpak bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:57" />
    <updated date="2023-02-02 13:57:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for zaf, hyphen-uk, libpagemaker, hyphen-ca, hunspell-et, hyphen-eu, hyphen-ga, libvisio, raptor2, hunspell-ta, mythes-nl, hunspell-lt, hunspell-sk, ongres-scram, hunspell-hu, libshout, hunspell-nso, poppler, hunspell-nl, hunspell-hi, openjpeg2, libabw, hunspell-es, hunspell-sv, hyphen-sv, hyphen-te, google-carlito-fonts, hunspell-br, hunspell-ml, hyphen-pl, hunspell-pl, hyphen-el, hyphen-ru, hunspell-bg, mariadb-connector-c, hyphen-es, mythes-ro, hyphen-as, libloader, libmspub, dconf, mythes-en, libreoffice-voikko, hunspell-de, hunspell-id, hunspell-eu, libexttextcat, hyphen-da, pentaho-libxml, redland, hunspell-kn, libcmis, libepubgen, libodfgen, hunspell-fr, hunspell-th, hunspell-zu, xmlsec1, libnumbertext, hyphen-gu, hyphen-nl, hyphen-ro, libfontenc, librevenge, libwpg, hyphen-it, mythes-it, libmwaw, ttmkfdir, postgresql-jdbc, hunspell-sr, hunspell-ga, hunspell-ro, openoffice-lv, lksctp-tools, mythes-sk, mythes-cs, hyphen-cy, libformula, liblayout, clucene, hunspell-hr, yajl, mythes-ru, hunspell-gl, hyphen-ta, mythes-da, hunspell-tn, libqxp, lpsolve, hunspell-gu, mythes-pt, mythes-sl, libetonyek, hyphen-lt, google-noto-fonts, hunspell-ar, neon, librtas, hyphen-sk, hunspell-cy, boost, hunspell-ko, hunspell-si, flute, hunspell-pt, hyphen-fa, libzmf, hunspell-nr, hunspell-pa, hunspell-ve, mythes-ca, sac, hunspell-it, hyphen-bg, gstreamer1-plugins-good, openoffice.org-dict-cs_CZ, hyphen-gl, hyphen-hu, taglib, bitmap-fonts, libwps, hyphen-de, libbase, hunspell-af, hunspell-or, mythes-ga, xorg-x11-fonts, hunspell-no, hunspell-kk, libvoikko, mythes-sv, hunspell-el, hyphen-id, hunspell-da, libwpd, hunspell-ss, hunspell-ts, hyphen-bn, hyphen-sl, libeot, mythes-fr, hunspell-te, mythes-pl, pentaho-reporting-flow-engine, mythes-de, mythes-es, hunspell-as, hunspell-fa, hyphen, hunspell-uk, mythes-el, hyphen-hi, mythes-hu, hyphen-or, hyphen-mr, hunspell-xh, hyphen-pa, libserializer, poppler-data, hunspell-mr, hspell, hunspell-st, hunspell-ru, libfreehand, hunspell-ca, hyphen-fr, hunspell-bn, gstreamer1-plugins-base, twolame, libcdr, Box2D, liborcus, hyphen-ml, hunspell-sl, javapackages-tools, librepository, libstaroffice, libfonts, v4l-utils, rasqal, voikko-fi, hyphen-kn, mythes-uk, mythes-bg, hyphen-pt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8424" id="RLBA-2022:8424" type="self" title="RLBA-2022:8424" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="boost-b2" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-b2-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">a24522fdbc70095eb4eeb10a564da4dc75893646acc633d1903b20b752c93fc6</sum>
        </package>
        <package name="boost-build" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-build-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">7434dfea46f9bd571b3675bb4c303de6597ad7ba8de42b4faef7e5824e9a36e8</sum>
        </package>
        <package name="boost-doc" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-doc-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">e5080e6bb50f4ae84b97ff3681e6d5d80b6337ca035c88b4f2f3770a1205cf0c</sum>
        </package>
        <package name="boost-doctools" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-doctools-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">6e257845b697fec568039506a5dc9dc92a208816107fc9008cf97bc77df40ee3</sum>
        </package>
        <package name="boost-examples" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-examples-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">f3904eec06577458543173a6e0b913a0baae3f378e034fa6b63eadb46b3e17f2</sum>
        </package>
        <package name="boost-static" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-static-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">8d7c864fdb7e625560d6b315fd41f3eeca677e7ca07cf85ce25ebe5a441e64a6</sum>
        </package>
        <package name="clucene-core-devel" arch="aarch64" epoch="0" version="2.3.3.4" release="42.20130812.e8e3d20git.el9" src="clucene-2.3.3.4-42.20130812.e8e3d20git.el9.src.rpm">
          <filename>clucene-core-devel-2.3.3.4-42.20130812.e8e3d20git.el9.aarch64.rpm</filename>
          <sum type="sha256">407136bfdb2c11ce5109e5f9128d5eb7d818448b473703d8925e0ca9222a8d8f</sum>
        </package>
        <package name="dconf-devel" arch="aarch64" epoch="0" version="0.40.0" release="6.el9" src="dconf-0.40.0-6.el9.src.rpm">
          <filename>dconf-devel-0.40.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">27d14f0cd3ae3269e2a9e7a7a66ef68ced5f1d3fa4193ad6440e60c9e27dc6c4</sum>
        </package>
        <package name="google-noto-sans-symbols2-fonts" arch="noarch" epoch="0" version="20201206" release="4.el9" src="google-noto-fonts-20201206-4.el9.src.rpm">
          <filename>google-noto-sans-symbols2-fonts-20201206-4.el9.noarch.rpm</filename>
          <sum type="sha256">dd615d5f24abcfa7b0cd668e079d1cc26472634251956c335daac0e57eb4cdf7</sum>
        </package>
        <package name="javapackages-generators" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>javapackages-generators-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">317fc46d3cc3e33dcfe658399f568188524051eaa2e11422ebda2b054b7c0d30</sum>
        </package>
        <package name="javapackages-local" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>javapackages-local-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">8eabb02f23814c7dd3fcd61acef39ed52fd559d11161e6366fa3c9cce30586a8</sum>
        </package>
        <package name="libeot" arch="aarch64" epoch="0" version="0.01" release="18.el9" src="libeot-0.01-18.el9.src.rpm">
          <filename>libeot-0.01-18.el9.aarch64.rpm</filename>
          <sum type="sha256">6dcd26e7b498b9a3c2078f56b45cfd27f834ab1d4210a791aa79a05c8574638d</sum>
        </package>
        <package name="libetonyek-devel" arch="aarch64" epoch="0" version="0.1.10" release="2.el9" src="libetonyek-0.1.10-2.el9.src.rpm">
          <filename>libetonyek-devel-0.1.10-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3c8b67169ab92eff65836175033a57ac3229d0d4bd1586ff9cfaf4ce544ac01f</sum>
        </package>
        <package name="libfontenc-devel" arch="aarch64" epoch="0" version="1.1.3" release="17.el9" src="libfontenc-1.1.3-17.el9.src.rpm">
          <filename>libfontenc-devel-1.1.3-17.el9.aarch64.rpm</filename>
          <sum type="sha256">631c347fe7a67e2621617d249289b1ea5071a1af64c91f1091df0157141c67a3</sum>
        </package>
        <package name="libodfgen-devel" arch="aarch64" epoch="0" version="0.1.8" release="4.el9" src="libodfgen-0.1.8-4.el9.src.rpm">
          <filename>libodfgen-devel-0.1.8-4.el9.aarch64.rpm</filename>
          <sum type="sha256">2906fa4bb807a7423b51aa22d8fa9a887192c3f6ca068846a1b05db9868b146e</sum>
        </package>
        <package name="librevenge-devel" arch="aarch64" epoch="0" version="0.0.4" release="22.el9" src="librevenge-0.0.4-22.el9.src.rpm">
          <filename>librevenge-devel-0.0.4-22.el9.aarch64.rpm</filename>
          <sum type="sha256">c2d197beba2cb75239af5cbe9bca70db2f05c9d9314891e3f1d5343dcc70bfc4</sum>
        </package>
        <package name="libshout-devel" arch="aarch64" epoch="0" version="2.4.3" release="7.el9" src="libshout-2.4.3-7.el9.src.rpm">
          <filename>libshout-devel-2.4.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">5e1af2e46a5301c9f34626483516dcb9c430885952855157f5c14c593f63ab84</sum>
        </package>
        <package name="libv4l-devel" arch="aarch64" epoch="0" version="1.20.0" release="5.el9" src="v4l-utils-1.20.0-5.el9.src.rpm">
          <filename>libv4l-devel-1.20.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">885378d8783da55b5a7a64deb5745f61d5b89b7ac9911faecc4b9205364309bd</sum>
        </package>
        <package name="libvisio-devel" arch="aarch64" epoch="0" version="0.1.7" release="9.el9" src="libvisio-0.1.7-9.el9.src.rpm">
          <filename>libvisio-devel-0.1.7-9.el9.aarch64.rpm</filename>
          <sum type="sha256">f4bf5d016f918afdc7ee62beee2b83a70657f87d3ff4f11f33cdba50de42bcec</sum>
        </package>
        <package name="libvoikko-devel" arch="aarch64" epoch="0" version="4.3" release="7.el9" src="libvoikko-4.3-7.el9.src.rpm">
          <filename>libvoikko-devel-4.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">70053a0d076781af4e9847b1d01e24a714bbd1b1f531412b52a1899a1e426521</sum>
        </package>
        <package name="libwpd-devel" arch="aarch64" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-devel-0.10.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">d913a91f5e225b883aa517d8b05d4e8e411a755d6391336bc267b51ce40204de</sum>
        </package>
        <package name="libwpd-doc" arch="noarch" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-doc-0.10.3-10.el9.noarch.rpm</filename>
          <sum type="sha256">cf1cafa034c873ca0728f3d265a585a12f2fe820388cf525b9407d7a7ff7d3b4</sum>
        </package>
        <package name="libwpg-devel" arch="aarch64" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-devel-0.3.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ea1d595370cb449e69909f4873f3b2767b4fff7395c2cbfee6318fb652c0c326</sum>
        </package>
        <package name="libwpg-doc" arch="noarch" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-doc-0.3.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">612575a87c0c960172ba28ba334437243e5e8df6ae17b42d55d999fe31dac0a0</sum>
        </package>
        <package name="libwps-devel" arch="aarch64" epoch="0" version="0.4.12" release="4.el9" src="libwps-0.4.12-4.el9.src.rpm">
          <filename>libwps-devel-0.4.12-4.el9.aarch64.rpm</filename>
          <sum type="sha256">5f623d9ec9c1ae83ee39cddd18b6ac35d5be99e463abb665946d247d1f5018d3</sum>
        </package>
        <package name="libwps-doc" arch="noarch" epoch="0" version="0.4.12" release="4.el9" src="libwps-0.4.12-4.el9.src.rpm">
          <filename>libwps-doc-0.4.12-4.el9.noarch.rpm</filename>
          <sum type="sha256">a57cc3f098bec98c980281bf98395ecd53c2f63d364e03fabd653f02ca29a8cf</sum>
        </package>
        <package name="mariadb-connector-c-doc" arch="noarch" epoch="0" version="3.2.6" release="1.el9_0" src="mariadb-connector-c-3.2.6-1.el9_0.src.rpm">
          <filename>mariadb-connector-c-doc-3.2.6-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">ff5c4d6ab6afb6673d998e459849737de604fb3af694d9c9534909bfdd0a2e26</sum>
        </package>
        <package name="mariadb-connector-c-test" arch="aarch64" epoch="0" version="3.2.6" release="1.el9_0" src="mariadb-connector-c-3.2.6-1.el9_0.src.rpm">
          <filename>mariadb-connector-c-test-3.2.6-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">70a7f3b9ebd83354bfa326a99cfbfb147c9fec27e057383ce6f61b0fbc4d851b</sum>
        </package>
        <package name="maven-local" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>maven-local-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">1ba14e27ad8c7fa5b901dd6301622a414cca16776ecf2e76fd06d80c523d3878</sum>
        </package>
        <package name="neon-devel" arch="aarch64" epoch="0" version="0.31.2" release="11.el9" src="neon-0.31.2-11.el9.src.rpm">
          <filename>neon-devel-0.31.2-11.el9.aarch64.rpm</filename>
          <sum type="sha256">095a73f8063bdf20163211c8e44ee6284d8b153c3d056240ef8c90404d60fbef</sum>
        </package>
        <package name="openjpeg2-devel" arch="aarch64" epoch="0" version="2.4.0" release="7.el9" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">d20aa82d5d912b0ec93f1553b41fd0a5b27361013e3aa06bf3653a8dcc5fd772</sum>
        </package>
        <package name="openjpeg2-tools" arch="aarch64" epoch="0" version="2.4.0" release="7.el9" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">6b936ef4371c66d1e9d5f75fb495e1a9a99fea7b4a38e4140cb40c8755ab0670</sum>
        </package>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">9a2896a421dc2ee82b5555e9ae90d224374cd2bd75ca1011c63cb3a95734cbe4</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">634cf93dc3b3ac595c7a11ca70e7e2407fa7cfa1ffabcc740c07ab4a93ed37da</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">fa2a249be5c93f6a38560b6aa094f9244ad09ab2a0d11b5452897355e97a2bc6</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">94c2a935dfa7b09f0faff2de2efaa492f5d54a5d723a454904379ebd53162ff3</sum>
        </package>
        <package name="python3-javapackages" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>python3-javapackages-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">899b9fe1a14b98ebda8c57b4624ec45ce522e8683e2a8b987932c8aadb5eb8a2</sum>
        </package>
        <package name="raptor2-devel" arch="aarch64" epoch="0" version="2.0.15" release="30.el9" src="raptor2-2.0.15-30.el9.src.rpm">
          <filename>raptor2-devel-2.0.15-30.el9.aarch64.rpm</filename>
          <sum type="sha256">74d2f985d35631ff6803faf444eb6e288ca168f46546601c1a4c33f6d50018ea</sum>
        </package>
        <package name="rasqal-devel" arch="aarch64" epoch="0" version="0.9.33" release="18.el9" src="rasqal-0.9.33-18.el9.src.rpm">
          <filename>rasqal-devel-0.9.33-18.el9.aarch64.rpm</filename>
          <sum type="sha256">428a21bf2f1fff8485f24f87a97fa75c86b4ab791a55e92bead0240cd15804ec</sum>
        </package>
        <package name="redland-devel" arch="aarch64" epoch="0" version="1.0.17" release="29.el9" src="redland-1.0.17-29.el9.src.rpm">
          <filename>redland-devel-1.0.17-29.el9.aarch64.rpm</filename>
          <sum type="sha256">20b31c37d1699bda5d3f395d3426a4685b2350ee13386e36ac900fc092363eb7</sum>
        </package>
        <package name="taglib-devel" arch="aarch64" epoch="0" version="1.12" release="6.el9" src="taglib-1.12-6.el9.src.rpm">
          <filename>taglib-devel-1.12-6.el9.aarch64.rpm</filename>
          <sum type="sha256">302edef8009de60952bbea22d4192bc70db6406445db778ffc8a4b9921def0d7</sum>
        </package>
        <package name="twolame-devel" arch="aarch64" epoch="0" version="0.3.13" release="19.el9" src="twolame-0.3.13-19.el9.src.rpm">
          <filename>twolame-devel-0.3.13-19.el9.aarch64.rpm</filename>
          <sum type="sha256">86ba074c8dabc035c21e7e9842ea4ab318ad15647596fe8782795937a0ce4d98</sum>
        </package>
        <package name="xmlsec1-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">173bf7b0b92fd87a1ba2a9de8cb7393970990e79024ccc4985b4588b28358132</sum>
        </package>
        <package name="xmlsec1-gcrypt" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gcrypt-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">bbcf0e81746775754d83c3f06b59b85dcede2324085a8f487a9acbb9b3f52ad7</sum>
        </package>
        <package name="xmlsec1-gnutls" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gnutls-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">76784a298ad5c53ebca60c66969ad00049d793cf214c60d2f2bb9ce588221485</sum>
        </package>
        <package name="xmlsec1-gnutls-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gnutls-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">23867d3938ab3d16a854caaee7a20b8226e245bcf48126d553704d612c3c5086</sum>
        </package>
        <package name="xmlsec1-openssl-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-openssl-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">732db3fe3592e36b933dcab625764bb6197e4a26be755f2c026fe13b6ee0fc66</sum>
        </package>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="21.el9" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">5bff3a63b4bd5036cc6578b512181be1062df6c7beb303fd578cb7259b744fb7</sum>
        </package>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="21.el9_0" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9_0.aarch64.rpm</filename>
          <sum type="sha256">eee07bb8cd6d1e17ecc1cf6dfdddacb75c9b22ee12b05ffc6526701047e738ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:8391</id>
    <title>RDMA stack bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:12" />
    <updated date="2023-02-02 13:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ucx, rdma-core, mstflint, libvma, libpsm2, fabtests, opa-fm, opa-ff, eth-tools, libfabric.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2022:8391" id="RLEA-2022:8391" type="self" title="RLEA-2022:8391" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfabric-devel" arch="aarch64" epoch="0" version="1.15.1" release="1.el9" src="libfabric-1.15.1-1.el9.src.rpm">
          <filename>libfabric-devel-1.15.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5f440db5ee05d31644c4d2681ee61b73c78b35b6e6182315b0fad91a5490cb58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8392</id>
    <title>sg3_utils bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:13" />
    <updated date="2023-02-02 13:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sg3_utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2073146" id="2073146" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8392" id="RLBA-2022:8392" type="self" title="RLBA-2022:8392" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sg3_utils-devel" arch="aarch64" epoch="0" version="1.47" release="9.el9" src="sg3_utils-1.47-9.el9.src.rpm">
          <filename>sg3_utils-devel-1.47-9.el9.aarch64.rpm</filename>
          <sum type="sha256">9974a75662aa2f01681627e793c189a3a23ad208733733ec245af0141c1cc861</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8395</id>
    <title>fwupd bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:15" />
    <updated date="2023-02-02 13:56:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fwupd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064904" id="2064904" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8395" id="RLBA-2022:8395" type="self" title="RLBA-2022:8395" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fwupd-devel" arch="aarch64" epoch="0" version="1.7.9" release="1.el9" src="fwupd-1.7.9-1.el9.src.rpm">
          <filename>fwupd-devel-1.7.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">fbb5b7cc3a57b4ecf51475180e0093166fc132511d059aab172c2239fef4e3b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8453</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-11-15 15:35:59" />
    <updated date="2023-02-02 13:57:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for device-mapper-multipath.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Regression of CVE-2022-41974 fix in Rocky Linux (CVE-2022-3787)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3787" id="CVE-2022-3787" type="cve" title="CVE-2022-3787" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2138959" id="2138959" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8453" id="RLSA-2022:8453" type="self" title="RLSA-2022:8453" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-multipath-devel" arch="aarch64" epoch="0" version="0.8.7" release="12.el9_1.1" src="device-mapper-multipath-0.8.7-12.el9_1.1.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-12.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">db0c13a8ead6c48f3f1f705f87d017c621d2207be662cf9f294d03dc0051367c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8493</id>
    <title>Important: python3.9 security update</title>
    <issued date="2022-11-16 10:26:42" />
    <updated date="2023-02-02 13:57:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919" id="CVE-2022-42919" type="cve" title="CVE-2022-42919" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2138705" id="2138705" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8493" id="RLSA-2022:8493" type="self" title="RLSA-2022:8493" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.1" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">0ab1bc8089c366ce9e299b726d6e7d364552149253ee57360a89813b7e64c567</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.1" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">bacf73f1a335be08b17cd6e6a66a9f115d11201637e63069416865f21760a0c3</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.1" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">72d367b1c768f800e4dd84b0a5b1e09f6642c35d05a94dfe985a00ef51db4f3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0331</id>
    <title>opencryptoki bug fix update</title>
    <issued date="2023-01-23 14:30:20" />
    <updated date="2023-02-02 13:57:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opencryptoki.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented
for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages
includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11
firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM
eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Bug Fix:

* opencryptoki C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 and CEX8 crypto cards (BZ#2128611)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:0331" id="RLBA-2023:0331" type="self" title="RLBA-2023:0331" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opencryptoki-devel" arch="aarch64" epoch="0" version="3.18.0" release="5.el9_1" src="opencryptoki-3.18.0-5.el9_1.src.rpm">
          <filename>opencryptoki-devel-3.18.0-5.el9_1.aarch64.rpm</filename>
          <sum type="sha256">27175a8891b6b877355c8018f87ecd9287b81e70398234e5def6be986019dd42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0342</id>
    <title>glibc bug fix and enhancement update</title>
    <issued date="2023-01-23 14:30:47" />
    <updated date="2023-02-02 13:57:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread
libraries (libpthread), standard math libraries (libm), and the name service
cache daemon (nscd) used by multiple programs on the system. Without these
libraries, the Linux system cannot function correctly.

Bug Fix:

* glibc: Restore IPC_64 support in sysvipc *ctl functions (BZ#2142111)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2142111" id="2142111" type="bugzilla" title="* glibc: Restore IPC_64 support in sysvipc *ctl functions" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0342" id="RLBA-2023:0342" type="self" title="RLBA-2023:0342" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>glibc-benchtests-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">b2d340e2be83362c55d70dbd95f02b45df37e372c173399083ef34561df5bebd</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>glibc-nss-devel-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">4fddf8453a93fac81f3ae08648c03c1af428bda2b94caa9932daf5f7036982e1</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>glibc-static-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">a4a815e06c461e395d547a33cf149f4bb507d7eb9a17cedde2a29b71bda30917</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>nss_db-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">721d9c76f10c8607f904bdce0cbb0868d1afa1e866daf1e5ae70c78a31790b44</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>nss_hesiod-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">c56a60d73880f6c5a07059afdc574baff9ebf253413925d4d8f1d6983611e652</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0347</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2023-01-23 14:31:07" />
    <updated date="2023-02-02 13:57:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Bug Fix(es) and Enhancement(s):

* Analyzer: Optimize and remove duplicate messages in verbose list  (BZ#2139870)

* SSS_CLIENT: fix thread unsafe access to get*ent structs. (BZ#2141830)

* SSSD: `sssctl analyze` command shouldn't require 'root' privileged (BZ#2142960)

* UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around (BZ#2148988)

* authenticating against external IdP services okta (native app) with OAuth client secret failed (BZ#2152884)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2139870" id="2139870" type="bugzilla" title="* Analyzer: Optimize and remove duplicate messages in verbose list" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141830" id="2141830" type="bugzilla" title="* SSS_CLIENT: fix thread unsafe access to get*ent structs." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2142960" id="2142960" type="bugzilla" title="* SSSD: `sssctl analyze` command shouldn't require 'root' privileged" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2148988" id="2148988" type="bugzilla" title="* UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2152884" id="2152884" type="bugzilla" title="* authenticating against external IdP services okta (native app) with OAuth client secret failed" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0347" id="RLBA-2023:0347" type="self" title="RLBA-2023:0347" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.7.3" release="4.el9_1.3" src="sssd-2.7.3-4.el9_1.3.src.rpm">
          <filename>libsss_nss_idmap-devel-2.7.3-4.el9_1.3.aarch64.rpm</filename>
          <sum type="sha256">5f7bcafeb2b8220d0035ec5dd4213b3ff61dc6a96bc8e143acd891523063c9ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0349</id>
    <title>cryptsetup bug fix and enhancement update</title>
    <issued date="2023-01-23 14:31:09" />
    <updated date="2023-02-02 13:57:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cryptsetup.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The cryptsetup packages provide a utility for setting up disk encryption using
the dm-crypt kernel module.

Bug Fix(es) and Enhancement(s):

* Fix FIPS related issues in PBKDF2 (BZ#2151576)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2151576" id="2151576" type="bugzilla" title="* Fix FIPS related issues in PBKDF2" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0349" id="RLBA-2023:0349" type="self" title="RLBA-2023:0349" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cryptsetup-devel" arch="aarch64" epoch="0" version="2.4.3" release="5.el9_1.1" src="cryptsetup-2.4.3-5.el9_1.1.src.rpm">
          <filename>cryptsetup-devel-2.4.3-5.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">f2db664998a7e53e14a5f21555751be4a0ead1244c2fdc4b407d40812af25914</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2309</id>
    <title>new packages: python-psutil</title>
    <issued date="2022-05-17 05:53:50" />
    <updated date="2025-10-17 21:47:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-psutil.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1990466" id="1990466" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2309" id="RLBA-2022:2309" type="self" title="RLBA-2022:2309" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-psutil-tests" arch="aarch64" epoch="0" version="5.8.0" release="12.el9" src="python-psutil-5.8.0-12.el9.src.rpm">
          <filename>python3-psutil-tests-5.8.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">101ca1fc4a7b53b9793a59df2480fb47570e78a8f3f059590ba471d68ebcd77b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2319</id>
    <title>new packages: devhelp</title>
    <issued date="2022-05-17 05:54:28" />
    <updated date="2025-10-17 21:47:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for devhelp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2319" id="RLBA-2022:2319" type="self" title="RLBA-2022:2319" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="devhelp-devel" arch="aarch64" epoch="1" version="40.1" release="1.el9" src="devhelp-40.1-1.el9.src.rpm">
          <filename>devhelp-devel-40.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">13116c0e7d17c89d825324d5cffa969589e3b456dc283494f662f383c66c2747</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2321</id>
    <title>new packages: hivex</title>
    <issued date="2022-05-17 05:54:33" />
    <updated date="2023-02-02 13:57:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for hivex.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2321" id="RLBA-2022:2321" type="self" title="RLBA-2022:2321" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="hivex-devel" arch="aarch64" epoch="0" version="1.3.21" release="3.el9" src="hivex-1.3.21-3.el9.src.rpm">
          <filename>hivex-devel-1.3.21-3.el9.aarch64.rpm</filename>
          <sum type="sha256">1000ad345a370b7ba03ab8ebc1223ec926ad1664293fdb348b4d25128272ca56</sum>
        </package>
        <package name="ocaml-hivex" arch="aarch64" epoch="0" version="1.3.21" release="3.el9" src="hivex-1.3.21-3.el9.src.rpm">
          <filename>ocaml-hivex-1.3.21-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6f0ee55a9a96e1b6d9d8ce639673571385bc03f0e368b89ef712c9737a8c1cac</sum>
        </package>
        <package name="ocaml-hivex-devel" arch="aarch64" epoch="0" version="1.3.21" release="3.el9" src="hivex-1.3.21-3.el9.src.rpm">
          <filename>ocaml-hivex-devel-1.3.21-3.el9.aarch64.rpm</filename>
          <sum type="sha256">807afcf1e72a6b33c1cdf2163b602995c27822e515deef23c82a762687e99a93</sum>
        </package>
        <package name="python3-hivex" arch="aarch64" epoch="0" version="1.3.21" release="3.el9" src="hivex-1.3.21-3.el9.src.rpm">
          <filename>python3-hivex-1.3.21-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b3250fe89c7f2afc86de2b129f2e263aaae9145556418cebc9a2887c0a5a8412</sum>
        </package>
        <package name="ruby-hivex" arch="aarch64" epoch="0" version="1.3.21" release="3.el9" src="hivex-1.3.21-3.el9.src.rpm">
          <filename>ruby-hivex-1.3.21-3.el9.aarch64.rpm</filename>
          <sum type="sha256">0db61f29a469edf522a525a19e43228f71b63fe0d6cec96b26d93fc398e57847</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2332</id>
    <title>new packages: libuv</title>
    <issued date="2022-05-17 05:55:47" />
    <updated date="2023-02-02 13:57:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libuv.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2005319" id="2005319" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2332" id="RLBA-2022:2332" type="self" title="RLBA-2022:2332" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libuv-devel" arch="aarch64" epoch="1" version="1.42.0" release="1.el9" src="libuv-1.42.0-1.el9.src.rpm">
          <filename>libuv-devel-1.42.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">616121dd2debc65c95f68c7beead5e37d50b99024de8eabedcb476dceb27e71d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2377</id>
    <title>new packages: memkind</title>
    <issued date="2022-05-17 05:58:38" />
    <updated date="2025-10-17 21:47:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for memkind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044880" id="2044880" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2377" id="RLBA-2022:2377" type="self" title="RLBA-2022:2377" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="memkind-devel" arch="aarch64" epoch="0" version="1.11.0" release="2.el9" src="memkind-1.11.0-2.el9.src.rpm">
          <filename>memkind-devel-1.11.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">083b1bb019032baf111b65e72cef5bbbb761838b5a1308725687f7bc15afe873</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2400</id>
    <title>new packages: libjpeg-turbo</title>
    <issued date="2022-05-17 06:00:28" />
    <updated date="2023-02-02 13:57:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libjpeg-turbo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2029580" id="2029580" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2400" id="RLBA-2022:2400" type="self" title="RLBA-2022:2400" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="turbojpeg" arch="aarch64" epoch="0" version="2.0.90" release="5.el9" src="libjpeg-turbo-2.0.90-5.el9.src.rpm">
          <filename>turbojpeg-2.0.90-5.el9.aarch64.rpm</filename>
          <sum type="sha256">0c09f7db5e80becfe99bd64eb05e5a6c570ad66890903c71bdf1b8af86440d79</sum>
        </package>
        <package name="turbojpeg-devel" arch="aarch64" epoch="0" version="2.0.90" release="5.el9" src="libjpeg-turbo-2.0.90-5.el9.src.rpm">
          <filename>turbojpeg-devel-2.0.90-5.el9.aarch64.rpm</filename>
          <sum type="sha256">63c9ad031f08aed106501ffafc4ee784782e9774767c8436c79db4bf1924b8a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2403</id>
    <title>new packages: accountsservice</title>
    <issued date="2022-05-17 06:00:50" />
    <updated date="2025-10-17 21:47:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for accountsservice.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057576" id="2057576" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2403" id="RLBA-2022:2403" type="self" title="RLBA-2022:2403" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="accountsservice-devel" arch="aarch64" epoch="0" version="0.6.55" release="10.el9" src="accountsservice-0.6.55-10.el9.src.rpm">
          <filename>accountsservice-devel-0.6.55-10.el9.aarch64.rpm</filename>
          <sum type="sha256">909ac1f5d8e9103ba29fc5433611f25628c6dc11b94445c2b2dc51b7fb8fed3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2413</id>
    <title>new packages: udisks2</title>
    <issued date="2022-05-17 06:01:14" />
    <updated date="2023-02-02 13:57:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for udisks2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1953826" id="1953826" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2001549" id="2001549" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2004423" id="2004423" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2004761" id="2004761" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2010363" id="2010363" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2030916" id="2030916" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2413" id="RLBA-2022:2413" type="self" title="RLBA-2022:2413" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libudisks2-devel" arch="aarch64" epoch="0" version="2.9.4" release="3.el9" src="udisks2-2.9.4-3.el9.src.rpm">
          <filename>libudisks2-devel-2.9.4-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b12779e3a5e06de46d82d611aa476ca22d78d96ae9d267c833b14bbc85e100cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2420</id>
    <title>new packages: createrepo_c</title>
    <issued date="2022-05-17 06:02:08" />
    <updated date="2023-02-02 13:57:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for createrepo_c.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1998426" id="1998426" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2055032" id="2055032" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062301" id="2062301" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2420" id="RLBA-2022:2420" type="self" title="RLBA-2022:2420" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="createrepo_c-devel" arch="aarch64" epoch="0" version="0.17.7" release="4.el9_0" src="createrepo_c-0.17.7-4.el9_0.src.rpm">
          <filename>createrepo_c-devel-0.17.7-4.el9_0.aarch64.rpm</filename>
          <sum type="sha256">033e1f1b0aa7be78ae69cd29c202258f74829ec015117d68df5c86f16fc7757d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2433</id>
    <title>new packages: exiv2</title>
    <issued date="2022-05-17 06:02:48" />
    <updated date="2025-10-17 21:47:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for exiv2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2018421" id="2018421" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2433" id="RLBA-2022:2433" type="self" title="RLBA-2022:2433" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="exiv2-devel" arch="aarch64" epoch="0" version="0.27.5" release="2.el9" src="exiv2-0.27.5-2.el9.src.rpm">
          <filename>exiv2-devel-0.27.5-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ce62a4e167df161b4578491b0d01d09c13f5f8b5f2da91c49a7ba75c1da4c70a</sum>
        </package>
        <package name="exiv2-doc" arch="noarch" epoch="0" version="0.27.5" release="2.el9" src="exiv2-0.27.5-2.el9.src.rpm">
          <filename>exiv2-doc-0.27.5-2.el9.noarch.rpm</filename>
          <sum type="sha256">b04417d500d5766489e6e86a4bb99e2c0af04fe0f0cc1db519ca68984be2507b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2438</id>
    <title>new packages: exempi</title>
    <issued date="2022-05-17 06:03:00" />
    <updated date="2025-10-17 21:47:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for exempi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1989405" id="1989405" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2438" id="RLBA-2022:2438" type="self" title="RLBA-2022:2438" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="exempi-devel" arch="aarch64" epoch="0" version="2.6.0" release="0.2.20211007gite23c213.el9" src="exempi-2.6.0-0.2.20211007gite23c213.el9.src.rpm">
          <filename>exempi-devel-2.6.0-0.2.20211007gite23c213.el9.aarch64.rpm</filename>
          <sum type="sha256">0d016996af86f39ffb16acce0f74b97ea680e925e0ec3260f78de6e6e0ba3dd4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2444</id>
    <title>new packages: jq</title>
    <issued date="2022-05-17 06:03:35" />
    <updated date="2023-02-02 13:57:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jq.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2008983" id="2008983" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2010871" id="2010871" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2444" id="RLBA-2022:2444" type="self" title="RLBA-2022:2444" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jq-devel" arch="aarch64" epoch="0" version="1.6" release="12.el9" src="jq-1.6-12.el9.src.rpm">
          <filename>jq-devel-1.6-12.el9.aarch64.rpm</filename>
          <sum type="sha256">d3f4b43b825e77a829a81a081bd4666fcfb8f18c7bdc79094f8fc1de3d5f0841</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2445</id>
    <title>new packages: maven</title>
    <issued date="2022-05-17 06:03:37" />
    <updated date="2023-02-02 13:57:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for javapackages-tools, maven.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2445" id="RLBA-2022:2445" type="self" title="RLBA-2022:2445" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="javapackages-generators" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>javapackages-generators-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">317fc46d3cc3e33dcfe658399f568188524051eaa2e11422ebda2b054b7c0d30</sum>
        </package>
        <package name="javapackages-local" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>javapackages-local-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">8eabb02f23814c7dd3fcd61acef39ed52fd559d11161e6366fa3c9cce30586a8</sum>
        </package>
        <package name="maven-local" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>maven-local-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">1ba14e27ad8c7fa5b901dd6301622a414cca16776ecf2e76fd06d80c523d3878</sum>
        </package>
        <package name="python3-javapackages" arch="noarch" epoch="0" version="6.0.0" release="3.el9" src="javapackages-tools-6.0.0-3.el9.src.rpm">
          <filename>python3-javapackages-6.0.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">899b9fe1a14b98ebda8c57b4624ec45ce522e8683e2a8b987932c8aadb5eb8a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0332</id>
    <title>zlib bug fix update</title>
    <issued date="2023-01-23 14:30:21" />
    <updated date="2023-02-02 13:57:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for zlib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Bug Fix:

* Rocky Linux9.0 - zlib: inflate() does not update strm.adler if DFLTCC is used (BZ#2135745)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:0332" id="RLBA-2023:0332" type="self" title="RLBA-2023:0332" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="zlib-static" arch="aarch64" epoch="0" version="1.2.11" release="35.el9_1" src="zlib-1.2.11-35.el9_1.src.rpm">
          <filename>zlib-static-1.2.11-35.el9_1.aarch64.rpm</filename>
          <sum type="sha256">36bc3dc2dd8f16e08c2699ae3d617fcb10c3a33e6a03fa17631f146e791d21fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0340</id>
    <title>Moderate: bash security update</title>
    <issued date="2023-01-23 14:30:41" />
    <updated date="2023-02-02 13:57:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for bash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The bash packages provide Bash (Bourne-again shell), which is the default shell for Rocky Linux.

Security Fix(es):

* bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3715" id="CVE-2022-3715" type="cve" title="CVE-2022-3715" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2126720" id="2126720" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0340" id="RLSA-2023:0340" type="self" title="RLSA-2023:0340" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bash-devel" arch="aarch64" epoch="0" version="5.1.8" release="6.el9_1" src="bash-5.1.8-6.el9_1.src.rpm">
          <filename>bash-devel-5.1.8-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">cf7eef232920a2409bc29a70db59233bc6050aa8a7cd087165e4e66e1f214f09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2465</id>
    <title>new packages: papi</title>
    <issued date="2022-05-17 06:05:11" />
    <updated date="2023-02-02 13:57:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for papi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1986635" id="1986635" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2465" id="RLBA-2022:2465" type="self" title="RLBA-2022:2465" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="papi" arch="aarch64" epoch="0" version="6.0.0" release="11.el9" src="papi-6.0.0-11.el9.src.rpm">
          <filename>papi-6.0.0-11.el9.aarch64.rpm</filename>
          <sum type="sha256">8fae26dfc355d596b968b5f563c14c0a82a2457244f2a391f276eed1e30662de</sum>
        </package>
        <package name="papi-testsuite" arch="aarch64" epoch="0" version="6.0.0" release="11.el9" src="papi-6.0.0-11.el9.src.rpm">
          <filename>papi-testsuite-6.0.0-11.el9.aarch64.rpm</filename>
          <sum type="sha256">53899fbeeafb8e3b257f710628b2103722b07785034d10ac92095e5462fe7ef7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2480</id>
    <title>new packages: texlive</title>
    <issued date="2022-05-17 06:06:33" />
    <updated date="2023-02-02 13:57:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for texlive.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2014453" id="2014453" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2031879" id="2031879" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2480" id="RLBA-2022:2480" type="self" title="RLBA-2022:2480" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="texlive-gnu-freefont" arch="noarch" epoch="9" version="20200406" release="25.el9" src="texlive-20200406-25.el9.src.rpm">
          <filename>texlive-gnu-freefont-20200406-25.el9.noarch.rpm</filename>
          <sum type="sha256">70371ec649772c941a33208d8932379d07d09884e01786a091e208ac62a17aae</sum>
        </package>
        <package name="texlive-lib-devel" arch="aarch64" epoch="9" version="20200406" release="25.el9" src="texlive-20200406-25.el9.src.rpm">
          <filename>texlive-lib-devel-20200406-25.el9.aarch64.rpm</filename>
          <sum type="sha256">84a963e3c4f5c8a61679b13a505619ae5c37d938a4848ccae085a444325f3ccc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2450</id>
    <title>new packages: liblangtag</title>
    <issued date="2022-05-17 06:03:53" />
    <updated date="2025-10-17 21:47:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for liblangtag.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2008783" id="2008783" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2450" id="RLBA-2022:2450" type="self" title="RLBA-2022:2450" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="liblangtag-devel" arch="aarch64" epoch="0" version="0.6.3" release="8.el9.1" src="liblangtag-0.6.3-8.el9.1.src.rpm">
          <filename>liblangtag-devel-0.6.3-8.el9.1.aarch64.rpm</filename>
          <sum type="sha256">0bd086196ed7686a324f2e37d634b3e75c0ebdbd342feb63c88c47dabeba3c5a</sum>
        </package>
        <package name="liblangtag-doc" arch="noarch" epoch="0" version="0.6.3" release="8.el9.1" src="liblangtag-0.6.3-8.el9.1.src.rpm">
          <filename>liblangtag-doc-0.6.3-8.el9.1.noarch.rpm</filename>
          <sum type="sha256">1a0ed0c38239839fd2b7e7482cb0360a77ad6e196c981bdd6429863025417452</sum>
        </package>
        <package name="liblangtag-gobject" arch="aarch64" epoch="0" version="0.6.3" release="8.el9.1" src="liblangtag-0.6.3-8.el9.1.src.rpm">
          <filename>liblangtag-gobject-0.6.3-8.el9.1.aarch64.rpm</filename>
          <sum type="sha256">c8291a9422a1911ad4ebf127b8abe9b732811acbb0ef9c14d0fd62a8d8278812</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2456</id>
    <title>new packages: adwaita-icon-theme</title>
    <issued date="2022-05-17 06:04:20" />
    <updated date="2025-10-17 21:47:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for adwaita-icon-theme.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2021357" id="2021357" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2456" id="RLBA-2022:2456" type="self" title="RLBA-2022:2456" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="adwaita-icon-theme-devel" arch="noarch" epoch="0" version="40.1.1" release="3.el9" src="adwaita-icon-theme-40.1.1-3.el9.src.rpm">
          <filename>adwaita-icon-theme-devel-40.1.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">a071cd3ad8a47153b16e9224404f1117a8fc7ca47d383e446b51f65ab441f7a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2466</id>
    <title>new packages: libecpg</title>
    <issued date="2022-05-17 06:05:13" />
    <updated date="2023-02-02 13:57:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libecpg.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1990362" id="1990362" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2466" id="RLBA-2022:2466" type="self" title="RLBA-2022:2466" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libecpg-devel" arch="aarch64" epoch="0" version="13.5" release="1.el9" src="libecpg-13.5-1.el9.src.rpm">
          <filename>libecpg-devel-13.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">512a5bcacbdd2855e8bc450b7fece1ded81814d6ffe5355e4074fa91418981bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2516</id>
    <title>new packages: brasero</title>
    <issued date="2022-05-17 06:09:24" />
    <updated date="2025-10-17 21:47:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for brasero.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2516" id="RLBA-2022:2516" type="self" title="RLBA-2022:2516" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="brasero-devel" arch="aarch64" epoch="0" version="3.12.2" release="19.el9" src="brasero-3.12.2-19.el9.src.rpm">
          <filename>brasero-devel-3.12.2-19.el9.aarch64.rpm</filename>
          <sum type="sha256">64c3d397403764c53d3b53cbbb6d3fead717fe8d8be72bb743bcbce53401ec5d</sum>
        </package>
        <package name="brasero-libs" arch="aarch64" epoch="0" version="3.12.2" release="19.el9" src="brasero-3.12.2-19.el9.src.rpm">
          <filename>brasero-libs-3.12.2-19.el9.aarch64.rpm</filename>
          <sum type="sha256">29badd136606ad210f931cbb5e6e136dad89f5b853e0ff67ca71f0ab59613246</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2525</id>
    <title>new packages: libspectre</title>
    <issued date="2022-05-17 06:10:42" />
    <updated date="2025-10-17 21:47:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libspectre.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2525" id="RLBA-2022:2525" type="self" title="RLBA-2022:2525" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libspectre-devel" arch="aarch64" epoch="0" version="0.2.9" release="6.el9" src="libspectre-0.2.9-6.el9.src.rpm">
          <filename>libspectre-devel-0.2.9-6.el9.aarch64.rpm</filename>
          <sum type="sha256">15b526933b773ed8c69a236a8d0c28a2434865a5484232d3725b3904e626b8e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2529</id>
    <title>new packages: fltk</title>
    <issued date="2022-05-17 06:10:55" />
    <updated date="2025-10-17 21:47:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fltk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2529" id="RLBA-2022:2529" type="self" title="RLBA-2022:2529" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fltk-devel" arch="aarch64" epoch="0" version="1.3.8" release="1.el9" src="fltk-1.3.8-1.el9.src.rpm">
          <filename>fltk-devel-1.3.8-1.el9.aarch64.rpm</filename>
          <sum type="sha256">568f2c2e585faef7971353c40d6e2d3e0fc4912bcbec4e0c9d69e8d4c42f8038</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2532</id>
    <title>new packages: libdecor</title>
    <issued date="2022-05-17 06:11:03" />
    <updated date="2023-02-02 13:57:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdecor.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1998154" id="1998154" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2532" id="RLBA-2022:2532" type="self" title="RLBA-2022:2532" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdecor-devel" arch="aarch64" epoch="0" version="0.1.0" release="3.el9" src="libdecor-0.1.0-3.el9.src.rpm">
          <filename>libdecor-devel-0.1.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4a6ac491ceb58fbace6e054c99ec213f9c883bba55b293d34d20fdaaaeef19ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2547</id>
    <title>new packages: SDL2</title>
    <issued date="2022-05-17 06:12:26" />
    <updated date="2023-02-02 13:57:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for SDL2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003471" id="2003471" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2028076" id="2028076" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2038390" id="2038390" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2039137" id="2039137" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051963" id="2051963" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2547" id="RLBA-2022:2547" type="self" title="RLBA-2022:2547" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="SDL2-static" arch="aarch64" epoch="0" version="2.0.20" release="2.el9" src="SDL2-2.0.20-2.el9.src.rpm">
          <filename>SDL2-static-2.0.20-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3074dc2a6419e3ec8ff9fc6f1aba0a3312c33576bbc2233e47811706baadd47f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2549</id>
    <title>new packages: wireshark</title>
    <issued date="2022-05-17 06:12:31" />
    <updated date="2023-02-02 13:57:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for wireshark.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2032966" id="2032966" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2549" id="RLBA-2022:2549" type="self" title="RLBA-2022:2549" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="wireshark-devel" arch="aarch64" epoch="1" version="3.4.10" release="1.el9" src="wireshark-3.4.10-1.el9.src.rpm">
          <filename>wireshark-devel-3.4.10-1.el9.aarch64.rpm</filename>
          <sum type="sha256">09ee736f538f4fac01f354c98145fcc98fdeca2b611e82f4db90b3c727f23d8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2550</id>
    <title>new packages: oniguruma</title>
    <issued date="2022-05-17 06:12:38" />
    <updated date="2023-02-02 13:57:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for oniguruma.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1990100" id="1990100" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2550" id="RLBA-2022:2550" type="self" title="RLBA-2022:2550" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="oniguruma-devel" arch="aarch64" epoch="0" version="6.9.6" release="1.el9.5" src="oniguruma-6.9.6-1.el9.5.src.rpm">
          <filename>oniguruma-devel-6.9.6-1.el9.5.aarch64.rpm</filename>
          <sum type="sha256">a94ef600c237154869111f422fc87f66077645bb123ec4dde5f4b9ea9c9117c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2564</id>
    <title>new packages: ghostscript</title>
    <issued date="2022-05-17 06:13:52" />
    <updated date="2023-02-02 13:57:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ghostscript.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1989084" id="1989084" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2032789" id="2032789" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2564" id="RLBA-2022:2564" type="self" title="RLBA-2022:2564" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgs-devel" arch="aarch64" epoch="0" version="9.54.0" release="7.el9" src="ghostscript-9.54.0-7.el9.src.rpm">
          <filename>libgs-devel-9.54.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">e00025e4ba4759de304918321a821d8003b96a2db8362c6e4b59e8b132a7cb03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2571</id>
    <title>new packages: geoclue2</title>
    <issued date="2022-05-17 06:14:39" />
    <updated date="2023-02-02 13:57:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for geoclue2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2026310" id="2026310" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2571" id="RLBA-2022:2571" type="self" title="RLBA-2022:2571" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="geoclue2-demos" arch="aarch64" epoch="0" version="2.5.7" release="5.el9" src="geoclue2-2.5.7-5.el9.src.rpm">
          <filename>geoclue2-demos-2.5.7-5.el9.aarch64.rpm</filename>
          <sum type="sha256">822a2cc5b5dcfa857ae4fc44456a5afa4364a240eac53653ed517047ec862f24</sum>
        </package>
        <package name="geoclue2-devel" arch="aarch64" epoch="0" version="2.5.7" release="5.el9" src="geoclue2-2.5.7-5.el9.src.rpm">
          <filename>geoclue2-devel-2.5.7-5.el9.aarch64.rpm</filename>
          <sum type="sha256">0b001b30ef84e94a1abad6c4f2ec3438724d4480e5c630dc54d9855d03ee80d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2578</id>
    <title>new packages: graphviz</title>
    <issued date="2022-05-17 06:15:08" />
    <updated date="2023-02-02 13:58:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for graphviz.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2029565" id="2029565" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2578" id="RLBA-2022:2578" type="self" title="RLBA-2022:2578" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="graphviz-devel" arch="aarch64" epoch="0" version="2.44.0" release="25.el9" src="graphviz-2.44.0-25.el9.src.rpm">
          <filename>graphviz-devel-2.44.0-25.el9.aarch64.rpm</filename>
          <sum type="sha256">85619e1ca081356613d1c18adf4b270b934e556089924a80e67ca0d5ba42ba05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2579</id>
    <title>new packages: libnsl2</title>
    <issued date="2022-05-17 06:15:11" />
    <updated date="2023-02-02 13:58:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for slapi-nis, libnsl2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2039214" id="2039214" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2039220" id="2039220" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2579" id="RLBA-2022:2579" type="self" title="RLBA-2022:2579" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnsl2-devel" arch="aarch64" epoch="0" version="2.0.0" release="1.el9" src="libnsl2-2.0.0-1.el9.src.rpm">
          <filename>libnsl2-devel-2.0.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">1403640e618e485b81d71e725c7917992fd078f2db120aefffe1720bd7b137d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2589</id>
    <title>new packages: libtool</title>
    <issued date="2022-05-17 06:15:41" />
    <updated date="2023-02-02 13:58:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtool.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1988112" id="1988112" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2589" id="RLBA-2022:2589" type="self" title="RLBA-2022:2589" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtool-ltdl-devel" arch="aarch64" epoch="0" version="2.4.6" release="45.el9" src="libtool-2.4.6-45.el9.src.rpm">
          <filename>libtool-ltdl-devel-2.4.6-45.el9.aarch64.rpm</filename>
          <sum type="sha256">88549e5da08c623313323d77a01edb5a0d55fe52d8fa58d26fc824ad1cdece7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2594</id>
    <title>new packages: flite</title>
    <issued date="2022-05-17 06:16:04" />
    <updated date="2025-10-17 21:47:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for flite.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044860" id="2044860" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2594" id="RLBA-2022:2594" type="self" title="RLBA-2022:2594" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flite-devel" arch="aarch64" epoch="0" version="1.3" release="40.el9" src="flite-1.3-40.el9.src.rpm">
          <filename>flite-devel-1.3-40.el9.aarch64.rpm</filename>
          <sum type="sha256">be0f99babf5820243fcbd6f590075865a97b83ef68205ef119731d768947bb07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2600</id>
    <title>new packages: OpenIPMI</title>
    <issued date="2022-05-17 06:16:30" />
    <updated date="2023-02-02 13:58:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for OpenIPMI.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044062" id="2044062" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2600" id="RLBA-2022:2600" type="self" title="RLBA-2022:2600" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="OpenIPMI-devel" arch="aarch64" epoch="0" version="2.0.32" release="3.el9" src="OpenIPMI-2.0.32-3.el9.src.rpm">
          <filename>OpenIPMI-devel-2.0.32-3.el9.aarch64.rpm</filename>
          <sum type="sha256">36446c13df354d78278e81576269f88dd034a27b8a47c3df4582f6e3f96181d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2611</id>
    <title>new packages: libwacom</title>
    <issued date="2022-05-17 06:17:32" />
    <updated date="2023-02-02 13:58:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwacom.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044710" id="2044710" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2611" id="RLBA-2022:2611" type="self" title="RLBA-2022:2611" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwacom-devel" arch="aarch64" epoch="0" version="1.12.1" release="2.el9" src="libwacom-1.12.1-2.el9.src.rpm">
          <filename>libwacom-devel-1.12.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c63fb269670797f06ea4de2194e077577ec2def42a11dfae2010b57f2154bb99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2616</id>
    <title>new packages: gsl</title>
    <issued date="2022-05-17 06:18:00" />
    <updated date="2023-02-02 13:58:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gsl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2035401" id="2035401" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2616" id="RLBA-2022:2616" type="self" title="RLBA-2022:2616" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gsl-devel" arch="aarch64" epoch="0" version="2.6" release="7.el9" src="gsl-2.6-7.el9.src.rpm">
          <filename>gsl-devel-2.6-7.el9.aarch64.rpm</filename>
          <sum type="sha256">24fc361650a83474da76ed400b6d73ed1f915ebf38e6216c70e71e49391fa0b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2620</id>
    <title>new packages: librdkafka</title>
    <issued date="2022-05-17 06:18:24" />
    <updated date="2025-10-17 21:47:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librdkafka.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2032923" id="2032923" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2620" id="RLBA-2022:2620" type="self" title="RLBA-2022:2620" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librdkafka-devel" arch="aarch64" epoch="0" version="1.6.1" release="102.el9" src="librdkafka-1.6.1-102.el9.src.rpm">
          <filename>librdkafka-devel-1.6.1-102.el9.aarch64.rpm</filename>
          <sum type="sha256">911e78f9926efb5f1fb287c3453a028d639c6cb45813fc5ef8f064b6fe194691</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2624</id>
    <title>new packages: freeipmi</title>
    <issued date="2022-05-17 06:18:37" />
    <updated date="2023-02-02 13:58:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for freeipmi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2624" id="RLBA-2022:2624" type="self" title="RLBA-2022:2624" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freeipmi-devel" arch="aarch64" epoch="0" version="1.6.9" release="1.el9" src="freeipmi-1.6.9-1.el9.src.rpm">
          <filename>freeipmi-devel-1.6.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">69a6ae406eeff1313d1cf6ec84bb4e3e344b17a7c373c2a8c291383af8786c10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2629</id>
    <title>new packages: xorg-x11-drv-evdev</title>
    <issued date="2022-05-17 06:18:49" />
    <updated date="2025-10-17 21:47:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xorg-x11-drv-evdev.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050369" id="2050369" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2629" id="RLBA-2022:2629" type="self" title="RLBA-2022:2629" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-drv-evdev-devel" arch="aarch64" epoch="0" version="2.10.6" release="12.el9" src="xorg-x11-drv-evdev-2.10.6-12.el9.src.rpm">
          <filename>xorg-x11-drv-evdev-devel-2.10.6-12.el9.aarch64.rpm</filename>
          <sum type="sha256">dbe17b3c3bcc74168c8b0d06420358381a8a7ffe5997fcd3a5a5da9dce6c1fcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2631</id>
    <title>new packages: libburn</title>
    <issued date="2022-05-17 06:19:22" />
    <updated date="2023-02-02 13:58:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libburn.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015861" id="2015861" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2631" id="RLBA-2022:2631" type="self" title="RLBA-2022:2631" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libburn-devel" arch="aarch64" epoch="0" version="1.5.4" release="4.el9" src="libburn-1.5.4-4.el9.src.rpm">
          <filename>libburn-devel-1.5.4-4.el9.aarch64.rpm</filename>
          <sum type="sha256">de60433c139cbc2e4939e08cbf907582df2d224eba23fbfcf97349fd65b703d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2642</id>
    <title>new packages: tinycdb</title>
    <issued date="2022-05-17 06:20:14" />
    <updated date="2025-10-17 21:47:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tinycdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044894" id="2044894" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2642" id="RLBA-2022:2642" type="self" title="RLBA-2022:2642" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tinycdb-devel" arch="aarch64" epoch="0" version="0.78" release="18.el9" src="tinycdb-0.78-18.el9.src.rpm">
          <filename>tinycdb-devel-0.78-18.el9.aarch64.rpm</filename>
          <sum type="sha256">aba0691190e82e8302eaaf9c188be3b648e5e20fd964caa016e1bdc6eb62798c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2644</id>
    <title>new packages: libisofs</title>
    <issued date="2022-05-17 06:20:23" />
    <updated date="2025-10-17 21:47:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libisofs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1967489" id="1967489" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2644" id="RLBA-2022:2644" type="self" title="RLBA-2022:2644" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libisofs-devel" arch="aarch64" epoch="0" version="1.5.4" release="4.el9" src="libisofs-1.5.4-4.el9.src.rpm">
          <filename>libisofs-devel-1.5.4-4.el9.aarch64.rpm</filename>
          <sum type="sha256">9d7b8bc077c318572ad8bcda430c2400a47e17e2ebcde45d7e2bbea3cfdb2afc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2649</id>
    <title>new packages: tog-pegasus</title>
    <issued date="2022-05-17 06:20:58" />
    <updated date="2025-10-17 21:47:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tog-pegasus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044895" id="2044895" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2048002" id="2048002" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2649" id="RLBA-2022:2649" type="self" title="RLBA-2022:2649" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tog-pegasus-devel" arch="aarch64" epoch="2" version="2.14.1" release="64.el9" src="tog-pegasus-2.14.1-64.el9.src.rpm">
          <filename>tog-pegasus-devel-2.14.1-64.el9.aarch64.rpm</filename>
          <sum type="sha256">3efc0bc8bf26bb0d194c7c9fc67782c6c84033850de09be480a71397c2a4cb52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2663</id>
    <title>new packages: plotnetcfg</title>
    <issued date="2022-05-17 06:22:15" />
    <updated date="2025-10-17 21:47:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for plotnetcfg.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044887" id="2044887" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2663" id="RLBA-2022:2663" type="self" title="RLBA-2022:2663" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="plotnetcfg" arch="aarch64" epoch="0" version="0.4.1" release="18.el9" src="plotnetcfg-0.4.1-18.el9.src.rpm">
          <filename>plotnetcfg-0.4.1-18.el9.aarch64.rpm</filename>
          <sum type="sha256">8588c3fda8d1a6cc8226b9d604f7ffeefc2bef65f0fa6f46967afb15aaca7caf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2636</id>
    <title>new packages: libisoburn</title>
    <issued date="2022-05-17 06:19:49" />
    <updated date="2025-10-17 21:47:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libisoburn.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1967484" id="1967484" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2636" id="RLBA-2022:2636" type="self" title="RLBA-2022:2636" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libisoburn-devel" arch="aarch64" epoch="0" version="1.5.4" release="4.el9" src="libisoburn-1.5.4-4.el9.src.rpm">
          <filename>libisoburn-devel-1.5.4-4.el9.aarch64.rpm</filename>
          <sum type="sha256">4600efc41d1a2a30cd0e4144364815b23372d216848ca5196868249188452909</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2639</id>
    <title>new packages: python-packaging</title>
    <issued date="2022-05-17 06:19:58" />
    <updated date="2025-10-17 21:47:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-packaging.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2058318" id="2058318" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2639" id="RLBA-2022:2639" type="self" title="RLBA-2022:2639" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python-packaging-doc" arch="noarch" epoch="0" version="20.9" release="5.el9" src="python-packaging-20.9-5.el9.src.rpm">
          <filename>python-packaging-doc-20.9-5.el9.noarch.rpm</filename>
          <sum type="sha256">36ea560d9697d43d4f77cc47b6a9c87517e13b4490da4da840a7b528f103f2a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2676</id>
    <title>new packages: protobuf</title>
    <issued date="2022-05-17 06:23:36" />
    <updated date="2023-02-02 13:58:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for protobuf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057347" id="2057347" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2676" id="RLBA-2022:2676" type="self" title="RLBA-2022:2676" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="protobuf-compiler" arch="aarch64" epoch="0" version="3.14.0" release="9.el9" src="protobuf-3.14.0-9.el9.src.rpm">
          <filename>protobuf-compiler-3.14.0-9.el9.aarch64.rpm</filename>
          <sum type="sha256">9c33f94511babd15398c7a3aca458ba3d7b4f1470d147080b33838b1f76fd7fa</sum>
        </package>
        <package name="protobuf-devel" arch="aarch64" epoch="0" version="3.14.0" release="9.el9" src="protobuf-3.14.0-9.el9.src.rpm">
          <filename>protobuf-devel-3.14.0-9.el9.aarch64.rpm</filename>
          <sum type="sha256">a9f6b12afd4693622a5b181a92ba5760f6658806aff38ce272cdc19c2c742be8</sum>
        </package>
        <package name="protobuf-lite-devel" arch="aarch64" epoch="0" version="3.14.0" release="9.el9" src="protobuf-3.14.0-9.el9.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-9.el9.aarch64.rpm</filename>
          <sum type="sha256">0eddd487834f944da70c4d81205b71e7087697863330295bc8a1219977843c17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2681</id>
    <title>new packages: zziplib</title>
    <issued date="2022-05-17 06:23:49" />
    <updated date="2023-02-02 13:58:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for zziplib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2681" id="RLBA-2022:2681" type="self" title="RLBA-2022:2681" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="zziplib-devel" arch="aarch64" epoch="0" version="0.13.71" release="9.el9" src="zziplib-0.13.71-9.el9.src.rpm">
          <filename>zziplib-devel-0.13.71-9.el9.aarch64.rpm</filename>
          <sum type="sha256">1e89d6f5241d197ddb5b7f4a91c1c82d0a4928abc8edb60f3ab9610bb7ce2a4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2684</id>
    <title>new packages: flexiblas</title>
    <issued date="2022-05-17 06:23:56" />
    <updated date="2023-02-02 13:58:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for flexiblas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044859" id="2044859" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2684" id="RLBA-2022:2684" type="self" title="RLBA-2022:2684" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flexiblas-devel" arch="aarch64" epoch="0" version="3.0.4" release="8.el9" src="flexiblas-3.0.4-8.el9.src.rpm">
          <filename>flexiblas-devel-3.0.4-8.el9.aarch64.rpm</filename>
          <sum type="sha256">4b12e0a2f8cf09092a63a317dbf2b0cec6a0b13bb9d88912414c8ac3c6096a4d</sum>
        </package>
        <package name="flexiblas-netlib64" arch="aarch64" epoch="0" version="3.0.4" release="8.el9" src="flexiblas-3.0.4-8.el9.src.rpm">
          <filename>flexiblas-netlib64-3.0.4-8.el9.aarch64.rpm</filename>
          <sum type="sha256">f907848e3f9d4ea3f5fb5c970f1521831aac302465e47f09683432983ace73e7</sum>
        </package>
        <package name="flexiblas-openblas-openmp64" arch="aarch64" epoch="0" version="3.0.4" release="8.el9" src="flexiblas-3.0.4-8.el9.src.rpm">
          <filename>flexiblas-openblas-openmp64-3.0.4-8.el9.aarch64.rpm</filename>
          <sum type="sha256">01ff831bef56d4654083a59f3312cb817cc04e78c674e124789be73959dd8e41</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2685</id>
    <title>new packages: suitesparse</title>
    <issued date="2022-05-17 06:23:58" />
    <updated date="2025-10-17 21:47:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for suitesparse.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044892" id="2044892" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2056604" id="2056604" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2685" id="RLBA-2022:2685" type="self" title="RLBA-2022:2685" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="suitesparse-devel" arch="aarch64" epoch="0" version="5.4.0" release="10.el9" src="suitesparse-5.4.0-10.el9.src.rpm">
          <filename>suitesparse-devel-5.4.0-10.el9.aarch64.rpm</filename>
          <sum type="sha256">e960d0f0581b7c92d29560a4460d0d615c0723fc9bf3f7c68c206fb73936cb59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2686</id>
    <title>new packages: uuid</title>
    <issued date="2022-05-17 06:24:00" />
    <updated date="2025-10-17 21:47:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for uuid.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044896" id="2044896" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2686" id="RLBA-2022:2686" type="self" title="RLBA-2022:2686" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="uuid-devel" arch="aarch64" epoch="0" version="1.6.2" release="55.el9" src="uuid-1.6.2-55.el9.src.rpm">
          <filename>uuid-devel-1.6.2-55.el9.aarch64.rpm</filename>
          <sum type="sha256">5435593a3a503904227607a027340097cc966fc22c383b3d7107d9f8654e98b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2687</id>
    <title>new packages: xorg-x11-drv-wacom</title>
    <issued date="2022-05-17 06:24:03" />
    <updated date="2023-02-02 13:58:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xorg-x11-drv-wacom.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051828" id="2051828" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2687" id="RLBA-2022:2687" type="self" title="RLBA-2022:2687" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-drv-wacom-devel" arch="aarch64" epoch="0" version="1.0.0" release="1.el9" src="xorg-x11-drv-wacom-1.0.0-1.el9.src.rpm">
          <filename>xorg-x11-drv-wacom-devel-1.0.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b537e5b073200c585087e1259fb116405765f2616a0ad1f1cf03b3e048a9d312</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2688</id>
    <title>new packages: openblas</title>
    <issued date="2022-05-17 06:24:05" />
    <updated date="2023-02-02 13:58:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openblas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2688" id="RLBA-2022:2688" type="self" title="RLBA-2022:2688" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openblas-devel" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-devel-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8878261848bdbc17bb0b7689651acc117c4202f94fa47eedeed564bc5c051347</sum>
        </package>
        <package name="openblas-openmp64_" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-openmp64_-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">46092fdbda9def956eaea9955e358ede474b2a17c426aac3da179e81d35f450d</sum>
        </package>
        <package name="openblas-openmp64" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-openmp64-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a26d72dc934d857daee95512b9370dd96addb2f6d1c6980e700b0f53f62915cd</sum>
        </package>
        <package name="openblas-serial64_" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-serial64_-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">1ce6907f7bacdc243135a1840b8bfd65c822193779055d6606d0b70ad6b6372f</sum>
        </package>
        <package name="openblas-serial64" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-serial64-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">56368b3cb3502b91d79f4b93204cfe3d82ea05aa10379159b23e3542e2927cf4</sum>
        </package>
        <package name="openblas-static" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-static-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6fdfb9685251d7de67ca2c8576600bd1883d8914d76e305d317a29da5ac04b65</sum>
        </package>
        <package name="openblas-threads" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-threads-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8c8b0253535dc62af63a993145487a712203601b91845baea18dcb092ce250f3</sum>
        </package>
        <package name="openblas-threads64_" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-threads64_-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7a58726891d025d0c7b24410f027af39d2d895506b9c66ebb1433fdee0765cd9</sum>
        </package>
        <package name="openblas-threads64" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-threads64-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c2eda7cc357a74b06458fea32ecc09c65cc6bccbd8a9a40bd1384ae835c724ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2695</id>
    <title>new packages: libsndfile</title>
    <issued date="2022-05-17 06:24:39" />
    <updated date="2023-02-02 13:58:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsndfile.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2695" id="RLBA-2022:2695" type="self" title="RLBA-2022:2695" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsndfile-devel" arch="aarch64" epoch="0" version="1.0.31" release="7.el9" src="libsndfile-1.0.31-7.el9.src.rpm">
          <filename>libsndfile-devel-1.0.31-7.el9.aarch64.rpm</filename>
          <sum type="sha256">e709abce3c4b421fde35823ce6b76374c5580e2405c603728a6f7684709b7a1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2706</id>
    <title>new packages: CUnit</title>
    <issued date="2022-05-17 06:25:26" />
    <updated date="2025-10-17 21:47:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for CUnit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2706" id="RLBA-2022:2706" type="self" title="RLBA-2022:2706" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="CUnit-devel" arch="aarch64" epoch="0" version="2.1.3" release="25.el9" src="CUnit-2.1.3-25.el9.src.rpm">
          <filename>CUnit-devel-2.1.3-25.el9.aarch64.rpm</filename>
          <sum type="sha256">63d3df3ebe79c1d359f17ce9fafa90162f6f8cf7baf7517e8417bd46b5b5b57f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2708</id>
    <title>new packages: Judy</title>
    <issued date="2022-05-17 06:25:34" />
    <updated date="2025-10-17 21:47:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for Judy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2708" id="RLBA-2022:2708" type="self" title="RLBA-2022:2708" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="Judy-devel" arch="aarch64" epoch="0" version="1.0.5" release="28.el9" src="Judy-1.0.5-28.el9.src.rpm">
          <filename>Judy-devel-1.0.5-28.el9.aarch64.rpm</filename>
          <sum type="sha256">fb429ea2943fe70c2963a1a8bcb59f94a48336e6bb375c4d0033ef6cfa293e35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2710</id>
    <title>new packages: PackageKit</title>
    <issued date="2022-05-17 06:25:38" />
    <updated date="2023-02-02 13:58:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for PackageKit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2710" id="RLBA-2022:2710" type="self" title="RLBA-2022:2710" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="PackageKit-glib-devel" arch="aarch64" epoch="0" version="1.2.4" release="2.el9" src="PackageKit-1.2.4-2.el9.src.rpm">
          <filename>PackageKit-glib-devel-1.2.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ac0383b7c6fe1836abf246d150599e04c6429312615dbd4cce62dae079ec119f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2712</id>
    <title>new packages: Xaw3d</title>
    <issued date="2022-05-17 06:25:55" />
    <updated date="2025-10-17 21:47:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for Xaw3d.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2712" id="RLBA-2022:2712" type="self" title="RLBA-2022:2712" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="Xaw3d-devel" arch="aarch64" epoch="0" version="1.6.3" release="7.el9" src="Xaw3d-1.6.3-7.el9.src.rpm">
          <filename>Xaw3d-devel-1.6.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">bfdf0e373db2f43f8829492cb43123813d3d9ca3d3c553e50a083279d83d8a94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2713</id>
    <title>new packages: a52dec</title>
    <issued date="2022-05-17 06:26:05" />
    <updated date="2025-10-17 21:47:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for a52dec.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2713" id="RLBA-2022:2713" type="self" title="RLBA-2022:2713" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="liba52-devel" arch="aarch64" epoch="0" version="0.7.4" release="42.el9" src="a52dec-0.7.4-42.el9.src.rpm">
          <filename>liba52-devel-0.7.4-42.el9.aarch64.rpm</filename>
          <sum type="sha256">9ce1572978da056e513b31ad9b1a1d55e54119450c00499b7b67455d076d6c1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2724</id>
    <title>new packages: antlr</title>
    <issued date="2022-05-17 06:26:52" />
    <updated date="2023-02-02 13:58:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for antlr.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2724" id="RLBA-2022:2724" type="self" title="RLBA-2022:2724" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="antlr-C++" arch="aarch64" epoch="0" version="2.7.7" release="68.el9" src="antlr-2.7.7-68.el9.src.rpm">
          <filename>antlr-C++-2.7.7-68.el9.aarch64.rpm</filename>
          <sum type="sha256">64c2a169c893655f4c9b185cdb22a791015943ffd001fa002403962e0a16a1ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2732</id>
    <title>new packages: asciidoc</title>
    <issued date="2022-05-17 06:27:19" />
    <updated date="2025-10-17 21:47:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for asciidoc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2732" id="RLBA-2022:2732" type="self" title="RLBA-2022:2732" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="asciidoc-doc" arch="noarch" epoch="0" version="9.1.0" release="3.el9" src="asciidoc-9.1.0-3.el9.src.rpm">
          <filename>asciidoc-doc-9.1.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">c0889b41b4001012e858083acdd264e2c780000d44b4eeeb867e3f85e2059fdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2738</id>
    <title>new packages: atkmm</title>
    <issued date="2022-05-17 06:27:39" />
    <updated date="2025-10-17 21:47:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for atkmm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2738" id="RLBA-2022:2738" type="self" title="RLBA-2022:2738" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="atkmm-devel" arch="aarch64" epoch="0" version="2.28.2" release="2.el9" src="atkmm-2.28.2-2.el9.src.rpm">
          <filename>atkmm-devel-2.28.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">24d118eda1d60da59c6de1859a4ec64d3e9f07ff7c50a8fd3bc8caadcc4e0a41</sum>
        </package>
        <package name="atkmm-doc" arch="noarch" epoch="0" version="2.28.2" release="2.el9" src="atkmm-2.28.2-2.el9.src.rpm">
          <filename>atkmm-doc-2.28.2-2.el9.noarch.rpm</filename>
          <sum type="sha256">56521e83bec50b0c679f98ebb9eed867a2f8733d0a2a6f161c76dcd2d5105765</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2747</id>
    <title>new packages: bison</title>
    <issued date="2022-05-17 06:28:10" />
    <updated date="2025-10-17 21:47:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bison.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2747" id="RLBA-2022:2747" type="self" title="RLBA-2022:2747" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bison-devel" arch="aarch64" epoch="0" version="3.7.4" release="5.el9" src="bison-3.7.4-5.el9.src.rpm">
          <filename>bison-devel-3.7.4-5.el9.aarch64.rpm</filename>
          <sum type="sha256">15b6e59d5acee5bdeae87949014db47603130a0c0b18a7386f50b7091ec37a9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2753</id>
    <title>new packages: brltty</title>
    <issued date="2022-05-17 06:28:25" />
    <updated date="2025-10-17 21:47:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for brltty.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2753" id="RLBA-2022:2753" type="self" title="RLBA-2022:2753" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="brlapi-devel" arch="aarch64" epoch="0" version="0.8.2" release="4.el9" src="brltty-6.3-4.el9.src.rpm">
          <filename>brlapi-devel-0.8.2-4.el9.aarch64.rpm</filename>
          <sum type="sha256">8cdbd36b9dcba79dc61b8f2f07c1fd08502879ee2ffa829c00f01bbad68a5936</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2756</id>
    <title>new packages: byte-buddy</title>
    <issued date="2022-05-17 06:28:42" />
    <updated date="2023-02-02 13:59:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for byte-buddy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2756" id="RLBA-2022:2756" type="self" title="RLBA-2022:2756" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="byte-buddy-agent" arch="noarch" epoch="0" version="1.10.20" release="5.el9" src="byte-buddy-1.10.20-5.el9.src.rpm">
          <filename>byte-buddy-agent-1.10.20-5.el9.noarch.rpm</filename>
          <sum type="sha256">935078f879e607a466cc92b91d0c66cb251f49f41d00ed09bba8b1956343871d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2759</id>
    <title>new packages: cairomm</title>
    <issued date="2022-05-17 06:28:49" />
    <updated date="2025-10-17 21:47:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cairomm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2759" id="RLBA-2022:2759" type="self" title="RLBA-2022:2759" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cairomm-devel" arch="aarch64" epoch="0" version="1.14.2" release="10.el9" src="cairomm-1.14.2-10.el9.src.rpm">
          <filename>cairomm-devel-1.14.2-10.el9.aarch64.rpm</filename>
          <sum type="sha256">43a3a4bf22a8e57cdca64d8eac465a4977848726137aa582c9d60001d8c16e94</sum>
        </package>
        <package name="cairomm-doc" arch="noarch" epoch="0" version="1.14.2" release="10.el9" src="cairomm-1.14.2-10.el9.src.rpm">
          <filename>cairomm-doc-1.14.2-10.el9.noarch.rpm</filename>
          <sum type="sha256">383bbbc516adade85cecf9956a9810d533fc5c5acaefb80b1b23edf5bd82b58e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2761</id>
    <title>new packages: ceph</title>
    <issued date="2022-05-17 06:28:54" />
    <updated date="2025-10-17 21:47:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ceph.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2761" id="RLBA-2022:2761" type="self" title="RLBA-2022:2761" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librados-devel" arch="aarch64" epoch="2" version="16.2.4" release="5.el9" src="ceph-16.2.4-5.el9.src.rpm">
          <filename>librados-devel-16.2.4-5.el9.aarch64.rpm</filename>
          <sum type="sha256">f4f5c62248f67499afdbea749891774eb5ffcee9c69436049c60988df428ad4d</sum>
        </package>
        <package name="libradospp-devel" arch="aarch64" epoch="2" version="16.2.4" release="5.el9" src="ceph-16.2.4-5.el9.src.rpm">
          <filename>libradospp-devel-16.2.4-5.el9.aarch64.rpm</filename>
          <sum type="sha256">83cae0327b4085ec37ead6c5ae7e80d28406fadbb0ffb89e27b028e6fd4e4552</sum>
        </package>
        <package name="librbd-devel" arch="aarch64" epoch="2" version="16.2.4" release="5.el9" src="ceph-16.2.4-5.el9.src.rpm">
          <filename>librbd-devel-16.2.4-5.el9.aarch64.rpm</filename>
          <sum type="sha256">f1c8ab91a0920ae5daaeee53948865129cf37cba4e59ac0cf60333edc0ff1b35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2742</id>
    <title>new packages: babel</title>
    <issued date="2022-05-17 06:27:51" />
    <updated date="2025-10-17 21:47:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for babel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2742" id="RLBA-2022:2742" type="self" title="RLBA-2022:2742" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="babel-doc" arch="noarch" epoch="0" version="2.9.1" release="2.el9" src="babel-2.9.1-2.el9.src.rpm">
          <filename>babel-doc-2.9.1-2.el9.noarch.rpm</filename>
          <sum type="sha256">c31cd341fe2d8db018d7c51cfff8f1da00f07efd479b0fb2fefcee4b553c0510</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2771</id>
    <title>new packages: xmlrpc-c</title>
    <issued date="2022-05-17 06:29:32" />
    <updated date="2025-10-17 21:47:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xmlrpc-c.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2771" id="RLBA-2022:2771" type="self" title="RLBA-2022:2771" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xmlrpc-c-c++" arch="aarch64" epoch="0" version="1.51.0" release="16.el9" src="xmlrpc-c-1.51.0-16.el9.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">fc6107e9ccd741b3cdb387941f862bd5ccac910684268118c1175521c79ee73d</sum>
        </package>
        <package name="xmlrpc-c-client++" arch="aarch64" epoch="0" version="1.51.0" release="16.el9" src="xmlrpc-c-1.51.0-16.el9.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">b0428ee93d2d1ad4199ce76bad6a2eb63615cc198afdf8f0418985e7676a85b0</sum>
        </package>
        <package name="xmlrpc-c-devel" arch="aarch64" epoch="0" version="1.51.0" release="16.el9" src="xmlrpc-c-1.51.0-16.el9.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">7ad1baa7ccfa0a63fbcd38b24c43f2bf98ee158fdbb1f9aa9bee926b9c0b37f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2775</id>
    <title>new packages: colord</title>
    <issued date="2022-05-17 06:29:41" />
    <updated date="2023-02-02 13:59:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for colord.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2775" id="RLBA-2022:2775" type="self" title="RLBA-2022:2775" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="colord-devel" arch="aarch64" epoch="0" version="1.4.5" release="4.el9" src="colord-1.4.5-4.el9.src.rpm">
          <filename>colord-devel-1.4.5-4.el9.aarch64.rpm</filename>
          <sum type="sha256">db2ac9de2e627578f298df8506183adeb8028fa2deb2490cc84cdf12177aa9cb</sum>
        </package>
        <package name="colord-devel-docs" arch="noarch" epoch="0" version="1.4.5" release="4.el9" src="colord-1.4.5-4.el9.src.rpm">
          <filename>colord-devel-docs-1.4.5-4.el9.noarch.rpm</filename>
          <sum type="sha256">f0e687a0dd5bb9274d913228d27488b3871a2116ef1c38331baf315e7a3c8d95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2776</id>
    <title>new packages: colord-gtk</title>
    <issued date="2022-05-17 06:29:50" />
    <updated date="2025-10-17 21:47:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for colord-gtk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2776" id="RLBA-2022:2776" type="self" title="RLBA-2022:2776" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="colord-gtk-devel" arch="aarch64" epoch="0" version="0.2.0" release="7.el9" src="colord-gtk-0.2.0-7.el9.src.rpm">
          <filename>colord-gtk-devel-0.2.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">6348ce2dd92c98085fb48ddbac000f09d4a09e833d43ad11368901b60ee85ebf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2783</id>
    <title>new packages: cups-filters</title>
    <issued date="2022-05-17 06:30:39" />
    <updated date="2023-02-02 13:59:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cups-filters.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2783" id="RLBA-2022:2783" type="self" title="RLBA-2022:2783" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cups-filters-devel" arch="aarch64" epoch="0" version="1.28.7" release="10.el9" src="cups-filters-1.28.7-10.el9.src.rpm">
          <filename>cups-filters-devel-1.28.7-10.el9.aarch64.rpm</filename>
          <sum type="sha256">a126d265cf327f9070475cc15e7e24c6d056727503a32371574623502bf02db0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2786</id>
    <title>new packages: dconf</title>
    <issued date="2022-05-17 06:30:46" />
    <updated date="2025-10-17 21:47:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dconf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2786" id="RLBA-2022:2786" type="self" title="RLBA-2022:2786" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dconf-devel" arch="aarch64" epoch="0" version="0.40.0" release="6.el9" src="dconf-0.40.0-6.el9.src.rpm">
          <filename>dconf-devel-0.40.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">27d14f0cd3ae3269e2a9e7a7a66ef68ced5f1d3fa4193ad6440e60c9e27dc6c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2796</id>
    <title>new packages: dotconf</title>
    <issued date="2022-05-17 06:31:22" />
    <updated date="2025-10-17 21:47:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotconf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2796" id="RLBA-2022:2796" type="self" title="RLBA-2022:2796" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotconf-devel" arch="aarch64" epoch="0" version="1.3" release="28.el9" src="dotconf-1.3-28.el9.src.rpm">
          <filename>dotconf-devel-1.3-28.el9.aarch64.rpm</filename>
          <sum type="sha256">2dcb595f1c306c06374cb7843a39879ba500843da18f71a0b84132ddccc33407</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2799</id>
    <title>new packages: dtc</title>
    <issued date="2022-05-17 06:31:32" />
    <updated date="2025-10-17 21:47:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dtc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2799" id="RLBA-2022:2799" type="self" title="RLBA-2022:2799" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfdt-devel" arch="aarch64" epoch="0" version="1.6.0" release="7.el9" src="dtc-1.6.0-7.el9.src.rpm">
          <filename>libfdt-devel-1.6.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">b5f4d024be76bc6a2346a9b496e4290a4ce0e3e2c1ea7cb0f8d3924064158962</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2802</id>
    <title>new packages: enchant</title>
    <issued date="2022-05-17 06:31:39" />
    <updated date="2025-10-17 21:47:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for enchant.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2802" id="RLBA-2022:2802" type="self" title="RLBA-2022:2802" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="enchant-devel" arch="aarch64" epoch="1" version="1.6.0" release="30.el9" src="enchant-1.6.0-30.el9.src.rpm">
          <filename>enchant-devel-1.6.0-30.el9.aarch64.rpm</filename>
          <sum type="sha256">fcdf68eedffead95823d70528b962cc0200f2209a24cdb37324cf71dfec587e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2803</id>
    <title>new packages: enchant2</title>
    <issued date="2022-05-17 06:31:41" />
    <updated date="2025-10-17 21:47:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for enchant2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2803" id="RLBA-2022:2803" type="self" title="RLBA-2022:2803" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="enchant2-devel" arch="aarch64" epoch="0" version="2.2.15" release="6.el9" src="enchant2-2.2.15-6.el9.src.rpm">
          <filename>enchant2-devel-2.2.15-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6c00302aaf964eadd79a95a00f26092325a8841a6fa4ff086220315ed9926535</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2810</id>
    <title>new packages: fftw</title>
    <issued date="2022-05-17 06:32:03" />
    <updated date="2023-02-02 13:59:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fftw.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2810" id="RLBA-2022:2810" type="self" title="RLBA-2022:2810" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fftw-doc" arch="noarch" epoch="0" version="3.3.8" release="12.el9" src="fftw-3.3.8-12.el9.src.rpm">
          <filename>fftw-doc-3.3.8-12.el9.noarch.rpm</filename>
          <sum type="sha256">93eb256ae6969eb9fb1424fcd601e19f63fcd279b6a96c8974b3808c63c75a62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2811</id>
    <title>new packages: flac</title>
    <issued date="2022-05-17 06:32:05" />
    <updated date="2023-02-02 13:59:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for flac.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2811" id="RLBA-2022:2811" type="self" title="RLBA-2022:2811" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flac" arch="aarch64" epoch="0" version="1.3.3" release="9.el9" src="flac-1.3.3-9.el9.src.rpm">
          <filename>flac-1.3.3-9.el9.aarch64.rpm</filename>
          <sum type="sha256">fa46fe7bc8759bca906de04e97097f15a99e6a94eb975465ebd3ac24c8f0c131</sum>
        </package>
        <package name="flac-devel" arch="aarch64" epoch="0" version="1.3.3" release="9.el9" src="flac-1.3.3-9.el9.src.rpm">
          <filename>flac-devel-1.3.3-9.el9.aarch64.rpm</filename>
          <sum type="sha256">f60cc38d6f82f4cb68185e7665e8da29a944ee4ffe740f4d6fb5ac5569873b1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2814</id>
    <title>new packages: flex</title>
    <issued date="2022-05-17 06:32:24" />
    <updated date="2025-10-17 21:47:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for flex.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2814" id="RLBA-2022:2814" type="self" title="RLBA-2022:2814" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfl-static" arch="aarch64" epoch="0" version="2.6.4" release="9.el9" src="flex-2.6.4-9.el9.src.rpm">
          <filename>libfl-static-2.6.4-9.el9.aarch64.rpm</filename>
          <sum type="sha256">e2a80f63dfbd85ba6571244f80c96ed36ac3c3ea2cea704cb81eeef0c5de32b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2816</id>
    <title>new packages: fontawesome-fonts</title>
    <issued date="2022-05-17 06:32:29" />
    <updated date="2025-10-17 21:47:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fontawesome-fonts.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2816" id="RLBA-2022:2816" type="self" title="RLBA-2022:2816" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fontawesome-fonts-web" arch="noarch" epoch="1" version="4.7.0" release="13.el9" src="fontawesome-fonts-4.7.0-13.el9.src.rpm">
          <filename>fontawesome-fonts-web-4.7.0-13.el9.noarch.rpm</filename>
          <sum type="sha256">86ae6cb7afc9e18def5b38dc94eec606f02609b3a65a0cf59c0ec8c95889e71e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2822</id>
    <title>new packages: fstrm</title>
    <issued date="2022-05-17 06:32:42" />
    <updated date="2025-10-17 21:47:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fstrm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2822" id="RLBA-2022:2822" type="self" title="RLBA-2022:2822" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fstrm-devel" arch="aarch64" epoch="0" version="0.6.1" release="3.el9" src="fstrm-0.6.1-3.el9.src.rpm">
          <filename>fstrm-devel-0.6.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">d57811af359cad979a9d966ddbd43a258d10160845640c1cbfdf8b4fb9d59474</sum>
        </package>
        <package name="fstrm-utils" arch="aarch64" epoch="0" version="0.6.1" release="3.el9" src="fstrm-0.6.1-3.el9.src.rpm">
          <filename>fstrm-utils-0.6.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a262b237c0630b0d14471577e4bc1faf0320fd93c179d9dfb78b097d1757a863</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2825</id>
    <title>new packages: gc</title>
    <issued date="2022-05-17 06:33:09" />
    <updated date="2025-10-17 21:47:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2825" id="RLBA-2022:2825" type="self" title="RLBA-2022:2825" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gc-devel" arch="aarch64" epoch="0" version="8.0.4" release="7.el9" src="gc-8.0.4-7.el9.src.rpm">
          <filename>gc-devel-8.0.4-7.el9.aarch64.rpm</filename>
          <sum type="sha256">01420ab8f632ae57dfce1bcdcedeaef0d2f709338713c3f1fb4d2d74e0d373c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2834</id>
    <title>new packages: giflib</title>
    <issued date="2022-05-17 06:33:58" />
    <updated date="2025-10-17 21:47:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for giflib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2834" id="RLBA-2022:2834" type="self" title="RLBA-2022:2834" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="giflib-devel" arch="aarch64" epoch="0" version="5.2.1" release="9.el9" src="giflib-5.2.1-9.el9.src.rpm">
          <filename>giflib-devel-5.2.1-9.el9.aarch64.rpm</filename>
          <sum type="sha256">f1a27d5a3a41b8de95a8219bf0bef9eb20d0d3c011285522708b1ac71272b42f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2838</id>
    <title>new packages: glade</title>
    <issued date="2022-05-17 06:34:07" />
    <updated date="2025-10-17 21:47:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glade.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2838" id="RLBA-2022:2838" type="self" title="RLBA-2022:2838" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glade-devel" arch="aarch64" epoch="0" version="3.38.2" release="4.el9" src="glade-3.38.2-4.el9.src.rpm">
          <filename>glade-devel-3.38.2-4.el9.aarch64.rpm</filename>
          <sum type="sha256">f2791f187af3c9be52d76c53c38ea72e8033f52535a0d4a2bdf8d85ca5e763cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2839</id>
    <title>new packages: glibmm24</title>
    <issued date="2022-05-17 06:34:10" />
    <updated date="2025-10-17 21:47:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glibmm24.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2839" id="RLBA-2022:2839" type="self" title="RLBA-2022:2839" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibmm24-devel" arch="aarch64" epoch="0" version="2.66.1" release="1.el9" src="glibmm24-2.66.1-1.el9.src.rpm">
          <filename>glibmm24-devel-2.66.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2f841a8632fcf0d53b501759bf08f7f93498596f70a6afdc934493cd62d36d8c</sum>
        </package>
        <package name="glibmm24-doc" arch="noarch" epoch="0" version="2.66.1" release="1.el9" src="glibmm24-2.66.1-1.el9.src.rpm">
          <filename>glibmm24-doc-2.66.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">bfbcd163138501fa996ad0aa4dda44619ae3b7205390023646364b3fac404ec0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2842</id>
    <title>new packages: gnome-bluetooth</title>
    <issued date="2022-05-17 06:34:17" />
    <updated date="2025-10-17 21:47:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gnome-bluetooth.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2842" id="RLBA-2022:2842" type="self" title="RLBA-2022:2842" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gnome-bluetooth-libs-devel" arch="aarch64" epoch="1" version="3.34.5" release="3.el9" src="gnome-bluetooth-3.34.5-3.el9.src.rpm">
          <filename>gnome-bluetooth-libs-devel-3.34.5-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ba5f11b6a9cf0d543d46d88d02c58b56d20465829bc4dede5321a550cab636b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2865</id>
    <title>new packages: gnu-efi</title>
    <issued date="2022-05-17 06:35:54" />
    <updated date="2025-10-17 21:48:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gnu-efi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2865" id="RLBA-2022:2865" type="self" title="RLBA-2022:2865" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gnu-efi-compat" arch="aarch64" epoch="1" version="3.0.11" release="8.el9" src="gnu-efi-3.0.11-8.el9.src.rpm">
          <filename>gnu-efi-compat-3.0.11-8.el9.aarch64.rpm</filename>
          <sum type="sha256">4257a42c0afa15b3210b91a2ede32f2091730b75353045acdabb9bec57d56956</sum>
        </package>
        <package name="gnu-efi-devel" arch="noarch" epoch="1" version="3.0.11" release="8.el9" src="gnu-efi-3.0.11-8.el9.src.rpm">
          <filename>gnu-efi-devel-3.0.11-8.el9.noarch.rpm</filename>
          <sum type="sha256">bf1efb6661c93b550ea8cbe4af98c6d1124c3359406ca3eef7d754ce138d695a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2869</id>
    <title>new packages: google-noto-cjk-fonts</title>
    <issued date="2022-05-17 06:36:12" />
    <updated date="2023-02-02 13:59:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for google-noto-cjk-fonts.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2869" id="RLBA-2022:2869" type="self" title="RLBA-2022:2869" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="google-noto-sans-cjk-jp-fonts" arch="noarch" epoch="0" version="20201206" release="4.el9" src="google-noto-cjk-fonts-20201206-4.el9.src.rpm">
          <filename>google-noto-sans-cjk-jp-fonts-20201206-4.el9.noarch.rpm</filename>
          <sum type="sha256">d208a953c471a259b956b6822f1e08ba589a9b141634bcc25c530d378389f4f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2769</id>
    <title>new packages: clucene</title>
    <issued date="2022-05-17 06:29:19" />
    <updated date="2025-10-17 21:47:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for clucene.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2769" id="RLBA-2022:2769" type="self" title="RLBA-2022:2769" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="clucene-core-devel" arch="aarch64" epoch="0" version="2.3.3.4" release="42.20130812.e8e3d20git.el9" src="clucene-2.3.3.4-42.20130812.e8e3d20git.el9.src.rpm">
          <filename>clucene-core-devel-2.3.3.4-42.20130812.e8e3d20git.el9.aarch64.rpm</filename>
          <sum type="sha256">407136bfdb2c11ce5109e5f9128d5eb7d818448b473703d8925e0ca9222a8d8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2876</id>
    <title>new packages: grilo</title>
    <issued date="2022-05-17 06:37:00" />
    <updated date="2025-10-17 21:48:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for grilo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2876" id="RLBA-2022:2876" type="self" title="RLBA-2022:2876" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="grilo" arch="aarch64" epoch="0" version="0.3.13" release="7.el9" src="grilo-0.3.13-7.el9.src.rpm">
          <filename>grilo-0.3.13-7.el9.aarch64.rpm</filename>
          <sum type="sha256">24aab8ddc30ef4674afdb031f5e932221b3e5ccb440d1751c385a07e399044b3</sum>
        </package>
        <package name="grilo-devel" arch="aarch64" epoch="0" version="0.3.13" release="7.el9" src="grilo-0.3.13-7.el9.src.rpm">
          <filename>grilo-devel-0.3.13-7.el9.aarch64.rpm</filename>
          <sum type="sha256">bdced1d90b46da2e81817e476f70c78ea9afacc614921a2b5d62c7add27812a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2878</id>
    <title>new packages: gsm</title>
    <issued date="2022-05-17 06:37:12" />
    <updated date="2025-10-17 21:48:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gsm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2878" id="RLBA-2022:2878" type="self" title="RLBA-2022:2878" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gsm-devel" arch="aarch64" epoch="0" version="1.0.19" release="6.el9" src="gsm-1.0.19-6.el9.src.rpm">
          <filename>gsm-devel-1.0.19-6.el9.aarch64.rpm</filename>
          <sum type="sha256">5f6501d4fee612ae686ae8732592099286027b97a4042da8b9f51275fe3c5838</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2880</id>
    <title>new packages: gspell</title>
    <issued date="2022-05-17 06:37:29" />
    <updated date="2025-10-17 21:48:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gspell.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2880" id="RLBA-2022:2880" type="self" title="RLBA-2022:2880" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gspell-devel" arch="aarch64" epoch="0" version="1.9.1" release="3.el9" src="gspell-1.9.1-3.el9.src.rpm">
          <filename>gspell-devel-1.9.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4b1174183a306caf41134434be5cdd9dbd25b2332d1f46a179fe39f093d04843</sum>
        </package>
        <package name="gspell-doc" arch="noarch" epoch="0" version="1.9.1" release="3.el9" src="gspell-1.9.1-3.el9.src.rpm">
          <filename>gspell-doc-1.9.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">54cac486505ede6438dcd75cc31f8578dfd63773c7d3431e4514a932c7b28268</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2882</id>
    <title>new packages: gstreamer1-plugins-bad-free</title>
    <issued date="2022-05-17 06:37:40" />
    <updated date="2023-02-02 13:59:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gstreamer1-plugins-bad-free.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2882" id="RLBA-2022:2882" type="self" title="RLBA-2022:2882" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gstreamer1-plugins-bad-free-devel" arch="aarch64" epoch="0" version="1.18.4" release="5.el9" src="gstreamer1-plugins-bad-free-1.18.4-5.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.18.4-5.el9.aarch64.rpm</filename>
          <sum type="sha256">20540aabe895797deaf8ba392ade58b6a865192ddda93faada6e90b05239a953</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2885</id>
    <title>new packages: gtkmm30</title>
    <issued date="2022-05-17 06:37:53" />
    <updated date="2025-10-17 21:48:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gtkmm30.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2885" id="RLBA-2022:2885" type="self" title="RLBA-2022:2885" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gtkmm30-devel" arch="aarch64" epoch="0" version="3.24.5" release="1.el9" src="gtkmm30-3.24.5-1.el9.src.rpm">
          <filename>gtkmm30-devel-3.24.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b48a541a65de3092b2828261b69f139297e04209bd3f87e8b575f147ea527d49</sum>
        </package>
        <package name="gtkmm30-doc" arch="noarch" epoch="0" version="3.24.5" release="1.el9" src="gtkmm30-3.24.5-1.el9.src.rpm">
          <filename>gtkmm30-doc-3.24.5-1.el9.noarch.rpm</filename>
          <sum type="sha256">abe9d8f8b5cc7a7d8cfa3e70e35cf283930d6cdf18dd0c8254d86cc7a06ed99c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2892</id>
    <title>new packages: hesiod</title>
    <issued date="2022-05-17 06:38:12" />
    <updated date="2025-10-17 21:48:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for hesiod.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2892" id="RLBA-2022:2892" type="self" title="RLBA-2022:2892" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="hesiod-devel" arch="aarch64" epoch="0" version="3.2.1" release="16.el9" src="hesiod-3.2.1-16.el9.src.rpm">
          <filename>hesiod-devel-3.2.1-16.el9.aarch64.rpm</filename>
          <sum type="sha256">7e6f44a8cfb96f4895f017ff7cba59f1af47f5f49601935c654f9bcb6dc24ffd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2899</id>
    <title>new packages: http-parser</title>
    <issued date="2022-05-17 06:38:28" />
    <updated date="2025-10-17 21:48:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for http-parser.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2899" id="RLBA-2022:2899" type="self" title="RLBA-2022:2899" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="http-parser-devel" arch="aarch64" epoch="0" version="2.9.4" release="6.el9" src="http-parser-2.9.4-6.el9.src.rpm">
          <filename>http-parser-devel-2.9.4-6.el9.aarch64.rpm</filename>
          <sum type="sha256">c2359a85d317bd6de791a1d33ee71f240b9c5d853c6079079f504485fe2bd4bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3071</id>
    <title>new packages: imath</title>
    <issued date="2022-05-17 06:48:34" />
    <updated date="2025-10-17 21:48:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for imath.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3071" id="RLBA-2022:3071" type="self" title="RLBA-2022:3071" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="imath-devel" arch="aarch64" epoch="0" version="3.1.2" release="1.el9" src="imath-3.1.2-1.el9.src.rpm">
          <filename>imath-devel-3.1.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">95de0261cbdc1bf655007fbc77ff27aea980bd9427702806ea493a86873f7dc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3076</id>
    <title>new packages: irssi</title>
    <issued date="2022-05-17 06:48:46" />
    <updated date="2025-10-17 21:48:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for irssi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3076" id="RLBA-2022:3076" type="self" title="RLBA-2022:3076" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="irssi-devel" arch="aarch64" epoch="0" version="1.2.2" release="12.el9" src="irssi-1.2.2-12.el9.src.rpm">
          <filename>irssi-devel-1.2.2-12.el9.aarch64.rpm</filename>
          <sum type="sha256">2a36723c24b18a39a88ed2af37b144da952566e190e7d31491cf5a52bd08e3f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3089</id>
    <title>new packages: jasper</title>
    <issued date="2022-05-17 06:49:46" />
    <updated date="2025-10-17 21:48:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jasper.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3089" id="RLBA-2022:3089" type="self" title="RLBA-2022:3089" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jasper-devel" arch="aarch64" epoch="0" version="2.0.28" release="3.el9" src="jasper-2.0.28-3.el9.src.rpm">
          <filename>jasper-devel-2.0.28-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8088630c1e27fadce6e8797edfe9c4a4c8f4d7aca7e8c652169ebf421166cf28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3092</id>
    <title>new packages: jbigkit</title>
    <issued date="2022-05-17 06:50:21" />
    <updated date="2025-10-17 21:48:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jbigkit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3092" id="RLBA-2022:3092" type="self" title="RLBA-2022:3092" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jbigkit-devel" arch="aarch64" epoch="0" version="2.1" release="23.el9" src="jbigkit-2.1-23.el9.src.rpm">
          <filename>jbigkit-devel-2.1-23.el9.aarch64.rpm</filename>
          <sum type="sha256">475396d67c64dc228287d584d9e433ca8e783c73a2b61eb2f1f424ebab284765</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3101</id>
    <title>new packages: jose</title>
    <issued date="2022-05-17 06:50:56" />
    <updated date="2023-02-02 14:01:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jose.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3101" id="RLBA-2022:3101" type="self" title="RLBA-2022:3101" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libjose-devel" arch="aarch64" epoch="0" version="11" release="3.el9" src="jose-11-3.el9.src.rpm">
          <filename>libjose-devel-11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">bcb56e16fd400abde0ead3003f274138e2581a4a2b5daa3c66d1d3f992555aec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3112</id>
    <title>new packages: keybinder3</title>
    <issued date="2022-05-17 06:51:58" />
    <updated date="2025-10-17 21:48:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for keybinder3.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3112" id="RLBA-2022:3112" type="self" title="RLBA-2022:3112" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="keybinder3-devel" arch="aarch64" epoch="0" version="0.3.2" release="13.el9" src="keybinder3-0.3.2-13.el9.src.rpm">
          <filename>keybinder3-devel-0.3.2-13.el9.aarch64.rpm</filename>
          <sum type="sha256">8f483817dcf6104f8065a1de996a2f0c2cb60e9bc73efefa5f3aa415423403df</sum>
        </package>
        <package name="keybinder3-doc" arch="noarch" epoch="0" version="0.3.2" release="13.el9" src="keybinder3-0.3.2-13.el9.src.rpm">
          <filename>keybinder3-doc-0.3.2-13.el9.noarch.rpm</filename>
          <sum type="sha256">f3613c5de156b4e2ce64f166f4e511b99dffae7561473111a3dbd197430ce4b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3116</id>
    <title>new packages: lame</title>
    <issued date="2022-05-17 06:52:07" />
    <updated date="2025-10-17 21:48:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lame.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3116" id="RLBA-2022:3116" type="self" title="RLBA-2022:3116" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lame-devel" arch="aarch64" epoch="0" version="3.100" release="12.el9" src="lame-3.100-12.el9.src.rpm">
          <filename>lame-devel-3.100-12.el9.aarch64.rpm</filename>
          <sum type="sha256">09cd51d72db82dddfcc48d4af4ab9f62468ab13e0fbabe419394854b7f361ea7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3119</id>
    <title>new packages: lapack</title>
    <issued date="2022-05-17 06:52:18" />
    <updated date="2023-02-02 14:01:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lapack.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3119" id="RLBA-2022:3119" type="self" title="RLBA-2022:3119" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="blas64_" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>blas64_-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">451cddd3d399c9025ec7d6e38baafd5afcac82bfb6d20f52f53078450198f199</sum>
        </package>
        <package name="blas-devel" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>blas-devel-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">35602e6858bbc2158f4cd586339913e198e9449696c30c2c8fa025438d00bc94</sum>
        </package>
        <package name="lapack64_" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>lapack64_-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">9a6fce0825e2c44dca3d21cd866b689b5cc0e6733ab5a3d54f0fec693e7cd921</sum>
        </package>
        <package name="lapack-devel" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>lapack-devel-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">b412570e7c6be25ccd34ba2adb6837429231ccb7477ef7f54ed75d92b47e41ec</sum>
        </package>
        <package name="lapack-static" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>lapack-static-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">f88d90b5f290a55822af51458ce1fcbaf491f27d7dda8910ef93cd34224701a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3120</id>
    <title>new packages: lasso</title>
    <issued date="2022-05-17 06:52:21" />
    <updated date="2023-02-02 14:01:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lasso.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3120" id="RLBA-2022:3120" type="self" title="RLBA-2022:3120" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lasso-devel" arch="aarch64" epoch="0" version="2.7.0" release="8.el9" src="lasso-2.7.0-8.el9.src.rpm">
          <filename>lasso-devel-2.7.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">da3a3902d0f88cc7d5a415179efa8ca3f8004d8d366f916f1b66099c13c7caaf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3123</id>
    <title>new packages: leptonica</title>
    <issued date="2022-05-17 06:52:28" />
    <updated date="2025-10-17 21:49:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for leptonica.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3123" id="RLBA-2022:3123" type="self" title="RLBA-2022:3123" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="leptonica-devel" arch="aarch64" epoch="0" version="1.80.0" release="4.el9.1" src="leptonica-1.80.0-4.el9.1.src.rpm">
          <filename>leptonica-devel-1.80.0-4.el9.1.aarch64.rpm</filename>
          <sum type="sha256">393ba38e9a97766468552fe6855c0f788296c3baccb42a8a2f8871e0fa069806</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3134</id>
    <title>new packages: libXdmcp</title>
    <issued date="2022-05-17 06:53:10" />
    <updated date="2025-10-17 21:49:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libXdmcp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3134" id="RLBA-2022:3134" type="self" title="RLBA-2022:3134" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libXdmcp-devel" arch="aarch64" epoch="0" version="1.1.3" release="8.el9" src="libXdmcp-1.1.3-8.el9.src.rpm">
          <filename>libXdmcp-devel-1.1.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">900a7f7d18bc3beb7e2a1dc5c06a95a3aba3cc50075ed36e0124030fcec540e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3137</id>
    <title>new packages: libXfont2</title>
    <issued date="2022-05-17 06:53:17" />
    <updated date="2025-10-17 21:49:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libXfont2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3137" id="RLBA-2022:3137" type="self" title="RLBA-2022:3137" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libXfont2-devel" arch="aarch64" epoch="0" version="2.0.3" release="12.el9" src="libXfont2-2.0.3-12.el9.src.rpm">
          <filename>libXfont2-devel-2.0.3-12.el9.aarch64.rpm</filename>
          <sum type="sha256">55b4e045d2c7022b0ba5d055bbc0bcfb8d25cc4d32b15a976167ac9f970e854c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3146</id>
    <title>new packages: libXres</title>
    <issued date="2022-05-17 06:54:17" />
    <updated date="2025-10-17 21:49:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libXres.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3146" id="RLBA-2022:3146" type="self" title="RLBA-2022:3146" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libXres-devel" arch="aarch64" epoch="0" version="1.2.0" release="14.el9" src="libXres-1.2.0-14.el9.src.rpm">
          <filename>libXres-devel-1.2.0-14.el9.aarch64.rpm</filename>
          <sum type="sha256">754d8229f42524a276c9319072276a62008d7eb518328a84f10bc2e6718adcf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3151</id>
    <title>new packages: libXxf86vm</title>
    <issued date="2022-05-17 06:54:28" />
    <updated date="2025-10-17 21:49:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libXxf86vm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3151" id="RLBA-2022:3151" type="self" title="RLBA-2022:3151" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libXxf86vm-devel" arch="aarch64" epoch="0" version="1.1.4" release="18.el9" src="libXxf86vm-1.1.4-18.el9.src.rpm">
          <filename>libXxf86vm-devel-1.1.4-18.el9.aarch64.rpm</filename>
          <sum type="sha256">0566fb8cfcec2a65bc831d271c89a237666994b8b4fadade3bb6161d68b2bd03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3153</id>
    <title>new packages: libao</title>
    <issued date="2022-05-17 06:54:37" />
    <updated date="2025-10-17 21:49:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libao.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3153" id="RLBA-2022:3153" type="self" title="RLBA-2022:3153" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libao-devel" arch="aarch64" epoch="0" version="1.2.0" release="22.el9" src="libao-1.2.0-22.el9.src.rpm">
          <filename>libao-devel-1.2.0-22.el9.aarch64.rpm</filename>
          <sum type="sha256">982380811520b02b433c52716e241e03d2b2b9f06dfe7d7d19f9f0543fa67e7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3154</id>
    <title>new packages: libappstream-glib</title>
    <issued date="2022-05-17 06:54:39" />
    <updated date="2023-02-02 14:01:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libappstream-glib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3154" id="RLBA-2022:3154" type="self" title="RLBA-2022:3154" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libappstream-glib-devel" arch="aarch64" epoch="0" version="0.7.18" release="4.el9" src="libappstream-glib-0.7.18-4.el9.src.rpm">
          <filename>libappstream-glib-devel-0.7.18-4.el9.aarch64.rpm</filename>
          <sum type="sha256">ddf28963add03e22e80a4dc1a67c45164ce5defda94ef1db300de54d395b49b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3155</id>
    <title>new packages: libasyncns</title>
    <issued date="2022-05-17 06:54:41" />
    <updated date="2025-10-17 21:49:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libasyncns.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3155" id="RLBA-2022:3155" type="self" title="RLBA-2022:3155" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libasyncns-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9" src="libasyncns-0.8-22.el9.src.rpm">
          <filename>libasyncns-devel-0.8-22.el9.aarch64.rpm</filename>
          <sum type="sha256">ab9d7b17c19b703f3f5ad31cc944532677dda5bc233df5fc053aadcc5b3ec74d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3156</id>
    <title>new packages: libatasmart</title>
    <issued date="2022-05-17 06:54:44" />
    <updated date="2025-10-17 21:49:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libatasmart.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3156" id="RLBA-2022:3156" type="self" title="RLBA-2022:3156" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libatasmart-devel" arch="aarch64" epoch="0" version="0.19" release="22.el9" src="libatasmart-0.19-22.el9.src.rpm">
          <filename>libatasmart-devel-0.19-22.el9.aarch64.rpm</filename>
          <sum type="sha256">ae6ad28db5f800b9425ec15e0249dd3496532237e0a6b88346a266c4abcc084c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3160</id>
    <title>new packages: libcdio</title>
    <issued date="2022-05-17 06:54:52" />
    <updated date="2025-10-17 21:49:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libcdio.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3160" id="RLBA-2022:3160" type="self" title="RLBA-2022:3160" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libcdio-devel" arch="aarch64" epoch="0" version="2.1.0" release="6.el9" src="libcdio-2.1.0-6.el9.src.rpm">
          <filename>libcdio-devel-2.1.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">b6a99915999f3ed239c28ae082f81c687a0e955a7715593546db80fdaa4cbdfa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3161</id>
    <title>new packages: libcdio-paranoia</title>
    <issued date="2022-05-17 06:55:13" />
    <updated date="2025-10-17 21:49:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libcdio-paranoia.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3161" id="RLBA-2022:3161" type="self" title="RLBA-2022:3161" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libcdio-paranoia-devel" arch="aarch64" epoch="0" version="10.2+2.0.1" release="6.el9" src="libcdio-paranoia-10.2+2.0.1-6.el9.src.rpm">
          <filename>libcdio-paranoia-devel-10.2+2.0.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">eb8ee1ddd7c623dbe072200c9e17dd766d6e5ca07320e865fe1c999b170c4abb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3168</id>
    <title>new packages: libdvdread</title>
    <issued date="2022-05-17 06:55:32" />
    <updated date="2025-10-17 21:49:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdvdread.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3168" id="RLBA-2022:3168" type="self" title="RLBA-2022:3168" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdvdread-devel" arch="aarch64" epoch="0" version="6.1.1" release="4.el9" src="libdvdread-6.1.1-4.el9.src.rpm">
          <filename>libdvdread-devel-6.1.1-4.el9.aarch64.rpm</filename>
          <sum type="sha256">f607af51759adba7ec7bd747006818df5a935ffaf409075e29856ee618e20265</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3176</id>
    <title>new packages: libetonyek</title>
    <issued date="2022-05-17 06:56:19" />
    <updated date="2025-10-17 21:49:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libetonyek.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3176" id="RLBA-2022:3176" type="self" title="RLBA-2022:3176" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libetonyek-devel" arch="aarch64" epoch="0" version="0.1.10" release="2.el9" src="libetonyek-0.1.10-2.el9.src.rpm">
          <filename>libetonyek-devel-0.1.10-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3c8b67169ab92eff65836175033a57ac3229d0d4bd1586ff9cfaf4ce544ac01f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3177</id>
    <title>new packages: libevdev</title>
    <issued date="2022-05-17 06:56:33" />
    <updated date="2025-10-17 21:49:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libevdev.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3177" id="RLBA-2022:3177" type="self" title="RLBA-2022:3177" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libevdev-devel" arch="aarch64" epoch="0" version="1.11.0" release="3.el9" src="libevdev-1.11.0-3.el9.src.rpm">
          <filename>libevdev-devel-1.11.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5e9c2e8a2fcd597a2683d99a855e24f9feeb00f89128a2e4114bd8321da93ec0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3178</id>
    <title>new packages: libexif</title>
    <issued date="2022-05-17 06:56:35" />
    <updated date="2025-10-17 21:49:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libexif.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3178" id="RLBA-2022:3178" type="self" title="RLBA-2022:3178" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libexif-devel" arch="aarch64" epoch="0" version="0.6.22" release="6.el9" src="libexif-0.6.22-6.el9.src.rpm">
          <filename>libexif-devel-0.6.22-6.el9.aarch64.rpm</filename>
          <sum type="sha256">8ba6d9ced27ac971444747da0341fbcf22d8d188430d8f7d95e8d1b1e4fd6e77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3181</id>
    <title>new packages: libfontenc</title>
    <issued date="2022-05-17 06:56:42" />
    <updated date="2025-10-17 21:49:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libfontenc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3181" id="RLBA-2022:3181" type="self" title="RLBA-2022:3181" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfontenc-devel" arch="aarch64" epoch="0" version="1.1.3" release="17.el9" src="libfontenc-1.1.3-17.el9.src.rpm">
          <filename>libfontenc-devel-1.1.3-17.el9.aarch64.rpm</filename>
          <sum type="sha256">631c347fe7a67e2621617d249289b1ea5071a1af64c91f1091df0157141c67a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3187</id>
    <title>new packages: libgee</title>
    <issued date="2022-05-17 06:57:03" />
    <updated date="2025-10-17 21:49:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgee.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3187" id="RLBA-2022:3187" type="self" title="RLBA-2022:3187" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgee-devel" arch="aarch64" epoch="0" version="0.20.4" release="3.el9" src="libgee-0.20.4-3.el9.src.rpm">
          <filename>libgee-devel-0.20.4-3.el9.aarch64.rpm</filename>
          <sum type="sha256">bbdd1f8e2ff31795f3c8e86022fe701cd25444b5fe195f3652c0891d39c9f28a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3188</id>
    <title>new packages: libgexiv2</title>
    <issued date="2022-05-17 06:57:05" />
    <updated date="2025-10-17 21:49:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgexiv2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3188" id="RLBA-2022:3188" type="self" title="RLBA-2022:3188" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgexiv2-devel" arch="aarch64" epoch="0" version="0.12.3" release="1.el9" src="libgexiv2-0.12.3-1.el9.src.rpm">
          <filename>libgexiv2-devel-0.12.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">8b506b8896c722b24d438953a91a920a389f3d6a1149c77c898f62e24bec81d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3190</id>
    <title>new packages: libgphoto2</title>
    <issued date="2022-05-17 06:57:13" />
    <updated date="2025-10-17 21:49:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgphoto2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3190" id="RLBA-2022:3190" type="self" title="RLBA-2022:3190" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgphoto2-devel" arch="aarch64" epoch="0" version="2.5.27" release="3.el9" src="libgphoto2-2.5.27-3.el9.src.rpm">
          <filename>libgphoto2-devel-2.5.27-3.el9.aarch64.rpm</filename>
          <sum type="sha256">1cc1b1c6cc63dbaf66fd0f44c00d45ff268c53aa490a7da64c73e1582ecfe0e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3191</id>
    <title>new packages: libgsf</title>
    <issued date="2022-05-17 06:57:16" />
    <updated date="2025-10-17 21:49:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgsf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3191" id="RLBA-2022:3191" type="self" title="RLBA-2022:3191" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgsf-devel" arch="aarch64" epoch="0" version="1.14.47" release="5.el9" src="libgsf-1.14.47-5.el9.src.rpm">
          <filename>libgsf-devel-1.14.47-5.el9.aarch64.rpm</filename>
          <sum type="sha256">6fee383e5340dcc73a4b8063f91f86f07e5348e0b65ea68cb66cfbcb751d2de0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3194</id>
    <title>new packages: libgxps</title>
    <issued date="2022-05-17 06:57:29" />
    <updated date="2025-10-17 21:49:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgxps.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3194" id="RLBA-2022:3194" type="self" title="RLBA-2022:3194" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgxps-devel" arch="aarch64" epoch="0" version="0.3.2" release="3.el9" src="libgxps-0.3.2-3.el9.src.rpm">
          <filename>libgxps-devel-0.3.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">848192ed50df988447091a5839bfc449cdaefc7724976b56c5e139aec7175387</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3201</id>
    <title>new packages: libiscsi</title>
    <issued date="2022-05-17 06:57:59" />
    <updated date="2025-10-17 21:49:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libiscsi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3201" id="RLBA-2022:3201" type="self" title="RLBA-2022:3201" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libiscsi-devel" arch="aarch64" epoch="0" version="1.19.0" release="5.el9" src="libiscsi-1.19.0-5.el9.src.rpm">
          <filename>libiscsi-devel-1.19.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">0d8a4d7347ef9b916e540a5843a9d1e8131d8e8c9524f6621d21fbf80ea9c83c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3189</id>
    <title>new packages: libgnomekbd</title>
    <issued date="2022-05-17 06:57:07" />
    <updated date="2025-10-17 21:49:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgnomekbd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3189" id="RLBA-2022:3189" type="self" title="RLBA-2022:3189" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgnomekbd-devel" arch="aarch64" epoch="0" version="3.26.1" release="7.el9" src="libgnomekbd-3.26.1-7.el9.src.rpm">
          <filename>libgnomekbd-devel-3.26.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">3d0a6dec8d2708974387432de4521a7a714998e60d307e17ef65f30bb71f4ece</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3206</id>
    <title>new packages: liblockfile</title>
    <issued date="2022-05-17 06:58:20" />
    <updated date="2023-02-02 14:02:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for liblockfile.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3206" id="RLBA-2022:3206" type="self" title="RLBA-2022:3206" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="liblockfile-devel" arch="aarch64" epoch="0" version="1.14" release="9.el9" src="liblockfile-1.14-9.el9.src.rpm">
          <filename>liblockfile-devel-1.14-9.el9.aarch64.rpm</filename>
          <sum type="sha256">5bd9f3162970f26551c2436ada54cb65651fe61d59706e2065bec5bd30edc511</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3209</id>
    <title>new packages: libmad</title>
    <issued date="2022-05-17 06:58:26" />
    <updated date="2025-10-17 21:49:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmad.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3209" id="RLBA-2022:3209" type="self" title="RLBA-2022:3209" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmad" arch="aarch64" epoch="0" version="0.15.1b" release="33.el9" src="libmad-0.15.1b-33.el9.src.rpm">
          <filename>libmad-0.15.1b-33.el9.aarch64.rpm</filename>
          <sum type="sha256">3c235d6dae271af3ca94f4b8009632608d92dcc34d2a3aad0b75dd9ba632c00d</sum>
        </package>
        <package name="libmad-devel" arch="aarch64" epoch="0" version="0.15.1b" release="33.el9" src="libmad-0.15.1b-33.el9.src.rpm">
          <filename>libmad-devel-0.15.1b-33.el9.aarch64.rpm</filename>
          <sum type="sha256">9c4fca2c49ffeb9f53edfcdd96cecbae7dee2b98c95e6ff6ed760198a7541f0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3211</id>
    <title>new packages: libmaxminddb</title>
    <issued date="2022-05-17 06:58:31" />
    <updated date="2023-02-02 14:02:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmaxminddb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3211" id="RLBA-2022:3211" type="self" title="RLBA-2022:3211" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmaxminddb-devel" arch="aarch64" epoch="0" version="1.5.2" release="3.el9" src="libmaxminddb-1.5.2-3.el9.src.rpm">
          <filename>libmaxminddb-devel-1.5.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">23e6a95a15ed6ec8d60a4d9b988d740dc7edadaf7e6591bba4b66e35f314583e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3213</id>
    <title>new packages: libmicrohttpd</title>
    <issued date="2022-05-17 06:58:36" />
    <updated date="2023-02-02 14:02:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmicrohttpd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3213" id="RLBA-2022:3213" type="self" title="RLBA-2022:3213" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmicrohttpd-devel" arch="aarch64" epoch="1" version="0.9.72" release="4.el9" src="libmicrohttpd-0.9.72-4.el9.src.rpm">
          <filename>libmicrohttpd-devel-0.9.72-4.el9.aarch64.rpm</filename>
          <sum type="sha256">2d81331282644de607098d507ac768d9456a933493e09987e5e9405b1f907feb</sum>
        </package>
        <package name="libmicrohttpd-doc" arch="noarch" epoch="1" version="0.9.72" release="4.el9" src="libmicrohttpd-0.9.72-4.el9.src.rpm">
          <filename>libmicrohttpd-doc-0.9.72-4.el9.noarch.rpm</filename>
          <sum type="sha256">5c3003cb4fc9ccd2d5f272605bfbac9a4336e1a7a86a139906ec32bc713810f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3218</id>
    <title>new packages: libnet</title>
    <issued date="2022-05-17 06:58:55" />
    <updated date="2023-02-02 14:02:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3218" id="RLBA-2022:3218" type="self" title="RLBA-2022:3218" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnet-devel" arch="aarch64" epoch="0" version="1.2" release="6.el9" src="libnet-1.2-6.el9.src.rpm">
          <filename>libnet-devel-1.2-6.el9.aarch64.rpm</filename>
          <sum type="sha256">536e881bc3af9cf664ab25326b0d23b9e2ba0e8a8d3b91924bf175c2545a066e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3220</id>
    <title>new packages: libnetfilter_queue</title>
    <issued date="2022-05-17 06:59:04" />
    <updated date="2025-10-17 21:49:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnetfilter_queue.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3220" id="RLBA-2022:3220" type="self" title="RLBA-2022:3220" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnetfilter_queue-devel" arch="aarch64" epoch="0" version="1.0.5" release="1.el9" src="libnetfilter_queue-1.0.5-1.el9.src.rpm">
          <filename>libnetfilter_queue-devel-1.0.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">630a1dfb53f1028e3edef4993ceeeb08af3e76aa705354cf685e4683f385a65d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3224</id>
    <title>new packages: libodfgen</title>
    <issued date="2022-05-17 06:59:17" />
    <updated date="2025-10-17 21:49:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libodfgen.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3224" id="RLBA-2022:3224" type="self" title="RLBA-2022:3224" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libodfgen-devel" arch="aarch64" epoch="0" version="0.1.8" release="4.el9" src="libodfgen-0.1.8-4.el9.src.rpm">
          <filename>libodfgen-devel-0.1.8-4.el9.aarch64.rpm</filename>
          <sum type="sha256">2906fa4bb807a7423b51aa22d8fa9a887192c3f6ca068846a1b05db9868b146e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3225</id>
    <title>new packages: libogg</title>
    <issued date="2022-05-17 06:59:19" />
    <updated date="2025-10-17 21:49:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libogg.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3225" id="RLBA-2022:3225" type="self" title="RLBA-2022:3225" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libogg-devel" arch="aarch64" epoch="2" version="1.3.4" release="6.el9" src="libogg-1.3.4-6.el9.src.rpm">
          <filename>libogg-devel-1.3.4-6.el9.aarch64.rpm</filename>
          <sum type="sha256">875004ab16eeb05da5dd644a1e805ee95f3a12a23ea254e57ee7de347817bfcd</sum>
        </package>
        <package name="libogg-devel-docs" arch="noarch" epoch="2" version="1.3.4" release="6.el9" src="libogg-1.3.4-6.el9.src.rpm">
          <filename>libogg-devel-docs-1.3.4-6.el9.noarch.rpm</filename>
          <sum type="sha256">ead61612a51fc20fc066192d54f3140432eb42eaf3ce28c75c50333df707a3bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3226</id>
    <title>new packages: libopenraw</title>
    <issued date="2022-05-17 06:59:25" />
    <updated date="2025-10-17 21:49:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libopenraw.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3226" id="RLBA-2022:3226" type="self" title="RLBA-2022:3226" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libopenraw-devel" arch="aarch64" epoch="0" version="0.1.3" release="11.el9" src="libopenraw-0.1.3-11.el9.src.rpm">
          <filename>libopenraw-devel-0.1.3-11.el9.aarch64.rpm</filename>
          <sum type="sha256">1b498f19d6ab47c6913b02af2e543367ebf422af0a54faef5aeb32bfbb784234</sum>
        </package>
        <package name="libopenraw-gnome" arch="aarch64" epoch="0" version="0.1.3" release="11.el9" src="libopenraw-0.1.3-11.el9.src.rpm">
          <filename>libopenraw-gnome-0.1.3-11.el9.aarch64.rpm</filename>
          <sum type="sha256">b36ad3ff263ac4d41a44a1d0addf5a8d929b83c44cfb1a4133f6a84d5704d68d</sum>
        </package>
        <package name="libopenraw-gnome-devel" arch="aarch64" epoch="0" version="0.1.3" release="11.el9" src="libopenraw-0.1.3-11.el9.src.rpm">
          <filename>libopenraw-gnome-devel-0.1.3-11.el9.aarch64.rpm</filename>
          <sum type="sha256">9e60e9f38a255c7a4a9a176007a1c85292ba817e9ae4f9f4cf8531db5ae406fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3229</id>
    <title>new packages: libotr</title>
    <issued date="2022-05-17 06:59:38" />
    <updated date="2025-10-17 21:49:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libotr.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3229" id="RLBA-2022:3229" type="self" title="RLBA-2022:3229" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libotr-devel" arch="aarch64" epoch="0" version="4.1.1" release="13.el9" src="libotr-4.1.1-13.el9.src.rpm">
          <filename>libotr-devel-4.1.1-13.el9.aarch64.rpm</filename>
          <sum type="sha256">c001166959038afb4e541a520d3363ac1b79804a9b2745ae55dcd3193d66df12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3231</id>
    <title>new packages: libpaper</title>
    <issued date="2022-05-17 06:59:46" />
    <updated date="2025-10-17 21:49:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpaper.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3231" id="RLBA-2022:3231" type="self" title="RLBA-2022:3231" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpaper-devel" arch="aarch64" epoch="0" version="1.1.28" release="4.el9" src="libpaper-1.1.28-4.el9.src.rpm">
          <filename>libpaper-devel-1.1.28-4.el9.aarch64.rpm</filename>
          <sum type="sha256">4756dea927df2fc78a0925e3c0f9efbbaaa02d2284b26ba6a7a8aa223a3591dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3232</id>
    <title>new packages: libpfm</title>
    <issued date="2022-05-17 06:59:49" />
    <updated date="2023-02-02 14:02:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpfm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3232" id="RLBA-2022:3232" type="self" title="RLBA-2022:3232" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-libpfm" arch="aarch64" epoch="0" version="4.11.0" release="6.el9" src="libpfm-4.11.0-6.el9.src.rpm">
          <filename>python3-libpfm-4.11.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">24608a8546f2e354718f2918ffe52a317dadd6e44a089c53b224be5e5c859415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3233</id>
    <title>new packages: libpinyin</title>
    <issued date="2022-05-17 06:59:54" />
    <updated date="2025-10-17 21:49:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpinyin.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3233" id="RLBA-2022:3233" type="self" title="RLBA-2022:3233" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpinyin-devel" arch="aarch64" epoch="0" version="2.6.0" release="4.el9" src="libpinyin-2.6.0-4.el9.src.rpm">
          <filename>libpinyin-devel-2.6.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">d955c538989cb5896ab4c230dc6218ca742a68ac7cfbe968db35edb01639f372</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3237</id>
    <title>new packages: librabbitmq</title>
    <issued date="2022-05-17 07:00:19" />
    <updated date="2023-02-02 14:02:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librabbitmq.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3237" id="RLBA-2022:3237" type="self" title="RLBA-2022:3237" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librabbitmq-devel" arch="aarch64" epoch="0" version="0.11.0" release="5.el9" src="librabbitmq-0.11.0-5.el9.src.rpm">
          <filename>librabbitmq-devel-0.11.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">6b8debbd7cdb8663785a85c755d5a5e4785368e0671ce1daeecdd98ced536fc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3241</id>
    <title>new packages: librevenge</title>
    <issued date="2022-05-17 07:00:41" />
    <updated date="2025-10-17 21:49:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librevenge.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3241" id="RLBA-2022:3241" type="self" title="RLBA-2022:3241" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librevenge-devel" arch="aarch64" epoch="0" version="0.0.4" release="22.el9" src="librevenge-0.0.4-22.el9.src.rpm">
          <filename>librevenge-devel-0.0.4-22.el9.aarch64.rpm</filename>
          <sum type="sha256">c2d197beba2cb75239af5cbe9bca70db2f05c9d9314891e3f1d5343dcc70bfc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3243</id>
    <title>new packages: libsamplerate</title>
    <issued date="2022-05-17 07:00:45" />
    <updated date="2025-10-17 21:49:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsamplerate.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3243" id="RLBA-2022:3243" type="self" title="RLBA-2022:3243" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsamplerate-devel" arch="aarch64" epoch="0" version="0.1.9" release="10.el9" src="libsamplerate-0.1.9-10.el9.src.rpm">
          <filename>libsamplerate-devel-0.1.9-10.el9.aarch64.rpm</filename>
          <sum type="sha256">c9891a34d1144a73e3cddcf61beed9e3a49ea524fb55e028c306b47c71e12847</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3246</id>
    <title>new packages: libshout</title>
    <issued date="2022-05-17 07:00:53" />
    <updated date="2025-10-17 21:49:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libshout.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3246" id="RLBA-2022:3246" type="self" title="RLBA-2022:3246" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libshout-devel" arch="aarch64" epoch="0" version="2.4.3" release="7.el9" src="libshout-2.4.3-7.el9.src.rpm">
          <filename>libshout-devel-2.4.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">5e1af2e46a5301c9f34626483516dcb9c430885952855157f5c14c593f63ab84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3247</id>
    <title>new packages: libsigc++20</title>
    <issued date="2022-05-17 07:00:55" />
    <updated date="2025-10-17 21:49:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsigc++20.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3247" id="RLBA-2022:3247" type="self" title="RLBA-2022:3247" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsigc++20-devel" arch="aarch64" epoch="0" version="2.10.7" release="2.el9" src="libsigc++20-2.10.7-2.el9.src.rpm">
          <filename>libsigc++20-devel-2.10.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cc4915b8c5d5678d0f595fed564f4991801594ed670046c7af84d7db666dac22</sum>
        </package>
        <package name="libsigc++20-doc" arch="noarch" epoch="0" version="2.10.7" release="2.el9" src="libsigc++20-2.10.7-2.el9.src.rpm">
          <filename>libsigc++20-doc-2.10.7-2.el9.noarch.rpm</filename>
          <sum type="sha256">29487250f3f83163d9b2b19379dc1437e3ad90db099286cb698d375effee094b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3251</id>
    <title>new packages: libsrtp</title>
    <issued date="2022-05-17 07:01:06" />
    <updated date="2023-02-02 14:02:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsrtp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3251" id="RLBA-2022:3251" type="self" title="RLBA-2022:3251" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsrtp-devel" arch="aarch64" epoch="0" version="2.3.0" release="7.el9" src="libsrtp-2.3.0-7.el9.src.rpm">
          <filename>libsrtp-devel-2.3.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">18a402aed4f18ee2a86ce811ca3229606442239950cb4b2f0adc447ec33cb3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3253</id>
    <title>new packages: libstemmer</title>
    <issued date="2022-05-17 07:01:24" />
    <updated date="2025-10-17 21:49:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libstemmer.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3253" id="RLBA-2022:3253" type="self" title="RLBA-2022:3253" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libstemmer-devel" arch="aarch64" epoch="0" version="0" release="18.585svn.el9" src="libstemmer-0-18.585svn.el9.src.rpm">
          <filename>libstemmer-devel-0-18.585svn.el9.aarch64.rpm</filename>
          <sum type="sha256">adcb1c8f619591bbc8d6cc7ba85dfc50f5bbd27b6ab77409241a49151a6a42fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3255</id>
    <title>new packages: libtheora</title>
    <issued date="2022-05-17 07:01:28" />
    <updated date="2025-10-17 21:49:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtheora.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3255" id="RLBA-2022:3255" type="self" title="RLBA-2022:3255" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtheora-devel" arch="aarch64" epoch="1" version="1.1.1" release="31.el9" src="libtheora-1.1.1-31.el9.src.rpm">
          <filename>libtheora-devel-1.1.1-31.el9.aarch64.rpm</filename>
          <sum type="sha256">c1b0803057d3abe8ac365340a1d5c2a8e18f4036f0b0793945d38b80c1084319</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3216</id>
    <title>new packages: libmspack</title>
    <issued date="2022-05-17 06:58:50" />
    <updated date="2025-10-17 21:49:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmspack.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3216" id="RLBA-2022:3216" type="self" title="RLBA-2022:3216" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmspack-devel" arch="aarch64" epoch="0" version="0.10.1" release="0.7.alpha.el9" src="libmspack-0.10.1-0.7.alpha.el9.src.rpm">
          <filename>libmspack-devel-0.10.1-0.7.alpha.el9.aarch64.rpm</filename>
          <sum type="sha256">d5f7156538439b4a45c1fbc2f9318547fbd80e1237ce38b744cf41f65a44bc49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3259</id>
    <title>new packages: libusb</title>
    <issued date="2022-05-17 07:01:39" />
    <updated date="2025-10-17 21:49:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libusb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3259" id="RLBA-2022:3259" type="self" title="RLBA-2022:3259" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libusb-devel" arch="aarch64" epoch="1" version="0.1.7" release="5.el9" src="libusb-0.1.7-5.el9.src.rpm">
          <filename>libusb-devel-0.1.7-5.el9.aarch64.rpm</filename>
          <sum type="sha256">bfcb6a33b69558ee17df5da7d8de638585192250fff02819939ab021ebd3088c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3260</id>
    <title>new packages: libvdpau</title>
    <issued date="2022-05-17 07:01:42" />
    <updated date="2023-02-02 14:02:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvdpau.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3260" id="RLBA-2022:3260" type="self" title="RLBA-2022:3260" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvdpau-devel" arch="aarch64" epoch="0" version="1.4" release="6.el9" src="libvdpau-1.4-6.el9.src.rpm">
          <filename>libvdpau-devel-1.4-6.el9.aarch64.rpm</filename>
          <sum type="sha256">f08048afc28127cc509cebf506d2dc42ab6dc2d01fec6bbdb7ea770ec6ce4ebb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3263</id>
    <title>new packages: libvisio</title>
    <issued date="2022-05-17 07:01:49" />
    <updated date="2025-10-17 21:49:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvisio.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3263" id="RLBA-2022:3263" type="self" title="RLBA-2022:3263" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvisio-devel" arch="aarch64" epoch="0" version="0.1.7" release="9.el9" src="libvisio-0.1.7-9.el9.src.rpm">
          <filename>libvisio-devel-0.1.7-9.el9.aarch64.rpm</filename>
          <sum type="sha256">f4bf5d016f918afdc7ee62beee2b83a70657f87d3ff4f11f33cdba50de42bcec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3264</id>
    <title>new packages: libvisual</title>
    <issued date="2022-05-17 07:02:06" />
    <updated date="2025-10-17 21:49:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvisual.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3264" id="RLBA-2022:3264" type="self" title="RLBA-2022:3264" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvisual-devel" arch="aarch64" epoch="1" version="0.4.0" release="34.el9" src="libvisual-0.4.0-34.el9.src.rpm">
          <filename>libvisual-devel-0.4.0-34.el9.aarch64.rpm</filename>
          <sum type="sha256">eaa7276a525193b9c01fd1e82586435b1851ab985fd054d882acb51468ba88ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3265</id>
    <title>new packages: libvoikko</title>
    <issued date="2022-05-17 07:02:09" />
    <updated date="2025-10-17 21:49:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvoikko.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3265" id="RLBA-2022:3265" type="self" title="RLBA-2022:3265" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvoikko-devel" arch="aarch64" epoch="0" version="4.3" release="7.el9" src="libvoikko-4.3-7.el9.src.rpm">
          <filename>libvoikko-devel-4.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">70053a0d076781af4e9847b1d01e24a714bbd1b1f531412b52a1899a1e426521</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3266</id>
    <title>new packages: libvorbis</title>
    <issued date="2022-05-17 07:02:11" />
    <updated date="2025-10-17 21:49:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvorbis.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3266" id="RLBA-2022:3266" type="self" title="RLBA-2022:3266" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvorbis-devel" arch="aarch64" epoch="1" version="1.3.7" release="5.el9" src="libvorbis-1.3.7-5.el9.src.rpm">
          <filename>libvorbis-devel-1.3.7-5.el9.aarch64.rpm</filename>
          <sum type="sha256">63406c2061cde5b934e88d01de414902391595569c5255d02940da40e083fde4</sum>
        </package>
        <package name="libvorbis-devel-docs" arch="noarch" epoch="1" version="1.3.7" release="5.el9" src="libvorbis-1.3.7-5.el9.src.rpm">
          <filename>libvorbis-devel-docs-1.3.7-5.el9.noarch.rpm</filename>
          <sum type="sha256">88dbd56deb6298a7db65a0dc60a00554a52f7ac2cb9129ff034cdd82e71437f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3267</id>
    <title>new packages: libvpx</title>
    <issued date="2022-05-17 07:02:14" />
    <updated date="2023-02-02 14:02:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvpx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3267" id="RLBA-2022:3267" type="self" title="RLBA-2022:3267" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvpx-devel" arch="aarch64" epoch="0" version="1.9.0" release="5.el9" src="libvpx-1.9.0-5.el9.src.rpm">
          <filename>libvpx-devel-1.9.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">2d53499f6f88fb1d8d58a7454521b74bb1c0d8585cf11e31287b758d8d963274</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3269</id>
    <title>new packages: libwnck3</title>
    <issued date="2022-05-17 07:02:18" />
    <updated date="2025-10-17 21:49:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwnck3.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3269" id="RLBA-2022:3269" type="self" title="RLBA-2022:3269" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwnck3-devel" arch="aarch64" epoch="0" version="40.0" release="2.el9" src="libwnck3-40.0-2.el9.src.rpm">
          <filename>libwnck3-devel-40.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3a53b3500844776dc6f94fb0bcee78a3203b894f83752d1aa94f3d2ce7ec76fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3270</id>
    <title>new packages: libwpd</title>
    <issued date="2022-05-17 07:02:21" />
    <updated date="2025-10-17 21:49:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwpd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3270" id="RLBA-2022:3270" type="self" title="RLBA-2022:3270" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwpd-devel" arch="aarch64" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-devel-0.10.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">d913a91f5e225b883aa517d8b05d4e8e411a755d6391336bc267b51ce40204de</sum>
        </package>
        <package name="libwpd-doc" arch="noarch" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-doc-0.10.3-10.el9.noarch.rpm</filename>
          <sum type="sha256">cf1cafa034c873ca0728f3d265a585a12f2fe820388cf525b9407d7a7ff7d3b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3272</id>
    <title>new packages: libwpg</title>
    <issued date="2022-05-17 07:02:25" />
    <updated date="2025-10-17 21:49:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwpg.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3272" id="RLBA-2022:3272" type="self" title="RLBA-2022:3272" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwpg-devel" arch="aarch64" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-devel-0.3.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ea1d595370cb449e69909f4873f3b2767b4fff7395c2cbfee6318fb652c0c326</sum>
        </package>
        <package name="libwpg-doc" arch="noarch" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-doc-0.3.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">612575a87c0c960172ba28ba334437243e5e8df6ae17b42d55d999fe31dac0a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3273</id>
    <title>new packages: libwps</title>
    <issued date="2022-05-17 07:02:28" />
    <updated date="2025-10-17 21:49:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwps.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3273" id="RLBA-2022:3273" type="self" title="RLBA-2022:3273" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwps-devel" arch="aarch64" epoch="0" version="0.4.12" release="4.el9" src="libwps-0.4.12-4.el9.src.rpm">
          <filename>libwps-devel-0.4.12-4.el9.aarch64.rpm</filename>
          <sum type="sha256">5f623d9ec9c1ae83ee39cddd18b6ac35d5be99e463abb665946d247d1f5018d3</sum>
        </package>
        <package name="libwps-doc" arch="noarch" epoch="0" version="0.4.12" release="4.el9" src="libwps-0.4.12-4.el9.src.rpm">
          <filename>libwps-doc-0.4.12-4.el9.noarch.rpm</filename>
          <sum type="sha256">a57cc3f098bec98c980281bf98395ecd53c2f63d364e03fabd653f02ca29a8cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3275</id>
    <title>new packages: libxkbcommon</title>
    <issued date="2022-05-17 07:02:32" />
    <updated date="2025-10-17 21:49:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libxkbcommon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3275" id="RLBA-2022:3275" type="self" title="RLBA-2022:3275" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxkbcommon-x11-devel" arch="aarch64" epoch="0" version="1.0.3" release="4.el9" src="libxkbcommon-1.0.3-4.el9.src.rpm">
          <filename>libxkbcommon-x11-devel-1.0.3-4.el9.aarch64.rpm</filename>
          <sum type="sha256">000bec1a04f7e90a091c68edf4cf7ad1c8fe32cea2017f6a92743dd641676341</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3276</id>
    <title>new packages: libxkbfile</title>
    <issued date="2022-05-17 07:02:35" />
    <updated date="2025-10-17 21:49:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libxkbfile.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3276" id="RLBA-2022:3276" type="self" title="RLBA-2022:3276" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxkbfile-devel" arch="aarch64" epoch="0" version="1.1.0" release="8.el9" src="libxkbfile-1.1.0-8.el9.src.rpm">
          <filename>libxkbfile-devel-1.1.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">e9a9020e096badadb639ad9caf4a024ea366e50f238e7d8753ec03c429f27b0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3277</id>
    <title>new packages: libxklavier</title>
    <issued date="2022-05-17 07:02:41" />
    <updated date="2025-10-17 21:49:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libxklavier.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3277" id="RLBA-2022:3277" type="self" title="RLBA-2022:3277" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxklavier-devel" arch="aarch64" epoch="0" version="5.4" release="20.el9" src="libxklavier-5.4-20.el9.src.rpm">
          <filename>libxklavier-devel-5.4-20.el9.aarch64.rpm</filename>
          <sum type="sha256">c8c69f96e269f96eacd095c9114a2e0962eb40b85992e961d97335b4b7bc79b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3280</id>
    <title>new packages: libzip</title>
    <issued date="2022-05-17 07:02:48" />
    <updated date="2023-02-02 14:02:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libzip.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3280" id="RLBA-2022:3280" type="self" title="RLBA-2022:3280" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libzip-devel" arch="aarch64" epoch="0" version="1.7.3" release="7.el9" src="libzip-1.7.3-7.el9.src.rpm">
          <filename>libzip-devel-1.7.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">79148b95900c7945d8ba952a3f3c46c9c234376b8ceb1d413d1c713f2bdf0715</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3301</id>
    <title>new packages: lttng-ust</title>
    <issued date="2022-05-17 07:03:43" />
    <updated date="2025-10-17 21:49:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lttng-ust.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3301" id="RLBA-2022:3301" type="self" title="RLBA-2022:3301" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lttng-ust-devel" arch="aarch64" epoch="0" version="2.12.0" release="6.el9" src="lttng-ust-2.12.0-6.el9.src.rpm">
          <filename>lttng-ust-devel-2.12.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">ae38e80e3eaa8bc56be4f78aa47d2718b937826ad6670f0d78bf135cd942d085</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3303</id>
    <title>new packages: luksmeta</title>
    <issued date="2022-05-17 07:03:48" />
    <updated date="2025-10-17 21:49:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for luksmeta.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3303" id="RLBA-2022:3303" type="self" title="RLBA-2022:3303" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libluksmeta-devel" arch="aarch64" epoch="0" version="9" release="12.el9" src="luksmeta-9-12.el9.src.rpm">
          <filename>libluksmeta-devel-9-12.el9.aarch64.rpm</filename>
          <sum type="sha256">49f9cc10c33b8b2245700314466b58c618c41c86e5bc326ced3b79e42055cdd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3309</id>
    <title>new packages: mariadb-connector-c</title>
    <issued date="2022-05-17 07:04:01" />
    <updated date="2025-10-17 21:49:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mariadb-connector-c.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2055288" id="2055288" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3309" id="RLBA-2022:3309" type="self" title="RLBA-2022:3309" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mariadb-connector-c-doc" arch="noarch" epoch="0" version="3.2.6" release="1.el9_0" src="mariadb-connector-c-3.2.6-1.el9_0.src.rpm">
          <filename>mariadb-connector-c-doc-3.2.6-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">ff5c4d6ab6afb6673d998e459849737de604fb3af694d9c9534909bfdd0a2e26</sum>
        </package>
        <package name="mariadb-connector-c-test" arch="aarch64" epoch="0" version="3.2.6" release="1.el9_0" src="mariadb-connector-c-3.2.6-1.el9_0.src.rpm">
          <filename>mariadb-connector-c-test-3.2.6-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">70a7f3b9ebd83354bfa326a99cfbfb147c9fec27e057383ce6f61b0fbc4d851b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3327</id>
    <title>new packages: mobile-broadband-provider-info</title>
    <issued date="2022-05-17 07:05:10" />
    <updated date="2025-10-17 21:49:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mobile-broadband-provider-info.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3327" id="RLBA-2022:3327" type="self" title="RLBA-2022:3327" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mobile-broadband-provider-info-devel" arch="noarch" epoch="0" version="20210805" release="2.el9" src="mobile-broadband-provider-info-20210805-2.el9.src.rpm">
          <filename>mobile-broadband-provider-info-devel-20210805-2.el9.noarch.rpm</filename>
          <sum type="sha256">c28d7af9a765b02a655e4cf06ecf14ac58619d96c0711a76c233ec944d11ae8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3341</id>
    <title>new packages: mpg123</title>
    <issued date="2022-05-17 07:05:58" />
    <updated date="2023-02-02 14:03:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mpg123.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3341" id="RLBA-2022:3341" type="self" title="RLBA-2022:3341" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mpg123-devel" arch="aarch64" epoch="0" version="1.26.2" release="5.el9" src="mpg123-1.26.2-5.el9.src.rpm">
          <filename>mpg123-devel-1.26.2-5.el9.aarch64.rpm</filename>
          <sum type="sha256">b4c0935d6eb82b4e0e0ce4b335386bb1df7550a6716a932beb6a78530f8e3b15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3344</id>
    <title>new packages: mtdev</title>
    <issued date="2022-05-17 07:06:19" />
    <updated date="2025-10-17 21:49:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mtdev.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3344" id="RLBA-2022:3344" type="self" title="RLBA-2022:3344" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mtdev-devel" arch="aarch64" epoch="0" version="1.1.5" release="22.el9" src="mtdev-1.1.5-22.el9.src.rpm">
          <filename>mtdev-devel-1.1.5-22.el9.aarch64.rpm</filename>
          <sum type="sha256">a4764c20cabea97cbf70a1d957cedcf98361fbaabf05e0a2e875b24ff73bf316</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3346</id>
    <title>new packages: munge</title>
    <issued date="2022-05-17 07:06:23" />
    <updated date="2025-10-17 21:49:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for munge.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3346" id="RLBA-2022:3346" type="self" title="RLBA-2022:3346" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="munge-devel" arch="aarch64" epoch="0" version="0.5.13" release="13.el9" src="munge-0.5.13-13.el9.src.rpm">
          <filename>munge-devel-0.5.13-13.el9.aarch64.rpm</filename>
          <sum type="sha256">e307e58e70ef2a11681c59b599c75a0f7f572dd1ba0475dfd57cd8171e0a59ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3349</id>
    <title>new packages: mythes</title>
    <issued date="2022-05-17 07:06:48" />
    <updated date="2025-10-17 21:49:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mythes.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3349" id="RLBA-2022:3349" type="self" title="RLBA-2022:3349" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mythes-devel" arch="aarch64" epoch="0" version="1.2.4" release="18.el9" src="mythes-1.2.4-18.el9.src.rpm">
          <filename>mythes-devel-1.2.4-18.el9.aarch64.rpm</filename>
          <sum type="sha256">da65dbf41e2adab8bc39c2067aa551dfdb0726d7180fe7cb21f251fe1284bcc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3373</id>
    <title>new packages: neon</title>
    <issued date="2022-05-17 07:08:10" />
    <updated date="2025-10-17 21:49:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for neon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3373" id="RLBA-2022:3373" type="self" title="RLBA-2022:3373" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="neon-devel" arch="aarch64" epoch="0" version="0.31.2" release="11.el9" src="neon-0.31.2-11.el9.src.rpm">
          <filename>neon-devel-0.31.2-11.el9.aarch64.rpm</filename>
          <sum type="sha256">095a73f8063bdf20163211c8e44ee6284d8b153c3d056240ef8c90404d60fbef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3374</id>
    <title>new packages: netpbm</title>
    <issued date="2022-05-17 07:08:12" />
    <updated date="2025-10-17 21:49:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for netpbm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3374" id="RLBA-2022:3374" type="self" title="RLBA-2022:3374" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="netpbm-devel" arch="aarch64" epoch="0" version="10.95.00" release="2.el9" src="netpbm-10.95.00-2.el9.src.rpm">
          <filename>netpbm-devel-10.95.00-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c6000a3d67d3d8a34fb7c2b82c87779b42ba6de509615ce868bec7e2d118635b</sum>
        </package>
        <package name="netpbm-doc" arch="aarch64" epoch="0" version="10.95.00" release="2.el9" src="netpbm-10.95.00-2.el9.src.rpm">
          <filename>netpbm-doc-10.95.00-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8bcee303f7da20e605f861b50ed98aa92a770b2c31d2947005d6e8dc0832309f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3382</id>
    <title>new packages: ocl-icd</title>
    <issued date="2022-05-17 07:08:31" />
    <updated date="2025-10-17 21:49:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ocl-icd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3382" id="RLBA-2022:3382" type="self" title="RLBA-2022:3382" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ocl-icd-devel" arch="aarch64" epoch="0" version="2.2.13" release="4.el9" src="ocl-icd-2.2.13-4.el9.src.rpm">
          <filename>ocl-icd-devel-2.2.13-4.el9.aarch64.rpm</filename>
          <sum type="sha256">a749f0057c6cd1fad675dfde31ccb8885124aaed13cd2aefb3197ea7face9bdd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3386</id>
    <title>new packages: openal-soft</title>
    <issued date="2022-05-17 07:09:01" />
    <updated date="2025-10-17 21:49:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openal-soft.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3386" id="RLBA-2022:3386" type="self" title="RLBA-2022:3386" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openal-soft-devel" arch="aarch64" epoch="0" version="1.19.1" release="16.el9" src="openal-soft-1.19.1-16.el9.src.rpm">
          <filename>openal-soft-devel-1.19.1-16.el9.aarch64.rpm</filename>
          <sum type="sha256">f1157c819cadda856888807b58b89ff95878ae9517a2209fcfe717fd7c6164e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3391</id>
    <title>new packages: openexr</title>
    <issued date="2022-05-17 07:09:14" />
    <updated date="2023-02-02 14:03:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openexr.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3391" id="RLBA-2022:3391" type="self" title="RLBA-2022:3391" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openexr-devel" arch="aarch64" epoch="0" version="3.1.1" release="2.el9" src="openexr-3.1.1-2.el9.src.rpm">
          <filename>openexr-devel-3.1.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0960a0eb8c4fa9f3e0f6c0b0460703e43803b0b0100c06e2132c9fbcdf4d864f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3395</id>
    <title>new packages: openslp</title>
    <issued date="2022-05-17 07:09:26" />
    <updated date="2025-10-17 21:49:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openslp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3395" id="RLBA-2022:3395" type="self" title="RLBA-2022:3395" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openslp-devel" arch="aarch64" epoch="0" version="2.0.0" release="30.el9" src="openslp-2.0.0-30.el9.src.rpm">
          <filename>openslp-devel-2.0.0-30.el9.aarch64.rpm</filename>
          <sum type="sha256">d4dbf4b34a87c42579cedd65a3dae418f132b15f4815c6987da1e75f5ff68dee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3397</id>
    <title>new packages: openwsman</title>
    <issued date="2022-05-17 07:09:34" />
    <updated date="2023-02-02 14:03:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openwsman.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3397" id="RLBA-2022:3397" type="self" title="RLBA-2022:3397" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwsman-devel" arch="aarch64" epoch="0" version="2.6.8" release="22.el9" src="openwsman-2.6.8-22.el9.src.rpm">
          <filename>libwsman-devel-2.6.8-22.el9.aarch64.rpm</filename>
          <sum type="sha256">161d43f437e66b0eb80b1ed089c7641b271a18e74c2273cd939e4b8192ff6a73</sum>
        </package>
        <package name="openwsman-client" arch="aarch64" epoch="0" version="2.6.8" release="22.el9" src="openwsman-2.6.8-22.el9.src.rpm">
          <filename>openwsman-client-2.6.8-22.el9.aarch64.rpm</filename>
          <sum type="sha256">17f0c84fffd0dc94824604848e5e274762da6428fea7dd2be3e1e086eb5f3e45</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3398</id>
    <title>new packages: opus</title>
    <issued date="2022-05-17 07:09:36" />
    <updated date="2025-10-17 21:49:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3398" id="RLBA-2022:3398" type="self" title="RLBA-2022:3398" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opus-devel" arch="aarch64" epoch="0" version="1.3.1" release="10.el9" src="opus-1.3.1-10.el9.src.rpm">
          <filename>opus-devel-1.3.1-10.el9.aarch64.rpm</filename>
          <sum type="sha256">17d9d99dc596934ac25284fe5ddebdd08a7946e2e14ae70c9cc023e876ce55bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3408</id>
    <title>new packages: pangomm</title>
    <issued date="2022-05-17 07:10:10" />
    <updated date="2025-10-17 21:49:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pangomm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3408" id="RLBA-2022:3408" type="self" title="RLBA-2022:3408" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pangomm-devel" arch="aarch64" epoch="0" version="2.46.1" release="1.el9" src="pangomm-2.46.1-1.el9.src.rpm">
          <filename>pangomm-devel-2.46.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">293d63cce96944ad2864d805c6fc865b51d09ecf9760aac23de90512963d9097</sum>
        </package>
        <package name="pangomm-doc" arch="noarch" epoch="0" version="2.46.1" release="1.el9" src="pangomm-2.46.1-1.el9.src.rpm">
          <filename>pangomm-doc-2.46.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">77ecd2fc1fc2c70f00abf9262894aaa56cbb8d2a8938e862109d8873e6e47607</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3588</id>
    <title>new packages: perl-Tk</title>
    <issued date="2022-05-17 07:21:08" />
    <updated date="2023-02-02 14:05:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for perl-Tk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3588" id="RLBA-2022:3588" type="self" title="RLBA-2022:3588" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-Tk-devel" arch="aarch64" epoch="0" version="804.035" release="7.el9" src="perl-Tk-804.035-7.el9.src.rpm">
          <filename>perl-Tk-devel-804.035-7.el9.aarch64.rpm</filename>
          <sum type="sha256">0c7d7f711b51f80edf0449beb0f87dfcfc2e8c206f3514ec03f28882e78d5a62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3638</id>
    <title>new packages: plotutils</title>
    <issued date="2022-05-17 07:24:43" />
    <updated date="2025-10-17 21:50:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for plotutils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3638" id="RLBA-2022:3638" type="self" title="RLBA-2022:3638" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="plotutils-devel" arch="aarch64" epoch="0" version="2.6" release="28.el9" src="plotutils-2.6-28.el9.src.rpm">
          <filename>plotutils-devel-2.6-28.el9.aarch64.rpm</filename>
          <sum type="sha256">68f12d87eed73716c05c8ab4a7892f80491800c377a79bead2e3a4860674e82c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3634</id>
    <title>new packages: plexus-containers</title>
    <issued date="2022-05-17 07:24:28" />
    <updated date="2023-02-02 14:05:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for plexus-containers.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3634" id="RLBA-2022:3634" type="self" title="RLBA-2022:3634" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="plexus-containers-container-default" arch="noarch" epoch="0" version="2.1.0" release="9.el9" src="plexus-containers-2.1.0-9.el9.src.rpm">
          <filename>plexus-containers-container-default-2.1.0-9.el9.noarch.rpm</filename>
          <sum type="sha256">f62fa55d0e98d2db0874892c53483db149a758a2a3d64ae3eee23fafce561023</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3640</id>
    <title>new packages: pmix</title>
    <issued date="2022-05-17 07:24:55" />
    <updated date="2023-02-02 14:05:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pmix.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3640" id="RLBA-2022:3640" type="self" title="RLBA-2022:3640" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pmix-pmi-devel" arch="aarch64" epoch="0" version="3.2.3" release="3.el9" src="pmix-3.2.3-3.el9.src.rpm">
          <filename>pmix-pmi-devel-3.2.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2349158b4a13a48d07f8cfc2a0266b1929dddfe44e0d702ef841f0d4005dc74a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3698</id>
    <title>new packages: python-qt5</title>
    <issued date="2022-05-17 07:28:56" />
    <updated date="2023-02-02 14:05:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-qt5.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3698" id="RLBA-2022:3698" type="self" title="RLBA-2022:3698" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-qt5-devel" arch="aarch64" epoch="0" version="5.15.0" release="10.el9" src="python-qt5-5.15.0-10.el9.src.rpm">
          <filename>python3-qt5-devel-5.15.0-10.el9.aarch64.rpm</filename>
          <sum type="sha256">ca82e05588cef38626da31039c8aa3e4ff0b40779ddcf7273af2b408e3dc680f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3733</id>
    <title>new packages: raptor2</title>
    <issued date="2022-05-17 07:31:47" />
    <updated date="2025-10-17 21:51:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for raptor2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3733" id="RLBA-2022:3733" type="self" title="RLBA-2022:3733" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="raptor2-devel" arch="aarch64" epoch="0" version="2.0.15" release="30.el9" src="raptor2-2.0.15-30.el9.src.rpm">
          <filename>raptor2-devel-2.0.15-30.el9.aarch64.rpm</filename>
          <sum type="sha256">74d2f985d35631ff6803faf444eb6e288ca168f46546601c1a4c33f6d50018ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3734</id>
    <title>new packages: rasqal</title>
    <issued date="2022-05-17 07:31:58" />
    <updated date="2025-10-17 21:51:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for rasqal.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3734" id="RLBA-2022:3734" type="self" title="RLBA-2022:3734" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="rasqal-devel" arch="aarch64" epoch="0" version="0.9.33" release="18.el9" src="rasqal-0.9.33-18.el9.src.rpm">
          <filename>rasqal-devel-0.9.33-18.el9.aarch64.rpm</filename>
          <sum type="sha256">428a21bf2f1fff8485f24f87a97fa75c86b4ab791a55e92bead0240cd15804ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3737</id>
    <title>new packages: redland</title>
    <issued date="2022-05-17 07:32:14" />
    <updated date="2025-10-17 21:51:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for redland.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3737" id="RLBA-2022:3737" type="self" title="RLBA-2022:3737" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="redland-devel" arch="aarch64" epoch="0" version="1.0.17" release="29.el9" src="redland-1.0.17-29.el9.src.rpm">
          <filename>redland-devel-1.0.17-29.el9.aarch64.rpm</filename>
          <sum type="sha256">20b31c37d1699bda5d3f395d3426a4685b2350ee13386e36ac900fc092363eb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3741</id>
    <title>new packages: rpcsvc-proto</title>
    <issued date="2022-05-17 07:32:23" />
    <updated date="2025-10-17 21:51:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for rpcsvc-proto.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3741" id="RLBA-2022:3741" type="self" title="RLBA-2022:3741" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="rpcsvc-proto-devel" arch="aarch64" epoch="0" version="1.4" release="9.el9" src="rpcsvc-proto-1.4-9.el9.src.rpm">
          <filename>rpcsvc-proto-devel-1.4-9.el9.aarch64.rpm</filename>
          <sum type="sha256">37ed8ad94b1358a77c8e5a462e6c53bee433bad7acfd839b5719b78d4d56a324</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3743</id>
    <title>new packages: rrdtool</title>
    <issued date="2022-05-17 07:32:28" />
    <updated date="2025-10-17 21:51:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for rrdtool.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3743" id="RLBA-2022:3743" type="self" title="RLBA-2022:3743" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-rrdtool" arch="aarch64" epoch="0" version="1.7.2" release="21.el9" src="rrdtool-1.7.2-21.el9.src.rpm">
          <filename>python3-rrdtool-1.7.2-21.el9.aarch64.rpm</filename>
          <sum type="sha256">a7133f911318ea09ee531b76219e83019a41c5c7f868a86131e66233707b9a63</sum>
        </package>
        <package name="rrdtool-devel" arch="aarch64" epoch="0" version="1.7.2" release="21.el9" src="rrdtool-1.7.2-21.el9.src.rpm">
          <filename>rrdtool-devel-1.7.2-21.el9.aarch64.rpm</filename>
          <sum type="sha256">aabbc48f264ba66553cce2de743c4d4e1be4ed88498ce5261366148f3acd27d1</sum>
        </package>
        <package name="rrdtool-doc" arch="aarch64" epoch="0" version="1.7.2" release="21.el9" src="rrdtool-1.7.2-21.el9.src.rpm">
          <filename>rrdtool-doc-1.7.2-21.el9.aarch64.rpm</filename>
          <sum type="sha256">a5fdf704101e191ffa054a8c0659695fdf73ec2ba64cae49d4d6115f1c70a657</sum>
        </package>
        <package name="rrdtool-lua" arch="aarch64" epoch="0" version="1.7.2" release="21.el9" src="rrdtool-1.7.2-21.el9.src.rpm">
          <filename>rrdtool-lua-1.7.2-21.el9.aarch64.rpm</filename>
          <sum type="sha256">78632d27a764601c48889a19216b0197eac699d2c9fffa9585c8b174fa51e1f8</sum>
        </package>
        <package name="rrdtool-ruby" arch="aarch64" epoch="0" version="1.7.2" release="21.el9" src="rrdtool-1.7.2-21.el9.src.rpm">
          <filename>rrdtool-ruby-1.7.2-21.el9.aarch64.rpm</filename>
          <sum type="sha256">540a193a16c696318c24c04b5ead8e650ee387255772daf3c590d55569df83f2</sum>
        </package>
        <package name="rrdtool-tcl" arch="aarch64" epoch="0" version="1.7.2" release="21.el9" src="rrdtool-1.7.2-21.el9.src.rpm">
          <filename>rrdtool-tcl-1.7.2-21.el9.aarch64.rpm</filename>
          <sum type="sha256">0af29077c06b40b2448b37cc28fb57663a16c33eac2ee0fc28ca86b2bbd3a3bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3746</id>
    <title>new packages: rubygem-mysql2</title>
    <issued date="2022-05-17 07:32:38" />
    <updated date="2025-10-17 21:51:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for rubygem-mysql2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2069167" id="2069167" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3746" id="RLBA-2022:3746" type="self" title="RLBA-2022:3746" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="rubygem-mysql2-doc" arch="noarch" epoch="0" version="0.5.3" release="11.el9_0" src="rubygem-mysql2-0.5.3-11.el9_0.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.3-11.el9_0.noarch.rpm</filename>
          <sum type="sha256">b07fd77158220c7e2c1dde123acaa399f89667ff061f4855c1331b4d28007a40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3747</id>
    <title>new packages: rubygem-pg</title>
    <issued date="2022-05-17 07:32:40" />
    <updated date="2025-10-17 21:51:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for rubygem-pg.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3747" id="RLBA-2022:3747" type="self" title="RLBA-2022:3747" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="rubygem-pg-doc" arch="noarch" epoch="0" version="1.2.3" release="7.el9" src="rubygem-pg-1.2.3-7.el9.src.rpm">
          <filename>rubygem-pg-doc-1.2.3-7.el9.noarch.rpm</filename>
          <sum type="sha256">2e5c03877e34fe8154a2873a62f11071a415beb15844139c914e9053b6e78ad0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3758</id>
    <title>new packages: sblim-cmpi-devel</title>
    <issued date="2022-05-17 07:33:21" />
    <updated date="2025-10-17 21:51:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sblim-cmpi-devel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3758" id="RLBA-2022:3758" type="self" title="RLBA-2022:3758" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sblim-cmpi-devel" arch="aarch64" epoch="0" version="2.0.3" release="24.el9" src="sblim-cmpi-devel-2.0.3-24.el9.src.rpm">
          <filename>sblim-cmpi-devel-2.0.3-24.el9.aarch64.rpm</filename>
          <sum type="sha256">1ecef6fae6c957c6363dc217ff318e3d2d987a8326d65d98d8102cbf265938f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3761</id>
    <title>new packages: sblim-sfcc</title>
    <issued date="2022-05-17 07:33:32" />
    <updated date="2025-10-17 21:51:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sblim-sfcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3761" id="RLBA-2022:3761" type="self" title="RLBA-2022:3761" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sblim-sfcc-devel" arch="aarch64" epoch="0" version="2.2.8" release="18.el9" src="sblim-sfcc-2.2.8-18.el9.src.rpm">
          <filename>sblim-sfcc-devel-2.2.8-18.el9.aarch64.rpm</filename>
          <sum type="sha256">97231c0a3b009c2e0e4beb1e7a414b5e844aabe5060a5bcc1017561353e78956</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3767</id>
    <title>new packages: sendmail</title>
    <issued date="2022-05-17 07:33:50" />
    <updated date="2023-02-02 14:06:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sendmail.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3767" id="RLBA-2022:3767" type="self" title="RLBA-2022:3767" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sendmail-milter" arch="aarch64" epoch="0" version="8.16.1" release="10.el9" src="sendmail-8.16.1-10.el9.src.rpm">
          <filename>sendmail-milter-8.16.1-10.el9.aarch64.rpm</filename>
          <sum type="sha256">7321aa21682878b531f457b44fa756ac1e829ec3a9df5b5af1ad428d801fbccf</sum>
        </package>
        <package name="sendmail-milter-devel" arch="aarch64" epoch="0" version="8.16.1" release="10.el9" src="sendmail-8.16.1-10.el9.src.rpm">
          <filename>sendmail-milter-devel-8.16.1-10.el9.aarch64.rpm</filename>
          <sum type="sha256">583d16a358a0fe6f4e4b1f282aaad4c920901420763cd40b20a8adfef59715af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3785</id>
    <title>new packages: sombok</title>
    <issued date="2022-05-17 07:34:59" />
    <updated date="2025-10-17 21:51:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sombok.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3785" id="RLBA-2022:3785" type="self" title="RLBA-2022:3785" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sombok-devel" arch="aarch64" epoch="0" version="2.4.0" release="16.el9" src="sombok-2.4.0-16.el9.src.rpm">
          <filename>sombok-devel-2.4.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">41180afa47fe4342a3022ce00aab3d943a653a220bc70f74ed2b55978d89cf9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3787</id>
    <title>new packages: soundtouch</title>
    <issued date="2022-05-17 07:35:07" />
    <updated date="2025-10-17 21:51:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for soundtouch.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3787" id="RLBA-2022:3787" type="self" title="RLBA-2022:3787" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="soundtouch-devel" arch="aarch64" epoch="0" version="2.1.1" release="8.el9" src="soundtouch-2.1.1-8.el9.src.rpm">
          <filename>soundtouch-devel-2.1.1-8.el9.aarch64.rpm</filename>
          <sum type="sha256">4c27cfa3e079cb79713a6415375f770e2f368f77394c13b7e63cfd91cf171ab7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3789</id>
    <title>new packages: speech-dispatcher</title>
    <issued date="2022-05-17 07:35:25" />
    <updated date="2025-10-17 21:51:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for speech-dispatcher.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3789" id="RLBA-2022:3789" type="self" title="RLBA-2022:3789" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="speech-dispatcher-devel" arch="aarch64" epoch="0" version="0.10.2" release="4.el9" src="speech-dispatcher-0.10.2-4.el9.src.rpm">
          <filename>speech-dispatcher-devel-0.10.2-4.el9.aarch64.rpm</filename>
          <sum type="sha256">77280940d55b701ccc304b4e048d713a5a25c54d356e68e802b82a551b93f6a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3791</id>
    <title>new packages: speexdsp</title>
    <issued date="2022-05-17 07:35:30" />
    <updated date="2025-10-17 21:51:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for speexdsp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3791" id="RLBA-2022:3791" type="self" title="RLBA-2022:3791" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="speexdsp-devel" arch="aarch64" epoch="0" version="1.2.0" release="5.el9" src="speexdsp-1.2.0-5.el9.src.rpm">
          <filename>speexdsp-devel-1.2.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">32edbaa82c3249f3ed611ba94b6a439c5123265d6623f0c71f2ec976b5a4af50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3803</id>
    <title>new packages: taglib</title>
    <issued date="2022-05-17 07:36:23" />
    <updated date="2025-10-17 21:51:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for taglib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3803" id="RLBA-2022:3803" type="self" title="RLBA-2022:3803" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="taglib-devel" arch="aarch64" epoch="0" version="1.12" release="6.el9" src="taglib-1.12-6.el9.src.rpm">
          <filename>taglib-devel-1.12-6.el9.aarch64.rpm</filename>
          <sum type="sha256">302edef8009de60952bbea22d4192bc70db6406445db778ffc8a4b9921def0d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3809</id>
    <title>new packages: tesseract</title>
    <issued date="2022-05-17 07:36:51" />
    <updated date="2025-10-17 21:51:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tesseract.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3809" id="RLBA-2022:3809" type="self" title="RLBA-2022:3809" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tesseract-devel" arch="aarch64" epoch="0" version="4.1.1" release="7.el9" src="tesseract-4.1.1-7.el9.src.rpm">
          <filename>tesseract-devel-4.1.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">0ad2849d39fa92cf638a859d1ecebb76877de8035284022869380dfb3267b257</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3816</id>
    <title>new packages: tokyocabinet</title>
    <issued date="2022-05-17 07:37:25" />
    <updated date="2025-10-17 21:51:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tokyocabinet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3816" id="RLBA-2022:3816" type="self" title="RLBA-2022:3816" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tokyocabinet-devel" arch="aarch64" epoch="0" version="1.4.48" release="19.el9" src="tokyocabinet-1.4.48-19.el9.src.rpm">
          <filename>tokyocabinet-devel-1.4.48-19.el9.aarch64.rpm</filename>
          <sum type="sha256">49619eadeee953dea0a11145c4186f8a7d4126a23091464fda202fe0fe0c6584</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3818</id>
    <title>new packages: tpm2-abrmd</title>
    <issued date="2022-05-17 07:37:30" />
    <updated date="2023-02-02 14:06:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tpm2-abrmd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3818" id="RLBA-2022:3818" type="self" title="RLBA-2022:3818" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tpm2-abrmd-devel" arch="aarch64" epoch="0" version="2.4.0" release="3.el9" src="tpm2-abrmd-2.4.0-3.el9.src.rpm">
          <filename>tpm2-abrmd-devel-2.4.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">eb34a28ee7586e46490a8398bc2a591c4a8a9cc00b53af622d554e6c2a22d34f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3824</id>
    <title>new packages: twolame</title>
    <issued date="2022-05-17 07:38:34" />
    <updated date="2025-10-17 21:51:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for twolame.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3824" id="RLBA-2022:3824" type="self" title="RLBA-2022:3824" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="twolame-devel" arch="aarch64" epoch="0" version="0.3.13" release="19.el9" src="twolame-0.3.13-19.el9.src.rpm">
          <filename>twolame-devel-0.3.13-19.el9.aarch64.rpm</filename>
          <sum type="sha256">86ba074c8dabc035c21e7e9842ea4ab318ad15647596fe8782795937a0ce4d98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3829</id>
    <title>new packages: unixODBC</title>
    <issued date="2022-05-17 07:38:45" />
    <updated date="2025-10-17 21:51:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for unixODBC.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3829" id="RLBA-2022:3829" type="self" title="RLBA-2022:3829" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unixODBC-devel" arch="aarch64" epoch="0" version="2.3.9" release="4.el9" src="unixODBC-2.3.9-4.el9.src.rpm">
          <filename>unixODBC-devel-2.3.9-4.el9.aarch64.rpm</filename>
          <sum type="sha256">8da8d57da18f1910dde607b2fdab4d044c6d1427c238396cd55f20348449b0a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3827</id>
    <title>new packages: unicode-ucd</title>
    <issued date="2022-05-17 07:38:41" />
    <updated date="2025-10-17 21:51:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for unicode-ucd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3827" id="RLBA-2022:3827" type="self" title="RLBA-2022:3827" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unicode-ucd-unihan" arch="noarch" epoch="0" version="13.0.0" release="5.el9" src="unicode-ucd-13.0.0-5.el9.src.rpm">
          <filename>unicode-ucd-unihan-13.0.0-5.el9.noarch.rpm</filename>
          <sum type="sha256">55ccfa8dff19859c50a3a2a39b7f88ad262f218356e761df412d5a80a9d26d06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3830</id>
    <title>new packages: upower</title>
    <issued date="2022-05-17 07:38:52" />
    <updated date="2025-10-17 21:51:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for upower.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3830" id="RLBA-2022:3830" type="self" title="RLBA-2022:3830" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="upower-devel" arch="aarch64" epoch="0" version="0.99.13" release="2.el9" src="upower-0.99.13-2.el9.src.rpm">
          <filename>upower-devel-0.99.13-2.el9.aarch64.rpm</filename>
          <sum type="sha256">dbeeca06e85c88a10741cbb5ea3c5eba98a476147f9fc8c8267b796106396307</sum>
        </package>
        <package name="upower-devel-docs" arch="noarch" epoch="0" version="0.99.13" release="2.el9" src="upower-0.99.13-2.el9.src.rpm">
          <filename>upower-devel-docs-0.99.13-2.el9.noarch.rpm</filename>
          <sum type="sha256">e52346e002217a1fac455447bc87e43ef725a24ffc529e881e29ff87f6281c32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3833</id>
    <title>new packages: urw-base35-fonts</title>
    <issued date="2022-05-17 07:39:02" />
    <updated date="2025-10-17 21:51:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for urw-base35-fonts.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3833" id="RLBA-2022:3833" type="self" title="RLBA-2022:3833" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="urw-base35-fonts-devel" arch="noarch" epoch="0" version="20200910" release="6.el9" src="urw-base35-fonts-20200910-6.el9.src.rpm">
          <filename>urw-base35-fonts-devel-20200910-6.el9.noarch.rpm</filename>
          <sum type="sha256">e011410c2596b918208fc51d1e1c233835c4f9dcb9e0d04259fb5d9fa1e33338</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3834</id>
    <title>new packages: utf8proc</title>
    <issued date="2022-05-17 07:39:04" />
    <updated date="2025-10-17 21:51:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for utf8proc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3834" id="RLBA-2022:3834" type="self" title="RLBA-2022:3834" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="utf8proc-devel" arch="aarch64" epoch="0" version="2.6.1" release="4.el9" src="utf8proc-2.6.1-4.el9.src.rpm">
          <filename>utf8proc-devel-2.6.1-4.el9.aarch64.rpm</filename>
          <sum type="sha256">24982597f7891c686173f5f8bae25aa579339c654d3da9c34308542af98ddd97</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3835</id>
    <title>new packages: v4l-utils</title>
    <issued date="2022-05-17 07:39:07" />
    <updated date="2025-10-17 21:51:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for v4l-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3835" id="RLBA-2022:3835" type="self" title="RLBA-2022:3835" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libv4l-devel" arch="aarch64" epoch="0" version="1.20.0" release="5.el9" src="v4l-utils-1.20.0-5.el9.src.rpm">
          <filename>libv4l-devel-1.20.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">885378d8783da55b5a7a64deb5745f61d5b89b7ac9911faecc4b9205364309bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3839</id>
    <title>new packages: volume_key</title>
    <issued date="2022-05-17 07:39:32" />
    <updated date="2023-02-02 14:06:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for volume_key.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3839" id="RLBA-2022:3839" type="self" title="RLBA-2022:3839" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="volume_key-devel" arch="aarch64" epoch="0" version="0.3.12" release="15.el9" src="volume_key-0.3.12-15.el9.src.rpm">
          <filename>volume_key-devel-0.3.12-15.el9.aarch64.rpm</filename>
          <sum type="sha256">77459c33be602c5c0c4d41a633223cf2f9d0acf6f4862e49433638e09b04ba8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3840</id>
    <title>new packages: vte291</title>
    <issued date="2022-05-17 07:39:40" />
    <updated date="2025-10-17 21:51:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for vte291.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3840" id="RLBA-2022:3840" type="self" title="RLBA-2022:3840" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="vte291-devel" arch="aarch64" epoch="0" version="0.64.2" release="2.el9" src="vte291-0.64.2-2.el9.src.rpm">
          <filename>vte291-devel-0.64.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1f81db8ce645649029ea68927b631153796ef48b1326663fba8de56255403353</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3853</id>
    <title>new packages: xapian-core</title>
    <issued date="2022-05-17 07:40:30" />
    <updated date="2025-10-17 21:51:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xapian-core.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3853" id="RLBA-2022:3853" type="self" title="RLBA-2022:3853" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xapian-core-devel" arch="aarch64" epoch="0" version="1.4.18" release="5.el9" src="xapian-core-1.4.18-5.el9.src.rpm">
          <filename>xapian-core-devel-1.4.18-5.el9.aarch64.rpm</filename>
          <sum type="sha256">1210e5f81da2384353d1c161c7b9159f5d3b94ed52f64a3ac03cfe6ded62caba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3854</id>
    <title>new packages: xcb-util</title>
    <issued date="2022-05-17 07:40:34" />
    <updated date="2025-10-17 21:51:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xcb-util.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3854" id="RLBA-2022:3854" type="self" title="RLBA-2022:3854" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xcb-util-devel" arch="aarch64" epoch="0" version="0.4.0" release="19.el9" src="xcb-util-0.4.0-19.el9.src.rpm">
          <filename>xcb-util-devel-0.4.0-19.el9.aarch64.rpm</filename>
          <sum type="sha256">656b866a70e958d066e4b3bbe4d05d55da61350bc864296892c180f09666d5c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3855</id>
    <title>new packages: xcb-util-image</title>
    <issued date="2022-05-17 07:40:37" />
    <updated date="2023-02-02 14:06:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xcb-util-image.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3855" id="RLBA-2022:3855" type="self" title="RLBA-2022:3855" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xcb-util-image-devel" arch="aarch64" epoch="0" version="0.4.0" release="19.el9" src="xcb-util-image-0.4.0-19.el9.src.rpm">
          <filename>xcb-util-image-devel-0.4.0-19.el9.aarch64.rpm</filename>
          <sum type="sha256">6ef21f61847dad6271273a9d4cfab190a86bca557e97b4d04162746143d9ef39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3856</id>
    <title>new packages: xcb-util-keysyms</title>
    <issued date="2022-05-17 07:40:39" />
    <updated date="2025-10-17 21:51:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xcb-util-keysyms.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3856" id="RLBA-2022:3856" type="self" title="RLBA-2022:3856" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xcb-util-keysyms-devel" arch="aarch64" epoch="0" version="0.4.0" release="17.el9" src="xcb-util-keysyms-0.4.0-17.el9.src.rpm">
          <filename>xcb-util-keysyms-devel-0.4.0-17.el9.aarch64.rpm</filename>
          <sum type="sha256">d70ca652795f00988aa67b41d9184f2351e4200ffd8b7854c8178910807bbc84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3857</id>
    <title>new packages: xcb-util-renderutil</title>
    <issued date="2022-05-17 07:40:41" />
    <updated date="2023-02-02 14:06:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xcb-util-renderutil.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3857" id="RLBA-2022:3857" type="self" title="RLBA-2022:3857" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xcb-util-renderutil-devel" arch="aarch64" epoch="0" version="0.3.9" release="20.el9" src="xcb-util-renderutil-0.3.9-20.el9.src.rpm">
          <filename>xcb-util-renderutil-devel-0.3.9-20.el9.aarch64.rpm</filename>
          <sum type="sha256">82f712eef408d9a7cf23df8c82c98359320dd902793f5df71331fe0fbd425b8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3858</id>
    <title>new packages: xcb-util-wm</title>
    <issued date="2022-05-17 07:40:55" />
    <updated date="2025-10-17 21:51:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xcb-util-wm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3858" id="RLBA-2022:3858" type="self" title="RLBA-2022:3858" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xcb-util-wm-devel" arch="aarch64" epoch="0" version="0.4.1" release="22.el9" src="xcb-util-wm-0.4.1-22.el9.src.rpm">
          <filename>xcb-util-wm-devel-0.4.1-22.el9.aarch64.rpm</filename>
          <sum type="sha256">8cb3412be89c130244c54202bfe3a86a1a8f5a97730a401f3bf4f1b7174ea1b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3869</id>
    <title>new packages: xmlsec1</title>
    <issued date="2022-05-17 07:42:02" />
    <updated date="2023-02-02 14:06:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xmlsec1.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3869" id="RLBA-2022:3869" type="self" title="RLBA-2022:3869" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xmlsec1-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">173bf7b0b92fd87a1ba2a9de8cb7393970990e79024ccc4985b4588b28358132</sum>
        </package>
        <package name="xmlsec1-gcrypt" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gcrypt-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">bbcf0e81746775754d83c3f06b59b85dcede2324085a8f487a9acbb9b3f52ad7</sum>
        </package>
        <package name="xmlsec1-gnutls" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gnutls-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">76784a298ad5c53ebca60c66969ad00049d793cf214c60d2f2bb9ce588221485</sum>
        </package>
        <package name="xmlsec1-gnutls-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-gnutls-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">23867d3938ab3d16a854caaee7a20b8226e245bcf48126d553704d612c3c5086</sum>
        </package>
        <package name="xmlsec1-openssl-devel" arch="aarch64" epoch="0" version="1.2.29" release="9.el9" src="xmlsec1-1.2.29-9.el9.src.rpm">
          <filename>xmlsec1-openssl-devel-1.2.29-9.el9.aarch64.rpm</filename>
          <sum type="sha256">732db3fe3592e36b933dcab625764bb6197e4a26be755f2c026fe13b6ee0fc66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3872</id>
    <title>new packages: xorg-x11-drv-libinput</title>
    <issued date="2022-05-17 07:42:09" />
    <updated date="2023-02-02 14:06:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xorg-x11-drv-libinput.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3872" id="RLBA-2022:3872" type="self" title="RLBA-2022:3872" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-drv-libinput-devel" arch="aarch64" epoch="0" version="1.0.1" release="3.el9" src="xorg-x11-drv-libinput-1.0.1-3.el9.src.rpm">
          <filename>xorg-x11-drv-libinput-devel-1.0.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">57f5bbd02238f327d96185695b084881968f94e63e1c409a8a6c6dfd514adfac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3883</id>
    <title>new packages: yelp</title>
    <issued date="2022-05-17 07:43:09" />
    <updated date="2023-02-02 14:06:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for yelp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3883" id="RLBA-2022:3883" type="self" title="RLBA-2022:3883" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="yelp-devel" arch="aarch64" epoch="2" version="40.3" release="2.el9" src="yelp-40.3-2.el9.src.rpm">
          <filename>yelp-devel-40.3-2.el9.aarch64.rpm</filename>
          <sum type="sha256">733fae43d7ad85ad322ebd461702699a0ea7795468bef4e14e4791ebb82ac96e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3924</id>
    <title>new packages: libsepol</title>
    <issued date="2022-05-17 07:47:23" />
    <updated date="2023-02-02 14:06:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsepol.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003547" id="2003547" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2022360" id="2022360" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3924" id="RLBA-2022:3924" type="self" title="RLBA-2022:3924" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsepol-static" arch="aarch64" epoch="0" version="3.3" release="2.el9" src="libsepol-3.3-2.el9.src.rpm">
          <filename>libsepol-static-3.3-2.el9.aarch64.rpm</filename>
          <sum type="sha256">97166fea2c3fe6a45b0ef830c615ca6047e79f074a8d6ffd2d2ade3a9c5c3683</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4119</id>
    <title>new packages: file</title>
    <issued date="2022-05-17 08:04:13" />
    <updated date="2023-02-02 14:06:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for file.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4119" id="RLBA-2022:4119" type="self" title="RLBA-2022:4119" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="file-devel" arch="aarch64" epoch="0" version="5.39" release="8.el9" src="file-5.39-8.el9.src.rpm">
          <filename>file-devel-5.39-8.el9.aarch64.rpm</filename>
          <sum type="sha256">b457e89049265c840a01d608c6c7c6cc3a6dcf171b087849f2d26eac2c288dbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4571</id>
    <title>new packages: inkscape-flatpak module</title>
    <issued date="2022-05-17 08:34:02" />
    <updated date="2023-02-02 14:07:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsigc++20, gc, poppler, inkscape, poppler-data, python-scour, libwpd, librevenge, libwpg, pangomm, python-lxml, potrace, gtkmm30, double-conversion, gtkspell3, python-appdirs, numpy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4571" id="RLBA-2022:4571" type="self" title="RLBA-2022:4571" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="double-conversion-devel" arch="aarch64" epoch="0" version="3.1.5" release="6.el9" src="double-conversion-3.1.5-6.el9.src.rpm">
          <filename>double-conversion-devel-3.1.5-6.el9.aarch64.rpm</filename>
          <sum type="sha256">f08034f3e663e69e81b440998e46e515ab5e2cca4bdbd2cb1467daa9d0405c55</sum>
        </package>
        <package name="gc-devel" arch="aarch64" epoch="0" version="8.0.4" release="7.el9" src="gc-8.0.4-7.el9.src.rpm">
          <filename>gc-devel-8.0.4-7.el9.aarch64.rpm</filename>
          <sum type="sha256">01420ab8f632ae57dfce1bcdcedeaef0d2f709338713c3f1fb4d2d74e0d373c2</sum>
        </package>
        <package name="gtkmm30-devel" arch="aarch64" epoch="0" version="3.24.5" release="1.el9" src="gtkmm30-3.24.5-1.el9.src.rpm">
          <filename>gtkmm30-devel-3.24.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b48a541a65de3092b2828261b69f139297e04209bd3f87e8b575f147ea527d49</sum>
        </package>
        <package name="gtkmm30-doc" arch="noarch" epoch="0" version="3.24.5" release="1.el9" src="gtkmm30-3.24.5-1.el9.src.rpm">
          <filename>gtkmm30-doc-3.24.5-1.el9.noarch.rpm</filename>
          <sum type="sha256">abe9d8f8b5cc7a7d8cfa3e70e35cf283930d6cdf18dd0c8254d86cc7a06ed99c</sum>
        </package>
        <package name="gtkspell3" arch="aarch64" epoch="0" version="3.0.10" release="9.el9" src="gtkspell3-3.0.10-9.el9.src.rpm">
          <filename>gtkspell3-3.0.10-9.el9.aarch64.rpm</filename>
          <sum type="sha256">a11b324e2af3998cbb891a215106f455d5640f9083cd1f2c431f77289a9fd1ff</sum>
        </package>
        <package name="gtkspell3-devel" arch="aarch64" epoch="0" version="3.0.10" release="9.el9" src="gtkspell3-3.0.10-9.el9.src.rpm">
          <filename>gtkspell3-devel-3.0.10-9.el9.aarch64.rpm</filename>
          <sum type="sha256">3eafdee78b67ee972a7688baec3b54acf6f67c812a09e7c0bd9246163e757440</sum>
        </package>
        <package name="librevenge-devel" arch="aarch64" epoch="0" version="0.0.4" release="22.el9" src="librevenge-0.0.4-22.el9.src.rpm">
          <filename>librevenge-devel-0.0.4-22.el9.aarch64.rpm</filename>
          <sum type="sha256">c2d197beba2cb75239af5cbe9bca70db2f05c9d9314891e3f1d5343dcc70bfc4</sum>
        </package>
        <package name="libsigc++20-devel" arch="aarch64" epoch="0" version="2.10.7" release="2.el9" src="libsigc++20-2.10.7-2.el9.src.rpm">
          <filename>libsigc++20-devel-2.10.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cc4915b8c5d5678d0f595fed564f4991801594ed670046c7af84d7db666dac22</sum>
        </package>
        <package name="libsigc++20-doc" arch="noarch" epoch="0" version="2.10.7" release="2.el9" src="libsigc++20-2.10.7-2.el9.src.rpm">
          <filename>libsigc++20-doc-2.10.7-2.el9.noarch.rpm</filename>
          <sum type="sha256">29487250f3f83163d9b2b19379dc1437e3ad90db099286cb698d375effee094b</sum>
        </package>
        <package name="libwpd-devel" arch="aarch64" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-devel-0.10.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">d913a91f5e225b883aa517d8b05d4e8e411a755d6391336bc267b51ce40204de</sum>
        </package>
        <package name="libwpd-doc" arch="noarch" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-doc-0.10.3-10.el9.noarch.rpm</filename>
          <sum type="sha256">cf1cafa034c873ca0728f3d265a585a12f2fe820388cf525b9407d7a7ff7d3b4</sum>
        </package>
        <package name="libwpg-devel" arch="aarch64" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-devel-0.3.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ea1d595370cb449e69909f4873f3b2767b4fff7395c2cbfee6318fb652c0c326</sum>
        </package>
        <package name="libwpg-doc" arch="noarch" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-doc-0.3.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">612575a87c0c960172ba28ba334437243e5e8df6ae17b42d55d999fe31dac0a0</sum>
        </package>
        <package name="pangomm-devel" arch="aarch64" epoch="0" version="2.46.1" release="1.el9" src="pangomm-2.46.1-1.el9.src.rpm">
          <filename>pangomm-devel-2.46.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">293d63cce96944ad2864d805c6fc865b51d09ecf9760aac23de90512963d9097</sum>
        </package>
        <package name="pangomm-doc" arch="noarch" epoch="0" version="2.46.1" release="1.el9" src="pangomm-2.46.1-1.el9.src.rpm">
          <filename>pangomm-doc-2.46.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">77ecd2fc1fc2c70f00abf9262894aaa56cbb8d2a8938e862109d8873e6e47607</sum>
        </package>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">8c33feaa0ed6d4f579e98a6be7ebe9f2f2558dc16dd1f4b2505ab1db59931053</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">3071715dfce440384820f1284a119ea675a510c5c3303a1a2bcec844bf482b83</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">f1cf4baf778a2d7c511bee376e17bde67c9b936671b2440b98992edc37020fea</sum>
        </package>
        <package name="poppler-qt5" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-qt5-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">43b0282d32194c1e29f015f20044cb1214fa43802dac4da2086b0de705ba1196</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">57cb69117721a44abfb8ebec5742eec98200053478924583ff2425487d5a5528</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:4771</id>
    <title>Important: postgresql security update</title>
    <issued date="2022-05-30 07:19:50" />
    <updated date="2023-02-02 14:07:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (13.7).

Security Fix(es):

* postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1552" id="CVE-2022-1552" type="cve" title="CVE-2022-1552" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2081126" id="2081126" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:4771" id="RLSA-2022:4771" type="self" title="RLSA-2022:4771" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.7" release="1.el9_0" src="postgresql-13.7-1.el9_0.src.rpm">
          <filename>postgresql-private-devel-13.7-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5412d0c70f4ca556f5d06ab5e6850891b84e021bd9ea0a208dae5d83cee19450</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.7" release="1.el9_0" src="postgresql-13.7-1.el9_0.src.rpm">
          <filename>postgresql-server-devel-13.7-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9921e62b1a009972d9f734abd6dbc9d409a9a4f047a42825130cafd16c7cc202</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.7" release="1.el9_0" src="postgresql-13.7-1.el9_0.src.rpm">
          <filename>postgresql-test-13.7-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c5279d6b77167cec36498ea11d3bbad413718c3c33feb4bdc523b42d800bc6f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:5257</id>
    <title>Moderate: libinput security update</title>
    <issued date="2022-06-28 08:28:40" />
    <updated date="2023-02-02 14:07:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libinput.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.

Security Fix(es):

* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1215" id="CVE-2022-1215" type="cve" title="CVE-2022-1215" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074952" id="2074952" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:5257" id="RLSA-2022:5257" type="self" title="RLSA-2022:5257" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libinput-devel" arch="aarch64" epoch="0" version="1.19.3" release="2.el9_0" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-devel-1.19.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">94f81435a466bfcbb0c450b599f30f5f02ee7d3de8cf3ef467d15cf0b823f1b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:5948</id>
    <title>Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 09:35:35" />
    <updated date="2023-02-02 14:07:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mysql-selinux, mariadb, galera.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 

The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5).

Security Fix(es):

* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)

* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)

* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)

* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)

* mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052)

* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)

* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)

* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)

* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)

* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)

* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)

* mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382)

* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)

* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)

* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)

* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)

* mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444)

* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)

* mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446)

* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)

* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)

* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)

* mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451)

* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)

* mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455)

* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)

* mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457)

* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)

* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)

* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)

* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)

* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)

* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)

* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)

* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)

* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46659" id="CVE-2021-46659" type="cve" title="CVE-2021-46659" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46661" id="CVE-2021-46661" type="cve" title="CVE-2021-46661" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46663" id="CVE-2021-46663" type="cve" title="CVE-2021-46663" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46664" id="CVE-2021-46664" type="cve" title="CVE-2021-46664" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46665" id="CVE-2021-46665" type="cve" title="CVE-2021-46665" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46668" id="CVE-2021-46668" type="cve" title="CVE-2021-46668" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46669" id="CVE-2021-46669" type="cve" title="CVE-2021-46669" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21595" id="CVE-2022-21595" type="cve" title="CVE-2022-21595" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24048" id="CVE-2022-24048" type="cve" title="CVE-2022-24048" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24050" id="CVE-2022-24050" type="cve" title="CVE-2022-24050" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24051" id="CVE-2022-24051" type="cve" title="CVE-2022-24051" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24052" id="CVE-2022-24052" type="cve" title="CVE-2022-24052" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27376" id="CVE-2022-27376" type="cve" title="CVE-2022-27376" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27377" id="CVE-2022-27377" type="cve" title="CVE-2022-27377" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27378" id="CVE-2022-27378" type="cve" title="CVE-2022-27378" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27379" id="CVE-2022-27379" type="cve" title="CVE-2022-27379" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27380" id="CVE-2022-27380" type="cve" title="CVE-2022-27380" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27381" id="CVE-2022-27381" type="cve" title="CVE-2022-27381" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27382" id="CVE-2022-27382" type="cve" title="CVE-2022-27382" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27383" id="CVE-2022-27383" type="cve" title="CVE-2022-27383" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27384" id="CVE-2022-27384" type="cve" title="CVE-2022-27384" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27386" id="CVE-2022-27386" type="cve" title="CVE-2022-27386" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27387" id="CVE-2022-27387" type="cve" title="CVE-2022-27387" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27444" id="CVE-2022-27444" type="cve" title="CVE-2022-27444" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27445" id="CVE-2022-27445" type="cve" title="CVE-2022-27445" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27446" id="CVE-2022-27446" type="cve" title="CVE-2022-27446" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27447" id="CVE-2022-27447" type="cve" title="CVE-2022-27447" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27448" id="CVE-2022-27448" type="cve" title="CVE-2022-27448" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27449" id="CVE-2022-27449" type="cve" title="CVE-2022-27449" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27451" id="CVE-2022-27451" type="cve" title="CVE-2022-27451" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27452" id="CVE-2022-27452" type="cve" title="CVE-2022-27452" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27455" id="CVE-2022-27455" type="cve" title="CVE-2022-27455" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27456" id="CVE-2022-27456" type="cve" title="CVE-2022-27456" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27457" id="CVE-2022-27457" type="cve" title="CVE-2022-27457" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27458" id="CVE-2022-27458" type="cve" title="CVE-2022-27458" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31622" id="CVE-2022-31622" type="cve" title="CVE-2022-31622" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31623" id="CVE-2022-31623" type="cve" title="CVE-2022-31623" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2049302" id="2049302" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050017" id="2050017" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050022" id="2050022" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050024" id="2050024" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050026" id="2050026" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050032" id="2050032" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050034" id="2050034" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068211" id="2068211" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068233" id="2068233" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068234" id="2068234" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2069833" id="2069833" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074817" id="2074817" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074947" id="2074947" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074949" id="2074949" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074951" id="2074951" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074966" id="2074966" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074981" id="2074981" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074987" id="2074987" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074996" id="2074996" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074999" id="2074999" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075005" id="2075005" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075006" id="2075006" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075691" id="2075691" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075692" id="2075692" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075693" id="2075693" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075694" id="2075694" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075695" id="2075695" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075696" id="2075696" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075697" id="2075697" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075699" id="2075699" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075700" id="2075700" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075701" id="2075701" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2076144" id="2076144" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2076145" id="2076145" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092354" id="2092354" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092360" id="2092360" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096271" id="2096271" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096274" id="2096274" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096276" id="2096276" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096277" id="2096277" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:5948" id="RLSA-2022:5948" type="self" title="RLSA-2022:5948" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mariadb-devel" arch="aarch64" epoch="3" version="10.5.16" release="2.el9_0" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-devel-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">4182ec0539c96f346a00eb4b6b6b3a7b3062240e3d70b613d513238771f54ef9</sum>
        </package>
        <package name="mariadb-embedded-devel" arch="aarch64" epoch="3" version="10.5.16" release="2.el9_0" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-devel-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">43f75a00920b3ae1b7f8546bb9ce00012f5c839b635bba4d4c0d2308d9223739</sum>
        </package>
        <package name="mariadb-test" arch="aarch64" epoch="3" version="10.5.16" release="2.el9_0" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-test-10.5.16-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">390578a5632baab76aab67d2168878e627ba5d836bc30e86a0c7b06b612791b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:5962</id>
    <title>yajl bug fix and enhancement update</title>
    <issued date="2022-08-09 09:38:33" />
    <updated date="2023-02-02 14:07:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for yajl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

* Regular rebuild for 9.0.0.2 (QR) - yajl (BZ#2111628)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2111628" id="2111628" type="bugzilla" title="* Regular rebuild for 9.0.0.2 (QR) - yajl" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:5962" id="RLBA-2022:5962" type="self" title="RLBA-2022:5962" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="21.el9" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">5bff3a63b4bd5036cc6578b512181be1062df6c7beb303fd578cb7259b744fb7</sum>
        </package>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="21.el9_0" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9_0.aarch64.rpm</filename>
          <sum type="sha256">eee07bb8cd6d1e17ecc1cf6dfdddacb75c9b22ee12b05ffc6526701047e738ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:6585</id>
    <title>Moderate: ruby security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 11:36:12" />
    <updated date="2023-02-02 14:07:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for ruby.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428)

Security Fix(es):

* Ruby: Double free in Regexp compilation (CVE-2022-28738)

* Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28738" id="CVE-2022-28738" type="cve" title="CVE-2022-28738" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075685" id="2075685" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075687" id="2075687" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109428" id="2109428" type="bugzilla" title="The following packages have been upgraded to a later upstream version: ruby (3.0.4)." />
      <reference href="https://errata.rockylinux.org/RLSA-2022:6585" id="RLSA-2022:6585" type="self" title="RLSA-2022:6585" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ruby-doc" arch="noarch" epoch="0" version="3.0.4" release="160.el9_0" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-doc-3.0.4-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">c506029c15725b138655537c19ab15429c8b24a61b919f5088ac93c5efdc1645</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:6590</id>
    <title>Moderate: mysql security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 11:37:11" />
    <updated date="2023-02-02 14:07:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mysql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589)

Security Fix(es):

* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479)

* mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413)

* mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415)

* mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423)

* mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444)

* mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)

* mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454)

* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455)

* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457)

* mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460)

* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569)

* mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515)

* mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539)

* mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534)

* mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547)

* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Default logrotate set to wrong log file (BZ#2122592)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21412" id="CVE-2022-21412" type="cve" title="CVE-2022-21412" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21413" id="CVE-2022-21413" type="cve" title="CVE-2022-21413" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21414" id="CVE-2022-21414" type="cve" title="CVE-2022-21414" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21415" id="CVE-2022-21415" type="cve" title="CVE-2022-21415" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21417" id="CVE-2022-21417" type="cve" title="CVE-2022-21417" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21418" id="CVE-2022-21418" type="cve" title="CVE-2022-21418" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21423" id="CVE-2022-21423" type="cve" title="CVE-2022-21423" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21425" id="CVE-2022-21425" type="cve" title="CVE-2022-21425" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21427" id="CVE-2022-21427" type="cve" title="CVE-2022-21427" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21435" id="CVE-2022-21435" type="cve" title="CVE-2022-21435" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21436" id="CVE-2022-21436" type="cve" title="CVE-2022-21436" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21437" id="CVE-2022-21437" type="cve" title="CVE-2022-21437" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21438" id="CVE-2022-21438" type="cve" title="CVE-2022-21438" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21440" id="CVE-2022-21440" type="cve" title="CVE-2022-21440" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21444" id="CVE-2022-21444" type="cve" title="CVE-2022-21444" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21451" id="CVE-2022-21451" type="cve" title="CVE-2022-21451" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21452" id="CVE-2022-21452" type="cve" title="CVE-2022-21452" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21454" id="CVE-2022-21454" type="cve" title="CVE-2022-21454" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21455" id="CVE-2022-21455" type="cve" title="CVE-2022-21455" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21457" id="CVE-2022-21457" type="cve" title="CVE-2022-21457" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21459" id="CVE-2022-21459" type="cve" title="CVE-2022-21459" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21460" id="CVE-2022-21460" type="cve" title="CVE-2022-21460" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21462" id="CVE-2022-21462" type="cve" title="CVE-2022-21462" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21478" id="CVE-2022-21478" type="cve" title="CVE-2022-21478" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21479" id="CVE-2022-21479" type="cve" title="CVE-2022-21479" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21509" id="CVE-2022-21509" type="cve" title="CVE-2022-21509" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21515" id="CVE-2022-21515" type="cve" title="CVE-2022-21515" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21517" id="CVE-2022-21517" type="cve" title="CVE-2022-21517" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21522" id="CVE-2022-21522" type="cve" title="CVE-2022-21522" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21525" id="CVE-2022-21525" type="cve" title="CVE-2022-21525" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21526" id="CVE-2022-21526" type="cve" title="CVE-2022-21526" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21527" id="CVE-2022-21527" type="cve" title="CVE-2022-21527" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21528" id="CVE-2022-21528" type="cve" title="CVE-2022-21528" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21529" id="CVE-2022-21529" type="cve" title="CVE-2022-21529" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21530" id="CVE-2022-21530" type="cve" title="CVE-2022-21530" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21531" id="CVE-2022-21531" type="cve" title="CVE-2022-21531" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21534" id="CVE-2022-21534" type="cve" title="CVE-2022-21534" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21537" id="CVE-2022-21537" type="cve" title="CVE-2022-21537" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21538" id="CVE-2022-21538" type="cve" title="CVE-2022-21538" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21539" id="CVE-2022-21539" type="cve" title="CVE-2022-21539" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21547" id="CVE-2022-21547" type="cve" title="CVE-2022-21547" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21553" id="CVE-2022-21553" type="cve" title="CVE-2022-21553" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21556" id="CVE-2022-21556" type="cve" title="CVE-2022-21556" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21569" id="CVE-2022-21569" type="cve" title="CVE-2022-21569" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21592" id="CVE-2022-21592" type="cve" title="CVE-2022-21592" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21605" id="CVE-2022-21605" type="cve" title="CVE-2022-21605" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21607" id="CVE-2022-21607" type="cve" title="CVE-2022-21607" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21635" id="CVE-2022-21635" type="cve" title="CVE-2022-21635" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21638" id="CVE-2022-21638" type="cve" title="CVE-2022-21638" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21641" id="CVE-2022-21641" type="cve" title="CVE-2022-21641" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21866" id="CVE-2023-21866" type="cve" title="CVE-2023-21866" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21872" id="CVE-2023-21872" type="cve" title="CVE-2023-21872" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082636" id="2082636" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082637" id="2082637" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082638" id="2082638" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082639" id="2082639" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082640" id="2082640" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082641" id="2082641" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082642" id="2082642" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082643" id="2082643" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082644" id="2082644" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082645" id="2082645" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082646" id="2082646" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082647" id="2082647" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082648" id="2082648" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082649" id="2082649" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082650" id="2082650" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082651" id="2082651" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082652" id="2082652" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082653" id="2082653" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082654" id="2082654" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082655" id="2082655" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082656" id="2082656" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082657" id="2082657" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082658" id="2082658" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082659" id="2082659" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115282" id="2115282" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115283" id="2115283" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115284" id="2115284" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115285" id="2115285" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115286" id="2115286" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115287" id="2115287" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115288" id="2115288" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115289" id="2115289" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115290" id="2115290" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115291" id="2115291" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115292" id="2115292" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115293" id="2115293" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115294" id="2115294" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115295" id="2115295" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115296" id="2115296" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115297" id="2115297" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115298" id="2115298" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115299" id="2115299" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115300" id="2115300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115301" id="2115301" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122589" id="2122589" type="bugzilla" title="The following packages have been upgraded to a later upstream version: mysql (8.0.30)." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122592" id="2122592" type="bugzilla" title="* Default logrotate set to wrong log file" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:6590" id="RLSA-2022:6590" type="self" title="RLSA-2022:6590" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mysql-devel" arch="aarch64" epoch="0" version="8.0.30" release="3.el9_0" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-devel-8.0.30-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9bbe7602c921fb1012de8673e41a23fc23ea9f7cf736d9b2e11d4d652b0a5c49</sum>
        </package>
        <package name="mysql-libs" arch="aarch64" epoch="0" version="8.0.30" release="3.el9_0" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-libs-8.0.30-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">9c9261e4818ab57917a622f9bd55f2bc8b23b191349faebce40a09a0ed157ee5</sum>
        </package>
        <package name="mysql-test" arch="aarch64" epoch="0" version="8.0.30" release="3.el9_0" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-test-8.0.30-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7c265994951c89798917a26439b7071c312a321ac3b6373df58a599b4320de9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:7320</id>
    <title>ostree bug fix and enhancement update</title>
    <issued date="2022-11-02 13:52:44" />
    <updated date="2023-02-02 14:07:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ostree.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OSTree is a tool for managing bootable, immutable, versioned file system trees.

Bug Fix(es) and Enhancement(s):

* Update ostree to latest upstream version 2022.5 (BZ#2127868)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2127868" id="2127868" type="bugzilla" title="* Update ostree to latest upstream version 2022.5" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:7320" id="RLEA-2022:7320" type="self" title="RLEA-2022:7320" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2022.5" release="1.el9" src="ostree-2022.5-1.el9.src.rpm">
          <filename>ostree-devel-2022.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a20d30f4c880d863b873ae9d121c47498f70c008f1362c415fe456685a5a0eb3</sum>
        </package>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2022.5" release="1.el9_0" src="ostree-2022.5-1.el9.src.rpm">
          <filename>ostree-devel-2022.5-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3bdfa3af4d243b865dc6505b22ae95121a9fd4d8b390d6676af45531cd847957</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7944</id>
    <title>libnbd bug fix and enhancement update</title>
    <issued date="2022-11-15 06:11:50" />
    <updated date="2023-02-02 14:07:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnbd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059288" id="2059288" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2111524" id="2111524" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2111813" id="2111813" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7944" id="RLBA-2022:7944" type="self" title="RLBA-2022:7944" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnbd-devel" arch="aarch64" epoch="0" version="1.12.6" release="1.el9" src="libnbd-1.12.6-1.el9.src.rpm">
          <filename>libnbd-devel-1.12.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">07847a430539e0d97685427d06d4677a7722451781593bf68bb14e0b9c5a3ce5</sum>
        </package>
        <package name="ocaml-libnbd" arch="aarch64" epoch="0" version="1.12.6" release="1.el9" src="libnbd-1.12.6-1.el9.src.rpm">
          <filename>ocaml-libnbd-1.12.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">0443a319fdb14faff769bf930c571ea81d302f8fa04501ebc08d2e023871a477</sum>
        </package>
        <package name="ocaml-libnbd-devel" arch="aarch64" epoch="0" version="1.12.6" release="1.el9" src="libnbd-1.12.6-1.el9.src.rpm">
          <filename>ocaml-libnbd-devel-1.12.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">0bd0b71353e813b860c9a73a4e7520c48f9c061f40b3235ddf164f73fcabcf95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7947</id>
    <title>wpebackend-fdo bug fix and enhancement update</title>
    <issued date="2022-11-15 06:11:53" />
    <updated date="2025-10-17 21:51:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for wpebackend-fdo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059249" id="2059249" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7947" id="RLBA-2022:7947" type="self" title="RLBA-2022:7947" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="wpebackend-fdo-devel" arch="aarch64" epoch="0" version="1.10.0" release="3.el9" src="wpebackend-fdo-1.10.0-3.el9.src.rpm">
          <filename>wpebackend-fdo-devel-1.10.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5af2a1ba118897f61353e6ca3e6b4112acc54c0ec54eb1b597a1c019ff2a4639</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7952</id>
    <title>flatpak bug fix and enhancement update</title>
    <issued date="2022-11-15 06:11:58" />
    <updated date="2023-02-02 14:07:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for flatpak.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2058633" id="2058633" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062806" id="2062806" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2101456" id="2101456" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7952" id="RLBA-2022:7952" type="self" title="RLBA-2022:7952" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flatpak-devel" arch="aarch64" epoch="0" version="1.12.7" release="2.el9" src="flatpak-1.12.7-2.el9.src.rpm">
          <filename>flatpak-devel-1.12.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">844eb8e71febdff9f8da60b81c7001c7c35a0f1521a8cb6fe8d1d0085308c9b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7953</id>
    <title>gdm bug fix and enhancement update</title>
    <issued date="2022-11-15 06:11:59" />
    <updated date="2023-02-02 14:07:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gdm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2060793" id="2060793" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068040" id="2068040" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2097308" id="2097308" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7953" id="RLBA-2022:7953" type="self" title="RLBA-2022:7953" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gdm-devel" arch="aarch64" epoch="1" version="40.1" release="17.el9_1" src="gdm-40.1-17.el9_1.src.rpm">
          <filename>gdm-devel-40.1-17.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e7d81a301439810eddc7da37a05c6172837e961cfaded0a1d71feee4bfd20714</sum>
        </package>
        <package name="gdm-pam-extensions-devel" arch="aarch64" epoch="1" version="40.1" release="17.el9_1" src="gdm-40.1-17.el9_1.src.rpm">
          <filename>gdm-pam-extensions-devel-40.1-17.el9_1.aarch64.rpm</filename>
          <sum type="sha256">5837393c1b0c64dc2834ea8b3f4a84d7a5d2ed361df033c39ac17cc2134e16ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7958</id>
    <title>Low: libguestfs security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 06:12:06" />
    <updated date="2023-02-02 14:07:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for libguestfs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libguestfs packages contain a library used for accessing and modifying virtual machine disk images.

Security Fix(es):

* libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2211" id="CVE-2022-2211" type="cve" title="CVE-2022-2211" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1674392" id="1674392" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1794518" id="1794518" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1809453" id="1809453" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1844341" id="1844341" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1965941" id="1965941" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2033247" id="2033247" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059285" id="2059285" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065172" id="2065172" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2084568" id="2084568" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2086368" id="2086368" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2097718" id="2097718" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2100862" id="2100862" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2117004" id="2117004" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7958" id="RLSA-2022:7958" type="self" title="RLSA-2022:7958" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libguestfs-devel" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>libguestfs-devel-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">437e590fb60e055eea4737e40e91538381a063b67721fb4b78bb3f334f1a42c3</sum>
        </package>
        <package name="libguestfs-gobject" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>libguestfs-gobject-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">fff41093e2f7108666f9ae3578a8d4c664bfc7d80c78d57f97be27bb54791c8a</sum>
        </package>
        <package name="libguestfs-gobject-devel" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>libguestfs-gobject-devel-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ba04802ef5a122a3f02680fd0f2d59613399daab3cad68ca9a951d8f34de5e13</sum>
        </package>
        <package name="libguestfs-man-pages-ja" arch="noarch" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>libguestfs-man-pages-ja-1.48.4-2.el9.noarch.rpm</filename>
          <sum type="sha256">ce5bbcb3fe01b5f5e05f39666cfddeb102a532accd3cd71add956bb88cb6c3c5</sum>
        </package>
        <package name="libguestfs-man-pages-uk" arch="noarch" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>libguestfs-man-pages-uk-1.48.4-2.el9.noarch.rpm</filename>
          <sum type="sha256">3942c50c33e5ec41deb55131b8c31e0aecefa48688ca4d5140ab542cfd6de24a</sum>
        </package>
        <package name="lua-guestfs" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>lua-guestfs-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6b6232908befb54419b4f3dbd87c270592ffaffa8b7e2c256eee5de3886f8c3b</sum>
        </package>
        <package name="ocaml-libguestfs" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>ocaml-libguestfs-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d413b83fe738c948787bbde37dfc6e0cdaf8fa47c7cd3ade87aaf14e3bd44812</sum>
        </package>
        <package name="ocaml-libguestfs-devel" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>ocaml-libguestfs-devel-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7eab8c3ed4e8092d19ee48497d3b6092058e1632a785fdfa3fd1d97576e471b2</sum>
        </package>
        <package name="php-libguestfs" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>php-libguestfs-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">14fd6274afd9993b26dca02a3221cb884d5dd466b95a1e9ca5d7b4fb192965cc</sum>
        </package>
        <package name="ruby-libguestfs" arch="aarch64" epoch="1" version="1.48.4" release="2.el9" src="libguestfs-1.48.4-2.el9.src.rpm">
          <filename>ruby-libguestfs-1.48.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">faaafe06e45c75f0976030eca4c1fc5cce279c99e48124a3e199d58f9a21b5d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7964</id>
    <title>babeltrace bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:12" />
    <updated date="2025-10-17 21:51:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for babeltrace.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2058409" id="2058409" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7964" id="RLBA-2022:7964" type="self" title="RLBA-2022:7964" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbabeltrace-devel" arch="aarch64" epoch="0" version="1.5.8" release="10.el9" src="babeltrace-1.5.8-10.el9.src.rpm">
          <filename>libbabeltrace-devel-1.5.8-10.el9.aarch64.rpm</filename>
          <sum type="sha256">ef9c017670fdc185e86dda3d1266d10553a94808a08895dd5b7d15f4b3e7b8b7</sum>
        </package>
        <package name="python3-babeltrace" arch="aarch64" epoch="0" version="1.5.8" release="10.el9" src="babeltrace-1.5.8-10.el9.src.rpm">
          <filename>python3-babeltrace-1.5.8-10.el9.aarch64.rpm</filename>
          <sum type="sha256">6d3bf2cac4e62a15bfe3a2bd66608021748496d6e1d6e521a0a276f822d7944a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7965</id>
    <title>supermin bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:13" />
    <updated date="2023-02-02 14:07:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for supermin.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059397" id="2059397" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7965" id="RLBA-2022:7965" type="self" title="RLBA-2022:7965" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="supermin-devel" arch="aarch64" epoch="0" version="5.2.1" release="8.el9" src="supermin-5.2.1-8.el9.src.rpm">
          <filename>supermin-devel-5.2.1-8.el9.aarch64.rpm</filename>
          <sum type="sha256">aec12bf39fe17203f52593fb783aac52a8ad0a818d0a3641ac9fa2ef9540bcf1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7970</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-15 06:12:20" />
    <updated date="2023-02-02 14:07:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for protobuf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2049429" id="2049429" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7970" id="RLSA-2022:7970" type="self" title="RLSA-2022:7970" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="protobuf-compiler" arch="aarch64" epoch="0" version="3.14.0" release="13.el9" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-compiler-3.14.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">8231c5feadbf67dbb41c09e1f92e101c62b51efb69992c9c5d495770844c8093</sum>
        </package>
        <package name="protobuf-devel" arch="aarch64" epoch="0" version="3.14.0" release="13.el9" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-devel-3.14.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">ef740652326428a2819f84d86c320c366ff0a750996ee74763b6ad55de707ec0</sum>
        </package>
        <package name="protobuf-lite-devel" arch="aarch64" epoch="0" version="3.14.0" release="13.el9" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">7e8a2cc266f6b6fc251600dc253e7b2ad2c7bce3505f5233c9b9d0ac45db8797</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7976</id>
    <title>libnma bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:41" />
    <updated date="2025-10-17 21:51:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnma.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057512" id="2057512" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2066737" id="2066737" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2066742" id="2066742" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7976" id="RLBA-2022:7976" type="self" title="RLBA-2022:7976" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnma-devel" arch="aarch64" epoch="0" version="1.8.40" release="1.el9" src="libnma-1.8.40-1.el9.src.rpm">
          <filename>libnma-devel-1.8.40-1.el9.aarch64.rpm</filename>
          <sum type="sha256">01732f3a50a5dc94404ac439136d190c5f8a53a300bf28b3b984032ab3531638</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7979</id>
    <title>Low: speex security update</title>
    <issued date="2022-11-15 06:12:44" />
    <updated date="2025-10-17 21:51:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for speex.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.

Security Fix(es):

* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23903" id="CVE-2020-23903" type="cve" title="CVE-2020-23903" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2024250" id="2024250" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7979" id="RLSA-2022:7979" type="self" title="RLSA-2022:7979" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="speex-devel" arch="aarch64" epoch="0" version="1.2.0" release="11.el9" src="speex-1.2.0-11.el9.src.rpm">
          <filename>speex-devel-1.2.0-11.el9.aarch64.rpm</filename>
          <sum type="sha256">9aaa612b89f3dbe623b3f53809def05816ae7b02f40d08f1f654b4969d30ecdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:7983</id>
    <title>ostree bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:48" />
    <updated date="2023-02-02 14:07:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ostree.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070964" id="2070964" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2081840" id="2081840" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2119815" id="2119815" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:7983" id="RLEA-2022:7983" type="self" title="RLEA-2022:7983" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2022.5" release="1.el9" src="ostree-2022.5-1.el9.src.rpm">
          <filename>ostree-devel-2022.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a20d30f4c880d863b873ae9d121c47498f70c008f1362c415fe456685a5a0eb3</sum>
        </package>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2022.5" release="1.el9_0" src="ostree-2022.5-1.el9.src.rpm">
          <filename>ostree-devel-2022.5-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3bdfa3af4d243b865dc6505b22ae95121a9fd4d8b390d6676af45531cd847957</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7985</id>
    <title>nautilus bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:50" />
    <updated date="2023-02-02 14:07:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nautilus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064754" id="2064754" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2098578" id="2098578" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2099982" id="2099982" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7985" id="RLBA-2022:7985" type="self" title="RLBA-2022:7985" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nautilus-devel" arch="aarch64" epoch="0" version="40.2" release="9.el9_1" src="nautilus-40.2-9.el9_1.src.rpm">
          <filename>nautilus-devel-40.2-9.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e57e0fa3424d40b3ece2e5dfecb415d12975a167e6cfae2bcc54259d0ea99bbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7994</id>
    <title>evolution bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:57" />
    <updated date="2023-02-02 14:07:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for evolution.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2071056" id="2071056" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2078369" id="2078369" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7994" id="RLBA-2022:7994" type="self" title="RLBA-2022:7994" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="evolution-devel" arch="aarch64" epoch="0" version="3.40.4" release="6.el9" src="evolution-3.40.4-6.el9.src.rpm">
          <filename>evolution-devel-3.40.4-6.el9.aarch64.rpm</filename>
          <sum type="sha256">90bfb3d58bb37051151a605d5365a7b2c6d38ed8ec88272aa9e819098355d3c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7948</id>
    <title>libwpe bug fix and enhancement update</title>
    <issued date="2022-11-15 06:11:53" />
    <updated date="2025-10-17 21:51:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwpe.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059251" id="2059251" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7948" id="RLBA-2022:7948" type="self" title="RLBA-2022:7948" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwpe-devel" arch="aarch64" epoch="0" version="1.10.0" release="4.el9" src="libwpe-1.10.0-4.el9.src.rpm">
          <filename>libwpe-devel-1.10.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">4392bb82312ed771181b3722565bfd25f0f46e5fd147ae1f44027f60ef2ba70f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7992</id>
    <title>libestr bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:55" />
    <updated date="2025-10-17 21:51:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libestr.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:7992" id="RLBA-2022:7992" type="self" title="RLBA-2022:7992" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libestr-devel" arch="aarch64" epoch="0" version="0.1.11" release="4.el9" src="libestr-0.1.11-4.el9.src.rpm">
          <filename>libestr-devel-0.1.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">703b31c2b05d99ce8992b6c50753359f990babaa6088d722a7d7ebb22c03049e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8006</id>
    <title>gjs bug fix and enhancement update</title>
    <issued date="2022-11-15 06:13:11" />
    <updated date="2023-02-02 14:07:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gjs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8006" id="RLBA-2022:8006" type="self" title="RLBA-2022:8006" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gjs-devel" arch="aarch64" epoch="0" version="1.68.6" release="1.el9" src="gjs-1.68.6-1.el9.src.rpm">
          <filename>gjs-devel-1.68.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">6da08b2cd2c52b35c2e85eaebc828cde307844939f34f73ae6ac5770de997ef5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8016</id>
    <title>nss_wrapper bug fix and enhancement update</title>
    <issued date="2022-11-15 06:13:27" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for uid_wrapper.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2028819" id="2028819" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8016" id="RLBA-2022:8016" type="self" title="RLBA-2022:8016" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="uid_wrapper" arch="aarch64" epoch="0" version="1.2.9" release="2.el9" src="uid_wrapper-1.2.9-2.el9.src.rpm">
          <filename>uid_wrapper-1.2.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2e9c1aa9a3445f0c9902ebd19c2c106c43ee529d28426efc6a0288e2f1bff636</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8017</id>
    <title>augeas bug fix and enhancement update</title>
    <issued date="2022-11-15 06:13:32" />
    <updated date="2023-02-02 14:07:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for augeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2042772" id="2042772" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8017" id="RLBA-2022:8017" type="self" title="RLBA-2022:8017" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="augeas-devel" arch="aarch64" epoch="0" version="1.13.0" release="2.el9" src="augeas-1.13.0-2.el9.src.rpm">
          <filename>augeas-devel-1.13.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2921c77f6f8b1e9de13432ae72020f121dc8cb1c4754e6ccad443f435e289b6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8025</id>
    <title>qt5-qtbase bug fix and enhancement update</title>
    <issued date="2022-11-15 06:13:55" />
    <updated date="2023-02-02 14:07:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qtbase.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061354" id="2061354" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8025" id="RLBA-2022:8025" type="self" title="RLBA-2022:8025" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtbase-static" arch="aarch64" epoch="0" version="5.15.3" release="1.el9" src="qt5-qtbase-5.15.3-1.el9.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">38109116319f50008fd6670700162f5d812551f86c8bcf70ddc360d34eab3b4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8026</id>
    <title>qt5-qtdeclarative bug fix and enhancement update</title>
    <issued date="2022-11-15 06:13:56" />
    <updated date="2023-02-02 14:07:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qtdeclarative.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061355" id="2061355" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8026" id="RLBA-2022:8026" type="self" title="RLBA-2022:8026" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtdeclarative-static" arch="aarch64" epoch="0" version="5.15.3" release="1.el9" src="qt5-qtdeclarative-5.15.3-1.el9.src.rpm">
          <filename>qt5-qtdeclarative-static-5.15.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">7ef6fcb66b20a47a62a2f1f7bf42f2afbbe7675f87f7082492551ab574f18ed5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8045</id>
    <title>qt5-qttools bug fix and enhancement update</title>
    <issued date="2022-11-15 06:14:10" />
    <updated date="2023-02-02 14:07:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qttools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061370" id="2061370" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8045" id="RLBA-2022:8045" type="self" title="RLBA-2022:8045" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qttools-static" arch="aarch64" epoch="0" version="5.15.3" release="3.el9" src="qt5-qttools-5.15.3-3.el9.src.rpm">
          <filename>qt5-qttools-static-5.15.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">909569a33844a814900fecabb482bbe9a494c690de222cae34bd677257123aba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8047</id>
    <title>python-qt5 bug fix and enhancement update</title>
    <issued date="2022-11-15 06:14:12" />
    <updated date="2023-02-02 14:07:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-qt5.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061728" id="2061728" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8047" id="RLBA-2022:8047" type="self" title="RLBA-2022:8047" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-qt5-devel" arch="aarch64" epoch="0" version="5.15.6" release="1.el9" src="python-qt5-5.15.6-1.el9.src.rpm">
          <filename>python3-qt5-devel-5.15.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2f795724e7f4004d75df79d68f755f04a14e977c67c7e710bc56aeaa4d8e78e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8058</id>
    <title>dyninst bug fix and enhancement update</title>
    <issued date="2022-11-15 06:14:28" />
    <updated date="2025-10-17 21:51:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dyninst.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057675" id="2057675" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8058" id="RLBA-2022:8058" type="self" title="RLBA-2022:8058" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dyninst-devel" arch="aarch64" epoch="0" version="12.1.0" release="1.el9" src="dyninst-12.1.0-1.el9.src.rpm">
          <filename>dyninst-devel-12.1.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">23b30c299d2ac865f4926b755c9b0ee49b8126e5edce5688333798f6bca27b1f</sum>
        </package>
        <package name="dyninst-doc" arch="aarch64" epoch="0" version="12.1.0" release="1.el9" src="dyninst-12.1.0-1.el9.src.rpm">
          <filename>dyninst-doc-12.1.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b5060d6186ba1c938e6e5dd72bb5c2c62f73d339492c7b372e1e1561a4fdf2e5</sum>
        </package>
        <package name="dyninst-testsuite" arch="aarch64" epoch="0" version="12.1.0" release="1.el9" src="dyninst-12.1.0-1.el9.src.rpm">
          <filename>dyninst-testsuite-12.1.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9f97aa8820f06abe7057276f2bdb68055be373bfd8e40e2817d10791e70df3ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8062</id>
    <title>Moderate: unbound security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 06:14:38" />
    <updated date="2023-02-02 14:07:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for unbound.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2087120)

Security Fix(es):

* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30698)

* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30698" id="CVE-2022-30698" type="cve" title="CVE-2022-30698" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30699" id="CVE-2022-30699" type="cve" title="CVE-2022-30699" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1981415" id="1981415" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2056116" id="2056116" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2071543" id="2071543" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2071943" id="2071943" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079548" id="2079548" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2087120" id="2087120" type="bugzilla" title="The following packages have been upgraded to a later upstream version: unbound (1.16.2)." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094336" id="2094336" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2116725" id="2116725" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2116729" id="2116729" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2116802" id="2116802" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8062" id="RLSA-2022:8062" type="self" title="RLSA-2022:8062" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unbound-devel" arch="aarch64" epoch="0" version="1.16.2" release="2.el9" src="unbound-1.16.2-2.el9.src.rpm">
          <filename>unbound-devel-1.16.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e2b30973eaa05c7d8d7cb86ec7943333830d822e0b3975507768de5d52a89eea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8068</id>
    <title>Moderate: bind security update</title>
    <issued date="2022-11-15 06:14:59" />
    <updated date="2023-02-02 14:07:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)

* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064512" id="2064512" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064513" id="2064513" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2104863" id="2104863" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8068" id="RLSA-2022:8068" type="self" title="RLSA-2022:8068" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="5.el9_1" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-devel-9.16.23-5.el9_1.aarch64.rpm</filename>
          <sum type="sha256">4e64ff72ec7d09dceec3b25d8ed43edb4af364695a0efa883ffcccaf99566f58</sum>
        </package>
        <package name="bind-doc" arch="noarch" epoch="2" version="9.16.23" release="5.el9_1" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-doc-9.16.23-5.el9_1.noarch.rpm</filename>
          <sum type="sha256">b54a5042601c2c9929ff55e7a28d9b81b336187f00c1e46440a3d48e1e222fed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8078</id>
    <title>Moderate: flac security update</title>
    <issued date="2022-11-15 06:15:08" />
    <updated date="2023-02-02 14:07:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for flac.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0561" id="CVE-2021-0561" type="cve" title="CVE-2021-0561" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057776" id="2057776" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8078" id="RLSA-2022:8078" type="self" title="RLSA-2022:8078" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flac" arch="aarch64" epoch="0" version="1.3.3" release="10.el9" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-1.3.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">7181ea52f233500edc2d411202fedbdd8565bf25d11c6accbf68f674ea6537cd</sum>
        </package>
        <package name="flac-devel" arch="aarch64" epoch="0" version="1.3.3" release="10.el9" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-devel-1.3.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">9baae7cdeee7020b2986b799b8a23470b7f8008c421a3b14773385a052dd07c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8095</id>
    <title>crash bug fix and enhancement update</title>
    <issued date="2022-11-15 06:15:28" />
    <updated date="2023-02-02 14:07:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for crash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061229" id="2061229" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061239" id="2061239" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068464" id="2068464" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2089632" id="2089632" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8095" id="RLBA-2022:8095" type="self" title="RLBA-2022:8095" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="crash-devel" arch="aarch64" epoch="0" version="8.0.1" release="2.el9" src="crash-8.0.1-2.el9.src.rpm">
          <filename>crash-devel-8.0.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ebd3e2e01eace31f82fafbecc97465c45e6da9b7962cc93abd051a7628f89f81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8116</id>
    <title>google-noto-fonts bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:13" />
    <updated date="2023-02-02 14:07:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for google-noto-fonts.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082681" id="2082681" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8116" id="RLBA-2022:8116" type="self" title="RLBA-2022:8116" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="google-noto-sans-symbols2-fonts" arch="noarch" epoch="0" version="20201206" release="4.el9" src="google-noto-fonts-20201206-4.el9.src.rpm">
          <filename>google-noto-sans-symbols2-fonts-20201206-4.el9.noarch.rpm</filename>
          <sum type="sha256">dd615d5f24abcfa7b0cd668e079d1cc26472634251956c335daac0e57eb4cdf7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8127</id>
    <title>corosync bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:21" />
    <updated date="2023-02-02 14:08:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for corosync.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070623" id="2070623" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8127" id="RLBA-2022:8127" type="self" title="RLBA-2022:8127" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="corosynclib" arch="aarch64" epoch="0" version="3.1.5" release="4.el9" src="corosync-3.1.5-4.el9.src.rpm">
          <filename>corosynclib-3.1.5-4.el9.aarch64.rpm</filename>
          <sum type="sha256">85937e01d260594d071b271d92d8836f893c78a2f8d5a1404e18d24a87251a8b</sum>
        </package>
        <package name="corosync-vqsim" arch="aarch64" epoch="0" version="3.1.5" release="4.el9" src="corosync-3.1.5-4.el9.src.rpm">
          <filename>corosync-vqsim-3.1.5-4.el9.aarch64.rpm</filename>
          <sum type="sha256">b65d2686dc696bbc2ea64e154c089a6ede4b86077bf84804996bfb465f78f111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8022</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2022-11-15 06:13:53" />
    <updated date="2023-02-02 14:07:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for qt5.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2055505" id="2055505" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061352" id="2061352" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8022" id="RLSA-2022:8022" type="self" title="RLSA-2022:8022" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-devel" arch="noarch" epoch="0" version="5.15.3" release="1.el9" src="qt5-5.15.3-1.el9.src.rpm">
          <filename>qt5-devel-5.15.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">0c7ecd814cae18753f7f6ba4f83aba303c482aab8194ccdbacb9a87d59576b5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8046</id>
    <title>sip bug fix and enhancement update</title>
    <issued date="2022-11-15 06:14:11" />
    <updated date="2023-02-02 14:07:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sip.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2071605" id="2071605" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8046" id="RLBA-2022:8046" type="self" title="RLBA-2022:8046" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-sip-devel" arch="aarch64" epoch="0" version="4.19.25" release="1.el9" src="sip-4.19.25-1.el9.src.rpm">
          <filename>python3-sip-devel-4.19.25-1.el9.aarch64.rpm</filename>
          <sum type="sha256">617d992195778dbc6c419df370f1a17957950ae4a74888b0497ac7c3a2040299</sum>
        </package>
        <package name="sip" arch="aarch64" epoch="0" version="4.19.25" release="1.el9" src="sip-4.19.25-1.el9.src.rpm">
          <filename>sip-4.19.25-1.el9.aarch64.rpm</filename>
          <sum type="sha256">21cc940ba2d0396e65f83710d7c42de265dbf076dad5a43c7424b10b458aedc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8069</id>
    <title>anthy-unicode bug fix and enhancement update</title>
    <issued date="2022-11-15 06:15:00" />
    <updated date="2025-10-17 21:51:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for anthy-unicode.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068287" id="2068287" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8069" id="RLBA-2022:8069" type="self" title="RLBA-2022:8069" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="anthy-unicode-devel" arch="aarch64" epoch="0" version="1.0.0.20201109" release="9.el9" src="anthy-unicode-1.0.0.20201109-9.el9.src.rpm">
          <filename>anthy-unicode-devel-1.0.0.20201109-9.el9.aarch64.rpm</filename>
          <sum type="sha256">81e06a972c9dfb87ca59abf1674bfd18791ec20456b1b0a2648f8084fffa2bbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8109</id>
    <title>bcc bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:06" />
    <updated date="2023-02-02 14:07:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061758" id="2061758" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8109" id="RLBA-2022:8109" type="self" title="RLBA-2022:8109" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bcc-devel" arch="aarch64" epoch="0" version="0.24.0" release="4.el9" src="bcc-0.24.0-4.el9.src.rpm">
          <filename>bcc-devel-0.24.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">930a8055d1d2ba0dc2dad3d167cff034d01a001e7b7bf0686135ca4a4eab1c77</sum>
        </package>
        <package name="bcc-doc" arch="noarch" epoch="0" version="0.24.0" release="4.el9" src="bcc-0.24.0-4.el9.src.rpm">
          <filename>bcc-doc-0.24.0-4.el9.noarch.rpm</filename>
          <sum type="sha256">0c503c00b79e77cc426e76fd84713f6d3608e085db2436600f5a739cb52ee5eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8130</id>
    <title>criu bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:25" />
    <updated date="2023-02-02 14:08:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for criu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2033446" id="2033446" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2105220" id="2105220" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8130" id="RLBA-2022:8130" type="self" title="RLBA-2022:8130" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="criu-devel" arch="aarch64" epoch="0" version="3.17" release="4.el9" src="criu-3.17-4.el9.src.rpm">
          <filename>criu-devel-3.17-4.el9.aarch64.rpm</filename>
          <sum type="sha256">fa7ae77bbe70bd1677397f2272a13793be412da9ba842416e177fc08389097f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8132</id>
    <title>libgtop2 bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:26" />
    <updated date="2025-10-17 21:51:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libgtop2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050712" id="2050712" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8132" id="RLBA-2022:8132" type="self" title="RLBA-2022:8132" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgtop2-devel" arch="aarch64" epoch="0" version="2.40.0" release="9.el9" src="libgtop2-2.40.0-9.el9.src.rpm">
          <filename>libgtop2-devel-2.40.0-9.el9.aarch64.rpm</filename>
          <sum type="sha256">cf2c8ac932b7099c6fcc3e3e7e24c5dd79f4d89363bc5ed23619e33149d64839</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8142</id>
    <title>yara bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:39" />
    <updated date="2023-02-02 14:08:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for yara.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2119213" id="2119213" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8142" id="RLBA-2022:8142" type="self" title="RLBA-2022:8142" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="yara-devel" arch="aarch64" epoch="0" version="4.2.3" release="1.el9" src="yara-4.2.3-1.el9.src.rpm">
          <filename>yara-devel-4.2.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ccf72e289c76bc848ac843fe1196bc3c00671b32e1c8fd58f836957d4fa6f405</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8151</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-15 06:17:06" />
    <updated date="2023-02-02 14:08:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for poppler.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2087190" id="2087190" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096451" id="2096451" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8151" id="RLSA-2022:8151" type="self" title="RLSA-2022:8151" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">9a2896a421dc2ee82b5555e9ae90d224374cd2bd75ca1011c63cb3a95734cbe4</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">634cf93dc3b3ac595c7a11ca70e7e2407fa7cfa1ffabcc740c07ab4a93ed37da</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">fa2a249be5c93f6a38560b6aa094f9244ad09ab2a0d11b5452897355e97a2bc6</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">94c2a935dfa7b09f0faff2de2efaa492f5d54a5d723a454904379ebd53162ff3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8155</id>
    <title>nginx bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:13" />
    <updated date="2023-02-02 14:08:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nginx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2028781" id="2028781" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2099752" id="2099752" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8155" id="RLBA-2022:8155" type="self" title="RLBA-2022:8155" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nginx-mod-devel" arch="aarch64" epoch="1" version="1.20.1" release="13.el9" src="nginx-1.20.1-13.el9.src.rpm">
          <filename>nginx-mod-devel-1.20.1-13.el9.aarch64.rpm</filename>
          <sum type="sha256">b93c44432e1ea69f93497bc3bf4930ab1d4531d23f769676665e44d92a1ad3ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:8157</id>
    <title>libdrm and mesa bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:15" />
    <updated date="2023-02-02 14:08:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdrm, mesa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070179" id="2070179" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2095157" id="2095157" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115601" id="2115601" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122885" id="2122885" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:8157" id="RLEA-2022:8157" type="self" title="RLEA-2022:8157" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mesa-libgbm-devel" arch="aarch64" epoch="0" version="22.1.5" release="2.el9" src="mesa-22.1.5-2.el9.src.rpm">
          <filename>mesa-libgbm-devel-22.1.5-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cc5cdc91799732a2d99285a72e6ca1f2a8cd7d927e76132151c7c81d0cfc3c7d</sum>
        </package>
        <package name="mesa-libOSMesa" arch="aarch64" epoch="0" version="22.1.5" release="2.el9" src="mesa-22.1.5-2.el9.src.rpm">
          <filename>mesa-libOSMesa-22.1.5-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7237fcf84f2f251a3eee72c39a539fad91ed6b326fd29530164ae08dc340f555</sum>
        </package>
        <package name="mesa-libOSMesa-devel" arch="aarch64" epoch="0" version="22.1.5" release="2.el9" src="mesa-22.1.5-2.el9.src.rpm">
          <filename>mesa-libOSMesa-devel-22.1.5-2.el9.aarch64.rpm</filename>
          <sum type="sha256">272f8ac4ac0475a82989a9ec6f3ccc9512a2bf1ca7d4f8eeb5038024b5c955e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8158</id>
    <title>sdl12-compat bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:16" />
    <updated date="2023-02-02 14:08:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sdl12-compat.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2060907" id="2060907" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8158" id="RLBA-2022:8158" type="self" title="RLBA-2022:8158" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sdl12-compat-devel" arch="aarch64" epoch="0" version="1.2.52" release="1.el9" src="sdl12-compat-1.2.52-1.el9.src.rpm">
          <filename>sdl12-compat-devel-1.2.52-1.el9.aarch64.rpm</filename>
          <sum type="sha256">25e43cfbf1d4e4795589bbb9c15ed61109d04f9f049546f32ef729bc02f79960</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8160</id>
    <title>freerdp bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:18" />
    <updated date="2023-02-02 14:08:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for freerdp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2023262" id="2023262" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8160" id="RLBA-2022:8160" type="self" title="RLBA-2022:8160" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freerdp-devel" arch="aarch64" epoch="2" version="2.4.1" release="3.el9" src="freerdp-2.4.1-3.el9.src.rpm">
          <filename>freerdp-devel-2.4.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">e85ae9adba743351c686d079a685635e7a4fa49df4d8a9b7f5169094e11244c7</sum>
        </package>
        <package name="libwinpr-devel" arch="aarch64" epoch="2" version="2.4.1" release="3.el9" src="freerdp-2.4.1-3.el9.src.rpm">
          <filename>libwinpr-devel-2.4.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">cb479314cca1597be1655e20609f769e7c5b526bf249545a07697aa5878aa423</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8129</id>
    <title>papi bug fix and enhancement update</title>
    <issued date="2022-11-15 06:16:23" />
    <updated date="2023-02-02 14:08:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for papi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8129" id="RLBA-2022:8129" type="self" title="RLBA-2022:8129" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="papi" arch="aarch64" epoch="0" version="6.0.0" release="12.el9" src="papi-6.0.0-12.el9.src.rpm">
          <filename>papi-6.0.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">f2ce8e5aa3e1f8398f76047c93f52490bcb7f8ce8b961e12f2ba965a61b6cf17</sum>
        </package>
        <package name="papi-testsuite" arch="aarch64" epoch="0" version="6.0.0" release="12.el9" src="papi-6.0.0-12.el9.src.rpm">
          <filename>papi-testsuite-6.0.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">061d54827b129d4c5c645376bd009b048af0fa4fceb421d2dec59ef982b56fe9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8139</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-15 06:16:36" />
    <updated date="2025-10-17 21:51:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for wavpack.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064457" id="2064457" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8139" id="RLSA-2022:8139" type="self" title="RLSA-2022:8139" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="wavpack-devel" arch="aarch64" epoch="0" version="5.4.0" release="5.el9" src="wavpack-5.4.0-5.el9.src.rpm">
          <filename>wavpack-devel-5.4.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">63ed219f15104423d19eb51ba52eee07fe2ca6020a4ca7a318c51ee43c7b39f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8169</id>
    <title>pycairo bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:26" />
    <updated date="2025-10-17 21:51:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pycairo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2053665" id="2053665" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8169" id="RLBA-2022:8169" type="self" title="RLBA-2022:8169" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-cairo-devel" arch="aarch64" epoch="0" version="1.20.1" release="1.el9" src="pycairo-1.20.1-1.el9.src.rpm">
          <filename>python3-cairo-devel-1.20.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a1f9a08e6d2e2f4c88c5d97e74d41ee7117c2d6831f6a99e1ec6cbe5bae1e4ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8170</id>
    <title>nispor bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:27" />
    <updated date="2023-02-02 14:08:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nispor.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064299" id="2064299" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2090678" id="2090678" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2091898" id="2091898" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8170" id="RLBA-2022:8170" type="self" title="RLBA-2022:8170" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nispor-devel" arch="aarch64" epoch="0" version="1.2.7" release="1.el9" src="nispor-1.2.7-1.el9.src.rpm">
          <filename>nispor-devel-1.2.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">e6248c2668e548ba423e756d9a5c740f01a8b5230cf6ff1ca6824bf19340fe2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8176</id>
    <title>ldns bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:32" />
    <updated date="2023-02-02 14:08:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ldns.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2080206" id="2080206" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8176" id="RLBA-2022:8176" type="self" title="RLBA-2022:8176" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ldns-devel" arch="aarch64" epoch="0" version="1.7.1" release="11.el9" src="ldns-1.7.1-11.el9.src.rpm">
          <filename>ldns-devel-1.7.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">bc7f8b6a2a6777036a2dd7e4e83112be45878b32074ae9f2e640d2030a912999</sum>
        </package>
        <package name="ldns-doc" arch="noarch" epoch="0" version="1.7.1" release="11.el9" src="ldns-1.7.1-11.el9.src.rpm">
          <filename>ldns-doc-1.7.1-11.el9.noarch.rpm</filename>
          <sum type="sha256">9b10ac31884afbefbf610d8280e6e585ef3c88fd2fca8a1e4c2cb55c903e8c0d</sum>
        </package>
        <package name="ldns-utils" arch="aarch64" epoch="0" version="1.7.1" release="11.el9" src="ldns-1.7.1-11.el9.src.rpm">
          <filename>ldns-utils-1.7.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">37881177af33df3e5fb92e6e00bbaadc291765ad4de8222d83ed886612cb67aa</sum>
        </package>
        <package name="perl-ldns" arch="aarch64" epoch="0" version="1.7.1" release="11.el9" src="ldns-1.7.1-11.el9.src.rpm">
          <filename>perl-ldns-1.7.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">82a1c349e7e3309d54cbd7899f3663433ec1ab9d64fc3a88eeb7c37f9fcf17a2</sum>
        </package>
        <package name="python3-ldns" arch="aarch64" epoch="0" version="1.7.1" release="11.el9" src="ldns-1.7.1-11.el9.src.rpm">
          <filename>python3-ldns-1.7.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">b14470d7e4839f1f6e0cc8b25d19005e3a70186181d062847d2551d9bde594e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8178</id>
    <title>xxhash bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:34" />
    <updated date="2023-02-02 14:08:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xxhash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8178" id="RLBA-2022:8178" type="self" title="RLBA-2022:8178" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xxhash-devel" arch="aarch64" epoch="0" version="0.8.1" release="3.el9" src="xxhash-0.8.1-3.el9.src.rpm">
          <filename>xxhash-devel-0.8.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">aa85f2dab0755adf697bdaa57b3dd64f255f06e40f8588cda77c2456c88b3d44</sum>
        </package>
        <package name="xxhash-doc" arch="noarch" epoch="0" version="0.8.1" release="3.el9" src="xxhash-0.8.1-3.el9.src.rpm">
          <filename>xxhash-doc-0.8.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">1b1802afd44bd91211ca8fa5521cdcebbbf2dee0b409802774c42e5398dbe90d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8184</id>
    <title>woff2 bug fix and enhancement update</title>
    <issued date="2022-11-15 06:17:44" />
    <updated date="2025-10-17 21:52:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for woff2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2100950" id="2100950" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8184" id="RLBA-2022:8184" type="self" title="RLBA-2022:8184" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="woff2-devel" arch="aarch64" epoch="0" version="1.0.2" release="15.el9" src="woff2-1.0.2-15.el9.src.rpm">
          <filename>woff2-devel-1.0.2-15.el9.aarch64.rpm</filename>
          <sum type="sha256">7f3fe01aff32013cff9f31b5b8a230b09656793641300ba1856ffdc58297d9d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8200</id>
    <title>qpdf bug fix and enhancement update</title>
    <issued date="2022-11-15 06:18:24" />
    <updated date="2023-02-02 14:08:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qpdf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2095993" id="2095993" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106940" id="2106940" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8200" id="RLBA-2022:8200" type="self" title="RLBA-2022:8200" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qpdf" arch="aarch64" epoch="0" version="10.3.1" release="6.el9" src="qpdf-10.3.1-6.el9.src.rpm">
          <filename>qpdf-10.3.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">067b07d07ef658c3adc29bd98c93052c0e6c378c743712b5f56320a48f229fe9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8206</id>
    <title>babl bug fix and enhancement update</title>
    <issued date="2022-11-15 06:18:28" />
    <updated date="2025-10-17 21:52:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for babl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2105618" id="2105618" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8206" id="RLBA-2022:8206" type="self" title="RLBA-2022:8206" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="babl-devel" arch="aarch64" epoch="0" version="0.1.86" release="4.el9" src="babl-0.1.86-4.el9.src.rpm">
          <filename>babl-devel-0.1.86-4.el9.aarch64.rpm</filename>
          <sum type="sha256">35d3a2e86bebcbfe94ba40a642e7253b0ddff5ea4188d141da31e48d131f09f1</sum>
        </package>
        <package name="babl-devel-docs" arch="noarch" epoch="0" version="0.1.86" release="4.el9" src="babl-0.1.86-4.el9.src.rpm">
          <filename>babl-devel-docs-0.1.86-4.el9.noarch.rpm</filename>
          <sum type="sha256">da71bd45d0b0541bb52b1951611071ff0362ad8d856f2799adbea0bafb4a8f1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8201</id>
    <title>i2c-tools bug fix and enhancement update</title>
    <issued date="2022-11-15 06:18:24" />
    <updated date="2025-10-17 21:52:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for i2c-tools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8201" id="RLBA-2022:8201" type="self" title="RLBA-2022:8201" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libi2c-devel" arch="aarch64" epoch="0" version="4.3" release="3.el9" src="i2c-tools-4.3-3.el9.src.rpm">
          <filename>libi2c-devel-4.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">cf9215c426879c6e0c2667e560ac458e69fe9a9f720356cf8ee437e7f91df831</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8207</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-15 06:18:29" />
    <updated date="2023-02-02 14:08:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for openjpeg2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2067052" id="2067052" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8207" id="RLSA-2022:8207" type="self" title="RLSA-2022:8207" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openjpeg2-devel" arch="aarch64" epoch="0" version="2.4.0" release="7.el9" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">d20aa82d5d912b0ec93f1553b41fd0a5b27361013e3aa06bf3653a8dcc5fd772</sum>
        </package>
        <package name="openjpeg2-tools" arch="aarch64" epoch="0" version="2.4.0" release="7.el9" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-7.el9.aarch64.rpm</filename>
          <sum type="sha256">6b936ef4371c66d1e9d5f75fb495e1a9a99fea7b4a38e4140cb40c8755ab0670</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8209</id>
    <title>boost bug fix and enhancement update</title>
    <issued date="2022-11-15 06:18:31" />
    <updated date="2023-02-02 14:08:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for boost.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2091041" id="2091041" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8209" id="RLBA-2022:8209" type="self" title="RLBA-2022:8209" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="boost-b2" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-b2-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">a24522fdbc70095eb4eeb10a564da4dc75893646acc633d1903b20b752c93fc6</sum>
        </package>
        <package name="boost-build" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-build-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">7434dfea46f9bd571b3675bb4c303de6597ad7ba8de42b4faef7e5824e9a36e8</sum>
        </package>
        <package name="boost-doc" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-doc-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">e5080e6bb50f4ae84b97ff3681e6d5d80b6337ca035c88b4f2f3770a1205cf0c</sum>
        </package>
        <package name="boost-doctools" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-doctools-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">6e257845b697fec568039506a5dc9dc92a208816107fc9008cf97bc77df40ee3</sum>
        </package>
        <package name="boost-examples" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-examples-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">f3904eec06577458543173a6e0b913a0baae3f378e034fa6b63eadb46b3e17f2</sum>
        </package>
        <package name="boost-graph-mpich" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-graph-mpich-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">590d972405d7941cbe0366f1317f69a72641d3cda6e5d47a7967efb804448ac4</sum>
        </package>
        <package name="boost-graph-openmpi" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-graph-openmpi-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">819bcc310465c057e07be9ff383d7128e7a79ca4cda7ac1af662797645345d11</sum>
        </package>
        <package name="boost-mpich" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-mpich-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">8ca71aada4c5cb335500e4ba5586984ffa8925895727b425de76e4b66deb3294</sum>
        </package>
        <package name="boost-mpich-devel" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-mpich-devel-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">7886c9d1b2c1c00838e41c05e14dd536cacedb86649ab44e2ab2fdbb6a19c907</sum>
        </package>
        <package name="boost-mpich-python3" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-mpich-python3-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">6da691f8a8ee22f69faa18df364cbf3a7211ffe6b608ad8bc3f2e0b92f1f6072</sum>
        </package>
        <package name="boost-openmpi" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-openmpi-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">3983627bede7aa0a48e2fe69ccd9eef535e8e2172bf8a2f1e0dd8cf36ba9587b</sum>
        </package>
        <package name="boost-openmpi-devel" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-openmpi-devel-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">2222a4802acc26b0663f438373398a639318d3565a90f5c20ec82c813d670d5f</sum>
        </package>
        <package name="boost-openmpi-python3" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-openmpi-python3-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">bf725981415b898c678c245d46fbfb3d023e69c157fcc0b1a8e534e84549f1eb</sum>
        </package>
        <package name="boost-static" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-static-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">8d7c864fdb7e625560d6b315fd41f3eeca677e7ca07cf85ce25ebe5a441e64a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8208</id>
    <title>Moderate: dovecot security and enhancement update</title>
    <issued date="2022-11-15 06:18:30" />
    <updated date="2023-02-02 14:08:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for dovecot.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2053368" id="2053368" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2095399" id="2095399" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2105070" id="2105070" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8208" id="RLSA-2022:8208" type="self" title="RLSA-2022:8208" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dovecot-devel" arch="aarch64" epoch="1" version="2.3.16" release="7.el9" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-devel-2.3.16-7.el9.aarch64.rpm</filename>
          <sum type="sha256">524e7e29974dcd3c9affdbbaa3c6d62ea4da0edccc30bd4bd8970c64bf301d64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8221</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2022-11-15 06:18:41" />
    <updated date="2023-02-02 14:08:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for xorg-x11-server.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)

* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106671" id="2106671" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2106683" id="2106683" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2119807" id="2119807" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8221" id="RLSA-2022:8221" type="self" title="RLSA-2022:8221" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-devel" arch="aarch64" epoch="0" version="1.20.11" release="11.el9" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-11.el9.aarch64.rpm</filename>
          <sum type="sha256">5a56549dd0ac90215cad0cb6799ab56787d96c095e39a7a95a3b3f01540ac01a</sum>
        </package>
        <package name="xorg-x11-server-source" arch="noarch" epoch="0" version="1.20.11" release="11.el9" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-11.el9.noarch.rpm</filename>
          <sum type="sha256">9b7ef85d732e8fb5a3712ea75167a3d9a4a39f443b0fe0a6dbaca49841467178</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8240</id>
    <title>libwmf bug fix and enhancement update</title>
    <issued date="2022-11-15 06:19:22" />
    <updated date="2025-10-17 21:52:07" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwmf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2105011" id="2105011" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8240" id="RLBA-2022:8240" type="self" title="RLBA-2022:8240" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwmf-devel" arch="aarch64" epoch="0" version="0.2.12" release="10.el9" src="libwmf-0.2.12-10.el9.src.rpm">
          <filename>libwmf-devel-0.2.12-10.el9.aarch64.rpm</filename>
          <sum type="sha256">9939a7b21aecced28f9e2d54a3c09795fe478d1616b40e85b677de4c664449e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8239</id>
    <title>sanlock bug fix and enhancement update</title>
    <issued date="2022-11-15 06:19:21" />
    <updated date="2023-02-02 14:08:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sanlock.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2104277" id="2104277" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8239" id="RLBA-2022:8239" type="self" title="RLBA-2022:8239" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sanlock-devel" arch="aarch64" epoch="0" version="3.8.4" release="4.el9" src="sanlock-3.8.4-4.el9.src.rpm">
          <filename>sanlock-devel-3.8.4-4.el9.aarch64.rpm</filename>
          <sum type="sha256">59b349b4a23c95ad408e969e846b6ff051314b733fe3e3f1be016affb0c8eaf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8423</id>
    <title>inkscape:flatpak bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:56" />
    <updated date="2023-02-02 14:08:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for enchant2, cairomm, gc, libwpd, gsl, python-lxml, boost, potrace, python-appdirs, poppler, inkscape, python-scour, librevenge, libwpg, lapack, gspell, libsigc++20, poppler-data, double-conversion, gtkmm30, openblas, pangomm, atkmm, glibmm24, numpy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8423" id="RLBA-2022:8423" type="self" title="RLBA-2022:8423" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="atkmm-devel" arch="aarch64" epoch="0" version="2.28.2" release="2.el9" src="atkmm-2.28.2-2.el9.src.rpm">
          <filename>atkmm-devel-2.28.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">24d118eda1d60da59c6de1859a4ec64d3e9f07ff7c50a8fd3bc8caadcc4e0a41</sum>
        </package>
        <package name="atkmm-doc" arch="noarch" epoch="0" version="2.28.2" release="2.el9" src="atkmm-2.28.2-2.el9.src.rpm">
          <filename>atkmm-doc-2.28.2-2.el9.noarch.rpm</filename>
          <sum type="sha256">56521e83bec50b0c679f98ebb9eed867a2f8733d0a2a6f161c76dcd2d5105765</sum>
        </package>
        <package name="blas64_" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>blas64_-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">451cddd3d399c9025ec7d6e38baafd5afcac82bfb6d20f52f53078450198f199</sum>
        </package>
        <package name="blas-devel" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>blas-devel-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">35602e6858bbc2158f4cd586339913e198e9449696c30c2c8fa025438d00bc94</sum>
        </package>
        <package name="boost-b2" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-b2-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">a24522fdbc70095eb4eeb10a564da4dc75893646acc633d1903b20b752c93fc6</sum>
        </package>
        <package name="boost-build" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-build-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">7434dfea46f9bd571b3675bb4c303de6597ad7ba8de42b4faef7e5824e9a36e8</sum>
        </package>
        <package name="boost-doc" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-doc-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">e5080e6bb50f4ae84b97ff3681e6d5d80b6337ca035c88b4f2f3770a1205cf0c</sum>
        </package>
        <package name="boost-doctools" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-doctools-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">6e257845b697fec568039506a5dc9dc92a208816107fc9008cf97bc77df40ee3</sum>
        </package>
        <package name="boost-examples" arch="noarch" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-examples-1.75.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">f3904eec06577458543173a6e0b913a0baae3f378e034fa6b63eadb46b3e17f2</sum>
        </package>
        <package name="boost-static" arch="aarch64" epoch="0" version="1.75.0" release="8.el9" src="boost-1.75.0-8.el9.src.rpm">
          <filename>boost-static-1.75.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">8d7c864fdb7e625560d6b315fd41f3eeca677e7ca07cf85ce25ebe5a441e64a6</sum>
        </package>
        <package name="cairomm-devel" arch="aarch64" epoch="0" version="1.14.2" release="10.el9" src="cairomm-1.14.2-10.el9.src.rpm">
          <filename>cairomm-devel-1.14.2-10.el9.aarch64.rpm</filename>
          <sum type="sha256">43a3a4bf22a8e57cdca64d8eac465a4977848726137aa582c9d60001d8c16e94</sum>
        </package>
        <package name="cairomm-doc" arch="noarch" epoch="0" version="1.14.2" release="10.el9" src="cairomm-1.14.2-10.el9.src.rpm">
          <filename>cairomm-doc-1.14.2-10.el9.noarch.rpm</filename>
          <sum type="sha256">383bbbc516adade85cecf9956a9810d533fc5c5acaefb80b1b23edf5bd82b58e</sum>
        </package>
        <package name="double-conversion-devel" arch="aarch64" epoch="0" version="3.1.5" release="6.el9" src="double-conversion-3.1.5-6.el9.src.rpm">
          <filename>double-conversion-devel-3.1.5-6.el9.aarch64.rpm</filename>
          <sum type="sha256">f08034f3e663e69e81b440998e46e515ab5e2cca4bdbd2cb1467daa9d0405c55</sum>
        </package>
        <package name="enchant2-devel" arch="aarch64" epoch="0" version="2.2.15" release="6.el9" src="enchant2-2.2.15-6.el9.src.rpm">
          <filename>enchant2-devel-2.2.15-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6c00302aaf964eadd79a95a00f26092325a8841a6fa4ff086220315ed9926535</sum>
        </package>
        <package name="gc-devel" arch="aarch64" epoch="0" version="8.0.4" release="7.el9" src="gc-8.0.4-7.el9.src.rpm">
          <filename>gc-devel-8.0.4-7.el9.aarch64.rpm</filename>
          <sum type="sha256">01420ab8f632ae57dfce1bcdcedeaef0d2f709338713c3f1fb4d2d74e0d373c2</sum>
        </package>
        <package name="glibmm24-devel" arch="aarch64" epoch="0" version="2.66.1" release="1.el9" src="glibmm24-2.66.1-1.el9.src.rpm">
          <filename>glibmm24-devel-2.66.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2f841a8632fcf0d53b501759bf08f7f93498596f70a6afdc934493cd62d36d8c</sum>
        </package>
        <package name="glibmm24-doc" arch="noarch" epoch="0" version="2.66.1" release="1.el9" src="glibmm24-2.66.1-1.el9.src.rpm">
          <filename>glibmm24-doc-2.66.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">bfbcd163138501fa996ad0aa4dda44619ae3b7205390023646364b3fac404ec0</sum>
        </package>
        <package name="gsl-devel" arch="aarch64" epoch="0" version="2.6" release="7.el9" src="gsl-2.6-7.el9.src.rpm">
          <filename>gsl-devel-2.6-7.el9.aarch64.rpm</filename>
          <sum type="sha256">24fc361650a83474da76ed400b6d73ed1f915ebf38e6216c70e71e49391fa0b5</sum>
        </package>
        <package name="gspell-devel" arch="aarch64" epoch="0" version="1.9.1" release="3.el9" src="gspell-1.9.1-3.el9.src.rpm">
          <filename>gspell-devel-1.9.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4b1174183a306caf41134434be5cdd9dbd25b2332d1f46a179fe39f093d04843</sum>
        </package>
        <package name="gspell-doc" arch="noarch" epoch="0" version="1.9.1" release="3.el9" src="gspell-1.9.1-3.el9.src.rpm">
          <filename>gspell-doc-1.9.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">54cac486505ede6438dcd75cc31f8578dfd63773c7d3431e4514a932c7b28268</sum>
        </package>
        <package name="gtkmm30-devel" arch="aarch64" epoch="0" version="3.24.5" release="1.el9" src="gtkmm30-3.24.5-1.el9.src.rpm">
          <filename>gtkmm30-devel-3.24.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b48a541a65de3092b2828261b69f139297e04209bd3f87e8b575f147ea527d49</sum>
        </package>
        <package name="gtkmm30-doc" arch="noarch" epoch="0" version="3.24.5" release="1.el9" src="gtkmm30-3.24.5-1.el9.src.rpm">
          <filename>gtkmm30-doc-3.24.5-1.el9.noarch.rpm</filename>
          <sum type="sha256">abe9d8f8b5cc7a7d8cfa3e70e35cf283930d6cdf18dd0c8254d86cc7a06ed99c</sum>
        </package>
        <package name="lapack64_" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>lapack64_-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">9a6fce0825e2c44dca3d21cd866b689b5cc0e6733ab5a3d54f0fec693e7cd921</sum>
        </package>
        <package name="lapack-devel" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>lapack-devel-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">b412570e7c6be25ccd34ba2adb6837429231ccb7477ef7f54ed75d92b47e41ec</sum>
        </package>
        <package name="lapack-static" arch="aarch64" epoch="0" version="3.9.0" release="8.el9" src="lapack-3.9.0-8.el9.src.rpm">
          <filename>lapack-static-3.9.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">f88d90b5f290a55822af51458ce1fcbaf491f27d7dda8910ef93cd34224701a9</sum>
        </package>
        <package name="librevenge-devel" arch="aarch64" epoch="0" version="0.0.4" release="22.el9" src="librevenge-0.0.4-22.el9.src.rpm">
          <filename>librevenge-devel-0.0.4-22.el9.aarch64.rpm</filename>
          <sum type="sha256">c2d197beba2cb75239af5cbe9bca70db2f05c9d9314891e3f1d5343dcc70bfc4</sum>
        </package>
        <package name="libsigc++20-devel" arch="aarch64" epoch="0" version="2.10.7" release="2.el9" src="libsigc++20-2.10.7-2.el9.src.rpm">
          <filename>libsigc++20-devel-2.10.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cc4915b8c5d5678d0f595fed564f4991801594ed670046c7af84d7db666dac22</sum>
        </package>
        <package name="libsigc++20-doc" arch="noarch" epoch="0" version="2.10.7" release="2.el9" src="libsigc++20-2.10.7-2.el9.src.rpm">
          <filename>libsigc++20-doc-2.10.7-2.el9.noarch.rpm</filename>
          <sum type="sha256">29487250f3f83163d9b2b19379dc1437e3ad90db099286cb698d375effee094b</sum>
        </package>
        <package name="libwpd-devel" arch="aarch64" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-devel-0.10.3-10.el9.aarch64.rpm</filename>
          <sum type="sha256">d913a91f5e225b883aa517d8b05d4e8e411a755d6391336bc267b51ce40204de</sum>
        </package>
        <package name="libwpd-doc" arch="noarch" epoch="0" version="0.10.3" release="10.el9" src="libwpd-0.10.3-10.el9.src.rpm">
          <filename>libwpd-doc-0.10.3-10.el9.noarch.rpm</filename>
          <sum type="sha256">cf1cafa034c873ca0728f3d265a585a12f2fe820388cf525b9407d7a7ff7d3b4</sum>
        </package>
        <package name="libwpg-devel" arch="aarch64" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-devel-0.3.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ea1d595370cb449e69909f4873f3b2767b4fff7395c2cbfee6318fb652c0c326</sum>
        </package>
        <package name="libwpg-doc" arch="noarch" epoch="0" version="0.3.3" release="8.el9" src="libwpg-0.3.3-8.el9.src.rpm">
          <filename>libwpg-doc-0.3.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">612575a87c0c960172ba28ba334437243e5e8df6ae17b42d55d999fe31dac0a0</sum>
        </package>
        <package name="openblas-devel" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-devel-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8878261848bdbc17bb0b7689651acc117c4202f94fa47eedeed564bc5c051347</sum>
        </package>
        <package name="openblas-openmp64_" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-openmp64_-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">46092fdbda9def956eaea9955e358ede474b2a17c426aac3da179e81d35f450d</sum>
        </package>
        <package name="openblas-openmp64" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-openmp64-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a26d72dc934d857daee95512b9370dd96addb2f6d1c6980e700b0f53f62915cd</sum>
        </package>
        <package name="openblas-serial64_" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-serial64_-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">1ce6907f7bacdc243135a1840b8bfd65c822193779055d6606d0b70ad6b6372f</sum>
        </package>
        <package name="openblas-serial64" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-serial64-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">56368b3cb3502b91d79f4b93204cfe3d82ea05aa10379159b23e3542e2927cf4</sum>
        </package>
        <package name="openblas-static" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-static-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6fdfb9685251d7de67ca2c8576600bd1883d8914d76e305d317a29da5ac04b65</sum>
        </package>
        <package name="openblas-threads" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-threads-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8c8b0253535dc62af63a993145487a712203601b91845baea18dcb092ce250f3</sum>
        </package>
        <package name="openblas-threads64_" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-threads64_-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7a58726891d025d0c7b24410f027af39d2d895506b9c66ebb1433fdee0765cd9</sum>
        </package>
        <package name="openblas-threads64" arch="aarch64" epoch="0" version="0.3.15" release="3.el9" src="openblas-0.3.15-3.el9.src.rpm">
          <filename>openblas-threads64-0.3.15-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c2eda7cc357a74b06458fea32ecc09c65cc6bccbd8a9a40bd1384ae835c724ea</sum>
        </package>
        <package name="pangomm-devel" arch="aarch64" epoch="0" version="2.46.1" release="1.el9" src="pangomm-2.46.1-1.el9.src.rpm">
          <filename>pangomm-devel-2.46.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">293d63cce96944ad2864d805c6fc865b51d09ecf9760aac23de90512963d9097</sum>
        </package>
        <package name="pangomm-doc" arch="noarch" epoch="0" version="2.46.1" release="1.el9" src="pangomm-2.46.1-1.el9.src.rpm">
          <filename>pangomm-doc-2.46.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">77ecd2fc1fc2c70f00abf9262894aaa56cbb8d2a8938e862109d8873e6e47607</sum>
        </package>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">9a2896a421dc2ee82b5555e9ae90d224374cd2bd75ca1011c63cb3a95734cbe4</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">634cf93dc3b3ac595c7a11ca70e7e2407fa7cfa1ffabcc740c07ab4a93ed37da</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">fa2a249be5c93f6a38560b6aa094f9244ad09ab2a0d11b5452897355e97a2bc6</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="13.el9" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">94c2a935dfa7b09f0faff2de2efaa492f5d54a5d723a454904379ebd53162ff3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8251</id>
    <title>vulkan bug fix and enhancement update</title>
    <issued date="2022-11-15 06:19:31" />
    <updated date="2023-02-02 14:08:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070286" id="2070286" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070287" id="2070287" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070288" id="2070288" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070289" id="2070289" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070290" id="2070290" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070291" id="2070291" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070292" id="2070292" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070293" id="2070293" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8251" id="RLBA-2022:8251" type="self" title="RLBA-2022:8251" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glslang-devel" arch="aarch64" epoch="0" version="11.9.0" release="3.el9" src="glslang-11.9.0-3.el9.src.rpm">
          <filename>glslang-devel-11.9.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">548ceab5f033e4760cfab364896464e4f8a898461fd3d07d4d3933e01def55b9</sum>
        </package>
        <package name="libshaderc-devel" arch="aarch64" epoch="0" version="2022.2" release="2.el9" src="shaderc-2022.2-2.el9.src.rpm">
          <filename>libshaderc-devel-2022.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8b9017dc96bbd1e9d9e99749017d28c5c9a22f5a5030a8665a25276817dcdce8</sum>
        </package>
        <package name="spirv-tools-devel" arch="aarch64" epoch="0" version="2022.2" release="3.el9" src="spirv-tools-2022.2-3.el9.src.rpm">
          <filename>spirv-tools-devel-2022.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a0abc3f9fe6ec36383a4c7415baf9c62784056fdfac0c9b1ba4b1305d8f89d16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8248</id>
    <title>xdp-tools bug fix and enhancement update</title>
    <issued date="2022-11-15 06:19:28" />
    <updated date="2023-02-02 14:08:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xdp-tools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2117249" id="2117249" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8248" id="RLBA-2022:8248" type="self" title="RLBA-2022:8248" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxdp-devel" arch="aarch64" epoch="0" version="1.2.6" release="1.el9" src="xdp-tools-1.2.6-1.el9.src.rpm">
          <filename>libxdp-devel-1.2.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">57603d01ee91da1190ca729c700125fe7d0290ec0bcb195dd39e08d3839eec5b</sum>
        </package>
        <package name="libxdp-static" arch="aarch64" epoch="0" version="1.2.6" release="1.el9" src="xdp-tools-1.2.6-1.el9.src.rpm">
          <filename>libxdp-static-1.2.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a6dc4e9058e1aa14fcf2381da3eccca8cbfd306062db3d208ff82f26e8240293</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8252</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-15 06:19:32" />
    <updated date="2023-02-02 14:08:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for yajl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2072912" id="2072912" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8252" id="RLSA-2022:8252" type="self" title="RLSA-2022:8252" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="21.el9" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">5bff3a63b4bd5036cc6578b512181be1062df6c7beb303fd578cb7259b744fb7</sum>
        </package>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="21.el9_0" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9_0.aarch64.rpm</filename>
          <sum type="sha256">eee07bb8cd6d1e17ecc1cf6dfdddacb75c9b22ee12b05ffc6526701047e738ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0202</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 09:45:07" />
    <updated date="2023-02-02 14:08:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)

* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [Rocky Linux-9] (BZ#2157798)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2157798" id="2157798" type="bugzilla" title="* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [rhel-9]" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2160421" id="2160421" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2160475" id="2160475" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0202" id="RLSA-2023:0202" type="self" title="RLSA-2023:0202" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">91e56cc89dc766b28d0e7cc936b79f3436de73c9d9596747290fa1468cda5e92</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f4295fc0aff94101baa1e761cce3a6303d28d39f9b86c2212b55b321839b4f66</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">4a5fc8cc34e1b0670a10b1bb113535b1854aebc438a39237e6fd01e6fd762481</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">abf6ffe41ec42311c373b78025af7bcc7dba35e40c9db71be071b0af1122b17d</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f57d3b17a2f2a7d1a4ad7f022118bbf9041461ee9a2e26cbef80a6f3e7eeebb5</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">75a2b21d5f4239fcb351b3758830a798180647369beed9c1c749afd5f6a576bb</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">fd48584e0c05edc9733653603e7055ce87093b534597f83fc57e76b319937513</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">da929adeac5d18a05a394388741175685aa7dcdb03690459f91c3c6d38e5e400</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2a6a22993a8e74f365dd0a3c7d22384bd47adb2e1be13e92140ba13dbbd8bc23</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">6e4c4bcb0048c38b25313847ef1d2626149b04bae9d17fea32a3d949adaf173f</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2f04882da16cca19adcd9fd379d6b2a2b9cdc98706e92a19835f75446b13ab3a</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">469c68247c56e6246d06116a736391d052c3a42011f6331a1dc24581b2716d63</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">4019dfd288ec6a49dba8e1d603daebf39fd12f8f92564167415f836a0026bb3e</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.18.0.10" release="2.el9_1" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.18.0.10-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c151e0f2e85fd4cb3c44eee64d4b750f852138e68486da70fadabdadfd6401a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0194</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-23 08:27:13" />
    <updated date="2023-02-02 14:08:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-17-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)

* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [Rocky Linux-9] (BZ#2153097)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2147476" id="2147476" type="bugzilla" title="* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2153097" id="2153097" type="bugzilla" title="* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [rhel-9]" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2160421" id="2160421" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2160475" id="2160475" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0194" id="RLSA-2023:0194" type="self" title="RLSA-2023:0194" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-17-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">df37904c3b61a2a9fbbc87cb8bd893672cdc4c57d1e70b35359d6d499a0b194a</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2c4dab700a24f0b9677ab85b4259079fdb33ca3a3297d56d3438acebac403a3c</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">5d141d2d6b79677e1ce578609c776080a03ea9cdc4d676686204e8faed790f15</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b4ac5f42f2bf451624c3c9fd753e6ce2be3d241cfd35c494df3dc34e7cc121ff</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">5df7036c7a5f351cad465b0e881f3234e4fb72c8d224b63543548363b7988492</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">ba734c9dd79216922bafea6c30e5e0b201e87d28d613a62e5a7a5b27ce5849cf</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">fbda24e65c651020fc0addf3aefaca9c425bf918ead31078efa13c4be1267c81</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2cda95a74d93b0d33ec45ab88da74c4303de7d0abc82348ae5ed746ec136f3f3</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">6360a2785da3a4b2403654e130923c9ee1d3d296d48168ace9aa70f189eb75c6</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2aa585957b810124b3936a0662651b2d496419d313bc0af1100256668c9cce4e</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a01eea24063a117132a997de1bb8145540bdc7b012d98a25ed9bd913219a4663</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d2467f67e66676f99045b1195ecf6d37f06be2d175a22661bc564d5ad1ef3538</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">543edcf041bad9c99bf7e785409556a74043040a93b75231242904ff12d4ec57</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="17.0.6.0.10" release="3.el9_1" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.6.0.10-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a8671708fb4e12af4bc305ed2764131b788eb5aceb3547515d602e91c4bd99bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0302</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-23 14:29:57" />
    <updated date="2023-02-02 14:08:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libtiff.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)

* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)

* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)

* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2103222" id="2103222" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122789" id="2122789" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122792" id="2122792" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122799" id="2122799" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2134432" id="2134432" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0302" id="RLSA-2023:0302" type="self" title="RLSA-2023:0302" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtiff-tools" arch="aarch64" epoch="0" version="4.4.0" release="5.el9_1" src="libtiff-4.4.0-5.el9_1.src.rpm">
          <filename>libtiff-tools-4.4.0-5.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7c923ecc66ba36aa2323f5353c57af80378c48ed0a783c86329adb92e03bf079</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0312</id>
    <title>tracker bug fix update</title>
    <issued date="2023-01-23 14:30:04" />
    <updated date="2025-10-17 21:52:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tracker.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Tracker is a powerful desktop-neutral first class object database, tag and metadata database, search tool, and indexer. It consists of a common object database that allows entities to have an almost infinite number of properties, metadata (both embedded and harvested, as well as user definable), a comprehensive database of keywords and tags, and links to other entities. It provides additional features for file-based objects including context linking and audit trails for a file object. It has the ability to index, store, and harvest metadata, retrieve and search all types of files and other first class objects.

Bug Fix:

* GTK 3 directly depends on libsoup 2 (BZ#2141023)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141023" id="2141023" type="bugzilla" title="* GTK 3 directly depends on libsoup 2" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0312" id="RLBA-2023:0312" type="self" title="RLBA-2023:0312" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tracker-devel" arch="aarch64" epoch="0" version="3.1.2" release="3.el9_1" src="tracker-3.1.2-3.el9_1.src.rpm">
          <filename>tracker-devel-3.1.2-3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">ceda233807b75d21d7a024395e67fc993b9e67ae034027f0d2dfe1d681c511ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0311</id>
    <title>libvirt bug fix and enhancement update</title>
    <issued date="2023-01-23 14:30:04" />
    <updated date="2023-02-02 14:08:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Bug Fixes:

* libvirt doesn't catch mdevs created thru sysfs (BZ#2141364)

* libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted (BZ#2152083)

* qemuAgentGetDisks cannot parse response from a guest agent running in Windows VM (BZ#2154410)

Enhancement:

* Backport the qemuDomainGetStatsCpu fallback Implementation (BZ#2157094)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141364" id="2141364" type="bugzilla" title="* libvirt doesn't catch mdevs created thru sysfs" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2152083" id="2152083" type="bugzilla" title="* libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2154410" id="2154410" type="bugzilla" title="* qemuAgentGetDisks cannot parse response from a guest agent running in Windows VM" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2157094" id="2157094" type="bugzilla" title="* Backport the qemuDomainGetStatsCpu fallback Implementation" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0311" id="RLBA-2023:0311" type="self" title="RLBA-2023:0311" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="8.5.0" release="7.3.el9_1" src="libvirt-8.5.0-7.3.el9_1.src.rpm">
          <filename>libvirt-devel-8.5.0-7.3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7aa2a477b7185171070343da752fa84d48a158621b064677a7781d35f7fe05f0</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="8.5.0" release="7.3.el9_1" src="libvirt-8.5.0-7.3.el9_1.src.rpm">
          <filename>libvirt-docs-8.5.0-7.3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">27d253a1a391014ae1d2daf24217849894cab1c407d7f7f5bfff186d81855822</sum>
        </package>
        <package name="libvirt-lock-sanlock" arch="aarch64" epoch="0" version="8.5.0" release="7.3.el9_1" src="libvirt-8.5.0-7.3.el9_1.src.rpm">
          <filename>libvirt-lock-sanlock-8.5.0-7.3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c5b8351a4fb990e6b3a6eee2332e85bf10d5e0f08683e7b4e272a3729c48d019</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0313</id>
    <title>nmstate bug fix update</title>
    <issued date="2023-01-23 14:30:05" />
    <updated date="2023-02-02 14:08:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nmstate.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner and aimed to satisfy enterprise needs to manage host networking through a northbound declarative API and multi provider support on the southbound.

Bug Fix:

* Cannot move bridge port to bond (BZ#2148394)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2148394" id="2148394" type="bugzilla" title="* Cannot move bridge port to bond" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0313" id="RLBA-2023:0313" type="self" title="RLBA-2023:0313" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nmstate-devel" arch="aarch64" epoch="0" version="2.1.4" release="2.el9_1" src="nmstate-2.1.4-2.el9_1.src.rpm">
          <filename>nmstate-devel-2.1.4-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2e43aeba85326d6820874bee279994d090657bb9ff33bc39c7ca51286a9820ec</sum>
        </package>
        <package name="nmstate-static" arch="aarch64" epoch="0" version="2.1.4" release="2.el9_1" src="nmstate-2.1.4-2.el9_1.src.rpm">
          <filename>nmstate-static-2.1.4-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">6ea90fdd1c97b2621dc5d499bf49c0d52d0ff0dbcad203d6043d1cc500d8bcef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0316</id>
    <title>nbdkit bug fix update</title>
    <issued date="2023-01-23 14:30:07" />
    <updated date="2023-02-02 14:08:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nbdkit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Network Block Device (NBD) is a protocol for accessing hard disks and other disk-like devices over the network. The nbdkit toolkit utilizes NBD to create servers with minimal dependencies. The package contains plug-in support for the C and Python programming languages.

Bug Fix:

* nbdkit: error: /home/vddk8.0.0/lib64/libvixDiskLib.so.7: cannot open shared object file: No such file or directory (BZ#2148498)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2148498" id="2148498" type="bugzilla" title="* nbdkit: error: /home/vddk8.0.0/lib64/libvixDiskLib.so.7: cannot open shared object file: No such file or directory" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0316" id="RLBA-2023:0316" type="self" title="RLBA-2023:0316" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nbdkit-devel" arch="aarch64" epoch="0" version="1.30.8" release="2.el9_1" src="nbdkit-1.30.8-2.el9_1.src.rpm">
          <filename>nbdkit-devel-1.30.8-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">fd8e24745d1065ff269c9ae1dee5f77307c108e5b2b520dafb7e409c7dc1b46d</sum>
        </package>
        <package name="nbdkit-example-plugins" arch="aarch64" epoch="0" version="1.30.8" release="2.el9_1" src="nbdkit-1.30.8-2.el9_1.src.rpm">
          <filename>nbdkit-example-plugins-1.30.8-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">9abb1acbc71fe75c292a8b92a545d895bd8c7d204f0f6883144c3702daa7323c</sum>
        </package>
        <package name="nbdkit-srpm-macros" arch="noarch" epoch="0" version="1.30.8" release="2.el9_1" src="nbdkit-1.30.8-2.el9_1.src.rpm">
          <filename>nbdkit-srpm-macros-1.30.8-2.el9_1.noarch.rpm</filename>
          <sum type="sha256">341e29ed559ac990037aaa739d3148e8b7efbacb71528ef4706444f24ab24f69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0320</id>
    <title>ipa bug fix and enhancement update</title>
    <issued date="2023-01-23 14:30:10" />
    <updated date="2023-02-02 14:08:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Bug Fix(es) and Enhancement(s):

* vault interoperability with older Rocky Linux systems is broken (BZ#2149274)

* ipa-client-install does not maintain server affinity during installation (BZ#2150270)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2149274" id="2149274" type="bugzilla" title="* vault interoperability with older RHEL systems is broken" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2150270" id="2150270" type="bugzilla" title="* ipa-client-install does not maintain server affinity during installation" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0320" id="RLBA-2023:0320" type="self" title="RLBA-2023:0320" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.10.0" release="8.el9_1" src="ipa-4.10.0-8.el9_1.src.rpm">
          <filename>python3-ipatests-4.10.0-8.el9_1.noarch.rpm</filename>
          <sum type="sha256">2f5153a5fdb52d80da4c1461d827ee67ff894532d0c85d9fcf44be5e9901a719</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8419</id>
    <title>kronosnet bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:53" />
    <updated date="2023-02-02 14:08:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kronosnet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2024090" id="2024090" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8419" id="RLBA-2022:8419" type="self" title="RLBA-2022:8419" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libknet1" arch="aarch64" epoch="0" version="1.24" release="2.el9" src="kronosnet-1.24-2.el9.src.rpm">
          <filename>libknet1-1.24-2.el9.aarch64.rpm</filename>
          <sum type="sha256">242fab96e478e7bd55e25182ef2a0845e10fd06c8bfa01aa73aef7fadde3f1a0</sum>
        </package>
        <package name="libknet1-devel" arch="aarch64" epoch="0" version="1.24" release="2.el9" src="kronosnet-1.24-2.el9.src.rpm">
          <filename>libknet1-devel-1.24-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c63509f4e26a352a898a6f95e4237f0bd7e130ebe6435a51f78d5217396a4b2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2316</id>
    <title>new packages: criu</title>
    <issued date="2022-05-17 05:54:22" />
    <updated date="2023-02-02 14:08:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for criu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2000882" id="2000882" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044826" id="2044826" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2316" id="RLBA-2022:2316" type="self" title="RLBA-2022:2316" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="criu-devel" arch="aarch64" epoch="0" version="3.15" release="13.el9" src="criu-3.15-13.el9.src.rpm">
          <filename>criu-devel-3.15-13.el9.aarch64.rpm</filename>
          <sum type="sha256">4f9feb193b3a471428902401dbbee63cf8315802cf3a880a5a650f5572011c4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2382</id>
    <title>new packages: evolution</title>
    <issued date="2022-05-17 05:58:50" />
    <updated date="2023-02-02 14:08:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for evolution.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2382" id="RLBA-2022:2382" type="self" title="RLBA-2022:2382" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="evolution-devel" arch="aarch64" epoch="0" version="3.40.4" release="3.el9" src="evolution-3.40.4-3.el9.src.rpm">
          <filename>evolution-devel-3.40.4-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8d06525b48a7bc6883c4aa00a2dc45b25e2841e36174ac45bf8d623bd0879d39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2393</id>
    <title>new packages: gdm</title>
    <issued date="2022-05-17 05:59:29" />
    <updated date="2023-02-02 14:08:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gdm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1999586" id="1999586" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2009044" id="2009044" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015234" id="2015234" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2017439" id="2017439" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2017859" id="2017859" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2056931" id="2056931" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065901" id="2065901" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2393" id="RLBA-2022:2393" type="self" title="RLBA-2022:2393" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gdm-devel" arch="aarch64" epoch="1" version="40.1" release="13.el9_0.4" src="gdm-40.1-13.el9_0.4.src.rpm">
          <filename>gdm-devel-40.1-13.el9_0.4.aarch64.rpm</filename>
          <sum type="sha256">0110ce71d456603d28e984b2782ffd9f2173e8e4dfe66ffa3454691236daf89f</sum>
        </package>
        <package name="gdm-pam-extensions-devel" arch="aarch64" epoch="1" version="40.1" release="13.el9_0.4" src="gdm-40.1-13.el9_0.4.src.rpm">
          <filename>gdm-pam-extensions-devel-40.1-13.el9_0.4.aarch64.rpm</filename>
          <sum type="sha256">2cc83c932c4c4c0f6784acac9da08a9d910212669cd83886bfe8470aa891ff19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2410</id>
    <title>new packages: nginx</title>
    <issued date="2022-05-17 06:01:07" />
    <updated date="2023-02-02 14:08:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nginx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1991720" id="1991720" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2006420" id="2006420" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2006822" id="2006822" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2007019" id="2007019" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015250" id="2015250" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2410" id="RLBA-2022:2410" type="self" title="RLBA-2022:2410" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nginx-mod-devel" arch="aarch64" epoch="1" version="1.20.1" release="10.el9" src="nginx-1.20.1-10.el9.src.rpm">
          <filename>nginx-mod-devel-1.20.1-10.el9.aarch64.rpm</filename>
          <sum type="sha256">3839bbb8c5de585d2a1ce7d3e62c3fb2217b897e91068bbcb035898d25d7f2e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2481</id>
    <title>new packages: freerdp</title>
    <issued date="2022-05-17 06:06:36" />
    <updated date="2023-02-02 14:08:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for freerdp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2481" id="RLBA-2022:2481" type="self" title="RLBA-2022:2481" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freerdp-devel" arch="aarch64" epoch="2" version="2.4.1" release="2.el9" src="freerdp-2.4.1-2.el9.src.rpm">
          <filename>freerdp-devel-2.4.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d400b96d7be89fc059e94f5568fe55bc5dcfd971b5479185298229bd07816440</sum>
        </package>
        <package name="libwinpr-devel" arch="aarch64" epoch="2" version="2.4.1" release="2.el9" src="freerdp-2.4.1-2.el9.src.rpm">
          <filename>libwinpr-devel-2.4.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e2254de6b187a8b1ced873e3398bf0c507322d11de40b29c5d2cf49bd6e6e3c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2531</id>
    <title>new packages: sdl12-compat</title>
    <issued date="2022-05-17 06:11:00" />
    <updated date="2023-02-02 14:08:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sdl12-compat.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2531" id="RLBA-2022:2531" type="self" title="RLBA-2022:2531" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sdl12-compat-devel" arch="aarch64" epoch="0" version="0.0.1~git.20211125.4e4527a" release="4.el9" src="sdl12-compat-0.0.1~git.20211125.4e4527a-4.el9.src.rpm">
          <filename>sdl12-compat-devel-0.0.1~git.20211125.4e4527a-4.el9.aarch64.rpm</filename>
          <sum type="sha256">5c683b161c0c1313d062c32366304a83dbff38c4d90526ff8ec2c6875e1680f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3755</id>
    <title>new packages: sanlock</title>
    <issued date="2022-05-17 07:33:14" />
    <updated date="2023-02-02 14:08:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sanlock.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3755" id="RLBA-2022:3755" type="self" title="RLBA-2022:3755" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sanlock-devel" arch="aarch64" epoch="0" version="3.8.4" release="1.el9" src="sanlock-3.8.4-1.el9.src.rpm">
          <filename>sanlock-devel-3.8.4-1.el9.aarch64.rpm</filename>
          <sum type="sha256">f0fb7c0d22e33c49ea2ce4f2ff0409d69f60374020710dd5f159103e52d98fee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3989</id>
    <title>new packages: jitterentropy</title>
    <issued date="2022-05-17 07:54:05" />
    <updated date="2023-02-02 14:08:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jitterentropy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015560" id="2015560" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3989" id="RLBA-2022:3989" type="self" title="RLBA-2022:3989" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jitterentropy-devel" arch="aarch64" epoch="0" version="3.3.1" release="2.el9" src="jitterentropy-3.3.1-2.el9.src.rpm">
          <filename>jitterentropy-devel-3.3.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">aff1d6e477d6bc698484ed660df497a5e2856643508a30e8d43ed38b6499139f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3997</id>
    <title>new packages: shadow-utils</title>
    <issued date="2022-05-17 07:54:56" />
    <updated date="2023-02-02 14:08:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for shadow-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1993081" id="1993081" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2013015" id="2013015" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2020238" id="2020238" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2024834" id="2024834" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3997" id="RLBA-2022:3997" type="self" title="RLBA-2022:3997" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="shadow-utils-subid-devel" arch="aarch64" epoch="2" version="4.9" release="3.el9" src="shadow-utils-4.9-3.el9.src.rpm">
          <filename>shadow-utils-subid-devel-4.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b310b489f2f833d9e96744e0d7bf72d8f0871e3af116b7df724e41666f3879af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4073</id>
    <title>new packages: libuser</title>
    <issued date="2022-05-17 08:01:13" />
    <updated date="2023-02-02 14:08:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libuser.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1993633" id="1993633" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4073" id="RLBA-2022:4073" type="self" title="RLBA-2022:4073" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libuser-devel" arch="aarch64" epoch="0" version="0.63" release="10.el9" src="libuser-0.63-10.el9.src.rpm">
          <filename>libuser-devel-0.63-10.el9.aarch64.rpm</filename>
          <sum type="sha256">f454c3030ec78da5ed9939cb2dfd38d6856bc7fcd1340809ef738256f8c47a8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4171</id>
    <title>new packages: libnftnl</title>
    <issued date="2022-05-17 08:07:49" />
    <updated date="2023-02-02 14:08:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnftnl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4171" id="RLBA-2022:4171" type="self" title="RLBA-2022:4171" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnftnl-devel" arch="aarch64" epoch="0" version="1.1.9" release="4.el9" src="libnftnl-1.1.9-4.el9.src.rpm">
          <filename>libnftnl-devel-1.1.9-4.el9.aarch64.rpm</filename>
          <sum type="sha256">91e93657561ec2754bb7f15e1b0a2d738c084fbd4c4c59eae6c5085514705f4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4186</id>
    <title>new packages: libtirpc</title>
    <issued date="2022-05-17 08:08:54" />
    <updated date="2023-02-02 14:08:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtirpc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4186" id="RLBA-2022:4186" type="self" title="RLBA-2022:4186" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtirpc-devel" arch="aarch64" epoch="0" version="1.3.2" release="1.el9" src="libtirpc-1.3.2-1.el9.src.rpm">
          <filename>libtirpc-devel-1.3.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">1291372d604d5d4ac473b7acea314002b939d3d63783b3b5a2d884441cd62443</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4232</id>
    <title>new packages: parted</title>
    <issued date="2022-05-17 08:12:52" />
    <updated date="2023-02-02 14:08:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for parted.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4232" id="RLBA-2022:4232" type="self" title="RLBA-2022:4232" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="parted-devel" arch="aarch64" epoch="0" version="3.4" release="6.el9" src="parted-3.4-6.el9.src.rpm">
          <filename>parted-devel-3.4-6.el9.aarch64.rpm</filename>
          <sum type="sha256">49f559faa5c92fc40fd349ef7c42c41d96c548fbefc28844f81b95f80b235e6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2496</id>
    <title>new packages: opencsd</title>
    <issued date="2022-05-17 06:08:03" />
    <updated date="2023-02-02 14:08:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opencsd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2014273" id="2014273" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2031794" id="2031794" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2031802" id="2031802" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2041578" id="2041578" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2496" id="RLBA-2022:2496" type="self" title="RLBA-2022:2496" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opencsd-devel" arch="aarch64" epoch="0" version="1.2.0" release="2.el9" src="opencsd-1.2.0-2.el9.src.rpm">
          <filename>opencsd-devel-1.2.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">86e3a01294fda19d75d1fd2aaef63a18641c684aa3b8a3128b710cf07a525416</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8440</id>
    <title>mutter bug fix and enhancement update</title>
    <issued date="2022-11-15 15:35:46" />
    <updated date="2023-02-02 14:08:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mutter.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Mutter is a compositing window manager that displays and manages desktop
through OpenGL. It combines the window-management logic inherited from the
Metacity window manager with a display engine that uses the Clutter
toolkit.

Bug Fix(es) and Enhancement(s):

* [AMDCLIENT 9.1 Bug] [Lenovo]When switch to some resolutions will be black screen [Rocky Linux-9.1.0.z] (BZ#2136747)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:8440" id="RLBA-2022:8440" type="self" title="RLBA-2022:8440" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mutter-devel" arch="aarch64" epoch="0" version="40.9" release="10.el9_1" src="mutter-40.9-10.el9_1.src.rpm">
          <filename>mutter-devel-40.9-10.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b63a2e8644ee10e1f2467ed4bf526733f74eba968d4d41445861b651c27a300f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8643</id>
    <title>Important: varnish security update</title>
    <issued date="2022-11-28 10:05:35" />
    <updated date="2023-02-02 14:08:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: Request Forgery Vulnerability (CVE-2022-45060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45060" id="CVE-2022-45060" type="cve" title="CVE-2022-45060" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141844" id="2141844" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8643" id="RLSA-2022:8643" type="self" title="RLSA-2022:8643" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="2.el9_1.1" src="varnish-6.6.2-2.el9_1.1.src.rpm">
          <filename>varnish-devel-6.6.2-2.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">6aecc646ff7854945a799cf7614e202096aeb71644b38d244d391e0fb7eb89f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0077</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 16:25:43" />
    <updated date="2023-02-02 14:08:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154459)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2158342" id="2158342" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0077" id="RLSA-2023:0077" type="self" title="RLSA-2023:0077" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.113" release="1.el9_1" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.113-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2cde22c09d614c32cc8d9c4759a9c401e212b19d148bb1601cec09688be7724a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0080</id>
    <title>.NET 7.0 bugfix update</title>
    <issued date="2023-01-11 16:32:28" />
    <updated date="2023-02-02 14:08:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 7.0 to SDK 7.0.102 and Runtime 7.0.2 [Rocky Linux-9.1.0.z] (BZ#2154468)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:0080" id="RLBA-2023:0080" type="self" title="RLBA-2023:0080" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.102" release="1.el9_1" src="dotnet7.0-7.0.102-1.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.102-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a4caff1b592aa16947bc3059220fa21046a56eb8f63a98c1178efdf40b50f25a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0319</id>
    <title>fontconfig bug fix update</title>
    <issued date="2023-01-23 14:30:10" />
    <updated date="2025-10-17 21:52:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fontconfig.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The fontconfig packages contain the font configuration and customization library, which is designed to locate fonts within the system and select them according to the requirements specified by the applications.

Bug fix:

* need to fix remap-dir behavior (BZ#2150227)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2150227" id="2150227" type="bugzilla" title="* need to fix remap-dir behavior" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0319" id="RLBA-2023:0319" type="self" title="RLBA-2023:0319" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fontconfig-devel-doc" arch="noarch" epoch="0" version="2.14.0" release="2.el9_1" src="fontconfig-2.14.0-2.el9_1.src.rpm">
          <filename>fontconfig-devel-doc-2.14.0-2.el9_1.noarch.rpm</filename>
          <sum type="sha256">d030938eeb9fff0af88752dc9d6dd4a23a2a9feffc69caca469f25d12ebb2429</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3895</id>
    <title>new packages: tpm2-tss</title>
    <issued date="2022-05-17 07:43:58" />
    <updated date="2023-02-02 14:13:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tpm2-tss.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1984634" id="1984634" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2023328" id="2023328" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3895" id="RLBA-2022:3895" type="self" title="RLBA-2022:3895" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tpm2-tss-devel" arch="aarch64" epoch="0" version="3.0.3" release="7.el9" src="tpm2-tss-3.0.3-7.el9.src.rpm">
          <filename>tpm2-tss-devel-3.0.3-7.el9.aarch64.rpm</filename>
          <sum type="sha256">e0aeeac5c89da3599c43e762f7e4f2cac645a170d0a43fa84b57ce73971f2cdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3922</id>
    <title>new packages: libselinux</title>
    <issued date="2022-05-17 07:46:54" />
    <updated date="2023-02-02 14:13:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libselinux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003549" id="2003549" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2052741" id="2052741" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3922" id="RLBA-2022:3922" type="self" title="RLBA-2022:3922" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libselinux-static" arch="aarch64" epoch="0" version="3.3" release="2.el9" src="libselinux-3.3-2.el9.src.rpm">
          <filename>libselinux-static-3.3-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3c2f41faeb40eb9cb11d8ece1c9d886b28fe1e48b0fa3b2a7259a75cb69d590c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3960</id>
    <title>new packages: librepo</title>
    <issued date="2022-05-17 07:51:33" />
    <updated date="2023-02-02 14:13:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librepo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3960" id="RLBA-2022:3960" type="self" title="RLBA-2022:3960" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librepo-devel" arch="aarch64" epoch="0" version="1.14.2" release="1.el9" src="librepo-1.14.2-1.el9.src.rpm">
          <filename>librepo-devel-1.14.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2460860da2f17333865d1e24fccac0a682730043f52157984dddd3809fea452c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3930</id>
    <title>new packages: libbpf</title>
    <issued date="2022-05-17 07:48:04" />
    <updated date="2023-02-02 14:13:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libbpf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2009725" id="2009725" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2012774" id="2012774" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3930" id="RLBA-2022:3930" type="self" title="RLBA-2022:3930" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbpf-devel" arch="aarch64" epoch="2" version="0.5.0" release="4.el9" src="libbpf-0.5.0-4.el9.src.rpm">
          <filename>libbpf-devel-0.5.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">725f34c49a706d4f46fd739dee3f9302c16ecd5762a05ba4185a89ca65a0d118</sum>
        </package>
        <package name="libbpf-static" arch="aarch64" epoch="2" version="0.5.0" release="4.el9" src="libbpf-0.5.0-4.el9.src.rpm">
          <filename>libbpf-static-0.5.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">471ca85a309aaa9a580772c7587e20c8b0802d5a05048147f1f2e244a6203619</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3961</id>
    <title>new packages: libsolv</title>
    <issued date="2022-05-17 07:51:37" />
    <updated date="2023-02-02 14:13:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsolv.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2006672" id="2006672" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3961" id="RLBA-2022:3961" type="self" title="RLBA-2022:3961" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsolv-devel" arch="aarch64" epoch="0" version="0.7.20" release="2.el9" src="libsolv-0.7.20-2.el9.src.rpm">
          <filename>libsolv-devel-0.7.20-2.el9.aarch64.rpm</filename>
          <sum type="sha256">af2c9762074196d00437f63d240d26a03677f676500ca86da310d745a3890694</sum>
        </package>
        <package name="libsolv-tools" arch="aarch64" epoch="0" version="0.7.20" release="2.el9" src="libsolv-0.7.20-2.el9.src.rpm">
          <filename>libsolv-tools-0.7.20-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2bdf155dad1ab730a91aa8be9e9a1d080e19165af586507496b196b431e5c9cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3965</id>
    <title>new packages: nftables</title>
    <issued date="2022-05-17 07:52:07" />
    <updated date="2023-02-02 14:13:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nftables.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003707" id="2003707" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2020668" id="2020668" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3965" id="RLBA-2022:3965" type="self" title="RLBA-2022:3965" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nftables-devel" arch="aarch64" epoch="1" version="0.9.8" release="12.el9" src="nftables-0.9.8-12.el9.src.rpm">
          <filename>nftables-devel-0.9.8-12.el9.aarch64.rpm</filename>
          <sum type="sha256">7329e1d53eae49e1f3828217b04bef9067759c3e603edcca2f5ed7627e0437ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3966</id>
    <title>new packages: gcc</title>
    <issued date="2022-05-17 07:52:10" />
    <updated date="2023-02-02 14:13:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1995092" id="1995092" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1996858" id="1996858" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2030667" id="2030667" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2034494" id="2034494" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044917" id="2044917" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2047296" id="2047296" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2047356" id="2047356" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3966" id="RLBA-2022:3966" type="self" title="RLBA-2022:3966" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gcc-plugin-devel" arch="aarch64" epoch="0" version="11.2.1" release="9.4.el9" src="gcc-11.2.1-9.4.el9.src.rpm">
          <filename>gcc-plugin-devel-11.2.1-9.4.el9.aarch64.rpm</filename>
          <sum type="sha256">b296e7f53929113490639fa13e0b22fbb3566a71cf984888f747197c6c61f80d</sum>
        </package>
        <package name="libstdc++-static" arch="aarch64" epoch="0" version="11.2.1" release="9.4.el9" src="gcc-11.2.1-9.4.el9.src.rpm">
          <filename>libstdc++-static-11.2.1-9.4.el9.aarch64.rpm</filename>
          <sum type="sha256">fec11a19da1566f662e7cb72b6dc2c397ba963f549d430258b377b0e85140307</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3972</id>
    <title>new packages: lvm2</title>
    <issued date="2022-05-17 07:52:42" />
    <updated date="2023-02-02 14:13:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lvm2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1998264" id="1998264" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1999733" id="1999733" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2005029" id="2005029" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015586" id="2015586" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2021703" id="2021703" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2027913" id="2027913" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2031775" id="2031775" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2038183" id="2038183" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040482" id="2040482" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040937" id="2040937" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051647" id="2051647" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2052355" id="2052355" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3972" id="RLBA-2022:3972" type="self" title="RLBA-2022:3972" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-devel" arch="aarch64" epoch="9" version="1.02.183" release="4.el9" src="lvm2-2.03.14-4.el9.src.rpm">
          <filename>device-mapper-devel-1.02.183-4.el9.aarch64.rpm</filename>
          <sum type="sha256">8f057951c27021f7ff24f80b4a594e7027f86d1bfcd0ee10768e5a2bcb73bad5</sum>
        </package>
        <package name="device-mapper-event-devel" arch="aarch64" epoch="9" version="1.02.183" release="4.el9" src="lvm2-2.03.14-4.el9.src.rpm">
          <filename>device-mapper-event-devel-1.02.183-4.el9.aarch64.rpm</filename>
          <sum type="sha256">14bfa4e1c1937b8fc1b2a15c52938a6608e13143fa69fd93f2ef9b63acd3a006</sum>
        </package>
        <package name="lvm2-devel" arch="aarch64" epoch="9" version="2.03.14" release="4.el9" src="lvm2-2.03.14-4.el9.src.rpm">
          <filename>lvm2-devel-2.03.14-4.el9.aarch64.rpm</filename>
          <sum type="sha256">60289a858f2d376e4c76bfc4f416a1e7f23603eeac7aeac950c52cfbcbec8f62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3998</id>
    <title>new packages: ndctl</title>
    <issued date="2022-05-17 07:55:00" />
    <updated date="2023-02-02 14:13:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ndctl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2023317" id="2023317" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2028152" id="2028152" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:3998" id="RLBA-2022:3998" type="self" title="RLBA-2022:3998" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="daxctl-devel" arch="aarch64" epoch="0" version="71.1" release="6.el9" src="ndctl-71.1-6.el9.src.rpm">
          <filename>daxctl-devel-71.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">7357f6e64069d19d8d08ebb304f4593c47005ff77f4ec687e76caf6d1ea1c393</sum>
        </package>
        <package name="ndctl-devel" arch="aarch64" epoch="0" version="71.1" release="6.el9" src="ndctl-71.1-6.el9.src.rpm">
          <filename>ndctl-devel-71.1-6.el9.aarch64.rpm</filename>
          <sum type="sha256">c3efec33c71cacba5642db66f36003a0462abda46318a4924dba53d55f1910e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4012</id>
    <title>new packages: libtdb</title>
    <issued date="2022-05-17 07:56:53" />
    <updated date="2023-02-02 14:13:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2013584" id="2013584" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4012" id="RLBA-2022:4012" type="self" title="RLBA-2022:4012" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtdb-devel" arch="aarch64" epoch="0" version="1.4.4" release="1.el9" src="libtdb-1.4.4-1.el9.src.rpm">
          <filename>libtdb-devel-1.4.4-1.el9.aarch64.rpm</filename>
          <sum type="sha256">dba3951838847a96fcc60060bca81018e3fcb604cd2e373a478923d0b3e93682</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4013</id>
    <title>new packages: libldb</title>
    <issued date="2022-05-17 07:57:02" />
    <updated date="2023-02-02 14:13:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libldb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2013588" id="2013588" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4013" id="RLBA-2022:4013" type="self" title="RLBA-2022:4013" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libldb-devel" arch="aarch64" epoch="0" version="2.4.1" release="1.el9" src="libldb-2.4.1-1.el9.src.rpm">
          <filename>libldb-devel-2.4.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ed5c881aa5d4d1835d3cf11eb512a26d6c87cce42ed12f76ae257320d619994b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4017</id>
    <title>new packages: bluez</title>
    <issued date="2022-05-17 07:57:26" />
    <updated date="2023-02-02 14:13:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bluez.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4017" id="RLBA-2022:4017" type="self" title="RLBA-2022:4017" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bluez-libs-devel" arch="aarch64" epoch="0" version="5.56" release="8.el9" src="bluez-5.56-8.el9.src.rpm">
          <filename>bluez-libs-devel-5.56-8.el9.aarch64.rpm</filename>
          <sum type="sha256">06993dac1210db2a82817da1d3170b41631d37a4658602a0338ab76c03834195</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4026</id>
    <title>new packages: sg3_utils</title>
    <issued date="2022-05-17 07:58:13" />
    <updated date="2023-02-02 14:13:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sg3_utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2011810" id="2011810" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2044433" id="2044433" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4026" id="RLBA-2022:4026" type="self" title="RLBA-2022:4026" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sg3_utils-devel" arch="aarch64" epoch="0" version="1.47" release="8.el9" src="sg3_utils-1.47-8.el9.src.rpm">
          <filename>sg3_utils-devel-1.47-8.el9.aarch64.rpm</filename>
          <sum type="sha256">decef8fdf2043a48b0d527c53713087038850089a3314e0b588b799f23be5aeb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4028</id>
    <title>new packages: nfs-utils</title>
    <issued date="2022-05-17 07:58:18" />
    <updated date="2023-02-02 14:13:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nfs-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1966643" id="1966643" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1996211" id="1996211" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1999476" id="1999476" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4028" id="RLBA-2022:4028" type="self" title="RLBA-2022:4028" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnfsidmap-devel" arch="aarch64" epoch="1" version="2.5.4" release="10.el9" src="nfs-utils-2.5.4-10.el9.src.rpm">
          <filename>libnfsidmap-devel-2.5.4-10.el9.aarch64.rpm</filename>
          <sum type="sha256">efe54068832fa62c30803885807eef56068edca65a1455ee53667d59dc25c972</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4055</id>
    <title>new packages: bash</title>
    <issued date="2022-05-17 07:59:55" />
    <updated date="2023-02-02 14:13:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4055" id="RLBA-2022:4055" type="self" title="RLBA-2022:4055" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bash-devel" arch="aarch64" epoch="0" version="5.1.8" release="4.el9" src="bash-5.1.8-4.el9.src.rpm">
          <filename>bash-devel-5.1.8-4.el9.aarch64.rpm</filename>
          <sum type="sha256">b3922702598fb1f966b4b0988af5a88b4da2df870781b62ab781576f8380bc3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4082</id>
    <title>new packages: util-linux</title>
    <issued date="2022-05-17 08:01:36" />
    <updated date="2023-02-02 14:13:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for util-linux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2000137" id="2000137" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2000477" id="2000477" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2021462" id="2021462" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2033622" id="2033622" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2037212" id="2037212" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040366" id="2040366" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2047952" id="2047952" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057046" id="2057046" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:4082" id="RLBA-2022:4082" type="self" title="RLBA-2022:4082" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfdisk-devel" arch="aarch64" epoch="0" version="2.37.4" release="3.el9" src="util-linux-2.37.4-3.el9.src.rpm">
          <filename>libfdisk-devel-2.37.4-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2790d2057cb8adbc1ddd4b345d157a3d4f2f264c79b58948490eb1bc50891e4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4113</id>
    <title>new packages: ding-libs</title>
    <issued date="2022-05-17 08:03:42" />
    <updated date="2023-02-02 14:13:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ding-libs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4113" id="RLBA-2022:4113" type="self" title="RLBA-2022:4113" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbasicobjects-devel" arch="aarch64" epoch="0" version="0.1.1" release="51.el9" src="ding-libs-0.6.1-51.el9.src.rpm">
          <filename>libbasicobjects-devel-0.1.1-51.el9.aarch64.rpm</filename>
          <sum type="sha256">593498ef9c48454fee0736323dd7a874dc05bc878008f4b5aa00f749b2c26e03</sum>
        </package>
        <package name="libcollection-devel" arch="aarch64" epoch="0" version="0.7.0" release="51.el9" src="ding-libs-0.6.1-51.el9.src.rpm">
          <filename>libcollection-devel-0.7.0-51.el9.aarch64.rpm</filename>
          <sum type="sha256">f7febe011cbd4d9c9f14ed32c29634393b382599ed85da6000dc3536756c3437</sum>
        </package>
        <package name="libini_config-devel" arch="aarch64" epoch="0" version="1.3.1" release="51.el9" src="ding-libs-0.6.1-51.el9.src.rpm">
          <filename>libini_config-devel-1.3.1-51.el9.aarch64.rpm</filename>
          <sum type="sha256">cca0e5870e995746d5d98b4dc5541ef839a7c8810bc83c6aced9c5df3a0d6c76</sum>
        </package>
        <package name="libpath_utils-devel" arch="aarch64" epoch="0" version="0.2.1" release="51.el9" src="ding-libs-0.6.1-51.el9.src.rpm">
          <filename>libpath_utils-devel-0.2.1-51.el9.aarch64.rpm</filename>
          <sum type="sha256">950bb1c7571fe4fdf5ba30c738b8823d9c90949ca3437cb72e35b60ebe1810e2</sum>
        </package>
        <package name="libref_array-devel" arch="aarch64" epoch="0" version="0.1.5" release="51.el9" src="ding-libs-0.6.1-51.el9.src.rpm">
          <filename>libref_array-devel-0.1.5-51.el9.aarch64.rpm</filename>
          <sum type="sha256">ceeb8fd20411f8591f5ceb23a79e12ec46b14b58c71969b1267e4192eeb82ddd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4185</id>
    <title>new packages: libtevent</title>
    <issued date="2022-05-17 08:08:52" />
    <updated date="2023-02-02 14:13:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtevent.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4185" id="RLBA-2022:4185" type="self" title="RLBA-2022:4185" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtevent-devel" arch="aarch64" epoch="0" version="0.11.0" release="1.el9" src="libtevent-0.11.0-1.el9.src.rpm">
          <filename>libtevent-devel-0.11.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">8757d90b1a394c9bac66b3901894f725a476bc671a42be0245367734b142b002</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4245</id>
    <title>new packages: pygobject3</title>
    <issued date="2022-05-17 08:13:27" />
    <updated date="2023-02-02 14:13:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pygobject3.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4245" id="RLBA-2022:4245" type="self" title="RLBA-2022:4245" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-gobject-devel" arch="aarch64" epoch="0" version="3.40.1" release="5.el9" src="pygobject3-3.40.1-5.el9.src.rpm">
          <filename>python3-gobject-devel-3.40.1-5.el9.aarch64.rpm</filename>
          <sum type="sha256">c3fa7bb05788653dfd5e2f7149f092d8ad2e17dd240493cf285cd16ae28e64ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:5247</id>
    <title>samba bug fix and enhancement update</title>
    <issued date="2022-06-28 08:27:20" />
    <updated date="2023-02-02 14:13:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for samba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Bug Fix(es) and Enhancement(s):

* PAM Kerberos authentication incorrectly fails with a clock skew error (BZ#2079301)

* /etc/samba/smbusers erroneously applies unix group memberships to user account entries (BZ#2079302)

* samba.conf's force user issue when the user only exist in the active directory and not locally (BZ#2079305)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079301" id="2079301" type="bugzilla" title="* PAM Kerberos authentication incorrectly fails with a clock skew error" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079302" id="2079302" type="bugzilla" title="* /etc/samba/smbusers erroneously applies unix group memberships to user account entries" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2079305" id="2079305" type="bugzilla" title="* samba.conf's force user issue when the user only exist in the active directory and not locally" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:5247" id="RLBA-2022:5247" type="self" title="RLBA-2022:5247" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsmbclient-devel" arch="aarch64" epoch="0" version="4.15.5" release="108.el9_0" src="samba-4.15.5-108.el9_0.src.rpm">
          <filename>libsmbclient-devel-4.15.5-108.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5678118807b2ead074fcc3df48b1850bae2d9b5a3254809e4c2640d9ec015702</sum>
        </package>
        <package name="libwbclient-devel" arch="aarch64" epoch="0" version="4.15.5" release="108.el9_0" src="samba-4.15.5-108.el9_0.src.rpm">
          <filename>libwbclient-devel-4.15.5-108.el9_0.aarch64.rpm</filename>
          <sum type="sha256">a9320b4e72df3497c45d7f65ca0be4d621b3566012a3b3099e9240b3c083ca3d</sum>
        </package>
        <package name="samba-devel" arch="aarch64" epoch="0" version="4.15.5" release="108.el9_0" src="samba-4.15.5-108.el9_0.src.rpm">
          <filename>samba-devel-4.15.5-108.el9_0.aarch64.rpm</filename>
          <sum type="sha256">eadde06257dd5faee88c6e8d51e9b045776e9d9ade6e6bc9372de6467bf30ccf</sum>
        </package>
        <package name="samba-pidl" arch="noarch" epoch="0" version="4.15.5" release="108.el9_0" src="samba-4.15.5-108.el9_0.src.rpm">
          <filename>samba-pidl-4.15.5-108.el9_0.noarch.rpm</filename>
          <sum type="sha256">548974689d90bd05a6b35d977b2750fada9d0d417ced2ce2fd2b559d5a01614c</sum>
        </package>
        <package name="samba-test" arch="aarch64" epoch="0" version="4.15.5" release="108.el9_0" src="samba-4.15.5-108.el9_0.src.rpm">
          <filename>samba-test-4.15.5-108.el9_0.aarch64.rpm</filename>
          <sum type="sha256">92b82cff4c6cc4cbc1d3b58e37f495d201cc98d74ac44dbfd8fe004398053d2e</sum>
        </package>
        <package name="samba-test-libs" arch="aarch64" epoch="0" version="4.15.5" release="108.el9_0" src="samba-4.15.5-108.el9_0.src.rpm">
          <filename>samba-test-libs-4.15.5-108.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f9774383f7a2f24a0e3e128c859b1e382238ffbe9404f51d032b4b9bb922667c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:5252</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2022-06-28 08:27:33" />
    <updated date="2023-02-02 14:13:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libarchive.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libarchive programming library can create and read several different
streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images.
Libarchive is used notably in the bsdtar utility, scripting language bindings
such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
(CVE-2022-26280)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26280" id="CVE-2022-26280" type="cve" title="CVE-2022-26280" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2071931" id="2071931" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:5252" id="RLSA-2022:5252" type="self" title="RLSA-2022:5252" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libarchive-devel" arch="aarch64" epoch="0" version="3.5.3" release="2.el9_0" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-devel-3.5.3-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c9a7c0d563ee9925358584bae348c354ec572781d3c4b96c89a8620bab2e31a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:5253</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2022-06-28 08:27:35" />
    <updated date="2023-02-02 14:13:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Bug Fix(es) and Enhancement(s):

* Use right sdap_domain in ad_domain_info_send (BZ#2072959)

* pam_sss_gss ceased to work after upgrade to 8.6 (BZ#2089251)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2072959" id="2072959" type="bugzilla" title="* Use right sdap_domain in ad_domain_info_send" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2089251" id="2089251" type="bugzilla" title="* pam_sss_gss ceased to work after upgrade to 8.6" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:5253" id="RLBA-2022:5253" type="self" title="RLBA-2022:5253" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.6.2" release="4.el9_0.1" src="sssd-2.6.2-4.el9_0.1.src.rpm">
          <filename>libsss_nss_idmap-devel-2.6.2-4.el9_0.1.aarch64.rpm</filename>
          <sum type="sha256">1a226c77303946eb3d370ff1676b92393c29b08c82d402607f3cc24615339fac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:5255</id>
    <title>NetworkManager bug fix and enhancement update</title>
    <issued date="2022-06-28 08:27:40" />
    <updated date="2023-02-02 14:13:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for NetworkManager.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>NetworkManager is a system network service that manages network devices and
connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

Bug Fix(es) and Enhancement(s):

* NetworkManager 1.36.0 loses DHCP lease and doesn't try again (BZ#2094715)

* IP assigned through DHCP became secondary IP address (BZ#2094778)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094715" id="2094715" type="bugzilla" title="* NetworkManager 1.36.0 loses DHCP lease and doesn't try again" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094778" id="2094778" type="bugzilla" title="* IP assigned through DHCP became secondary IP address" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:5255" id="RLBA-2022:5255" type="self" title="RLBA-2022:5255" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="NetworkManager-libnm-devel" arch="aarch64" epoch="1" version="1.36.0" release="5.el9_0" src="NetworkManager-1.36.0-5.el9_0.src.rpm">
          <filename>NetworkManager-libnm-devel-1.36.0-5.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5f67d0b71edb850096451111b7ae86cff68f9226f281d4f4783e3950646fa1ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:6606</id>
    <title>cryptsetup bug fix and enhancement update</title>
    <issued date="2022-09-20 11:40:08" />
    <updated date="2023-02-02 14:14:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cryptsetup.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.

Bug Fix(es) and Enhancement(s):

* Libcryptsetup must check only for '/proc/sys/crypto/fips_enabled' to detect system in FIPS mode. (BZ#2118654)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2118654" id="2118654" type="bugzilla" title="* Libcryptsetup must check only for '/proc/sys/crypto/fips_enabled' to detect system in FIPS mode." />
      <reference href="https://errata.rockylinux.org/RLBA-2022:6606" id="RLBA-2022:6606" type="self" title="RLBA-2022:6606" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cryptsetup-devel" arch="aarch64" epoch="0" version="2.4.3" release="4.el9_0.1" src="cryptsetup-2.4.3-4.el9_0.1.src.rpm">
          <filename>cryptsetup-devel-2.4.3-4.el9_0.1.aarch64.rpm</filename>
          <sum type="sha256">d84a53dd2731e6f9ad644916f0f6be19a38e08e80532fbc15ba2a5be0afd00cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:6605</id>
    <title>glibc bug fix and enhancement update</title>
    <issued date="2022-09-20 11:39:56" />
    <updated date="2023-02-02 14:14:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

* glibc: Incorrect results of POWER9-optimized strncpy (BZ#2095450)

* glibc: Backport __rseq_* symbols from glibc 2.35 (BZ#2115828)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2095450" id="2095450" type="bugzilla" title="* glibc: Incorrect results of POWER9-optimized strncpy" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115828" id="2115828" type="bugzilla" title="* glibc: Backport __rseq_* symbols from glibc 2.35" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:6605" id="RLBA-2022:6605" type="self" title="RLBA-2022:6605" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="28.el9_0.2" src="glibc-2.34-28.el9_0.2.src.rpm">
          <filename>glibc-benchtests-2.34-28.el9_0.2.aarch64.rpm</filename>
          <sum type="sha256">7bb088b1ef82fdb5566c25ab67b41113eb49a396f3226c609d9f6820b3190021</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="28.el9_0.2" src="glibc-2.34-28.el9_0.2.src.rpm">
          <filename>glibc-nss-devel-2.34-28.el9_0.2.aarch64.rpm</filename>
          <sum type="sha256">5f305e0cb1e0f0dc269a2ff24f302c0dfee76fe8c6bb07e36cea3571cdcdfdf2</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="28.el9_0.2" src="glibc-2.34-28.el9_0.2.src.rpm">
          <filename>glibc-static-2.34-28.el9_0.2.aarch64.rpm</filename>
          <sum type="sha256">a80c1d707007dcbc0136135d087944b3eec64e73e4eb07722d02c1bf2cd8c811</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="28.el9_0.2" src="glibc-2.34-28.el9_0.2.src.rpm">
          <filename>nss_db-2.34-28.el9_0.2.aarch64.rpm</filename>
          <sum type="sha256">5ed0a7da78171759695d08ccbaec1259fb4049de6093c82121f9e748adff986c</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="28.el9_0.2" src="glibc-2.34-28.el9_0.2.src.rpm">
          <filename>nss_hesiod-2.34-28.el9_0.2.aarch64.rpm</filename>
          <sum type="sha256">074728760ff30e64a20335492bb65fc43e05baea7f5303134745205d901f7eb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:6609</id>
    <title>libdnf bug fix and enhancement update</title>
    <issued date="2022-09-20 11:40:45" />
    <updated date="2023-02-02 14:14:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdnf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>A library providing simplified C and Python API to the libsolv package dependency solver.

Bug Fix(es) and Enhancement(s):

* Performing security update from Rocky Linux 8.5 to Rocky Linux 8.6 causes dependency errors. (BZ#2111522)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:6609" id="RLBA-2022:6609" type="self" title="RLBA-2022:6609" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdnf-devel" arch="aarch64" epoch="0" version="0.65.0" release="5.1.el9" src="libdnf-0.65.0-5.1.el9.src.rpm">
          <filename>libdnf-devel-0.65.0-5.1.el9.aarch64.rpm</filename>
          <sum type="sha256">f2ea31ba42e3e037c2152a66d90cc0c19f367d9ce8c522d2b67936e7c164854c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7185</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-10-25 14:24:42" />
    <updated date="2023-02-02 14:14:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for device-mapper-multipath.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41974" id="CVE-2022-41974" type="cve" title="CVE-2022-41974" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133988" id="2133988" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7185" id="RLSA-2022:7185" type="self" title="RLSA-2022:7185" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-multipath-devel" arch="aarch64" epoch="0" version="0.8.7" release="7.el9_0.1" src="device-mapper-multipath-0.8.7-7.el9_0.1.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-7.el9_0.1.aarch64.rpm</filename>
          <sum type="sha256">bf44bf862d19085aa1ff9b93e4ab0188c2c2d98ec0acc28fdb61f5971521ee9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7314</id>
    <title>Moderate: zlib security update</title>
    <issued date="2022-11-02 13:50:56" />
    <updated date="2023-02-02 14:14:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for zlib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2116639" id="2116639" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7314" id="RLSA-2022:7314" type="self" title="RLSA-2022:7314" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="zlib-static" arch="aarch64" epoch="0" version="1.2.11" release="32.el9_0" src="zlib-1.2.11-32.el9_0.src.rpm">
          <filename>zlib-static-1.2.11-32.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e60de47da40e50b1aa129db4461ccab278ca550a0ec1e7ea68589d5f9be17254</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7315</id>
    <title>opencryptoki bug fix and enhancement update</title>
    <issued date="2022-11-02 13:51:14" />
    <updated date="2023-02-02 14:14:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opencryptoki.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented
for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages
includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11
firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM
eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Bug Fix(es) and Enhancement(s):

* Token data are not accessible after upgrading from Rocky Linux-8.7 to Rocky Linux-9.0 (BZ#2127873)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2127873" id="2127873" type="bugzilla" title="* Token data are not accessible after upgrading from RHEL-8.7 to RHEL-9.0" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7315" id="RLBA-2022:7315" type="self" title="RLBA-2022:7315" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opencryptoki-devel" arch="aarch64" epoch="0" version="3.17.0" release="8.el9_0" src="opencryptoki-3.17.0-8.el9_0.src.rpm">
          <filename>opencryptoki-devel-3.17.0-8.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ae544162ad1668e30a713b1ff2f41b4042d392655a98ba9f37be5248312e9e1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7318</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-02 13:52:07" />
    <updated date="2023-02-02 14:14:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)

* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653)

* execve exit tracepoint not called (BZ#2106661)

* Matrox black screen on VGA output on some systems. (BZ#2112017)

* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129)

* watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857)

* Update cifs to 5.16 (BZ#2127858)

* Bad page state in process qemu-kvm  pfn:68a74600 (BZ#2127859)

* vfio zero page mappings fail after 2M instances (BZ#2128791)

* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970)

Enhancement(s):

* Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2585" id="CVE-2022-2585" type="cve" title="CVE-2022-2585" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2085300" id="2085300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2114874" id="2114874" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7318" id="RLSA-2022:7318" type="self" title="RLSA-2022:7318" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="70.30.1.el9" src="kernel-5.14.0-70.30.1.el9.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.30.1.el9.aarch64.rpm</filename>
          <sum type="sha256">b658146da4793c116b883036e663e68a69f1bfb1508a9b16f92d0845a0be73d4</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="70.30.1.el9" src="kernel-5.14.0-70.30.1.el9.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-70.30.1.el9.aarch64.rpm</filename>
          <sum type="sha256">5000df011617305749c9d8a797e874987a2173b4ab2d26915053748b3b91063e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7323</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2022-11-02 13:53:37" />
    <updated date="2023-02-02 14:14:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1834423" id="1834423" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7323" id="RLSA-2022:7323" type="self" title="RLSA-2022:7323" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.10" release="3.el9_0" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-debug-3.9.10-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">a9152b52127651d1f8d177a26bcacf71adfbd9ff0a7fa01b434f70c68edbd966</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.10" release="3.el9_0" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-idle-3.9.10-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">19d50fa198f6b337248c498c826d7717b5c5ed21f663e16ce6e60ba0d3307d94</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.10" release="3.el9_0" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-test-3.9.10-3.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ea7ac55fdbfdf96a95a1065fb0148c1d42fc6f40081c21dcae702047bf072cb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2313</id>
    <title>new packages: qt5-qtdeclarative</title>
    <issued date="2022-05-17 05:54:03" />
    <updated date="2023-02-02 14:14:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qtdeclarative.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2313" id="RLBA-2022:2313" type="self" title="RLBA-2022:2313" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtdeclarative-static" arch="aarch64" epoch="0" version="5.15.2" release="10.el9" src="qt5-qtdeclarative-5.15.2-10.el9.src.rpm">
          <filename>qt5-qtdeclarative-static-5.15.2-10.el9.aarch64.rpm</filename>
          <sum type="sha256">3f02ca09fceedabf795b184b61e76a73319f38d293965cf9a44dca757e6d6edd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2314</id>
    <title>new packages: qt5-qtbase</title>
    <issued date="2022-05-17 05:54:17" />
    <updated date="2023-02-02 14:14:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qtbase.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2314" id="RLBA-2022:2314" type="self" title="RLBA-2022:2314" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtbase-static" arch="aarch64" epoch="0" version="5.15.2" release="29.el9" src="qt5-qtbase-5.15.2-29.el9.src.rpm">
          <filename>qt5-qtbase-static-5.15.2-29.el9.aarch64.rpm</filename>
          <sum type="sha256">0c0d4b65f2b07acb67eae8883db087a9c2b5d9eaef170ea44ad2939a6cff151b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2343</id>
    <title>new packages: mutter</title>
    <issued date="2022-05-17 05:56:24" />
    <updated date="2023-02-02 14:14:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mutter.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003032" id="2003032" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040043" id="2040043" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2046159" id="2046159" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2052584" id="2052584" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2055015" id="2055015" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2343" id="RLBA-2022:2343" type="self" title="RLBA-2022:2343" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mutter-devel" arch="aarch64" epoch="0" version="40.9" release="1.el9" src="mutter-40.9-1.el9.src.rpm">
          <filename>mutter-devel-40.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3163717b9996ab5eec1b920db33e75264950f16e522f3e8eaa8298b986f8895a</sum>
        </package>
        <package name="mutter-devel" arch="aarch64" epoch="0" version="40.9" release="10.el9_1" src="mutter-40.9-1.el9.src.rpm">
          <filename>mutter-devel-40.9-10.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b63a2e8644ee10e1f2467ed4bf526733f74eba968d4d41445861b651c27a300f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2334</id>
    <title>new packages: flatpak</title>
    <issued date="2022-05-17 05:55:52" />
    <updated date="2023-02-02 14:14:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for flatpak.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1981776" id="1981776" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2006554" id="2006554" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050302" id="2050302" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051697" id="2051697" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2054215" id="2054215" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2334" id="RLBA-2022:2334" type="self" title="RLBA-2022:2334" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flatpak-devel" arch="aarch64" epoch="0" version="1.12.5" release="2.el9_0" src="flatpak-1.12.5-2.el9_0.src.rpm">
          <filename>flatpak-devel-1.12.5-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">92c246ff689d06062231a4ee0a1e7ede5ad4ea7e8c09ae2e7f9c405852089e4b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:2409</id>
    <title>new packages: libnbd</title>
    <issued date="2022-05-17 06:01:05" />
    <updated date="2023-02-02 14:14:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnbd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2011708" id="2011708" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040610" id="2040610" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2046194" id="2046194" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:2409" id="RLEA-2022:2409" type="self" title="RLEA-2022:2409" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnbd-devel" arch="aarch64" epoch="0" version="1.10.5" release="1.el9" src="libnbd-1.10.5-1.el9.src.rpm">
          <filename>libnbd-devel-1.10.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">74c1c9bf570155f5a9108a90b1aa16ae9dd47a93ef5def6253c51a24c0b0a129</sum>
        </package>
        <package name="ocaml-libnbd" arch="aarch64" epoch="0" version="1.10.5" release="1.el9" src="libnbd-1.10.5-1.el9.src.rpm">
          <filename>ocaml-libnbd-1.10.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3f11441880011fdf1be75dfd9c4ef85f51c41f303438a227793449a2a0f4cf28</sum>
        </package>
        <package name="ocaml-libnbd-devel" arch="aarch64" epoch="0" version="1.10.5" release="1.el9" src="libnbd-1.10.5-1.el9.src.rpm">
          <filename>ocaml-libnbd-devel-1.10.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3958fa9588233b8cc114489b3c4e6d1efc2a3d2b7895bd698cfb907de597dbca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2387</id>
    <title>new packages: ipa</title>
    <issued date="2022-05-17 05:59:04" />
    <updated date="2023-02-02 14:14:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1966289" id="1966289" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1980356" id="1980356" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1986054" id="1986054" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003003" id="2003003" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003004" id="2003004" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003005" id="2003005" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2005864" id="2005864" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2010701" id="2010701" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2013116" id="2013116" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2015608" id="2015608" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2020205" id="2020205" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040619" id="2040619" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2048510" id="2048510" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2049104" id="2049104" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2049174" id="2049174" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050540" id="2050540" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051582" id="2051582" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051844" id="2051844" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2053025" id="2053025" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2053586" id="2053586" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057467" id="2057467" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057471" id="2057471" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2387" id="RLBA-2022:2387" type="self" title="RLBA-2022:2387" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.9.8" release="7.el9_0" src="ipa-4.9.8-7.el9_0.src.rpm">
          <filename>python3-ipatests-4.9.8-7.el9_0.noarch.rpm</filename>
          <sum type="sha256">02836c3d9bbc1a143233cd3578f6ecbb7784b4f1022d47cc8e8c3d70dc5e2232</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2022:2408</id>
    <title>new packages: nbdkit</title>
    <issued date="2022-05-17 06:01:02" />
    <updated date="2023-02-02 14:14:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nbdkit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1999559" id="1999559" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2011709" id="2011709" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2018463" id="2018463" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2021154" id="2021154" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2029751" id="2029751" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLEA-2022:2408" id="RLEA-2022:2408" type="self" title="RLEA-2022:2408" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nbdkit-devel" arch="aarch64" epoch="0" version="1.28.5" release="1.el9" src="nbdkit-1.28.5-1.el9.src.rpm">
          <filename>nbdkit-devel-1.28.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">f68c58568d1eb3f00f6a1024ba02e8dd34c30c3a1f1487c029faf96ce946423b</sum>
        </package>
        <package name="nbdkit-example-plugins" arch="aarch64" epoch="0" version="1.28.5" release="1.el9" src="nbdkit-1.28.5-1.el9.src.rpm">
          <filename>nbdkit-example-plugins-1.28.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">963bbb7923da77c088d35913e144fce7a91021c0f099927221b62880437d78fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2414</id>
    <title>new packages: xorg-x11-server</title>
    <issued date="2022-05-17 06:01:17" />
    <updated date="2023-02-02 14:14:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xorg-x11-server.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2000921" id="2000921" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2009928" id="2009928" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2029769" id="2029769" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2046330" id="2046330" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2052605" id="2052605" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2414" id="RLBA-2022:2414" type="self" title="RLBA-2022:2414" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-devel" arch="aarch64" epoch="0" version="1.20.11" release="10.el9" src="xorg-x11-server-1.20.11-10.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-10.el9.aarch64.rpm</filename>
          <sum type="sha256">6610d6dc7502aeab7a42e5c622e9601a40f1a503261f282a78f88f957f096914</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2448</id>
    <title>new packages: fontconfig</title>
    <issued date="2022-05-17 06:03:48" />
    <updated date="2023-02-02 14:14:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fontconfig.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2023161" id="2023161" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2448" id="RLBA-2022:2448" type="self" title="RLBA-2022:2448" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fontconfig-devel-doc" arch="noarch" epoch="0" version="2.13.94" release="2.el9" src="fontconfig-2.13.94-2.el9.src.rpm">
          <filename>fontconfig-devel-doc-2.13.94-2.el9.noarch.rpm</filename>
          <sum type="sha256">f2cd76d607666fcc1eb109e5758b7b02323ee194f2d57ec84d0a4ff53189beba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2472</id>
    <title>new packages: gjs</title>
    <issued date="2022-05-17 06:05:39" />
    <updated date="2023-02-02 14:14:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gjs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2472" id="RLBA-2022:2472" type="self" title="RLBA-2022:2472" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gjs-devel" arch="aarch64" epoch="0" version="1.68.5" release="1.el9" src="gjs-1.68.5-1.el9.src.rpm">
          <filename>gjs-devel-1.68.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">f06daa4a8dbcf50eaaf2288db6b5f0488fe4414add5759d431233b0ffe896e5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2471</id>
    <title>new packages: corosync</title>
    <issued date="2022-05-17 06:05:35" />
    <updated date="2023-02-02 14:14:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for corosync.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2024652" id="2024652" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2024657" id="2024657" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2471" id="RLBA-2022:2471" type="self" title="RLBA-2022:2471" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="corosynclib" arch="aarch64" epoch="0" version="3.1.5" release="3.el9" src="corosync-3.1.5-3.el9.src.rpm">
          <filename>corosynclib-3.1.5-3.el9.aarch64.rpm</filename>
          <sum type="sha256">519eeb4fbb33ecd3f6874cb882d892472c05245846af0832a1be29c68d2de271</sum>
        </package>
        <package name="corosync-vqsim" arch="aarch64" epoch="0" version="3.1.5" release="3.el9" src="corosync-3.1.5-3.el9.src.rpm">
          <filename>corosync-vqsim-3.1.5-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2f103c8ba9ccc4d39b3e4b3b97335d58a2de606b6c40a90eaa5431f09cc246c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2479</id>
    <title>new packages: crash</title>
    <issued date="2022-05-17 06:06:24" />
    <updated date="2023-02-02 14:14:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for crash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1990071" id="1990071" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2028771" id="2028771" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2031738" id="2031738" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2034779" id="2034779" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2046012" id="2046012" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2048266" id="2048266" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2479" id="RLBA-2022:2479" type="self" title="RLBA-2022:2479" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="crash-devel" arch="aarch64" epoch="0" version="8.0.0" release="6.el9" src="crash-8.0.0-6.el9.src.rpm">
          <filename>crash-devel-8.0.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">68568a728005a6f4a82242b0041b8d1be85e0b4c9e81fcd9146d298d94ce4fb4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2483</id>
    <title>new packages: tracker</title>
    <issued date="2022-05-17 06:06:48" />
    <updated date="2023-02-02 14:14:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tracker.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2010351" id="2010351" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2483" id="RLBA-2022:2483" type="self" title="RLBA-2022:2483" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tracker-devel" arch="aarch64" epoch="0" version="3.1.2" release="2.el9" src="tracker-3.1.2-2.el9.src.rpm">
          <filename>tracker-devel-3.1.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e2fcbb13976ee5f47019f634e3ae24e1fe6e51dd11ae961c57efd7a5c3cf915c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2488</id>
    <title>new packages: supermin</title>
    <issued date="2022-05-17 06:07:15" />
    <updated date="2023-02-02 14:14:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for supermin.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2027375" id="2027375" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2488" id="RLBA-2022:2488" type="self" title="RLBA-2022:2488" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="supermin-devel" arch="aarch64" epoch="0" version="5.2.1" release="7.el9" src="supermin-5.2.1-7.el9.src.rpm">
          <filename>supermin-devel-5.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">5f7ebfafe7266ccefbdea8cfd1dabb6c39abec7d4f2523475c9ca24d3734e24f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2497</id>
    <title>new packages: ldns</title>
    <issued date="2022-05-17 06:08:05" />
    <updated date="2023-02-02 14:14:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ldns.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2008445" id="2008445" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2497" id="RLBA-2022:2497" type="self" title="RLBA-2022:2497" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ldns-devel" arch="aarch64" epoch="0" version="1.7.1" release="10.el9" src="ldns-1.7.1-10.el9.src.rpm">
          <filename>ldns-devel-1.7.1-10.el9.aarch64.rpm</filename>
          <sum type="sha256">95857ff5667f30839d7ebf1f01bfeb342be51d2d6f9ed6104129e60e3774dfaa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2527</id>
    <title>new packages: qt5-qttools</title>
    <issued date="2022-05-17 06:10:50" />
    <updated date="2023-02-02 14:14:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qttools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2527" id="RLBA-2022:2527" type="self" title="RLBA-2022:2527" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qttools-static" arch="aarch64" epoch="0" version="5.15.2" release="11.el9" src="qt5-qttools-5.15.2-11.el9.src.rpm">
          <filename>qt5-qttools-static-5.15.2-11.el9.aarch64.rpm</filename>
          <sum type="sha256">0e9285a87042c416b15744e64743ea06aba3a8f077a80a0e2c12dcca508971bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2535</id>
    <title>new packages: nautilus</title>
    <issued date="2022-05-17 06:11:19" />
    <updated date="2023-02-02 14:14:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nautilus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1995615" id="1995615" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003134" id="2003134" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2029423" id="2029423" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2535" id="RLBA-2022:2535" type="self" title="RLBA-2022:2535" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nautilus-devel" arch="aarch64" epoch="0" version="40.2" release="7.el9_0" src="nautilus-40.2-7.el9_0.src.rpm">
          <filename>nautilus-devel-40.2-7.el9_0.aarch64.rpm</filename>
          <sum type="sha256">66f0e23411691fa6a3d69f62c66a4dab0604024c6c81835c5210206b42cd1434</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2541</id>
    <title>new packages: nispor</title>
    <issued date="2022-05-17 06:11:49" />
    <updated date="2023-02-02 14:14:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nispor.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1996623" id="1996623" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2541" id="RLBA-2022:2541" type="self" title="RLBA-2022:2541" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nispor-devel" arch="aarch64" epoch="0" version="1.2.3" release="1.el9" src="nispor-1.2.3-1.el9.src.rpm">
          <filename>nispor-devel-1.2.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">005d10c788f96508689839801755d794fb5826a84bf0a53d7e7ff547918471c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2565</id>
    <title>new packages: augeas</title>
    <issued date="2022-05-17 06:13:54" />
    <updated date="2023-02-02 14:14:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for augeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040288" id="2040288" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2565" id="RLBA-2022:2565" type="self" title="RLBA-2022:2565" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="augeas-devel" arch="aarch64" epoch="0" version="1.13.0" release="1.el9" src="augeas-1.13.0-1.el9.src.rpm">
          <filename>augeas-devel-1.13.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4a5989e8564cc689fd20c838bc6eef7ab9732c097b7fcfc039bb41fa0aa2dc02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2574</id>
    <title>new packages: mesa</title>
    <issued date="2022-05-17 06:14:50" />
    <updated date="2023-02-02 14:14:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mesa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2016874" id="2016874" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2574" id="RLBA-2022:2574" type="self" title="RLBA-2022:2574" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mesa-libgbm-devel" arch="aarch64" epoch="0" version="21.3.4" release="2.el9" src="mesa-21.3.4-2.el9.src.rpm">
          <filename>mesa-libgbm-devel-21.3.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7d1b07460076964728ba7b8832c63d775dd12c61419251724dd634cb57d1159b</sum>
        </package>
        <package name="mesa-libOSMesa" arch="aarch64" epoch="0" version="21.3.4" release="2.el9" src="mesa-21.3.4-2.el9.src.rpm">
          <filename>mesa-libOSMesa-21.3.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">feb43f04273e274857c837f239e2d69c81b6421c46b762f25cae1ddd2796396a</sum>
        </package>
        <package name="mesa-libOSMesa-devel" arch="aarch64" epoch="0" version="21.3.4" release="2.el9" src="mesa-21.3.4-2.el9.src.rpm">
          <filename>mesa-libOSMesa-devel-21.3.4-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1ee0be92a2be16b218527d74c976259f5a2f8259b41a9adb2cf5ce6422e0e029</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2672</id>
    <title>new packages: varnish</title>
    <issued date="2022-05-17 06:23:10" />
    <updated date="2023-02-02 14:14:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2672" id="RLBA-2022:2672" type="self" title="RLBA-2022:2672" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="2.el9" src="varnish-6.6.2-2.el9.src.rpm">
          <filename>varnish-devel-6.6.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">62a62bdc5fba55d6a6685b1e345d430375e37c9efca1f6025e50445bb3374248</sum>
        </package>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="2.el9_1.1" src="varnish-6.6.2-2.el9.src.rpm">
          <filename>varnish-devel-6.6.2-2.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">6aecc646ff7854945a799cf7614e202096aeb71644b38d244d391e0fb7eb89f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2656</id>
    <title>new packages: dovecot</title>
    <issued date="2022-05-17 06:21:44" />
    <updated date="2023-02-02 14:14:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dovecot.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1990080" id="1990080" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2009716" id="2009716" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2656" id="RLBA-2022:2656" type="self" title="RLBA-2022:2656" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dovecot-devel" arch="aarch64" epoch="1" version="2.3.16" release="3.el9" src="dovecot-2.3.16-3.el9.src.rpm">
          <filename>dovecot-devel-2.3.16-3.el9.aarch64.rpm</filename>
          <sum type="sha256">452ef32f86223dd1e51caa7b9581be4bc299869110504e933107bbf5458e755e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2744</id>
    <title>new packages: babl</title>
    <issued date="2022-05-17 06:28:03" />
    <updated date="2023-02-02 14:14:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for babl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2744" id="RLBA-2022:2744" type="self" title="RLBA-2022:2744" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="babl-devel" arch="aarch64" epoch="0" version="0.1.86" release="3.el9" src="babl-0.1.86-3.el9.src.rpm">
          <filename>babl-devel-0.1.86-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c8118427ed3eaf65517dfd672690b7f3d19873d7a9790d6172f55d5e7c3ea84d</sum>
        </package>
        <package name="babl-devel-docs" arch="noarch" epoch="0" version="0.1.86" release="3.el9" src="babl-0.1.86-3.el9.src.rpm">
          <filename>babl-devel-docs-0.1.86-3.el9.noarch.rpm</filename>
          <sum type="sha256">1327dfab2e95446c252c2790817eda2c9118ad4a62670aca2e47a21684143cdf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2752</id>
    <title>new packages: boost</title>
    <issued date="2022-05-17 06:28:23" />
    <updated date="2023-02-02 14:14:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for boost.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2752" id="RLBA-2022:2752" type="self" title="RLBA-2022:2752" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="boost-b2" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-b2-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">3249afb2395a8b8ca4bb856c8ce5181a31a115b4b1c3a95de6940c43455dd50b</sum>
        </package>
        <package name="boost-build" arch="noarch" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-build-1.75.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">2cbb38bd227ac4e187f8848f154584d448c79d21dee848d962e42cf679e433a4</sum>
        </package>
        <package name="boost-doc" arch="noarch" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-doc-1.75.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">7db36f73613f065039507e2553779a3cf988ea84baea59d1a73f3840e79ad900</sum>
        </package>
        <package name="boost-doctools" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-doctools-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">dd6024aec9111fb9fff9937600621aeefa66351a32e785e77991351d97fd3145</sum>
        </package>
        <package name="boost-examples" arch="noarch" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-examples-1.75.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">32468100dd6f4411b14201907754b02c2269a76932ca4d9d449126fffbe37c67</sum>
        </package>
        <package name="boost-graph-mpich" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-graph-mpich-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">cdecbd6487a324ec70cb925fc52f5f344094f4d0224770f28fb493ad9ef9760e</sum>
        </package>
        <package name="boost-graph-openmpi" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-graph-openmpi-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">58930d86692cc8ec3b585a9250a4d21e2e37a3c51704b0b4c182f1e2a4e2ec95</sum>
        </package>
        <package name="boost-mpich" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-mpich-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">7b151f5c1903f10fed3f03f221cb19aee72982472ce3fe22ec0871bcd7107eba</sum>
        </package>
        <package name="boost-mpich-devel" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-mpich-devel-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">83a901028ec96ba7b40825b62d37b28ae06a54c6b8dcdf077e30aca05201013e</sum>
        </package>
        <package name="boost-mpich-python3" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-mpich-python3-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">1b864bbb23425304fc3b9ee9309ac77febc7cb7019357c5fbd4234757f908c57</sum>
        </package>
        <package name="boost-openmpi" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-openmpi-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">9e1bbc328b7b91eeac987f5cce9906eed9efacf50e9d3e0397b6ec9443aaf316</sum>
        </package>
        <package name="boost-openmpi-devel" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-openmpi-devel-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">b6af337d8e428f8f3c8a51c4b8dcca054604757d2219266d7eeda3afb0ae3743</sum>
        </package>
        <package name="boost-openmpi-python3" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-openmpi-python3-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">a0f6e2d92916649e8fbb118a3db7d2ae06f56dbaf2df8f6333cdc47b6e327e68</sum>
        </package>
        <package name="boost-static" arch="aarch64" epoch="0" version="1.75.0" release="6.el9" src="boost-1.75.0-6.el9.src.rpm">
          <filename>boost-static-1.75.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">72440c3272d5b7062b04338c78239a4170826c76a2b6f727d3399d702e5dafbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3256</id>
    <title>new packages: libtiff</title>
    <issued date="2022-05-17 07:01:31" />
    <updated date="2023-02-02 14:14:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtiff.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3256" id="RLBA-2022:3256" type="self" title="RLBA-2022:3256" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtiff-tools" arch="aarch64" epoch="0" version="4.2.0" release="3.el9" src="libtiff-4.2.0-3.el9.src.rpm">
          <filename>libtiff-tools-4.2.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b4ed7dbc91421fbe87a151359074dc28b18d46fb67b68769ea3cd47ea8c08361</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3392</id>
    <title>new packages: openjpeg2</title>
    <issued date="2022-05-17 07:09:16" />
    <updated date="2023-02-02 14:14:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openjpeg2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3392" id="RLBA-2022:3392" type="self" title="RLBA-2022:3392" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openjpeg2-devel" arch="aarch64" epoch="0" version="2.4.0" release="6.el9" src="openjpeg2-2.4.0-6.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6617ecd084efe3095911af30a46f0206a251b61db87a06e634c0b2c0c42bfe0b</sum>
        </package>
        <package name="openjpeg2-tools" arch="aarch64" epoch="0" version="2.4.0" release="6.el9" src="openjpeg2-2.4.0-6.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">75fca791cdbafa8efd182506b4edbdec1061a2d0fd8f6eee7790ba3dfa862ab3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3642</id>
    <title>new packages: poppler</title>
    <issued date="2022-05-17 07:24:59" />
    <updated date="2023-02-02 14:14:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for poppler.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3642" id="RLBA-2022:3642" type="self" title="RLBA-2022:3642" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">8c33feaa0ed6d4f579e98a6be7ebe9f2f2558dc16dd1f4b2505ab1db59931053</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">3071715dfce440384820f1284a119ea675a510c5c3303a1a2bcec844bf482b83</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">f1cf4baf778a2d7c511bee376e17bde67c9b936671b2440b98992edc37020fea</sum>
        </package>
        <package name="poppler-qt5" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-qt5-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">43b0282d32194c1e29f015f20044cb1214fa43802dac4da2086b0de705ba1196</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="12.el9" src="poppler-21.01.0-12.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">57cb69117721a44abfb8ebec5742eec98200053478924583ff2425487d5a5528</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3715</id>
    <title>new packages: qt5</title>
    <issued date="2022-05-17 07:30:15" />
    <updated date="2023-02-02 14:14:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3715" id="RLBA-2022:3715" type="self" title="RLBA-2022:3715" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-devel" arch="noarch" epoch="0" version="5.15.2" release="9.el9" src="qt5-5.15.2-9.el9.src.rpm">
          <filename>qt5-devel-5.15.2-9.el9.noarch.rpm</filename>
          <sum type="sha256">d3c3d924103eefcfce45fa65070b580640b667602adc06308ad72ada617badf0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3778</id>
    <title>new packages: sip</title>
    <issued date="2022-05-17 07:34:42" />
    <updated date="2023-02-02 14:14:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sip.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3778" id="RLBA-2022:3778" type="self" title="RLBA-2022:3778" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-sip-devel" arch="aarch64" epoch="0" version="4.19.24" release="6.el9" src="sip-4.19.24-6.el9.src.rpm">
          <filename>python3-sip-devel-4.19.24-6.el9.aarch64.rpm</filename>
          <sum type="sha256">76bc3926e267209d1c769b71e54e0d114b43cd9118e27a53e865d92a52125170</sum>
        </package>
        <package name="sip" arch="aarch64" epoch="0" version="4.19.24" release="6.el9" src="sip-4.19.24-6.el9.src.rpm">
          <filename>sip-4.19.24-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6b5cdd4df86bf24499a83f507140a5363fcbc8eb80b9ae0b8c0027c96a9dfb14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:3841</id>
    <title>new packages: wavpack</title>
    <issued date="2022-05-17 07:39:43" />
    <updated date="2023-02-02 14:14:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for wavpack.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:3841" id="RLBA-2022:3841" type="self" title="RLBA-2022:3841" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="wavpack-devel" arch="aarch64" epoch="0" version="5.4.0" release="4.el9" src="wavpack-5.4.0-4.el9.src.rpm">
          <filename>wavpack-devel-5.4.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">5f5b1a335deaa73f8fd04e5fd990c7ad1e19b0da2935f8fd1affa1837b18ae96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:5261</id>
    <title>libvirt bug fix and enhancement update</title>
    <issued date="2022-06-28 08:28:50" />
    <updated date="2023-02-02 14:14:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Bug Fix(es) and Enhancement(s):

* Allow memory prealloc from multiple threads (BZ#2075628)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:5261" id="RLBA-2022:5261" type="self" title="RLBA-2022:5261" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="8.0.0" release="8.1.el9" src="libvirt-8.0.0-8.1.el9.src.rpm">
          <filename>libvirt-devel-8.0.0-8.1.el9.aarch64.rpm</filename>
          <sum type="sha256">f5c997675b6ab42c1587246d197bb74548290def779091e0fca1cf94c0d0d3ee</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="8.0.0" release="8.1.el9" src="libvirt-8.0.0-8.1.el9.src.rpm">
          <filename>libvirt-docs-8.0.0-8.1.el9.aarch64.rpm</filename>
          <sum type="sha256">c6fa83c22fb47fce243c77aa68a117e58726e0817c0cdf370abaa000a6c4d01a</sum>
        </package>
        <package name="libvirt-lock-sanlock" arch="aarch64" epoch="0" version="8.0.0" release="8.1.el9" src="libvirt-8.0.0-8.1.el9.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-8.1.el9.aarch64.rpm</filename>
          <sum type="sha256">8db67f069398821ed1741f218c0bc40afadfd228ae102afe6de8d40ce930afcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:6070</id>
    <title>vulkan bug fix and enhancement update</title>
    <issued date="2022-08-15 13:29:03" />
    <updated date="2023-02-02 14:15:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The vulkan packages contain the reference ICD loader and validation layers for
Vulkan, a graphics and compute API for cross-platform access to modern GPUs.

Bug Fix(es) and Enhancement(s):

* Rebase vulkan-loader for 9.1 (BZ#2070308)

* Rebase vulkan-headers for 9.1 (BZ#2070309)

* Rebase vulkan-tools for 9.1 (BZ#2070310)

* Rebase spirv-tools for 9.1 (BZ#2070311)

* Rebase spirv-headers for 9.1 (BZ#2070312)

* Rebase vulkan-validation-layers for 9.1 (BZ#2070313)

* Rebase glslang for 9.1 (BZ#2070314)

* Rebase shaderc for 9.1 (BZ#2070315)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070308" id="2070308" type="bugzilla" title="* Rebase vulkan-loader for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070309" id="2070309" type="bugzilla" title="* Rebase vulkan-headers for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070310" id="2070310" type="bugzilla" title="* Rebase vulkan-tools for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070311" id="2070311" type="bugzilla" title="* Rebase spirv-tools for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070312" id="2070312" type="bugzilla" title="* Rebase spirv-headers for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070313" id="2070313" type="bugzilla" title="* Rebase vulkan-validation-layers for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070314" id="2070314" type="bugzilla" title="* Rebase glslang for 9.1" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070315" id="2070315" type="bugzilla" title="* Rebase shaderc for 9.1" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:6070" id="RLBA-2022:6070" type="self" title="RLBA-2022:6070" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="spirv-tools-devel" arch="aarch64" epoch="0" version="2022.2" release="2.el9_0" src="spirv-tools-2022.2-2.el9_0.src.rpm">
          <filename>spirv-tools-devel-2022.2-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">698e20cc654033d20de18efdf44cbe085cc50c39fb5539878b3e9bf81667df2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:6763</id>
    <title>Important: bind security update</title>
    <issued date="2022-10-03 14:54:35" />
    <updated date="2023-02-02 14:15:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)

* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)

* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2128600" id="2128600" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2128601" id="2128601" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2128602" id="2128602" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:6763" id="RLSA-2022:6763" type="self" title="RLSA-2022:6763" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="1.el9_0.1" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-devel-9.16.23-1.el9_0.1.aarch64.rpm</filename>
          <sum type="sha256">b431bfd6035b3688791318d7df71a53d0abf20757dc6d355078dd9677033991c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:6913</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 07:36:40" />
    <updated date="2023-02-02 14:15:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2132614" id="2132614" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:6913" id="RLSA-2022:6913" type="self" title="RLSA-2022:6913" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.110" release="1.el9_0" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.110-1.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b7b5ca785630211102b2945411b5149161ea6ac55862564de4aa1a989bf311a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7007</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2022-10-20 07:34:19" />
    <updated date="2023-02-02 14:15:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)

* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)

* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)

* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133745" id="2133745" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133753" id="2133753" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133765" id="2133765" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133769" id="2133769" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7007" id="RLSA-2022:7007" type="self" title="RLSA-2022:7007" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0511d01a8d45b3f1b03e1b915be72285ba5a20151f08facf18d75c4b99d9fe13</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8a37062df79a388aca1c4157ba4ec9dadba7b67ead351c633941eafb41746cc5</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f5319d9f0a4562c280f0bc08903ca156f196b311a4332865cf6554ef51b3ee67</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">cdfe4715dd2c6a54e0be7a54c906b4b02a9d8564680421de93b046fc5fde791d</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bc1adba0b4575cb754d2c99f88563b933d476d29ddee37cfc04708864a951b03</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d0400364214938b5e141cb73a8c6e0d7ce087b36b147aa7e1d7376cf42f225e4</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">efeb63094b12651786b298a0a9848697fec9b757ed45d32e5359a7ea3cd3117a</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0e1a1d328c54c83e11d82ec5512927fcdae2af4a1ee30f0849deea1f0cdb3326</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">61baf30dc16c77544b473e1a9d2b9dcd5ca94f54fefb13465f82874af3a79d03</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d2ef1c75436e27f4e438d4172285f4b01c0cfb5a9a978cf3d6a2eab0bee15015</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:6999</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-20 07:37:48" />
    <updated date="2023-02-02 14:15:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-17-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)

* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)

* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)

* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [Rocky Linux-9] (BZ#2132934)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2132934" id="2132934" type="bugzilla" title="* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [rhel-9]" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133745" id="2133745" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133753" id="2133753" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133765" id="2133765" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133769" id="2133769" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133776" id="2133776" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133817" id="2133817" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:6999" id="RLSA-2022:6999" type="self" title="RLSA-2022:6999" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-17-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">378a45403a545e0e56fe297650f1e6417ae7c195edcb26f866d3d1c0673e750e</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b5435d8ef414bc1e5df74ab62e77c6b95c339d9230393fd0da585719ca1eabf4</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">775b9eeff863dbb61d2c42e92af89b00aae377e70a2811de099bab5775e53633</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">19a271d37908e19a139102be7fbb4e16490c6335188d8b21d15cfd8a57c75c4d</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">1454f98bbb629e7eecb0df9b774856644556b039982d140cced811412c2cdaa2</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">15b72478b17d64a5f1a412c88bcaf1e07c7946796c5838aa9d761d91639d931c</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f941e828869a2a3e4b0982649c5cd0706fd8a185e2ae148f6802260da36177c0</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f729da72b97958c51f9e4fccf7668058ffca310eb20e71790bb881b6528a4ab7</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">3aeaeba515cb3cb7cffb8f9d542b51e2be41d971da13a2b7c6f0abe68f3b191f</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">684e7146c21a17116e6c914b58f6f35c4af0f8f3d7e7f570a407d1c1e062b2c5</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">145f5f797f063fff2541410e8bd1b30780c69eb2253ba99e943967801f5e0d8e</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">2c455acc32600804ad559ea5c642850c585765e3091a8add642cc51a661de7b0</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">82a0df693433a014d56b7c2d8d745ca4e9f3feaa408e353cddf1f569a3d226de</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="17.0.5.0.8" release="2.el9_0" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.5.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">10e14ad08760cbe9378fd1b7e527dfbf9ab80eb1c3838b13a664ac06b5c89d99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:7013</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-20 07:40:35" />
    <updated date="2023-02-02 14:15:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)

* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)

* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)

* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [Rocky Linux-9] (BZ#2131865)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2131865" id="2131865" type="bugzilla" title="* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [rhel-9]" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133745" id="2133745" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133753" id="2133753" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133765" id="2133765" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133769" id="2133769" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133776" id="2133776" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133817" id="2133817" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:7013" id="RLSA-2022:7013" type="self" title="RLSA-2022:7013" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bc30229dcbc02d6e184c5543d0603ca220d53dbad48b200ed7590975093fb5af</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">580d63a6a9d34b5156c1070cea1cc0643be96404108777fd9e324d71221d0715</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">a3a17709e1a5076aab43e9e67810161cd5448e82d2bb7022b3c39cd6ea4bdb6b</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c5d8e00e3f9640a10e8d71ef98dc484b206c00ec9566df5ab6a23ac3b6bdae8e</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">5b528ea8707635c490d94ddccf11bd7ad777f3781dd4ec0b2d1a350b6573fc55</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">94aae60031d38d709ee610dea184ed8fd75db3628ec4032d31866f0452922f36</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8da59fc36cc50f03d53c3045ea82d70a2265c5ae57092f1412da7c970db94de8</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">e32743bf2b1eeecfd84f2cfbfd59ef3b244af7c87b5fce04ac6ad964bd97b237</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d6a2253018681cb0c03ad8234afb294b85e8f9bb0b40ff95e7d571480bab5094</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">7bcb68f164c37eded88a3d541bbd556037f70ba401e99f538565cf5511022458</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">23f224d245b7e00efd3987e262eb4407ad03a2b23ade82cfe75ac2ad058e851c</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">b88e91ca3647f2fed90fe65d551e8198c114675b16452afbbecdfd57e8ea139f</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0150a29b5597cd3ae2454a80d0075975b37d0ea547afb2fcecc62c377cfd586f</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.17.0.8" release="2.el9_0" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.17.0.8-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">c521f387870d78b73025a3f07c54e36e0812d7c4ff6fb9dfb646affd752fcc09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7092</id>
    <title>java-1.8.0-openjdk bug fix and enhancement update</title>
    <issued date="2022-11-15 15:35:45" />
    <updated date="2023-02-02 14:15:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>This erratum reinstates changes made to java-1.8.0-openjdk in Rocky Linux 9.1 GA.  The original builds for Rocky Linux 9.1 GA will have been superseded by newer binaries released as part of the October 2022 security update for Rocky Linux 9.0.

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:7092" id="RLBA-2022:7092" type="self" title="RLBA-2022:7092" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0511d01a8d45b3f1b03e1b915be72285ba5a20151f08facf18d75c4b99d9fe13</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">8a37062df79a388aca1c4157ba4ec9dadba7b67ead351c633941eafb41746cc5</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">f5319d9f0a4562c280f0bc08903ca156f196b311a4332865cf6554ef51b3ee67</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">cdfe4715dd2c6a54e0be7a54c906b4b02a9d8564680421de93b046fc5fde791d</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">bc1adba0b4575cb754d2c99f88563b933d476d29ddee37cfc04708864a951b03</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d0400364214938b5e141cb73a8c6e0d7ce087b36b147aa7e1d7376cf42f225e4</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">efeb63094b12651786b298a0a9848697fec9b757ed45d32e5359a7ea3cd3117a</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">0e1a1d328c54c83e11d82ec5512927fcdae2af4a1ee30f0849deea1f0cdb3326</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">61baf30dc16c77544b473e1a9d2b9dcd5ca94f54fefb13465f82874af3a79d03</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.352.b08" release="2.el9_0" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.352.b08-2.el9_0.aarch64.rpm</filename>
          <sum type="sha256">d2ef1c75436e27f4e438d4172285f4b01c0cfb5a9a978cf3d6a2eab0bee15015</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:6000</id>
    <title>kronosnet bug fix and enhancement update</title>
    <issued date="2022-08-09 14:51:54" />
    <updated date="2023-02-02 14:15:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kronosnet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Kronosnet (knet) is a network abstraction layer designed for High Availability
use cases.

Bug Fix(es) and Enhancement(s):

* node randomly not rejoining cluster after a pcs cluster stop/start (BZ#2112923)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2112923" id="2112923" type="bugzilla" title="* node randomly not rejoining cluster after a pcs cluster stop/start" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:6000" id="RLBA-2022:6000" type="self" title="RLBA-2022:6000" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libknet1" arch="aarch64" epoch="0" version="1.22" release="4.el9_0" src="kronosnet-1.22-4.el9_0.src.rpm">
          <filename>libknet1-1.22-4.el9_0.aarch64.rpm</filename>
          <sum type="sha256">ad887bd6772e6a9d234e29a31746bf0e4311e6d737475c882225d71e386cb39c</sum>
        </package>
        <package name="libknet1-devel" arch="aarch64" epoch="0" version="1.22" release="4.el9_0" src="kronosnet-1.22-4.el9_0.src.rpm">
          <filename>libknet1-devel-1.22-4.el9_0.aarch64.rpm</filename>
          <sum type="sha256">510febd14ffff8a3acac27a5ae350dd05f4a69f1fd7e7430bba7dc20e6a2e0c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8272</id>
    <title>glibc bug fix and enhancement update</title>
    <issued date="2022-11-15 06:20:03" />
    <updated date="2023-02-04 08:50:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2003291" id="2003291" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2033683" id="2033683" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2054789" id="2054789" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2060777" id="2060777" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2060778" id="2060778" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2063041" id="2063041" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2063142" id="2063142" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2063230" id="2063230" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064181" id="2064181" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2072328" id="2072328" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2073743" id="2073743" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075713" id="2075713" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2085529" id="2085529" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2091541" id="2091541" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2091549" id="2091549" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096191" id="2096191" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109505" id="2109505" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8272" id="RLBA-2022:8272" type="self" title="RLBA-2022:8272" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>glibc-benchtests-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">b2d340e2be83362c55d70dbd95f02b45df37e372c173399083ef34561df5bebd</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>glibc-nss-devel-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">4fddf8453a93fac81f3ae08648c03c1af428bda2b94caa9932daf5f7036982e1</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>glibc-static-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">a4a815e06c461e395d547a33cf149f4bb507d7eb9a17cedde2a29b71bda30917</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>nss_db-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">721d9c76f10c8607f904bdce0cbb0868d1afa1e866daf1e5ae70c78a31790b44</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="40.el9_1.1" src="glibc-2.34-40.el9_1.1.src.rpm">
          <filename>nss_hesiod-2.34-40.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">c56a60d73880f6c5a07059afdc574baff9ebf253413925d4d8f1d6983611e652</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:4203</id>
    <title>new packages: lua</title>
    <issued date="2022-05-17 08:10:08" />
    <updated date="2023-02-04 08:50:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lua.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:4203" id="RLBA-2022:4203" type="self" title="RLBA-2022:4203" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lua-devel" arch="aarch64" epoch="0" version="5.4.2" release="4.el9_0.3" src="lua-5.4.2-4.el9_0.3.src.rpm">
          <filename>lua-devel-5.4.2-4.el9_0.3.aarch64.rpm</filename>
          <sum type="sha256">126101238e19657c9c15bc6d8e14c36b385c19369d02d62f8ba9b1ff60405adc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8313</id>
    <title>device-mapper-multipath bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:08" />
    <updated date="2023-02-04 08:50:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for device-mapper-multipath.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2084358" id="2084358" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2084365" id="2084365" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2119896" id="2119896" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2121277" id="2121277" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8313" id="RLBA-2022:8313" type="self" title="RLBA-2022:8313" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-multipath-devel" arch="aarch64" epoch="0" version="0.8.7" release="12.el9_1.1" src="device-mapper-multipath-0.8.7-12.el9_1.1.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-12.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">db0c13a8ead6c48f3f1f705f87d017c621d2207be662cf9f294d03dc0051367c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8353</id>
    <title>Moderate: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 06:22:23" />
    <updated date="2023-02-04 08:50:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249)

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2054702" id="2054702" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2059951" id="2059951" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075390" id="2075390" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2120642" id="2120642" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2128249" id="2128249" type="bugzilla" title="The following packages have been upgraded to a later upstream version: python3.9 (3.9.14)." />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8353" id="RLSA-2022:8353" type="self" title="RLSA-2022:8353" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.1" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">0ab1bc8089c366ce9e299b726d6e7d364552149253ee57360a89813b7e64c567</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.1" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">bacf73f1a335be08b17cd6e6a66a9f115d11201637e63069416865f21760a0c3</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.1" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">72d367b1c768f800e4dd84b0a5b1e09f6642c35d05a94dfe985a00ef51db4f3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8325</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2022-11-15 06:21:38" />
    <updated date="2023-02-04 08:50:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1661055" id="1661055" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1749279" id="1749279" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1859751" id="1859751" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1893192" id="1893192" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1915564" id="1915564" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1925559" id="1925559" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1927195" id="1927195" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1927553" id="1927553" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1936551" id="1936551" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1937895" id="1937895" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2056482" id="2056482" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061795" id="2061795" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062665" id="2062665" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062716" id="2062716" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065098" id="2065098" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065693" id="2065693" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2069376" id="2069376" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070138" id="2070138" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070189" id="2070189" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2072640" id="2072640" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2073095" id="2073095" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082455" id="2082455" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2087581" id="2087581" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2089216" id="2089216" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2090776" id="2090776" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2098654" id="2098654" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109451" id="2109451" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2116389" id="2116389" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2119373" id="2119373" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2120657" id="2120657" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8325" id="RLBA-2022:8325" type="self" title="RLBA-2022:8325" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.7.3" release="4.el9_1.3" src="sssd-2.7.3-4.el9_1.3.src.rpm">
          <filename>libsss_nss_idmap-devel-2.7.3-4.el9_1.3.aarch64.rpm</filename>
          <sum type="sha256">5f7bcafeb2b8220d0035ec5dd4213b3ff61dc6a96bc8e143acd891523063c9ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8399</id>
    <title>cryptsetup bug fix and enhancement update</title>
    <issued date="2022-11-15 06:23:27" />
    <updated date="2023-02-04 08:50:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cryptsetup.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2080516" id="2080516" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8399" id="RLBA-2022:8399" type="self" title="RLBA-2022:8399" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cryptsetup-devel" arch="aarch64" epoch="0" version="2.4.3" release="5.el9_1.1" src="cryptsetup-2.4.3-5.el9_1.1.src.rpm">
          <filename>cryptsetup-devel-2.4.3-5.el9_1.1.aarch64.rpm</filename>
          <sum type="sha256">f2db664998a7e53e14a5f21555751be4a0ead1244c2fdc4b407d40812af25914</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0334</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-23 14:30:23" />
    <updated date="2023-02-04 08:51:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)

* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)

* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)

* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel 9.2: Important iavf bug fixes (BZ#2127884)

* vfio zero page mappings fail after 2M instances (BZ#2128514)

* nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359)

* ice: Driver Update to 5.19 (BZ#2132070)

* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588)

* drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619)

* updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914)

* DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213)

* No signal showed in the VGA monitor when installing Rocky Linux9 in the legacy bios mode (BZ#2140153)

* Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168)

* ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976)

* fatal error: error in backend: Branch target out of insn range (BZ#2144902)

* AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217)

* Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910)

* Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605)

* DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2959" id="CVE-2022-2959" type="cve" title="CVE-2022-2959" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3077" id="CVE-2022-3077" type="cve" title="CVE-2022-3077" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2067482" id="2067482" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2085300" id="2085300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2103681" id="2103681" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2123309" id="2123309" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141752" id="2141752" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2147572" id="2147572" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0334" id="RLSA-2023:0334" type="self" title="RLSA-2023:0334" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="162.12.1.el9_1.0.2" src="kernel-5.14.0-162.12.1.el9_1.0.2.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.12.1.el9_1.0.2.aarch64.rpm</filename>
          <sum type="sha256">73eb74956d5798dcab6b939bd797ebc45669e94a8100abacac36e9fe2abb8d78</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="162.12.1.el9_1.0.2" src="kernel-5.14.0-162.12.1.el9_1.0.2.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.12.1.el9_1.0.2.aarch64.rpm</filename>
          <sum type="sha256">d32e9129be0c0a8ac2512d65ce0804a7f20f9ad4dadef0ef7d3f8b98e6497ee9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2402</id>
    <title>new packages: ibus</title>
    <issued date="2022-05-17 06:00:48" />
    <updated date="2023-02-04 08:51:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ibus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2008359" id="2008359" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:2402" id="RLBA-2022:2402" type="self" title="RLBA-2022:2402" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ibus-devel" arch="aarch64" epoch="0" version="1.5.25" release="2.el9.rocky.0.1" src="ibus-1.5.25-2.el9.rocky.0.1.src.rpm">
          <filename>ibus-devel-1.5.25-2.el9.rocky.0.1.aarch64.rpm</filename>
          <sum type="sha256">c1408bbb479399a40054cc8f88314af76ddb2c726a145da2be6e5598e0b1cb76</sum>
        </package>
        <package name="ibus-devel-docs" arch="noarch" epoch="0" version="1.5.25" release="2.el9.rocky.0.1" src="ibus-1.5.25-2.el9.rocky.0.1.src.rpm">
          <filename>ibus-devel-docs-1.5.25-2.el9.rocky.0.1.noarch.rpm</filename>
          <sum type="sha256">c0d02d296b1aa2728924a81b223bb37aa249d57101648b9dc3d2b47c518b9ce2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:2856</id>
    <title>new packages: gnome-menus</title>
    <issued date="2022-05-17 06:35:20" />
    <updated date="2023-02-04 08:53:03" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gnome-menus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.0 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2022:2856" id="RLBA-2022:2856" type="self" title="RLBA-2022:2856" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gnome-menus-devel" arch="aarch64" epoch="0" version="3.36.0" release="8.el9.0.1" src="gnome-menus-3.36.0-8.el9.0.1.src.rpm">
          <filename>gnome-menus-devel-3.36.0-8.el9.0.1.aarch64.rpm</filename>
          <sum type="sha256">3f0439239b432154bb43448472bf689d4b8c88ec28f87ec9ac30849f94eb035f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:7977</id>
    <title>anaconda bug fix and enhancement update</title>
    <issued date="2022-11-15 06:12:42" />
    <updated date="2023-02-04 08:58:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for anaconda.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2000652" id="2000652" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2022841" id="2022841" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2033849" id="2033849" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2042431" id="2042431" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2050331" id="2050331" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2053710" id="2053710" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057469" id="2057469" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2058538" id="2058538" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2062576" id="2062576" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2063127" id="2063127" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065170" id="2065170" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2067195" id="2067195" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2068192" id="2068192" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2071665" id="2071665" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2072426" id="2072426" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074636" id="2074636" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075417" id="2075417" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2087218" id="2087218" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2095351" id="2095351" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096046" id="2096046" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2100463" id="2100463" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2120293" id="2120293" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:7977" id="RLBA-2022:7977" type="self" title="RLBA-2022:7977" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="anaconda-widgets-devel" arch="aarch64" epoch="0" version="34.25.1.14" release="1.el9.rocky.0.3" src="anaconda-34.25.1.14-1.el9.rocky.0.3.src.rpm">
          <filename>anaconda-widgets-devel-34.25.1.14-1.el9.rocky.0.3.aarch64.rpm</filename>
          <sum type="sha256">9a99ef344623a1de032a27b6cc7f03d5230982eddbd97d5ee0e8f04f28d75255</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2022:8003</id>
    <title>Low: libvirt security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 06:13:06" />
    <updated date="2023-02-04 08:58:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313)

Security Fix(es):

* libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0897" id="CVE-2022-0897" type="cve" title="CVE-2022-0897" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1475431" id="1475431" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1653327" id="1653327" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1745868" id="1745868" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1866400" id="1866400" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1901394" id="1901394" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1910856" id="1910856" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1999372" id="1999372" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2026765" id="2026765" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2035163" id="2035163" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2036300" id="2036300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2037146" id="2037146" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2038045" id="2038045" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040548" id="2040548" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2040555" id="2040555" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2041665" id="2041665" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2045953" id="2045953" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2045959" id="2045959" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2046024" id="2046024" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2051451" id="2051451" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057067" id="2057067" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057768" id="2057768" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2060313" id="2060313" type="bugzilla" title="The following packages have been upgraded to a later upstream version: libvirt (8.5.0)." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2060776" id="2060776" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2063883" id="2063883" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064115" id="2064115" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065381" id="2065381" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2065399" id="2065399" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2070380" id="2070380" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2073867" id="2073867" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2073887" id="2073887" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075383" id="2075383" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075464" id="2075464" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075765" id="2075765" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2075837" id="2075837" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2078274" id="2078274" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2081981" id="2081981" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2082540" id="2082540" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2089431" id="2089431" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092833" id="2092833" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2092856" id="2092856" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2095260" id="2095260" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2102009" id="2102009" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2103119" id="2103119" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2103524" id="2103524" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2105231" id="2105231" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2107424" id="2107424" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2107892" id="2107892" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2111070" id="2111070" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2112348" id="2112348" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2121141" id="2121141" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2121441" id="2121441" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2022:8003" id="RLSA-2022:8003" type="self" title="RLSA-2022:8003" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="8.5.0" release="7.3.el9_1" src="libvirt-8.5.0-7.3.el9_1.src.rpm">
          <filename>libvirt-devel-8.5.0-7.3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7aa2a477b7185171070343da752fa84d48a158621b064677a7781d35f7fe05f0</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="8.5.0" release="7.3.el9_1" src="libvirt-8.5.0-7.3.el9_1.src.rpm">
          <filename>libvirt-docs-8.5.0-7.3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">27d253a1a391014ae1d2daf24217849894cab1c407d7f7f5bfff186d81855822</sum>
        </package>
        <package name="libvirt-lock-sanlock" arch="aarch64" epoch="0" version="8.5.0" release="7.3.el9_1" src="libvirt-8.5.0-7.3.el9_1.src.rpm">
          <filename>libvirt-lock-sanlock-8.5.0-7.3.el9_1.aarch64.rpm</filename>
          <sum type="sha256">c5b8351a4fb990e6b3a6eee2332e85bf10d5e0f08683e7b4e272a3729c48d019</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2022:8216</id>
    <title>openscap bug fix and enhancement update</title>
    <issued date="2022-11-15 06:18:37" />
    <updated date="2023-02-04 08:59:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openscap.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2109485" id="2109485" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2111358" id="2111358" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2022:8216" id="RLBA-2022:8216" type="self" title="RLBA-2022:8216" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openscap-engine-sce-devel" arch="aarch64" epoch="1" version="1.3.6" release="4.el9.rocky.0.2" src="openscap-1.3.6-4.el9.rocky.0.2.src.rpm">
          <filename>openscap-engine-sce-devel-1.3.6-4.el9.rocky.0.2.aarch64.rpm</filename>
          <sum type="sha256">27263207024ff9c6fc189229d570e2b6c92f05cc880e4605b0c20d05fed6e38c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0782</id>
    <title>.NET 6.0 bugfix update</title>
    <issued date="2023-02-16 06:35:53" />
    <updated date="2023-02-16 06:36:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address bugs are now available. The updated versions are .NET SDK 6.0.114 and .NET Runtime 6.0.14.

Bug Fix(es) and Enhancements :

* 2166770 - Update .NET 6.0 to SDK 6.0.114 and Runtime 6.0.14 [rhel-9.1.0.z]</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:0782" id="RLBA-2023:0782" type="self" title="RLBA-2023:0782" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.114" release="1.el9_1" src="dotnet6.0-6.0.114-1.el9_1.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.114-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">61bf1fcf10127ea63cb028e17f8296252675aa0bf07854648483c3a25c1e012a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0781</id>
    <title>.NET 7.0 bugfix update</title>
    <issued date="2023-02-16 06:35:53" />
    <updated date="2023-02-16 06:36:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address bugs are now available. The updated versions are .NET SDK 7.0.103 and .NET Runtime 7.0.3.

Bug Fix(es) and Enhancement(s):

* 2166776 - Update .NET 7.0 to SDK 7.0.103 and Runtime 7.0.3 [rhel-9.1.0.z]</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:0781" id="RLBA-2023:0781" type="self" title="RLBA-2023:0781" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.103" release="1.el9_1" src="dotnet7.0-7.0.103-1.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.103-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">612883d9c34556c876991cf512a59ab13c815e0b80b6ae3c80a02ca4bd634119</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0626</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-16 06:35:52" />
    <updated date="2023-02-16 06:36:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for libksba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2161571" id="2161571" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0626" id="RLSA-2023:0626" type="self" title="RLSA-2023:0626" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libksba-devel" arch="aarch64" epoch="0" version="1.5.1" release="6.el9_1" src="libksba-1.5.1-6.el9_1.src.rpm">
          <filename>libksba-devel-1.5.1-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">42a75fb30626c16a573482ecdb5b95bd1d6a1a0eeafeab7d9447584ad5955966</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:1244</id>
    <title>.NET 7.0 bugfix update</title>
    <issued date="2023-03-16 15:23:59" />
    <updated date="2023-03-16 15:24:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 7.0 to SDK 7.0.104 and Runtime 7.0.4 [rhel-9.1.0.z] (BZ#2175027)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:1244" id="RLBA-2023:1244" type="self" title="RLBA-2023:1244" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.104" release="1.el9_1" src="dotnet7.0-7.0.104-1.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.104-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3d5eea508139a2098ff7d7000e89b61b4d7ae7184cad439bc5a7f57aacb13e4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:1068</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2023-03-08 16:38:23" />
    <updated date="2023-03-08 16:39:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libjpeg-turbo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46822" id="CVE-2021-46822" type="cve" title="CVE-2021-46822" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2100044" id="2100044" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:1068" id="RLSA-2023:1068" type="self" title="RLSA-2023:1068" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="turbojpeg" arch="aarch64" epoch="0" version="2.0.90" release="6.el9_1" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>turbojpeg-2.0.90-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e0d059c2562c74fc4b4b25286ea4b5bd11619e8d456844713e60f4e9e84d6870</sum>
        </package>
        <package name="turbojpeg-devel" arch="aarch64" epoch="0" version="2.0.90" release="6.el9_1" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>turbojpeg-devel-2.0.90-6.el9_1.aarch64.rpm</filename>
          <sum type="sha256">571817f091ac55d04a620de27e28c4a3a1af1e5aa5ff1a7765c80446565b04dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:1246</id>
    <title>.NET 6.0 bugfix update</title>
    <issued date="2023-03-16 15:23:59" />
    <updated date="2023-03-16 15:24:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 6.0 to SDK 6.0.115 and Runtime 6.0.15 [rhel-9.1.0.z] (BZ#2174986)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:1246" id="RLBA-2023:1246" type="self" title="RLBA-2023:1246" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.115" release="1.el9_1" src="dotnet6.0-6.0.115-1.el9_1.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.115-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">98927ece0f867a40e91d04c9175cda7aac303a7cd7e4d80a28022147ca219886</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:1470</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-04-06 15:23:59" />
    <updated date="2023-04-06 15:24:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)

* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)

* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Rocky Linux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880)

* Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766)

* Rocky Linux9.0 - boot: Add secure boot trailer (BZ#2151528)

* kernel-rt-debug: WARNING: possible circular locking dependency detected (&amp;n-&gt;list_lock-&gt;&amp;p-&gt;pi_lock-&gt;&amp;lock-&gt;wait_lock) (BZ#2160614)

* Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105)

* Rocky Linux9.0 -  s390/kexec: fix ipl report address for kdump (BZ#2166903)

* libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956)

* Azure Rocky Linux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227)

Enhancement(s):

* IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304)

* Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2150272" id="2150272" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2156322" id="2156322" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2163379" id="2163379" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:1470" id="RLSA-2023:1470" type="self" title="RLSA-2023:1470" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="162.22.2.el9_1" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.22.2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d926ac30c2a5cec83b9edd0587907b24cf10beffed4595906241094bdb7acdc6</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="162.22.2.el9_1" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-162.22.2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">27761e972150575125464e400534aea4446d5f98cc2f68e713a4881450236376</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0948</id>
    <title>libnetfilter_conntrack bug fix and enhancement update</title>
    <issued date="2023-04-06 15:53:31" />
    <updated date="2023-04-06 15:54:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnetfilter_conntrack.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libnetfilter_conntrack is a userspace library providing a programming interface (API) to the in-kernel connection tracking state table.

Bug Fix(es) and Enhancement(s):

* conntrack -D with filters sometimes ignores the filters and deletes all connection state (BZ#2122641)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2122641" id="2122641" type="bugzilla" title="* conntrack -D with filters sometimes ignores the filters and deletes all connection state" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0948" id="RLBA-2023:0948" type="self" title="RLBA-2023:0948" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnetfilter_conntrack-devel" arch="aarch64" epoch="0" version="1.0.8" release="5.el9_1" src="libnetfilter_conntrack-1.0.8-5.el9_1.src.rpm">
          <filename>libnetfilter_conntrack-devel-1.0.8-5.el9_1.aarch64.rpm</filename>
          <sum type="sha256">1b7b2bb1cc8118714f555e7d5308485b14397d0b28830bed196dcce5674b49a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0947</id>
    <title>ipset bug fix and enhancement advisory</title>
    <issued date="2023-04-06 15:53:31" />
    <updated date="2023-04-06 15:54:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipset.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The ipset packages provide the ipset utility and the ipset service to manage IP sets in the Linux kernel. Depending on the type, an IP set may store IP addresses, networks, (TCP/UDP) port numbers, MAC addresses, interface names or combinations of them in a way that ensures high speed when matching an entry against a set.

Bug Fix(es) and Enhancement(s):

* systemctl restart ipset extremely slow restoring large saved set (BZ#2043008)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2043008" id="2043008" type="bugzilla" title="* systemctl restart ipset extremely slow restoring large saved set" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0947" id="RLBA-2023:0947" type="self" title="RLBA-2023:0947" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ipset-devel" arch="aarch64" epoch="0" version="7.11" release="7.el9_1" src="ipset-7.11-7.el9_1.src.rpm">
          <filename>ipset-devel-7.11-7.el9_1.aarch64.rpm</filename>
          <sum type="sha256">aeb27ce0c56e56a7f11167f299af2a841ab7bb36c89b8be4b91fed5c6eb8eb06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0950</id>
    <title>nftables bug fix and enhancement update</title>
    <issued date="2023-04-06 15:53:31" />
    <updated date="2023-04-06 15:54:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nftables.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>nftables provides a packet-filtering tool, with numerous improvements in convenience, features, and performance. It is the designated successor to iptables, ip6tables, arptables and ebtables.

Bug Fix(es) and Enhancement(s):

* RFE: Document why nft ipsec out ip daddr fail to match with xfrmi topo (BZ#1806431)

* Make upstream test suite pass  (BZ#1973687)

* Prevent port-shadow attacks in sample nat config (BZ#2061940)

* nftables set concatenation match (ether saddr . vlan id) displays wrong (BZ#2094887)

* nftables denies rule with explicit ether type match and VLAN ID in set concatenation (BZ#2094890)

* nft asserts if set concatenation contains a constant (BZ#2094894)

* nftables add ipsec rule fail (BZ#2113874)

* NFT delete element rule return false value. (BZ#2115627)

* nft: netlink_delinearize.c:2695: netlink_delinearize_rule: Assertion `pctx-&gt;table != NULL' failed. (BZ#2130721)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1973687" id="1973687" type="bugzilla" title="* Make upstream test suite pass" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2061940" id="2061940" type="bugzilla" title="* Prevent port-shadow attacks in sample nat config" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094887" id="2094887" type="bugzilla" title="* nftables set concatenation match (ether saddr . vlan id) displays wrong" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094890" id="2094890" type="bugzilla" title="* nftables denies rule with explicit ether type match and VLAN ID in set concatenation" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2094894" id="2094894" type="bugzilla" title="* nft asserts if set concatenation contains a constant" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2113874" id="2113874" type="bugzilla" title="* nftables add ipsec rule fail" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115627" id="2115627" type="bugzilla" title="* NFT delete element rule return false value." />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2130721" id="2130721" type="bugzilla" title="* nft: netlink_delinearize.c:2695: netlink_delinearize_rule: Assertion `pctx-&gt;table != NULL' failed." />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0950" id="RLBA-2023:0950" type="self" title="RLBA-2023:0950" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nftables-devel" arch="aarch64" epoch="1" version="1.0.4" release="9.el9_1" src="nftables-1.0.4-9.el9_1.src.rpm">
          <filename>nftables-devel-1.0.4-9.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3d9bc1638f97b56384cd0005cc394be62a955b6e793ee310bdaa557be4cf758b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0953</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-04-06 15:53:31" />
    <updated date="2023-04-06 15:54:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2144072" id="2144072" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0953" id="RLSA-2023:0953" type="self" title="RLSA-2023:0953" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.2" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.2.aarch64.rpm</filename>
          <sum type="sha256">3e2a95afff547f69143791fcccfce5cfa07f29a8af826c9d5c55cf48c90d7589</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.2" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.2.aarch64.rpm</filename>
          <sum type="sha256">cc88801d361195569c2ce76ed4c77d8a032171558b1eac9d80706e0cb5a80374</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.14" release="1.el9_1.2" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.2.aarch64.rpm</filename>
          <sum type="sha256">9e5024a778eb6396233e67c3d33b3d455f7ea83c3c40095823c523aa82196d88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:0957</id>
    <title>Moderate: lua security update</title>
    <issued date="2023-04-06 15:53:31" />
    <updated date="2023-04-06 15:54:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for lua.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964)

* lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43519" id="CVE-2021-43519" type="cve" title="CVE-2021-43519" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44964" id="CVE-2021-44964" type="cve" title="CVE-2021-44964" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2047672" id="2047672" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2064772" id="2064772" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:0957" id="RLSA-2023:0957" type="self" title="RLSA-2023:0957" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="lua-devel" arch="aarch64" epoch="0" version="5.4.4" release="2.el9_1" src="lua-5.4.4-2.el9_1.src.rpm">
          <filename>lua-devel-5.4.4-2.el9_1.aarch64.rpm</filename>
          <sum type="sha256">6ecd81929a1e5bea1728e9d8ab3dfd7eccbb0441a394e4fec0f1fa7854746c82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:0964</id>
    <title>libvirt bug fix and enhancement update</title>
    <issued date="2023-04-06 15:53:32" />
    <updated date="2023-04-06 15:54:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Bug Fixes:

* libvirt doesn't catch mdevs created thru sysfs (BZ#2141364)

* libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted (BZ#2152083)

* qemuAgentGetDisks cannot parse response from a guest agent running in Windows VM (BZ#2154410)

Enhancement:

* Backport the qemuDomainGetStatsCpu fallback Implementation (BZ#2157094)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2158208" id="2158208" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:0964" id="RLBA-2023:0964" type="self" title="RLBA-2023:0964" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="8.5.0" release="7.4.el9_1" src="libvirt-8.5.0-7.4.el9_1.src.rpm">
          <filename>libvirt-devel-8.5.0-7.4.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e906fe09d7075072fa59d657f9400b8f7df8df507f90ac2ca7020e4e2d1bbc81</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="8.5.0" release="7.4.el9_1" src="libvirt-8.5.0-7.4.el9_1.src.rpm">
          <filename>libvirt-docs-8.5.0-7.4.el9_1.aarch64.rpm</filename>
          <sum type="sha256">8b1fc933f6f3fc21605446ff9cfdd7257da804108e76aafdffad2a67c4af0ddb</sum>
        </package>
        <package name="libvirt-lock-sanlock" arch="aarch64" epoch="0" version="8.5.0" release="7.4.el9_1" src="libvirt-8.5.0-7.4.el9_1.src.rpm">
          <filename>libvirt-lock-sanlock-8.5.0-7.4.el9_1.aarch64.rpm</filename>
          <sum type="sha256">eb6da5cf3ec3fd31455082895374319113973e2fc8c484eb4919e786e17c790c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:1756</id>
    <title>.NET 7.0 bugfix update</title>
    <issued date="2023-04-26 15:28:57" />
    <updated date="2023-04-26 15:29:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es):

* Update .NET 7.0 to SDK 7.0.105 and Runtime 7.0.5 [rhel-9.1.0.z] (BZ#2183592)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:1756" id="RLBA-2023:1756" type="self" title="RLBA-2023:1756" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.105" release="1.el9_1" src="dotnet7.0-7.0.105-1.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.105-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">79bac036ff8a12f27dbc2db8195a1135a8c1117bb33a9ded8028b051b19bc854</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:1879</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-26 15:28:57" />
    <updated date="2023-04-26 15:29:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for java-17-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)

* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)

* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)

* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)

* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)

* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)

* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804)

* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811)

* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2186804" id="2186804" type="bugzilla" title="* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2186807" id="2186807" type="bugzilla" title="* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2186811" id="2186811" type="bugzilla" title="* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187435" id="2187435" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187441" id="2187441" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187704" id="2187704" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187724" id="2187724" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187758" id="2187758" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187790" id="2187790" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187802" id="2187802" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:1879" id="RLSA-2023:1879" type="self" title="RLSA-2023:1879" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-17-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b1b7e7b424e8106b8bc9a54103f446f6b90ed8e205ca71223cbf1810c43f63b2</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3a111989cc8ced89bf1331c7f0edb6410f4028499a7f7012919b650cba2b019f</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f8f4d6c396ac03bfd25a5676237f44ab0c4a1f9042d252021b2dfa26239a42db</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3b5f77c2a02e9f42924998bb600de2445aea603080f3790f91e5dc16d7a81895</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">4553b2e908c5e492d38c160014b59e66ef7198ebb3419aac8ab3a75e027db2b9</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">5313949dc67e93f8236228dacd783577104a0041584d0ae6bae2b605e33aea3c</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">18325762279b117c5cff91ea7cb6085c1fbd4c39396e88f79ad506db909197d0</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">da38267a7186f00330fc0b283d99a5dc302c4eba30b3b0539138e12f106c5d1d</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7f6a850970b2a5a3bba427752ecbf51c9077f91389366bec6ad8da3633dd3076</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">650fcd886ad2a6c5b2dd485324b56c11778f8e4d2db5f7053d3267d96676be61</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">1c50a344b368829868ec05dcac46ce8f373d8fee0aeb59754bf80cd1c055e0f0</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d3b3ee5b26f7f5970f5514286a26b3abb960e5df0712f25398413fc6cef36f77</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">655ae96f43236a61fcef303b20e0100d85ec9485e7cacf7fd9ae6a6804551fa0</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="1.el9_1" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.7.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">409fd6409a8829cb20b368a85bd086b85890dbbea8b5cd73eb6153583a3cb78f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:1880</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-26 15:28:57" />
    <updated date="2023-04-26 15:29:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)

* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)

* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)

* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)

* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)

* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)

* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187435" id="2187435" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187441" id="2187441" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187704" id="2187704" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187724" id="2187724" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187758" id="2187758" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187790" id="2187790" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187802" id="2187802" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:1880" id="RLSA-2023:1880" type="self" title="RLSA-2023:1880" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">583870d759b1f4bfe28f31218ed23b6cf658fef3779ad9bd2637b2fa887cb488</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">af5d641225bc5a82426a91f6e18e7e57bef1aa005cc442eb9b982514eec99e5d</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">0184be94c12cd8074d93dafe2809364cfb01cc29acd72543e1780ad0e46f8f64</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">9b354634c0393dd6269f1aaed47ecbe81302d3901b3216a6717c75dc2a8ce369</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d34e391fe4b5dbcd78159973995a7e45855841745b2389c8c14b324f6d9772a0</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f94af326b11333ec07460d51e79decc22c5c9fc838ac651df4fb784b0bcfb852</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">be408373e7402f6214dbc537147c8228410a112d799c56e79da1b4fcb9ad1d49</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">8ff15c578508aa1e2c330471c716c32d6fbcf96a30fd8521410a5ddc1e4af3b8</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">6e4cf9599de2f7c1e414de75fe56ae96a17b03b830b3d53b70dfe370b3db3e70</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">900977816fef5a518e7d6fa1033f275833f013741104046d022d2170e4ee76b9</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">e2f424e9e6c817944d027a6ed8c2512825d8f4c63e75a4d6e62a0a5781579d2b</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">cd5c95eef1339ee8452b0078bbf2e0223f7d34686b6d530180b872736e444d8c</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">2a87df4bed9cba42107cab5aa2d922710dc48b24ea9381c5d8e0a857a34f9ed6</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="1.el9_1" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">3cfcafb3b588e355b832aa1df6f26315eb7b22a821dcb09b8a58f41d6ffc0d1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:1909</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-04-26 15:28:57" />
    <updated date="2023-04-26 15:29:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)

* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)

* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)

* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)

* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)

* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)

* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187435" id="2187435" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187441" id="2187441" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187704" id="2187704" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187724" id="2187724" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187758" id="2187758" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187790" id="2187790" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2187802" id="2187802" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2188024" id="2188024" type="bugzilla" title="* The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024)" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:1909" id="RLSA-2023:1909" type="self" title="RLSA-2023:1909" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a80a1f577f8f92d37c88f553deb7d9c1ba27c0785c429fc16a1274e6d025210c</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">352941ceb2f51d6171f0d198c14aaa045b57232b0947a419e7cc4609e6662ed6</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">7111f6997fd0319da1120c1be887b96ae6e8d233fdbc6598bfc5b8a390b10d2b</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">d87e93ea96c27e90ec5919d9a51ca1c6800be01a0139df3764322df2094a606e</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">876430ed858b1e37e3411abb45581f2e2107e1fce911269c64b02e260a7b06df</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">853b037cccd10d56d4ff9b7c3a3c73e0537d72c15ea93a2875835d53e6166cd6</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">a1172208ff05d8808c0f243301264fcd87bc20ec0f459987ba9917f3aa2ffc59</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">f4b2ae7ec1d3d173f6e1bd2fa671bebbbf5e1765979a564513966a3bf3cfcc48</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">047e6346428a62d329cbf236562343723c9fffab4b6c3d0ef5b85eb24447aa98</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.372.b07" release="1.el9_1" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.372.b07-1.el9_1.aarch64.rpm</filename>
          <sum type="sha256">82e49a1430a55e73d8cdf9ca93290f5fdb8f11eef87ecaae4e1a41b4ba2384ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:2127</id>
    <title>Important: samba security update</title>
    <issued date="2023-05-05 15:41:05" />
    <updated date="2023-05-05 15:41:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for samba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2154362" id="2154362" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:2127" id="RLSA-2023:2127" type="self" title="RLSA-2023:2127" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsmbclient-devel" arch="aarch64" epoch="0" version="4.16.4" release="103.el9_1" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libsmbclient-devel-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">ecbc5b34ccf2bb7ad2eec9a4db6953358c2ae725782ed4add9b3b00beda2cf8d</sum>
        </package>
        <package name="libwbclient-devel" arch="aarch64" epoch="0" version="4.16.4" release="103.el9_1" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libwbclient-devel-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">b05e035515f718a6a12b37119b02b98c1141ef449b450435e1d8985f76741a3a</sum>
        </package>
        <package name="samba-devel" arch="aarch64" epoch="0" version="4.16.4" release="103.el9_1" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-devel-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">4445dcc6cb1cfea711ab02a78a52f59b6115a3069cacb484ef0088fdb632af9c</sum>
        </package>
        <package name="samba-pidl" arch="noarch" epoch="0" version="4.16.4" release="103.el9_1" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-pidl-4.16.4-103.el9_1.noarch.rpm</filename>
          <sum type="sha256">d37af99927d8d78941c6e456156317a42c6ec42358e0c9c154068d1ec62808dc</sum>
        </package>
        <package name="samba-test" arch="aarch64" epoch="0" version="4.16.4" release="103.el9_1" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-test-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">8ef4347d2ec9b334dfb4d897b7081e044fd9bfec40f39256cd15a61339309404</sum>
        </package>
        <package name="samba-test-libs" arch="aarch64" epoch="0" version="4.16.4" release="103.el9_1" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-test-libs-4.16.4-103.el9_1.aarch64.rpm</filename>
          <sum type="sha256">96b634654a1097b700986a9c63a35677d624b074d84f8f13dc2a10e8ca4d9786</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2480</id>
    <title>libsepol bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2023-05-25 19:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsepol.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2136212" id="2136212" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2145224" id="2145224" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2480" id="RLBA-2023:2480" type="self" title="RLBA-2023:2480" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsepol-static" arch="aarch64" epoch="0" version="3.5" release="1.el9" src="libsepol-3.5-1.el9.src.rpm">
          <filename>libsepol-static-3.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">42f2bb2df1777af64f28877e63439a0538ddea9ff5744d5280ae2671912df08a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2489</id>
    <title>librepo bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2023-05-25 19:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librepo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2118624" id="2118624" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2121663" id="2121663" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2489" id="RLBA-2023:2489" type="self" title="RLBA-2023:2489" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librepo-devel" arch="aarch64" epoch="0" version="1.14.5" release="1.el9" src="librepo-1.14.5-1.el9.src.rpm">
          <filename>librepo-devel-1.14.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a61f0ee7326a32151e970da46bf071ba449399692dcb9aaddbea55b667a76a99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2501</id>
    <title>gobject-introspection bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2025-10-17 21:54:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gobject-introspection.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2140108" id="2140108" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2501" id="RLBA-2023:2501" type="self" title="RLBA-2023:2501" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gobject-introspection-devel" arch="aarch64" epoch="0" version="1.68.0" release="11.el9" src="gobject-introspection-1.68.0-11.el9.src.rpm">
          <filename>gobject-introspection-devel-1.68.0-11.el9.aarch64.rpm</filename>
          <sum type="sha256">35484e01bb3301594b9eb95f6965ab40cfea47d3c54804550895912b6b6d1206</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2514</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2023-05-25 19:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1766490" id="1766490" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1964121" id="1964121" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074307" id="2074307" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2087247" id="2087247" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096031" id="2096031" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2103325" id="2103325" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2110091" id="2110091" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2111388" id="2111388" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2115171" id="2115171" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2127492" id="2127492" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2127510" id="2127510" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2128840" id="2128840" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2128883" id="2128883" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2136791" id="2136791" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2139684" id="2139684" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2139837" id="2139837" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141744" id="2141744" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2142794" id="2142794" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2144893" id="2144893" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2148737" id="2148737" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2160001" id="2160001" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2514" id="RLBA-2023:2514" type="self" title="RLBA-2023:2514" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.8.2" release="2.el9" src="sssd-2.8.2-2.el9.src.rpm">
          <filename>libsss_nss_idmap-devel-2.8.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8f9ccb753854d9073f7b9e9508353489effae337951c816c8e7e2ef320703be3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2558</id>
    <title>libselinux bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2023-05-25 19:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libselinux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2145226" id="2145226" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2152116" id="2152116" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2558" id="RLBA-2023:2558" type="self" title="RLBA-2023:2558" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libselinux-static" arch="aarch64" epoch="0" version="3.5" release="1.el9" src="libselinux-3.5-1.el9.src.rpm">
          <filename>libselinux-static-3.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">fd50a8e1331e38597f29e20788784e9586819d9639680eed5a96c2ac19acdd52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2549</id>
    <title>libbpf bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2023-05-25 19:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libbpf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2149243" id="2149243" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2157592" id="2157592" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2159763" id="2159763" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2549" id="RLBA-2023:2549" type="self" title="RLBA-2023:2549" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbpf-devel" arch="aarch64" epoch="2" version="1.0.0" release="2.el9" src="libbpf-1.0.0-2.el9.src.rpm">
          <filename>libbpf-devel-1.0.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">59bf1f602173defda3c6bb5bab07854f4df3d9084121db6888ea261e001975d1</sum>
        </package>
        <package name="libbpf-static" arch="aarch64" epoch="2" version="1.0.0" release="2.el9" src="libbpf-1.0.0-2.el9.src.rpm">
          <filename>libbpf-static-1.0.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">dde2fffe70195d9080679405b42e5f76fabd79eb0e64ba24529f26f21669043f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2586</id>
    <title>ipset bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:58" />
    <updated date="2023-05-25 19:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipset.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:2586" id="RLBA-2023:2586" type="self" title="RLBA-2023:2586" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ipset-devel" arch="aarch64" epoch="0" version="7.11" release="8.el9" src="ipset-7.11-8.el9.src.rpm">
          <filename>ipset-devel-7.11-8.el9.aarch64.rpm</filename>
          <sum type="sha256">5bb87c900bfb575bc009c12852e8d38a791c227dea7c4c83f3f0234f8b24d11c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2223</id>
    <title>anaconda bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:59" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for anaconda.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1991843" id="1991843" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2052938" id="2052938" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2057472" id="2057472" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2074827" id="2074827" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2083319" id="2083319" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2093793" id="2093793" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2107346" id="2107346" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2125256" id="2125256" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133046" id="2133046" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2133053" id="2133053" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2139640" id="2139640" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2149362" id="2149362" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2149624" id="2149624" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2153361" id="2153361" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2157916" id="2157916" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2158210" id="2158210" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2223" id="RLBA-2023:2223" type="self" title="RLBA-2023:2223" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="anaconda-widgets-devel" arch="aarch64" epoch="0" version="34.25.2.10" release="1.el9_2.rocky.0.3" src="anaconda-34.25.2.10-1.el9_2.rocky.0.3.src.rpm">
          <filename>anaconda-widgets-devel-34.25.2.10-1.el9_2.rocky.0.3.aarch64.rpm</filename>
          <sum type="sha256">6dea849b4b4ed0095047ffb61a6c3d349eb4bd18bc10134d5b26035813a99275</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2388</id>
    <title>python3.11-wheel bug fix and enhancement update</title>
    <issued date="2023-05-25 19:52:59" />
    <updated date="2025-10-17 21:52:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.11-wheel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2157729" id="2157729" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2388" id="RLBA-2023:2388" type="self" title="RLBA-2023:2388" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-wheel-wheel" arch="noarch" epoch="0" version="0.38.4" release="3.el9" src="python3.11-wheel-0.38.4-3.el9.src.rpm">
          <filename>python3.11-wheel-wheel-0.38.4-3.el9.noarch.rpm</filename>
          <sum type="sha256">6afa76447518ad48a5e66097bdd791983b63bac806c73949c8d75d1b77b3eed1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2402</id>
    <title>maven bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for plexus-interpolation, httpcomponents-core, maven-wagon, maven, google-guice, jsoup, jansi, apache-commons-io, apache-commons-lang3, maven-shared-utils, plexus-utils, plexus-classworlds, jakarta-annotations, httpcomponents-client, apache-commons-codec, plexus-cipher, atinject, javapackages-tools, maven-resolver, plexus-containers, jsr-305, cdi-api, apache-commons-cli, slf4j, guava, plexus-sec-dispatcher, sisu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2096431" id="2096431" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2164437" id="2164437" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2165596" id="2165596" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2402" id="RLBA-2023:2402" type="self" title="RLBA-2023:2402" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="javapackages-generators" arch="noarch" epoch="0" version="6.0.0" release="4.el9" src="javapackages-tools-6.0.0-4.el9.src.rpm">
          <filename>javapackages-generators-6.0.0-4.el9.noarch.rpm</filename>
          <sum type="sha256">658d14adcf1518041ff90ee238d485193ab92f5601fd24e2767d1531c6503d4f</sum>
        </package>
        <package name="javapackages-local" arch="noarch" epoch="0" version="6.0.0" release="4.el9" src="javapackages-tools-6.0.0-4.el9.src.rpm">
          <filename>javapackages-local-6.0.0-4.el9.noarch.rpm</filename>
          <sum type="sha256">4677a41640859d83cc0b2a102a60e3eb34dd4c3d6bfef0d14cc9d5e28dc7eabd</sum>
        </package>
        <package name="maven-local" arch="noarch" epoch="0" version="6.0.0" release="4.el9" src="javapackages-tools-6.0.0-4.el9.src.rpm">
          <filename>maven-local-6.0.0-4.el9.noarch.rpm</filename>
          <sum type="sha256">acf5acd8478e2aadedf45db80699b349b03b9605b5f7eaed790572b7683dc65b</sum>
        </package>
        <package name="plexus-containers-container-default" arch="noarch" epoch="0" version="2.1.0" release="10.el9" src="plexus-containers-2.1.0-10.el9.src.rpm">
          <filename>plexus-containers-container-default-2.1.0-10.el9.noarch.rpm</filename>
          <sum type="sha256">f95f3671e7d93035d083cbfdbb4b14ebc3bfe295a1bbe738036da6f103f5c54a</sum>
        </package>
        <package name="python3-javapackages" arch="noarch" epoch="0" version="6.0.0" release="4.el9" src="javapackages-tools-6.0.0-4.el9.src.rpm">
          <filename>python3-javapackages-6.0.0-4.el9.noarch.rpm</filename>
          <sum type="sha256">02090a36a022def69bb135f2d30b92f1f322719adc0a3c0993038500d74dfb5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2160</id>
    <title>capstone bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2025-10-17 21:52:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for capstone.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:2160" id="RLBA-2023:2160" type="self" title="RLBA-2023:2160" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="capstone-devel" arch="aarch64" epoch="0" version="4.0.2" release="10.el9" src="capstone-4.0.2-10.el9.src.rpm">
          <filename>capstone-devel-4.0.2-10.el9.aarch64.rpm</filename>
          <sum type="sha256">aa04b80d04fbd248c82e17ebc0d8aa53b8a4075d4e46b243a0cb10513766ecbe</sum>
        </package>
        <package name="capstone-java" arch="noarch" epoch="0" version="4.0.2" release="10.el9" src="capstone-4.0.2-10.el9.src.rpm">
          <filename>capstone-java-4.0.2-10.el9.noarch.rpm</filename>
          <sum type="sha256">e9da5f1c2ebce2390774a72927ab09d1d88f19f630a2afa6f682ac71d5d48841</sum>
        </package>
        <package name="python3-capstone" arch="aarch64" epoch="0" version="4.0.2" release="10.el9" src="capstone-4.0.2-10.el9.src.rpm">
          <filename>python3-capstone-4.0.2-10.el9.aarch64.rpm</filename>
          <sum type="sha256">2220080cb6733457527dcec022ededaa8024b0be1e1ca81d1fc373015177a7a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2186</id>
    <title>augeas bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for augeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2077120" id="2077120" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2186" id="RLBA-2023:2186" type="self" title="RLBA-2023:2186" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="augeas-devel" arch="aarch64" epoch="0" version="1.13.0" release="3.el9" src="augeas-1.13.0-3.el9.src.rpm">
          <filename>augeas-devel-1.13.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">3d0fb4a3c22827201b27e4bfff81dce868ceaf899cf1d7742cd263d30fc68602</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2390</id>
    <title>varnish bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:2390" id="RLBA-2023:2390" type="self" title="RLBA-2023:2390" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="3.el9" src="varnish-6.6.2-3.el9.src.rpm">
          <filename>varnish-devel-6.6.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">98385a78ead407cab59d5ea75ba89d4407bb7986ae361107c84481083e083d35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2430</id>
    <title>python3.11-psycopg2 bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2025-10-17 21:52:11" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.11-psycopg2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2157715" id="2157715" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2430" id="RLBA-2023:2430" type="self" title="RLBA-2023:2430" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-psycopg2-debug" arch="aarch64" epoch="0" version="2.9.3" release="1.el9" src="python3.11-psycopg2-2.9.3-1.el9.src.rpm">
          <filename>python3.11-psycopg2-debug-2.9.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9cc9af7176f7f2894257e512ac2c2aade090b00a001b1abcf48cc7949ad90e62</sum>
        </package>
        <package name="python3.11-psycopg2-tests" arch="aarch64" epoch="0" version="2.9.3" release="1.el9" src="python3.11-psycopg2-2.9.3-1.el9.src.rpm">
          <filename>python3.11-psycopg2-tests-2.9.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ae7fb9471b7e779a001ec7cb6542e49d7b06dc88825da4729cd8cb74f5171659</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2608</id>
    <title>kronosnet bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kronosnet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2161168" id="2161168" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2608" id="RLBA-2023:2608" type="self" title="RLBA-2023:2608" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libknet1" arch="aarch64" epoch="0" version="1.25" release="2.el9" src="kronosnet-1.25-2.el9.src.rpm">
          <filename>libknet1-1.25-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3e59ab4b7e94f604026d92c77dc89defdcb7fb6df4fb3444a84f3a31a2d276d8</sum>
        </package>
        <package name="libknet1-devel" arch="aarch64" epoch="0" version="1.25" release="2.el9" src="kronosnet-1.25-2.el9.src.rpm">
          <filename>libknet1-devel-1.25-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f1c96955d260fa6146706119ea24d03b355332cfd8285b6c1b602fc592fa44b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2639</id>
    <title>java-17-openjdk bug fix update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-17-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Bug Fix(es):

* All Rocky Linux versions now share a single OpenJDK build (RHBZ#2189326)

* In FIPS mode, the list of cryptographic services and algorithms available is
limited to those that are FIPS compliant. It was found that this filtering was
too strict and was also excluding service attributes. These attributes are now
made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186803)

* Previously, the XML signature provider was unable to operate in FIPS mode.
Following recent enhancements to FIPS mode support, the XML signature provider
can now be supported. It is now enabled in FIPS mode. (RHBZ#2186810)

* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11
tokens. It was found that some PKCS#11 tokens may not be initialised fully
before use, leading to an exception being thrown by the provider. With this
release, this exception is now expected and handled by the FIPS support code.
(RHBZ#2186806)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2186803" id="2186803" type="bugzilla" title="made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186803)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2186806" id="2186806" type="bugzilla" title="(RHBZ#2186806)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2186810" id="2186810" type="bugzilla" title="can now be supported. It is now enabled in FIPS mode. (RHBZ#2186810)" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2189326" id="2189326" type="bugzilla" title="* All RHEL versions now share a single OpenJDK build (RHBZ#2189326)" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2639" id="RLBA-2023:2639" type="self" title="RLBA-2023:2639" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-17-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f1516104118bd0eb02b0920fdd4dd0ba46ad8a58f53f76722a18ff4f4b09a464</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f33dc1ccfcd4d3e850c198d8004f502ec5f229a400bea5667ea36b353725a6f7</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">58fed1222e7250c5a57963bd8361de158bce00d0fce0e196df98b370642b666d</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">33e6e47429084c5ef159f63835cd412045010ddc89b89d6a4000b7ada200fdd9</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">48cf2cef9334901418d84eb277475c0967a632283f4319745fc632968870ccf3</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">05d6cbcd37857e311f1bca692e59ebfe0e70fad4003e1f898d2297c8f7b438ad</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">fe91ce7f60ac21cb6c13eba8d53bc41570ea0a3f503dcdb53a7b199f717c2f73</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ac88e8b3db9b25b485a94fab42bb06bfb878c19d49ec7969d7db9cdf4d782897</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">348c503a9ccc8a5ccd50099ac5fb025dcdcaf92865d7c1e4ff3fcdf4e10ac5df</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6b0086fc23b5a86fb20122b7c1b78f2b634591bdaad4bfe93e2dcca442520631</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">fd8453c3d96e871129a6cb94137c07778205a9c7930b3068f49d541e193a87ca</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a0d33191b6db668aa4249ffe68f3b6147e25aa4c3bd9958a55b4ecd898f888ba</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a7d34409e99b819f51cb5f84ae202f050002f89f1383f5c646a46ef417680a4f</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="17.0.7.0.7" release="3.el9" src="java-17-openjdk-17.0.7.0.7-3.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.7.0.7-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8a3521aa46cd6b34689726d80a59dfeb8a234aed496724c65ed01ed27fcf4e0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2640</id>
    <title>java-11-openjdk bug fix update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Bug Fix(es):

* All Rocky Linux versions now share a single OpenJDK build (RHBZ#2189325)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2189325" id="2189325" type="bugzilla" title="* All RHEL versions now share a single OpenJDK build (RHBZ#2189325)" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2640" id="RLBA-2023:2640" type="self" title="RLBA-2023:2640" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">c0ef8fb12d4ac8875ef35a1b89c55b1f569d7fbf0024a830cdf398a4ad1d8177</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">0fed820197a0985bc0fdf55b0c75cd9140780fcbb00d42e26557f325ec7769da</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">d3bdd62be32a2b674c0c09dd9b3a446216717493974e96c22c5f0e9535588cfe</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">3f0fd3bd2224355f21340c73110331bd58e496591ee75d64f30d91d212a606f9</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">a5a30dc3f76af3e37bafec49c54848eb3dea63500f9f22945a869041a9a81922</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">d4ff181481422b957971464570bec93690b23706e7b3b5036bec8522fb77177c</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">0905d2f0c95551cb8965ffb134d5b14c26361a151ebc9d4da9e26936bfedab52</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">98afa4fbcca2697d6c970d4235005bc437237f1c1f695f14c73310371f42361a</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">b08c31fba4dd132e09b4c80ce8dbd6553f3a4e46502b967b0e009aa4345d2a3f</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">9d166dc32f8614f2040debcc39a899f650452907552da2c50ce528a2a6fba8da</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">91bd65782bc6108c0da3bae5312d95103edef22894183e74e5b9b08b39306f78</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">8f325045e7aafdb98c13567afc330188c4a32cda007a0e280caefdfe30e728b5</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">5282aaa42fa5702baa3435ef7fae4ad4dbbef7ea29e3a85be6e5152dfef52cea</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.19.0.7" release="4.el9" src="java-11-openjdk-11.0.19.0.7-4.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-4.el9.aarch64.rpm</filename>
          <sum type="sha256">c8a7e5076d0324f0b49205b860031653139ec53448ded8d76072eb580e588b32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2643</id>
    <title>util-linux bug fix update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for util-linux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.

Bug Fix(es):

* Backport hint about systemd daemon-reload (BZ#2180441)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2180441" id="2180441" type="bugzilla" title="* Backport hint about systemd daemon-reload" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2643" id="RLBA-2023:2643" type="self" title="RLBA-2023:2643" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfdisk-devel" arch="aarch64" epoch="0" version="2.37.4" release="11.el9_2" src="util-linux-2.37.4-11.el9_2.src.rpm">
          <filename>libfdisk-devel-2.37.4-11.el9_2.aarch64.rpm</filename>
          <sum type="sha256">1d4cd2fc34ed529e84c7258f1b6ca32de28fb35f8ac73173fea3ef8970a9686b</sum>
        </package>
        <package name="libsmartcols-devel" arch="aarch64" epoch="0" version="2.37.4" release="11.el9_2" src="util-linux-2.37.4-11.el9_2.src.rpm">
          <filename>libsmartcols-devel-2.37.4-11.el9_2.aarch64.rpm</filename>
          <sum type="sha256">cc5701282bfee91ed30d0b75474f95dd87c34997272bf64fb1810af88f311d84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2635</id>
    <title>.NET 7.0 bugfix update</title>
    <issued date="2023-05-25 19:53:05" />
    <updated date="2023-05-25 19:53:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 7.0 to SDK 7.0.105 and Runtime 7.0.5 [rhel-9.2.0.z] (BZ#2183591)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:2635" id="RLBA-2023:2635" type="self" title="RLBA-2023:2635" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.105" release="2.el9_2" src="dotnet7.0-7.0.105-2.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.105-2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">fcf0d93543792ee2714848431b61adf0552868fb0576dae3666e9458846a799f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:2578</id>
    <title>file bug fix and enhancement update</title>
    <issued date="2023-05-25 19:53:21" />
    <updated date="2023-05-25 19:53:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for file.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2164834" id="2164834" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2164840" id="2164840" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:2578" id="RLBA-2023:2578" type="self" title="RLBA-2023:2578" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="file-devel" arch="aarch64" epoch="0" version="5.39" release="12.el9" src="file-5.39-12.el9.src.rpm">
          <filename>file-devel-5.39-12.el9.aarch64.rpm</filename>
          <sum type="sha256">68c2cbb552abd20eec15ab5eb11eac5f204bee8934e3712070f222acb1eeffef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3661</id>
    <title>Important: texlive security update</title>
    <issued date="2023-06-24 18:52:51" />
    <updated date="2025-10-17 21:52:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for texlive.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.

Security Fix(es):

* texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32700" id="CVE-2023-32700" type="cve" title="CVE-2023-32700" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2208943" id="2208943" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3661" id="RLSA-2023:3661" type="self" title="RLSA-2023:3661" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="texlive-gnu-freefont" arch="noarch" epoch="9" version="20200406" release="26.el9_2" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-gnu-freefont-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e0b8de039e1774fb08334bad37b894f4408a40a857939705a3fddaead6fa6032</sum>
        </package>
        <package name="texlive-lib-devel" arch="aarch64" epoch="9" version="20200406" release="26.el9_2" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lib-devel-20200406-26.el9_2.aarch64.rpm</filename>
          <sum type="sha256">e06a1e2a9cbb5f17a3107d9eab12757c2f50e2c198818fcb44ab044b45958c05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:4099</id>
    <title>Important: bind security update</title>
    <issued date="2023-08-08 12:34:57" />
    <updated date="2023-08-08 12:36:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2216227" id="2216227" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:4099" id="RLSA-2023:4099" type="self" title="RLSA-2023:4099" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="11.el9_2.1" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-devel-9.16.23-11.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">971d1b384cfee905f62882c189757b341200a630c0ec2163e9ebf3348386d61a</sum>
        </package>
        <package name="bind-doc" arch="noarch" epoch="2" version="9.16.23" release="11.el9_2.1" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-doc-9.16.23-11.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">20ee083d8fb6047b1e6e360485045d533a07dccc725f7edbccf65103c6854c09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:4178</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-08-08 12:34:57" />
    <updated date="2023-08-08 12:36:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)

* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [rhel-9] (BZ#2220662)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2220662" id="2220662" type="bugzilla" title="* Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [rhel-9]" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2221645" id="2221645" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2221647" id="2221647" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:4178" id="RLSA-2023:4178" type="self" title="RLSA-2023:4178" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">91aa1e5a40f85a3f9423271831804b9907cb37e617c8a7bc46f74ffbf1d54169</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a607448084f38c509f5b4b7397ae66d93fc0238a8ac4f241e60ae3adaed8a864</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">403f3665a9dee9baeeee0896fa1a4692f15daf92597a488aa1453c23fb207650</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">095870132a789fa2ae23af590611265412d4333a475ea581ff6cf6d6e747f991</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f78c10c1fa46a4d22fb26269980a0feed850a20109bce85be93383ead0b7d757</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">32c1d8afbe6fc253873663e317c92cdc627381c2d5f7b20cdb9df3524e74f750</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ffb6cb9bc46411c9163196cf242587e62907fc5a59596686048688f683cbb132</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c756080bfc2fa66f51b1a6435d88546d4780d2ac0b39a82de1b14046f40b7dfa</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">995c7a7268ad09bdf0f92d1a270916d609c7a0a0de8a696f80ca841407917dfc</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.382.b05" release="2.el9" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.382.b05-2.el9.aarch64.rpm</filename>
          <sum type="sha256">793b2d7858291811af65d741f372978432286ef31be0ca3f493c3665c68296fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:4374</id>
    <title>java-11-openjdk bug fix update</title>
    <issued date="2023-08-08 12:34:57" />
    <updated date="2023-08-08 12:36:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Bug Fix(es):

* The recent OpenJDK 11.0.20 security update accidentally removed a runtime dependency on the tzdata-java package. Installations of the package on systems that did not already have tzdata-java installed were left with missing timezone data. This mistake is rectified in this build. (RHBZ#2224428)

For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2224428" id="2224428" type="bugzilla" title="* The recent OpenJDK 11.0.20 security update accidentally removed a runtime dependency on the tzdata-java package. Installations of the package on systems that did not already have tzdata-java installed were left with missing timezone data. This mistake is rectified in this build. (RHBZ#2224428)" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:4374" id="RLBA-2023:4374" type="self" title="RLBA-2023:4374" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4f026104dec02e7cb1385353fe4eaca25ca0ce4cba861362ee98051fb14dba67</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ddf1c8d4e2a4174f44db23f0f4fbbdce11418da963d23d90e6090e0b027bdc19</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">d84d0ba4dbe749123c86245c181c69ad2281e305b8057c95b8e994eb44b15493</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">864076b242ccad5f60eda0f98f5e3677708d7b04cc9fca4d5ca76cbe03d8f034</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c4d9a0a2c73c90f9c9f7bffe3663b31f809fc7055696b9fcbc2ff414c1627e8b</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">3c91a7211c04a0a2509ef60f55db94831cdb9509056fa7b21b2df91e6ea80838</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c6a31c4035dd01a8a940e21ae80c9a243b74226ea841b5c038fc0533028cf4e0</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">d9791f6c65689d98b7ab2a897f3d49b287aaf7ca3a90611a4f902037c25b5421</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">d54ae86f9b84678b0fcdb0cba45e65f868875b1aae04658ece4ca478bf9efcc6</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">bbf0392268832398919ae1cb364066618125dd03c400e393befbb0196e0c6131</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8226b01413697d09e6de854344463e235a159f8d3acf5c341a98b11c3d534709</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b5e631e04b240b3cce626324d9dcb5264a0aa64f5decf6093a1ea36feaa1c31b</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f7e423459d6c355cf9a9365a5e7ca53047b106a8117d134a09c498ea3e8acb38</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.20.0.8" release="3.el9" src="java-11-openjdk-11.0.20.0.8-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-3.el9.aarch64.rpm</filename>
          <sum type="sha256">649edf2af9d70bc34bbf84ee226363e389abee229b2956229b6c098f37b01231</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:4375</id>
    <title>ostree bug fix update</title>
    <issued date="2023-08-08 12:34:57" />
    <updated date="2023-08-08 12:36:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ostree.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OSTree is a tool for managing bootable, immutable, versioned file system trees.

Bug Fix(es):

* backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912 (BZ#2224105)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2224105" id="2224105" type="bugzilla" title="* backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:4375" id="RLBA-2023:4375" type="self" title="RLBA-2023:4375" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2023.1" release="6.el9_2" src="ostree-2023.1-6.el9_2.src.rpm">
          <filename>ostree-devel-2023.1-6.el9_2.aarch64.rpm</filename>
          <sum type="sha256">42838b23ae067c8c6c3138ce121af6c639bf1bfc3f86612a0b226876eb5df51d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:14878</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-12-05 09:06:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)

* postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2388551" id="2388551" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2388553" id="2388553" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:14878" id="RLSA-2025:14878" type="self" title="RLSA-2025:14878" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-docs" arch="aarch64" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-docs-13.22-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">c4ef60dd8c6aaede114a18330517d0efab4fb33135ed2e4b3a1e386a9d4cfcf6</sum>
        </package>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-private-devel-13.22-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">11a73dcebc20ae0c6545aa3629723578c8ad100205779c15001806c04081567a</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-server-devel-13.22-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">e121dddb0968164c0f6b477df49ece39f4440aae8f94f97b898a963b1b8ded0f</sum>
        </package>
        <package name="postgresql-static" arch="aarch64" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-static-13.22-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">7ac351fcc54a1934efcc93811c36fe1c44402b0cfbe9938fae3e0c8ab994ea21</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-test-13.22-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">fd755e12cabb803b2e02e5516a191e749c4cc0b8165a56aaa1a99c16c1ab0be9</sum>
        </package>
        <package name="postgresql-test-rpm-macros" arch="noarch" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-test-rpm-macros-13.22-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">c5559ba52302ddafb4e8c89579dd21272d451862d54e7dac6a82bdae7b80084a</sum>
        </package>
        <package name="postgresql-upgrade-devel" arch="aarch64" epoch="0" version="13.22" release="1.el9_6" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-upgrade-devel-13.22-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">d7040f7c084ec488bd71b1eb8c2c695dcb463f55aabffb2c1c8d3d6082f3e0f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:3730</id>
    <title>avahi bug fix update</title>
    <issued date="2023-08-31 16:55:39" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for avahi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS
specifications for Zero Configuration Networking. It facilitates service
discovery on a local network. Avahi and Avahi-aware applications allow you to
plug your computer into a network and, with no configuration, view other people
to chat with, view printers to print with, and find shared files on other
computers.

Bug Fix(es):

* [Rocky Linux-9] Avahi-tools package built but not shipped. (BZ#2204487)</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2204487" id="2204487" type="bugzilla" title="* [RHEL-9] Avahi-tools package built but not shipped." />
      <reference href="https://errata.rockylinux.org/RLBA-2023:3730" id="RLBA-2023:3730" type="self" title="RLBA-2023:3730" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="avahi-compat-howl" arch="aarch64" epoch="0" version="0.8" release="12.el9_2.1" src="avahi-0.8-12.el9_2.1.src.rpm">
          <filename>avahi-compat-howl-0.8-12.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">5c34408d5d8f623fb8e8a1ffc86d415c603446e57b96f4761e2d0ab0d6654838</sum>
        </package>
        <package name="avahi-compat-howl-devel" arch="aarch64" epoch="0" version="0.8" release="12.el9_2.1" src="avahi-0.8-12.el9_2.1.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-12.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">fb014f3d4d65c3b14a10814ad1ca445709cf5d5bc2fcabf1fbab74302f770541</sum>
        </package>
        <package name="avahi-compat-libdns_sd" arch="aarch64" epoch="0" version="0.8" release="12.el9_2.1" src="avahi-0.8-12.el9_2.1.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-12.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">c9e1efcba0f2bc2eb53ca68d47975f672d5562c9d056315baec0a8d4fb1a2304</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" arch="aarch64" epoch="0" version="0.8" release="12.el9_2.1" src="avahi-0.8-12.el9_2.1.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">18dce30e7e38cbab9d65b1fcf521f382d22434731a80cf55aca9985ea78a58ee</sum>
        </package>
        <package name="avahi-devel" arch="aarch64" epoch="0" version="0.8" release="12.el9_2.1" src="avahi-0.8-12.el9_2.1.src.rpm">
          <filename>avahi-devel-0.8-12.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">05fc8952ed64ae5a687ff03d2937fd43aaf72ceacffee4be0a4db6abbbaf2810</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3595</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-08-31 16:55:39" />
    <updated date="2023-08-31 16:56:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2173917" id="2173917" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3595" id="RLSA-2023:3595" type="self" title="RLSA-2023:3595" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.16" release="1.el9_2.1" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-debug-3.9.16-1.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">e938d62db5d1ab7f96d89af823bfdfd2b754d8bbd20c9d6b7c0258fc3da473bb</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.16" release="1.el9_2.1" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-idle-3.9.16-1.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">ad0237b36bbe6e61f0d87a8e49bca018b12757f4a5e92d69eae80a9124c2f320</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.16" release="1.el9_2.1" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-test-3.9.16-1.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">aadfc74a08df4d56c46190d6b6e2903cb9fcaba6ce0446a52b34cd5f276481d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3423</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-08-31 16:55:40" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for cups-filters.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2203051" id="2203051" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3423" id="RLSA-2023:3423" type="self" title="RLSA-2023:3423" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cups-filters-devel" arch="aarch64" epoch="0" version="1.28.7" release="11.el9_2.1" src="cups-filters-1.28.7-11.el9_2.1.src.rpm">
          <filename>cups-filters-devel-1.28.7-11.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">6290ab64c808d13975606c00b64c455d76827411d0402dca4ec23c7f57142bf7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3585</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-08-31 16:55:40" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2173917" id="2173917" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3585" id="RLSA-2023:3585" type="self" title="RLSA-2023:3585" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.2" release="2.el9_2.1" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">dbc125bd305458129c2b091d243517d46ce23f0bc5f0968beed0f4116095fb51</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.2" release="2.el9_2.1" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">eec45375f1839a1f6f3f6ae2b4ac7e841c04940840bc7f299c6c676c426e69ab</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.2" release="2.el9_2.1" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-test-3.11.2-2.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">3bf5f7576ce9ce62787d8aaaacf4acbf88c5c6c91a530bcfd30cc7b1f0eb9cce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3715</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2023-08-31 16:55:40" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2203653" id="2203653" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3715" id="RLSA-2023:3715" type="self" title="RLSA-2023:3715" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-client-qemu" arch="aarch64" epoch="0" version="9.0.0" release="10.2.el9_2" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-client-qemu-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">471ee3cce885c8e91d1fed1305c3d535fe59eb24790ebba19ce92daa9a99f474</sum>
        </package>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="9.0.0" release="10.2.el9_2" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-devel-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">0cd310144dd6787aa27aae9797dc6d588375401d583135bf660d8d18a41bd1b6</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="9.0.0" release="10.2.el9_2" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-docs-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">6d2792603ab8e5cf72552d0993e60e4758671a1d6293ef31ee70fd2f6b259be3</sum>
        </package>
        <package name="libvirt-lock-sanlock" arch="aarch64" epoch="0" version="9.0.0" release="10.2.el9_2" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-lock-sanlock-9.0.0-10.2.el9_2.aarch64.rpm</filename>
          <sum type="sha256">a5ee3671441d7b5e0da8e5c325e22007090e48a006ecd170641432702c06cda2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3711</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-08-31 16:55:40" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libtiff.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

* libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)

* libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)

* libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)

* libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)

* libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)

* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)

* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)

* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)

* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)

* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0795" id="CVE-2023-0795" type="cve" title="CVE-2023-0795" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0796" id="CVE-2023-0796" type="cve" title="CVE-2023-0796" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0797" id="CVE-2023-0797" type="cve" title="CVE-2023-0797" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0798" id="CVE-2023-0798" type="cve" title="CVE-2023-0798" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0799" id="CVE-2023-0799" type="cve" title="CVE-2023-0799" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2163606" id="2163606" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170119" id="2170119" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170146" id="2170146" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170151" id="2170151" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170157" id="2170157" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170162" id="2170162" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170167" id="2170167" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170172" id="2170172" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170178" id="2170178" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170187" id="2170187" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2170192" id="2170192" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3711" id="RLSA-2023:3711" type="self" title="RLSA-2023:3711" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtiff-tools" arch="aarch64" epoch="0" version="4.4.0" release="8.el9_2" src="libtiff-4.4.0-8.el9_2.src.rpm">
          <filename>libtiff-tools-4.4.0-8.el9_2.aarch64.rpm</filename>
          <sum type="sha256">864a091f33cd8336e4d49d6e88a5d33db5b449b2272d7243d644f2febeb62d78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:3714</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-08-31 16:55:40" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)

* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2207568" id="2207568" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2207569" id="2207569" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:3714" id="RLSA-2023:3714" type="self" title="RLSA-2023:3714" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-docs" arch="aarch64" epoch="0" version="13.11" release="1.el9_2" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-docs-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">7a463f2f4a248d0c61847831218c6865215d0789904fe9adb8fe0e7ae71b4817</sum>
        </package>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.11" release="1.el9_2" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-private-devel-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">b107d5432fa2003ec503643a2eebd0d130762cec4bfd9f0f7e7a7cb480e609a1</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.11" release="1.el9_2" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-server-devel-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">14bb94411884c12efdc59d77c4ad7ed0ebdba56144fc77c5527cca5a00c59ef0</sum>
        </package>
        <package name="postgresql-static" arch="aarch64" epoch="0" version="13.11" release="1.el9_2" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-static-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">0c9e753d55deb4a800a5aead4b5bb14888b3d32959a7c6d1cfa89322509ca9e9</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.11" release="1.el9_2" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-test-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">9bf99b877780d9d58661979064b74f569c70cf71663eace9c14d2ba50c11bf57</sum>
        </package>
        <package name="postgresql-upgrade-devel" arch="aarch64" epoch="0" version="13.11" release="1.el9_2" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-upgrade-devel-13.11-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">cfdd742753906679745c70fe90df519a81c1eaed1541f7b2b26244866ffcb2f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:3720</id>
    <title>criu bug fix and enhancement update</title>
    <issued date="2023-08-31 16:55:40" />
    <updated date="2023-08-31 16:56:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for criu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The criu packages provide the Checkpoint/Restore in User Space (CRIU) function, which provides the possibility to checkpoint and restore processes or groups of processes. This in turn allows improved fault tolerance or high availability (HA) of a system by restoring a failed process to its state in an earlier point in time.

Bug Fix(es) and Enhancement(s):

* Containers migration "podman container checkpoint" doesn't work on Sapphire Rapids CPU. (BZ#2203235)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:3720" id="RLBA-2023:3720" type="self" title="RLBA-2023:3720" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="criu-devel" arch="aarch64" epoch="0" version="3.17" release="5.el9_2" src="criu-3.17-5.el9_2.src.rpm">
          <filename>criu-devel-3.17-5.el9_2.aarch64.rpm</filename>
          <sum type="sha256">1884e950e86cf8923e5854e640a1deccf2e1e268d6bd9d30916104fab9f9e60a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:5214</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-10-06 22:58:06" />
    <updated date="2023-10-06 22:59:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for libwebp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5129" id="CVE-2023-5129" type="cve" title="CVE-2023-5129" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2238431" id="2238431" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:5214" id="RLSA-2023:5214" type="self" title="RLSA-2023:5214" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwebp-tools" arch="aarch64" epoch="0" version="1.2.0" release="7.el9_2" src="libwebp-1.2.0-7.el9_2.src.rpm">
          <filename>libwebp-tools-1.2.0-7.el9_2.aarch64.rpm</filename>
          <sum type="sha256">50a8de0613089b88caed1b2cc55827e31b86a08689d44884d4c483855ca1396e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:5459</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-10-06 22:58:14" />
    <updated date="2023-10-06 22:59:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for ghostscript.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36664" id="CVE-2023-36664" type="cve" title="CVE-2023-36664" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2217798" id="2217798" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:5459" id="RLSA-2023:5459" type="self" title="RLSA-2023:5459" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgs-devel" arch="aarch64" epoch="0" version="9.54.0" release="10.el9_2" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>libgs-devel-9.54.0-10.el9_2.aarch64.rpm</filename>
          <sum type="sha256">a152128bcc497f8e7ddfbc8e58fcba40c6d90c0a0316dda5500b0b520f9401c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:5749</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2023-10-24 18:36:50" />
    <updated date="2023-10-24 18:37:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2242803" id="2242803" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:5749" id="RLSA-2023:5749" type="self" title="RLSA-2023:5749" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.112" release="1.el9_2" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.112-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">98b17210768de2b8be8043c5c1139cf0e531840ccaa0bcaa78137d55e990dd97</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:5689</id>
    <title>Important: bind security update</title>
    <issued date="2023-10-14 02:08:30" />
    <updated date="2023-10-14 02:09:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2239621" id="2239621" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:5689" id="RLSA-2023:5689" type="self" title="RLSA-2023:5689" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="11.el9_2.2" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-devel-9.16.23-11.el9_2.2.aarch64.rpm</filename>
          <sum type="sha256">b0a4a4224956230d0ca2c8768da5ca40cefdaccdf6d1cbb0bcf6257b478f0c7c</sum>
        </package>
        <package name="bind-doc" arch="noarch" epoch="2" version="9.16.23" release="11.el9_2.2" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-doc-9.16.23-11.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">0f211a1c8314dbddcfe39c71a696a31d9e0b324f16d7c2e705901839a82d9315</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:5708</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-24 18:36:50" />
    <updated date="2023-10-24 18:37:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2242803" id="2242803" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:5708" id="RLSA-2023:5708" type="self" title="RLSA-2023:5708" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.123" release="1.el9_2" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">d99b9e6d6515ac80647c85a96086f356ed6fcf709501638b2ccc18630e355ba2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:5838</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-10-24 18:36:50" />
    <updated date="2023-10-24 18:37:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for nghttp2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2242803" id="2242803" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:5838" id="RLSA-2023:5838" type="self" title="RLSA-2023:5838" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnghttp2-devel" arch="aarch64" epoch="0" version="1.43.0" release="5.el9_2.1" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">d75938bdddad68af06d791d2e5a2231cc509cc417c12d4f2f801f7d09394bd9a</sum>
        </package>
        <package name="nghttp2" arch="aarch64" epoch="0" version="1.43.0" release="5.el9_2.1" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_2.1.aarch64.rpm</filename>
          <sum type="sha256">5ef799bd79900de0e32e54af7796be1cff0fcc8b220ad3d30194007246336d9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:15007</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-23 08:07:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2384043" id="2384043" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:15007" id="RLSA-2025:15007" type="self" title="RLSA-2025:15007" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.9" release="1.el9_6.2" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-debug-3.12.9-1.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">d013447536158c306727aa357467de21815db12d42c5911d2a360cc5734d17f5</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.9" release="1.el9_6.2" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-idle-3.12.9-1.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">dc250fd8e879cb710dbee88f4928192c6a1cf85ddca3f74b81409b358bdbc499</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.9" release="1.el9_6.2" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-test-3.12.9-1.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">6e28f0e74f03ca38422ce14c5a2bbdb97e4ce4c0fcf0a76921a140106b7050e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:6242</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-11 23:00:10" />
    <updated date="2023-11-11 23:01:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2237317" id="2237317" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:6242" id="RLSA-2023:6242" type="self" title="RLSA-2023:6242" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.124" release="1.el9_2" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.124-1.el9_2.aarch64.rpm</filename>
          <sum type="sha256">10b705ea29e6e55d6b14784847f5fe9c281dfe7b4fcc2f0182fe0486a713ded0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:15010</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-23 08:07:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2384043" id="2384043" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:15010" id="RLSA-2025:15010" type="self" title="RLSA-2025:15010" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.11" release="2.el9_6.2" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-debug-3.11.11-2.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">44f4b27207a49ca7b55f9d4b75195fb28c4e09ea01a1df1c0f04cfceb7c1d825</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.11" release="2.el9_6.2" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-idle-3.11.11-2.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">d6bf1b9fc71ab5f68a4efa488a1982379ab6bfb976a3a6e5230d7fbbebee84a4</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.11" release="2.el9_6.2" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-test-3.11.11-2.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">37626ed9655160981f18d24f27c5b0ff16e503c60497ca429d4e904c1ada25b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:15018</id>
    <title>Important: udisks2 security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-23 08:07:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for udisks2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

* udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8067" id="CVE-2025-8067" type="cve" title="CVE-2025-8067" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2388623" id="2388623" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:15018" id="RLSA-2025:15018" type="self" title="RLSA-2025:15018" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libudisks2-devel" arch="aarch64" epoch="0" version="2.9.4" release="11.el9_6.1" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>libudisks2-devel-2.9.4-11.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">e3dffb12d97da73152cf130d0142d0bef12b8d14b0ed34a942d5c6890157dc8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:1818</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-05-06 13:04:21" />
    <updated date="2024-05-06 13:06:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)

* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)

* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)

* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2274977" id="2274977" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275001" id="2275001" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275003" id="2275003" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275005" id="2275005" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:1818" id="RLSA-2024:1818" type="self" title="RLSA-2024:1818" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6c30c46b3fea1bf064f2f8713660b3a6c28500b28510e553d99d14729eb7b83a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4611a2f3e76765fe48e3ea85d10325a9755a93365d125e916f18a4aaa56304ff</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9379a3b81fc09cc30260c81013c232478eb2772b279f9690cba34442dddf99cf</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">af0f5ee838fa969303083ee2854bcd9e7934821d6729bdaa18a87ca8aaf92e41</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6d45b093d78f72bd4e6143d5a79dcbb4311901522a5309fe53eb6dac19206b36</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6c617c843b50e555107d427d55e70eea36e82aa821871eef4a605d6f1c7df2ef</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ca90c02bfa8edd34a3bee77e5f4a3c47812410cef5e5db11a55f8d62d8e3bb2c</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e917ddb6d2f1ce3fd09c1f0166c78132e01d1f124a9500247b8a1080b9897fdd</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f7f99c246245ccae2a69e22673ff88ef96b2ea262ee2e1d153a449eced1977f3</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.412.b08" release="2.el9" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.412.b08-2.el9.aarch64.rpm</filename>
          <sum type="sha256">dbb6351d79c06da6984a2f843cf9d4bca6eeedbe7fcf3ddd477408877890963f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:15019</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-23 08:07:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2384043" id="2384043" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:15019" id="RLSA-2025:15019" type="self" title="RLSA-2025:15019" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.21" release="2.el9_6.2" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-debug-3.9.21-2.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">347af5da6ef15b645392c120252e40b02f61e58175fe5232633d329d95802877</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.21" release="2.el9_6.2" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-idle-3.9.21-2.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">1ef10bfa7c9595d42175347f0269e65eb13dcd1931ffbd39be7fe724ea2c4e3c</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.21" release="2.el9_6.2" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-test-3.9.21-2.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">8b22743fa41c25feb20a330bdb3255d672a7e8a46ac06c6b5c1f18323a870736</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:1828</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-05-06 13:04:21" />
    <updated date="2024-05-06 13:06:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-21-openjdk.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)

* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)

* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2274975" id="2274975" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2274977" id="2274977" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275003" id="2275003" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:1828" id="RLSA-2024:1828" type="self" title="RLSA-2024:1828" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-21-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b390428b6ca17effd05e117b30de0cec729ec0060e2213d77a46a7140ab6b91a</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4eef3505a0a86b147a77e7adc78577aff217c242104ac4894c8a8e3425e410de</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9344181c86ab2f702640e38583f8200532ea6656206808d886b192f290816c90</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">bda0633331e0552593d0bf15487d473b7d3d0026102f5b073596f304c099778f</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">283297f98fad61e352994410b4ff72abea7514dec731f6cf68c76e752c99bf42</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5e81be33cc9fcc2123e8cc37263014fd68a2b0a94c4abecd23f16da9edeff959</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3f8ec051613768cfb90a5de37985d1a045becfc18644a104dd7a4e2b4f6fbb9c</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a701fcafebd39e6e13f3be10ed96c2cd2e8d8d13d09e61085add9b30ac1dbe85</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9cec839e1471bdc270c52131327d0af3f3369a99644843cae197a38c9414d04f</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">fa3a8424ed8f99693e974e2e37419e80d99da30a89f4157bddcb12d9961b8a8b</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5fdd61cabb7442c8a5cbbdc7d603e214a090eab8f2128958b33ebefdca492fae</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">51309f1a5b43336adcc32aaec97c516dd1a7ffb19c0d42765027e7b04367093f</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">14ee715591abf8477adfb45f66aa743a53f017104c4083d930c7531967098930</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="21.0.3.0.9" release="1.el9" src="java-21-openjdk-21.0.3.0.9-1.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">6fbfe176cea0a2dd6eed4e2660a28bc1c5ba17f87c414b2a773ab516bef23325</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2758</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-10 14:32:32" />
    <updated date="2024-05-10 14:34:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

* CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)

Bug Fix(es):

* ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:Rocky Linux-27009)

* mm/mglru: fix underprotected page cache (JIRA:Rocky Linux-29235)

* [EMR] [TBOOT OS] SUT could not go to S3 state with Rocky Linux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:Rocky Linux-29673)

* system hangs completely - NMI not possible (JIRA:Rocky Linux-30678)

* ice 0000:6f:00.0: PTP failed to get time (JIRA:Rocky Linux-30110)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6240" id="CVE-2023-6240" type="cve" title="CVE-2023-6240" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" type="cve" title="CVE-2024-25742" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25743" id="CVE-2024-25743" type="cve" title="CVE-2024-25743" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2250843" id="2250843" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270836" id="2270836" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2758" id="RLSA-2024:2758" type="self" title="RLSA-2024:2758" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.16.1.el9_4" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.16.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">a2303864abb5003a91bb303b1ff80f5c6e3e29a1fdfd94ee2340f038e45c4ec1</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.16.1.el9_4" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.16.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">50893f8a488212587ef2816a61d4908ee5393664391900d4c96a29671ba3e4e2</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.16.1.el9_4" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.16.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ae4ffdc1d1955a1af2c7ad7c3dadf8978f477b56288de4be3af000c2e0ac9188</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:1822</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-05-06 13:04:21" />
    <updated date="2024-05-06 13:06:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)

* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)

* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)

* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)

* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2274975" id="2274975" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2274977" id="2274977" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275001" id="2275001" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275003" id="2275003" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275005" id="2275005" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:1822" id="RLSA-2024:1822" type="self" title="RLSA-2024:1822" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5dc34c0280158f544e49a96df7c99365f7ada1955f075e7d4d5617e4e0c43ae3</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">afdd52cb0e786a4a36139e560f9ed2fb2be50dfdf01d003196b1c8b8cea346b8</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">500bdfcea69ad1cf6eec15935ae24743bbda0c021f9f5592292d583a9c08c246</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8e5f09a51cdd9fc6419d772c5688c8dfe304a0256b7f511ffc3571ca503871f6</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">27b3ea31069b260b33a0313357a7b2e7cf54a9372de1d0592e0ce0beac87e157</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b6e0606098253e6e7981ccd55160c894f023b211fd1b67b07ab1985c800e4ccf</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7de904c6ce46d3ef7592f23d704b019d4941da2dcf78859cc6e00bfa3d68fcdf</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">3536be9d976419bd8299621da88195b321de75b0f37c02d62c3fc315c24d6c3c</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">28205616f7d3f58a61885b29cd97bf8a27a9cabde4fb90c90f347a4e3d3e0008</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b10fcd269ebd96928541d38c43be00543d4d79de77d1559dbaeb29e760559ca3</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">326ea92896df0ab391e7bcf7fbe24c3009ad46618b912dfc9b44c3186518024c</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2bbbd37ecfa37becf0f38a77b50b120517f232c5678d109c93362c03bccb06df</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">159cc4533aef5e2d2b2a915c9ef5a0cddbcfcd77273c219b79e30df7e09229c2</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.23.0.9" release="3.el9" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.23.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">0c71af97477f904157d399e2f6c6ac7f24fe5dcaea6fd0d41be058663b7f1257</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2403</id>
    <title>gcc bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2403" id="RLBA-2024:2403" type="self" title="RLBA-2024:2403" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gcc-plugin-devel" arch="aarch64" epoch="0" version="11.4.1" release="3.el9" src="gcc-11.4.1-3.el9.src.rpm">
          <filename>gcc-plugin-devel-11.4.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">366a60f2faafea70743d9e57319b0ba2c292f6216ab019658d605e5ef8059c7c</sum>
        </package>
        <package name="libstdc++-static" arch="aarch64" epoch="0" version="11.4.1" release="3.el9" src="gcc-11.4.1-3.el9.src.rpm">
          <filename>libstdc++-static-11.4.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ad931b68350d5c9decfb2411245e00e72c0a72cfb89bac7f65b77c5760d84297</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2411</id>
    <title>e2fsprogs bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for e2fsprogs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2411" id="RLBA-2024:2411" type="self" title="RLBA-2024:2411" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libss-devel" arch="aarch64" epoch="0" version="1.46.5" release="5.el9" src="e2fsprogs-1.46.5-5.el9.src.rpm">
          <filename>libss-devel-1.46.5-5.el9.aarch64.rpm</filename>
          <sum type="sha256">2f57b2884e49479bdcc4dd1c3b058cc0dc21bfa0f464777b9595ec088061a62e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:2424</id>
    <title>libnvme bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnvme.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:2424" id="RLEA-2024:2424" type="self" title="RLEA-2024:2424" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnvme-devel" arch="aarch64" epoch="0" version="1.6" release="1.el9" src="libnvme-1.6-1.el9.src.rpm">
          <filename>libnvme-devel-1.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">1af917c8fda97c37f251a7311e9c0060a0d89007b96bd7ae8961e4646a4b60c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2428</id>
    <title>glib2 bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glib2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2428" id="RLBA-2024:2428" type="self" title="RLBA-2024:2428" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glib2-static" arch="aarch64" epoch="0" version="2.68.4" release="14.el9" src="glib2-2.68.4-14.el9.src.rpm">
          <filename>glib2-static-2.68.4-14.el9.aarch64.rpm</filename>
          <sum type="sha256">cc725de7590fcb49c83b29b5822bdb6a80f24ed527f82507e812074eeb40369f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:6691</id>
    <title>python-dateutil bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2025-10-17 21:54:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-dateutil.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2203905" id="2203905" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:6691" id="RLBA-2023:6691" type="self" title="RLBA-2023:6691" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python-dateutil-doc" arch="noarch" epoch="1" version="2.8.1" release="7.el9" src="python-dateutil-2.8.1-7.el9.src.rpm">
          <filename>python-dateutil-doc-2.8.1-7.el9.noarch.rpm</filename>
          <sum type="sha256">af9856126e3747800d1c7b15d61a07b0fea3f05728e8fbbb7f39c02ffd2343c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2439</id>
    <title>libsemanage bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsemanage.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2439" id="RLBA-2024:2439" type="self" title="RLBA-2024:2439" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsemanage-devel" arch="aarch64" epoch="0" version="3.6" release="1.el9" src="libsemanage-3.6-1.el9.src.rpm">
          <filename>libsemanage-devel-3.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">901fd89d3c1e35338fef56066dcd7170a3b594dff87df268bc92cba68a0dd834</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2440</id>
    <title>libsepol bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsepol.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2440" id="RLBA-2024:2440" type="self" title="RLBA-2024:2440" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsepol-static" arch="aarch64" epoch="0" version="3.6" release="1.el9" src="libsepol-3.6-1.el9.src.rpm">
          <filename>libsepol-static-3.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3a52a99d9b6500512bc2a5a1901e7216619202896432d0cc8a35914e2775e238</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2468</id>
    <title>libtalloc bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtalloc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2468" id="RLBA-2024:2468" type="self" title="RLBA-2024:2468" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtalloc-devel" arch="aarch64" epoch="0" version="2.4.1" release="1.el9" src="libtalloc-2.4.1-1.el9.src.rpm">
          <filename>libtalloc-devel-2.4.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">8b8b0a654d9d23de727a4544c9f8c987e2cd8eb1d5c96364f1601b6902b159da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2467</id>
    <title>hwdata bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for hwdata.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2467" id="RLBA-2024:2467" type="self" title="RLBA-2024:2467" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="hwdata-devel" arch="noarch" epoch="0" version="0.348" release="9.13.el9" src="hwdata-0.348-9.13.el9.src.rpm">
          <filename>hwdata-devel-0.348-9.13.el9.noarch.rpm</filename>
          <sum type="sha256">58c4eaf9977c6f04c1eedc31774ca3ed6426326b913654fb73d5ba1d51944c92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2463</id>
    <title>Moderate: systemd security update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for systemd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008" id="CVE-2023-7008" type="cve" title="CVE-2023-7008" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2222672" id="2222672" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2463" id="RLSA-2024:2463" type="self" title="RLSA-2024:2463" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="systemd-boot-unsigned" arch="aarch64" epoch="0" version="252" release="32.el9_4" src="systemd-252-32.el9_4.src.rpm">
          <filename>systemd-boot-unsigned-252-32.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e57a72dbf78da5a6e8922163af116aedf1f85ed376ffd68be367eda46fdeeae4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2472</id>
    <title>libtdb bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Enterprise Software Foundation
Enterprise Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2472" id="RLBA-2024:2472" type="self" title="RLBA-2024:2472" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtdb-devel" arch="aarch64" epoch="0" version="1.4.9" release="1.el9" src="libtdb-1.4.9-1.el9.src.rpm">
          <filename>libtdb-devel-1.4.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">f9bdb710b97d0fd8f24315c4b949ef8a694434e6c7cc99363507da84b8026a25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2493</id>
    <title>nftables bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nftables.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2493" id="RLBA-2024:2493" type="self" title="RLBA-2024:2493" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nftables-devel" arch="aarch64" epoch="1" version="1.0.9" release="1.el9" src="nftables-1.0.9-1.el9.src.rpm">
          <filename>nftables-devel-1.0.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a706b6fbad7ea22f44e945a373e166e117fd6a018995c8f9b2c4b8effcab9181</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2489</id>
    <title>libbpf bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libbpf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2489" id="RLBA-2024:2489" type="self" title="RLBA-2024:2489" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbpf-devel" arch="aarch64" epoch="2" version="1.3.0" release="2.el9" src="libbpf-1.3.0-2.el9.src.rpm">
          <filename>libbpf-devel-1.3.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b62816f4e0f5f1e70bae4c1227bda717207347349b0ec149a9d88eec4af71b24</sum>
        </package>
        <package name="libbpf-static" arch="aarch64" epoch="2" version="1.3.0" release="2.el9" src="libbpf-1.3.0-2.el9.src.rpm">
          <filename>libbpf-static-1.3.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f10d79687a4a2003583199327107c10fe5179942ee16642153d36e40bf41b023</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2497</id>
    <title>lvm2 bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lvm2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2497" id="RLBA-2024:2497" type="self" title="RLBA-2024:2497" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-devel" arch="aarch64" epoch="9" version="1.02.197" release="2.el9" src="lvm2-2.03.23-2.el9.src.rpm">
          <filename>device-mapper-devel-1.02.197-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a7480d533806a01e097bc8ac9dcf9de5c5d87e2e49140b6e88344d20b8146f1b</sum>
        </package>
        <package name="device-mapper-event-devel" arch="aarch64" epoch="9" version="1.02.197" release="2.el9" src="lvm2-2.03.23-2.el9.src.rpm">
          <filename>device-mapper-event-devel-1.02.197-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ec13788b53761e4796236ee97f564b5e4975cc11173cd33a5784b07afd71273c</sum>
        </package>
        <package name="lvm2-devel" arch="aarch64" epoch="9" version="2.03.23" release="2.el9" src="lvm2-2.03.23-2.el9.src.rpm">
          <filename>lvm2-devel-2.03.23-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8173636a9263b732d775602027dc634ae38f7d5822a34931c283be5db553acbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2510</id>
    <title>libtirpc bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtirpc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2510" id="RLBA-2024:2510" type="self" title="RLBA-2024:2510" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtirpc-devel" arch="aarch64" epoch="0" version="1.3.3" release="8.el9_4" src="libtirpc-1.3.3-8.el9_4.src.rpm">
          <filename>libtirpc-devel-1.3.3-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">b09d7d581c3bc85371c486ed33b525a055313eed45a7c5ebd5213b4e591482e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2512</id>
    <title>Low: file security update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2025-10-17 21:52:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for file.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48554" id="CVE-2022-48554" type="cve" title="CVE-2022-48554" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2235714" id="2235714" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2512" id="RLSA-2024:2512" type="self" title="RLSA-2024:2512" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="file-devel" arch="aarch64" epoch="0" version="5.39" release="16.el9" src="file-5.39-16.el9.src.rpm">
          <filename>file-devel-5.39-16.el9.aarch64.rpm</filename>
          <sum type="sha256">3a9e960fccdd5ab63ccd68ceebbda13fcf487a48a8cb1ad686294cd1852d4f2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2515</id>
    <title>iproute bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for iproute.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2515" id="RLBA-2024:2515" type="self" title="RLBA-2024:2515" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="iproute-devel" arch="aarch64" epoch="0" version="6.2.0" release="6.el9_4" src="iproute-6.2.0-6.el9_4.src.rpm">
          <filename>iproute-devel-6.2.0-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ee8f5e97579b25cb5c70b797cac7c885f724b01777dd7b4d067f5c63f46a6790</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2571</id>
    <title>Moderate: sssd security and bug fix update</title>
    <issued date="2024-05-10 14:32:36" />
    <updated date="2024-05-10 14:34:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

* socket leak (JIRA:Rocky Linux-22340)

* Passkey cannot fall back to password (JIRA:Rocky Linux-28161)

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:Rocky Linux-27209)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2571" id="RLSA-2024:2571" type="self" title="RLSA-2024:2571" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.9.4" release="6.el9_4" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c2b12fef96033c146d9d7ecc48af5d54bfb6330910e5bb1adad4a64c60cfbe14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:6326</id>
    <title>libstoragemgmt bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libstoragemgmt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2172303" id="2172303" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLBA-2023:6326" id="RLBA-2023:6326" type="self" title="RLBA-2023:6326" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libstoragemgmt-devel" arch="aarch64" epoch="0" version="1.9.7" release="2.el9" src="libstoragemgmt-1.9.7-2.el9.src.rpm">
          <filename>libstoragemgmt-devel-1.9.7-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1aa3d48cf3fcf9762afacd7e903b9f08ccdaa3d2bea1e2a4f2bc5318c0a8e162</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2023:6416</id>
    <title>libblkio bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libblkio.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2023:6416" id="RLEA-2023:6416" type="self" title="RLEA-2023:6416" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libblkio-devel" arch="aarch64" epoch="0" version="1.3.0" release="1.el9" src="libblkio-1.3.0-1.el9.src.rpm">
          <filename>libblkio-devel-1.3.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5a848ffc0789c79898af473e9f1c92fc3f2f34eaf44a0f5010f0b897f1b3a82a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:6518</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for flatpak.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)

* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2179219" id="2179219" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2179220" id="2179220" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2221792" id="2221792" type="bugzilla" title="The following packages have been upgraded to a later upstream version: flatpak (1.12.8)." />
      <reference href="https://errata.rockylinux.org/RLSA-2023:6518" id="RLSA-2023:6518" type="self" title="RLSA-2023:6518" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flatpak-devel" arch="aarch64" epoch="0" version="1.12.8" release="1.el9" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-devel-1.12.8-1.el9.aarch64.rpm</filename>
          <sum type="sha256">f1ff49352fa4149ce217d7164b0df7b50f269062a876c27ecb03532ed877d606</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2023:6381</id>
    <title>libwebp bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwebp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2023:6381" id="RLBA-2023:6381" type="self" title="RLBA-2023:6381" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwebp-tools" arch="aarch64" epoch="0" version="1.2.0" release="8.el9" src="libwebp-1.2.0-8.el9.src.rpm">
          <filename>libwebp-tools-1.2.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ae9f35a39792debeebadd9343ab9e53c38eb1e42b49062a1eccb811da39fdd87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:6551</id>
    <title>Moderate: yajl security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for yajl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2221249" id="2221249" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:6551" id="RLSA-2023:6551" type="self" title="RLSA-2023:6551" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="yajl-devel" arch="aarch64" epoch="0" version="2.1.0" release="22.el9" src="yajl-2.1.0-22.el9.src.rpm">
          <filename>yajl-devel-2.1.0-22.el9.aarch64.rpm</filename>
          <sum type="sha256">ff2b161f27b1fba7d15f1a9fcd84a2a2698fd17aa027769bce1685fbb73193a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:0951</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263384" id="2263384" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:0951" id="RLSA-2024:0951" type="self" title="RLSA-2024:0951" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-docs" arch="aarch64" epoch="0" version="13.14" release="1.el9_3" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-docs-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">04bb6a9df15528b6c7ee9ccda481367760b5524bacbedd78b8b575de57dfd749</sum>
        </package>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.14" release="1.el9_3" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-private-devel-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">1840df451971e46a65706cace81065b6117a89cef1cc1d1e1824f41d6bebbd25</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.14" release="1.el9_3" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-server-devel-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">077a6c7451ac480b3bead2dd6b412cb226a35a5458940593104ff0130e8cbddb</sum>
        </package>
        <package name="postgresql-static" arch="aarch64" epoch="0" version="13.14" release="1.el9_3" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-static-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">acbd40059e17853b8abd62ae2c0a1b092d256d33b1c1c90ab9ab0907eb9128a0</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.14" release="1.el9_3" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-test-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">c4a6a7910a43cb4098b1ee8d0a08712b309ab3bdde4fe983b8640d1051dcf97f</sum>
        </package>
        <package name="postgresql-upgrade-devel" arch="aarch64" epoch="0" version="13.14" release="1.el9_3" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-devel-13.14-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">374856e4c684e558794ae4c8a87118478f0b57b929bab67f8ec101b1f74b65c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:1736</id>
    <title>.NET 7.0 bugfix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 7.0 to SDK 7.0.118 and Runtime 7.0.18 [rhel-9.3.0.z] (Rocky Linux-31202)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:1736" id="RLBA-2024:1736" type="self" title="RLBA-2024:1736" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.118" release="1.el9_3" src="dotnet7.0-7.0.118-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.118-1.el9_3.aarch64.rpm</filename>
          <sum type="sha256">043aeb523c026c31fa6bdd63edd092278b9bcba1eff0abe871d15e2873de6160</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:1750</id>
    <title>Important: unbound security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for unbound.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* A vulnerability was found in Unbound due to incorrect default permissions,
allowing any process outside the unbound group to modify the unbound runtime
configuration. The default combination of the "control-use-cert: no" option with
either explicit or implicit use of an IP address in the "control-interface"
option could allow improper access. If a process can connect over localhost to
port 8953, it can alter the configuration of unbound.service. This flaw allows
an unprivileged local process to manipulate a running instance, potentially
altering forwarders, allowing them to track all queries forwarded by the local
resolver, and, in some cases, disrupting resolving altogether.

To mitigate the vulnerability, a new file
"/etc/unbound/conf.d/remote-control.conf" has been added and included in the
main unbound configuration file, "unbound.conf". The file contains two
directives that should limit access to unbound.conf:

    control-interface: "/run/unbound/control"
    control-use-cert: "yes"

For details about these directives, run "man unbound.conf".

Updating to the version of unbound provided by this advisory should, in most
cases, address the vulnerability. To verify that your configuration is not
vulnerable, use the "unbound-control status | grep control" command. If the
output contains "control(ssl)" or "control(namedpipe)", your configuration is
not vulnerable. If the command output returns only "control", the configuration
is vulnerable because it does not enforce access only to the unbound group
members. To fix your configuration, add the line "include:
/etc/unbound/conf.d/remote-control.conf" to the end of the file
"/etc/unbound/unbound.conf". If you use a custom
"/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this
file. (CVE-2024-1488)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1488" id="CVE-2024-1488" type="cve" title="CVE-2024-1488" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2264183" id="2264183" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:1750" id="RLSA-2024:1750" type="self" title="RLSA-2024:1750" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unbound-devel" arch="aarch64" epoch="0" version="1.16.2" release="3.el9_3.5" src="unbound-1.16.2-3.el9_3.5.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9_3.5.aarch64.rpm</filename>
          <sum type="sha256">1287eef05a7e09aa31e186c0c171d94a1741412689e0c993e7e9ab187d35a56a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2152</id>
    <title>poppler bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for poppler.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2152" id="RLBA-2024:2152" type="self" title="RLBA-2024:2152" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="19.el9" src="poppler-21.01.0-19.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-19.el9.aarch64.rpm</filename>
          <sum type="sha256">9db98e110d2420770cf17221a72ab4a2f0f95efce21497a1c9afd77dbdddcb99</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="19.el9" src="poppler-21.01.0-19.el9.src.rpm">
          <filename>poppler-devel-21.01.0-19.el9.aarch64.rpm</filename>
          <sum type="sha256">a1218530c37c0177b1e5cb31465c0cd3fe85792053e6702466ff568f42582c54</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="19.el9" src="poppler-21.01.0-19.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-19.el9.aarch64.rpm</filename>
          <sum type="sha256">bc01254682a35910b0027898617e449799c48d42581572c14ed6c3333ac055df</sum>
        </package>
        <package name="poppler-glib-doc" arch="noarch" epoch="0" version="21.01.0" release="19.el9" src="poppler-21.01.0-19.el9.src.rpm">
          <filename>poppler-glib-doc-21.01.0-19.el9.noarch.rpm</filename>
          <sum type="sha256">b98f8763e4028928b011007b9d32f354d13a37a5235f0a62892a4e70c62f66de</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="19.el9" src="poppler-21.01.0-19.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-19.el9.aarch64.rpm</filename>
          <sum type="sha256">7a892e7650c2c363bee690250d78242dd14b360f95e38132babfd0ee7fa44707</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:1691</id>
    <title>Important: varnish security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30156" id="CVE-2024-30156" type="cve" title="CVE-2024-30156" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2271486" id="2271486" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:1691" id="RLSA-2024:1691" type="self" title="RLSA-2024:1691" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="4.el9_3.1" src="varnish-6.6.2-4.el9_3.1.src.rpm">
          <filename>varnish-devel-6.6.2-4.el9_3.1.aarch64.rpm</filename>
          <sum type="sha256">524633204ae1c65de72b78c58ba225340418180c27315bfd089c7f4d998f64ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2166</id>
    <title>xdp-tools bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xdp-tools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2166" id="RLBA-2024:2166" type="self" title="RLBA-2024:2166" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libxdp-devel" arch="aarch64" epoch="0" version="1.4.2" release="1.el9" src="xdp-tools-1.4.2-1.el9.src.rpm">
          <filename>libxdp-devel-1.4.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">fbbbc066d96cbf60ea2da3b01848589d57e8db230b8edb5eac6c8c046d64253b</sum>
        </package>
        <package name="libxdp-static" arch="aarch64" epoch="0" version="1.4.2" release="1.el9" src="xdp-tools-1.4.2-1.el9.src.rpm">
          <filename>libxdp-static-1.4.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5c69b7724a4876aa0eaf89509d9aeb2f2017a6a2879975ea9599bb748c9291fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2235</id>
    <title>ostree bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ostree.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2235" id="RLBA-2024:2235" type="self" title="RLBA-2024:2235" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2024.4" release="3.el9_4" src="ostree-2024.4-3.el9_4.src.rpm">
          <filename>ostree-devel-2024.4-3.el9_4.aarch64.rpm</filename>
          <sum type="sha256">43086d39b94a044915424ff6c2a5ec8013ef4fa92aeb756b00264ca85aaa43fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2264</id>
    <title>Important: edk2 security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for edk2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)

* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)

* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)

* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)

* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)

* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)

* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)

* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763" id="CVE-2022-36763" type="cve" title="CVE-2022-36763" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764" id="CVE-2022-36764" type="cve" title="CVE-2022-36764" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446" id="CVE-2023-3446" type="cve" title="CVE-2023-3446" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229" id="CVE-2023-45229" type="cve" title="CVE-2023-45229" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231" id="CVE-2023-45231" type="cve" title="CVE-2023-45231" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232" id="CVE-2023-45232" type="cve" title="CVE-2023-45232" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233" id="CVE-2023-45233" type="cve" title="CVE-2023-45233" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235" id="CVE-2023-45235" type="cve" title="CVE-2023-45235" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2224962" id="2224962" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2257582" id="2257582" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2257583" id="2257583" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2258677" id="2258677" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2258688" id="2258688" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2258691" id="2258691" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2258694" id="2258694" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2258700" id="2258700" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2264" id="RLSA-2024:2264" type="self" title="RLSA-2024:2264" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="edk2-aarch64" arch="noarch" epoch="0" version="20231122" release="6.el9" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9.noarch.rpm</filename>
          <sum type="sha256">0a445bdca139371c3ad501c3f35ea2a64e58a9b6b18c734c70e441b838408b8a</sum>
        </package>
        <package name="edk2-ovmf" arch="noarch" epoch="0" version="20231122" release="6.el9" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9.noarch.rpm</filename>
          <sum type="sha256">4c5983e3bd7aa795f76f6b36fbcb0c3b01e79b5829de3dc2cdf289e3b58d51d3</sum>
        </package>
        <package name="edk2-tools" arch="aarch64" epoch="0" version="20231122" release="6.el9" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-tools-20231122-6.el9.aarch64.rpm</filename>
          <sum type="sha256">d8908939bbd7509a3c4ba6416f738262d47bb1087b4b4baac3b01efa89a986a7</sum>
        </package>
        <package name="edk2-tools-doc" arch="noarch" epoch="0" version="20231122" release="6.el9" src="edk2-20231122-6.el9.src.rpm">
          <filename>edk2-tools-doc-20231122-6.el9.noarch.rpm</filename>
          <sum type="sha256">1106801a16134dcc67ff1c42cba9285d342482a0738571f69f6754e6c4fef1bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2263</id>
    <title>mesa bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mesa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2263" id="RLBA-2024:2263" type="self" title="RLBA-2024:2263" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mesa-libOSMesa" arch="aarch64" epoch="0" version="23.3.3" release="1.el9" src="mesa-23.3.3-1.el9.src.rpm">
          <filename>mesa-libOSMesa-23.3.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">16d5d5c105160da9deffda1ae42ce6b11cabfaad59a24eb05a396b70f36e689e</sum>
        </package>
        <package name="mesa-libOSMesa-devel" arch="aarch64" epoch="0" version="23.3.3" release="1.el9" src="mesa-23.3.3-1.el9.src.rpm">
          <filename>mesa-libOSMesa-devel-23.3.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">df801828da67d0fafe88d1209f35f9128a80ab644c80955afdcf9884019a57b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2268</id>
    <title>anaconda bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for anaconda.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2268" id="RLBA-2024:2268" type="self" title="RLBA-2024:2268" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="anaconda-widgets-devel" arch="aarch64" epoch="0" version="34.25.4.9" release="1.el9_4.rocky.0.3" src="anaconda-34.25.4.9-1.el9_4.rocky.0.3.src.rpm">
          <filename>anaconda-widgets-devel-34.25.4.9-1.el9_4.rocky.0.3.aarch64.rpm</filename>
          <sum type="sha256">8f30b5a0baa0c3db71a2224fdf8c7e96d40ae266b5f75f53197eae10f7409964</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:2269</id>
    <title>nbdkit enhancement and bugfix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nbdkit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:2269" id="RLEA-2024:2269" type="self" title="RLEA-2024:2269" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nbdkit-devel" arch="aarch64" epoch="0" version="1.36.2" release="1.el9.0.1" src="nbdkit-1.36.2-1.el9.0.1.src.rpm">
          <filename>nbdkit-devel-1.36.2-1.el9.0.1.aarch64.rpm</filename>
          <sum type="sha256">caa8311edaa6c3eca6f7a48c1953ca20c001800f7ed20d1fb93f2e6db3d8c7fd</sum>
        </package>
        <package name="nbdkit-example-plugins" arch="aarch64" epoch="0" version="1.36.2" release="1.el9.0.1" src="nbdkit-1.36.2-1.el9.0.1.src.rpm">
          <filename>nbdkit-example-plugins-1.36.2-1.el9.0.1.aarch64.rpm</filename>
          <sum type="sha256">046d9d387a998f3797356e08a053054485063d2038cdf0535f71318941554809</sum>
        </package>
        <package name="nbdkit-srpm-macros" arch="noarch" epoch="0" version="1.36.2" release="1.el9.0.1" src="nbdkit-1.36.2-1.el9.0.1.src.rpm">
          <filename>nbdkit-srpm-macros-1.36.2-1.el9.0.1.noarch.rpm</filename>
          <sum type="sha256">e1342ca81938949694ea20a66d9e26068f058c2ca03b6b19320ffd076c71e0f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:15011</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-14 08:18:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)

* kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)

* kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)

* kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

* kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)

* kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)

* kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37823" id="CVE-2025-37823" type="cve" title="CVE-2025-37823" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38200" id="CVE-2025-38200" type="cve" title="CVE-2025-38200" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38211" id="CVE-2025-38211" type="cve" title="CVE-2025-38211" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38350" id="CVE-2025-38350" type="cve" title="CVE-2025-38350" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38461" id="CVE-2025-38461" type="cve" title="CVE-2025-38461" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38464" id="CVE-2025-38464" type="cve" title="CVE-2025-38464" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38500" id="CVE-2025-38500" type="cve" title="CVE-2025-38500" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2365024" id="2365024" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2376392" id="2376392" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2376406" id="2376406" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2382054" id="2382054" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383509" id="2383509" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383513" id="2383513" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2387866" id="2387866" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:15011" id="RLSA-2025:15011" type="self" title="RLSA-2025:15011" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.39.1.el9_6" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.39.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">c8c4928e3f0add098ebba1f3fef1a3ef851f771ceec820e737ccde369a045f7e</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.39.1.el9_6" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.39.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">4d3d3fe36899faf599d81b4d6f3df7e83b11eadc8aa4ca00343cde672d808a8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2256</id>
    <title>criu bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for criu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2256" id="RLBA-2024:2256" type="self" title="RLBA-2024:2256" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="criu-devel" arch="aarch64" epoch="0" version="3.19" release="1.el9" src="criu-3.19-1.el9.src.rpm">
          <filename>criu-devel-3.19-1.el9.aarch64.rpm</filename>
          <sum type="sha256">37c58becdb075fb2f960d10156cbe38a0f55aa7a7ca577c56ae7037c212147c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2287</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for gstreamer1-plugins-bad-free.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)

* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)

* gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50186" id="CVE-2023-50186" type="cve" title="CVE-2023-50186" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2254587" id="2254587" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2254588" id="2254588" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2254589" id="2254589" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2255639" id="2255639" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2287" id="RLSA-2024:2287" type="self" title="RLSA-2024:2287" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gstreamer1-plugins-bad-free-devel" arch="aarch64" epoch="0" version="1.22.1" release="4.el9" src="gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.aarch64.rpm</filename>
          <sum type="sha256">de226e40e3153109849eb972c4ba098cdfba6af46642821c16317bb476fd03b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2295</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libjpeg-turbo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29390" id="CVE-2021-29390" type="cve" title="CVE-2021-29390" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2235521" id="2235521" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2295" id="RLSA-2024:2295" type="self" title="RLSA-2024:2295" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="turbojpeg" arch="aarch64" epoch="0" version="2.0.90" release="7.el9" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>turbojpeg-2.0.90-7.el9.aarch64.rpm</filename>
          <sum type="sha256">a3521daabc6689cb1ee8192e3dbd8efecf923de7dbd36db10081eced53ca332e</sum>
        </package>
        <package name="turbojpeg-devel" arch="aarch64" epoch="0" version="2.0.90" release="7.el9" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>turbojpeg-devel-2.0.90-7.el9.aarch64.rpm</filename>
          <sum type="sha256">b0de766e023950983c1b3ae5f6fde87667319265c236931c2da8431af1e21d72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2305</id>
    <title>graphviz bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for graphviz.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2305" id="RLBA-2024:2305" type="self" title="RLBA-2024:2305" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="graphviz-devel" arch="aarch64" epoch="0" version="2.44.0" release="26.el9" src="graphviz-2.44.0-26.el9.src.rpm">
          <filename>graphviz-devel-2.44.0-26.el9.aarch64.rpm</filename>
          <sum type="sha256">8f6498614ac7e0dc242965451e03119ce2e6a4dcf5f803974459033c1ab5a48d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2327</id>
    <title>PackageKit bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for PackageKit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2327" id="RLBA-2024:2327" type="self" title="RLBA-2024:2327" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="PackageKit-glib-devel" arch="aarch64" epoch="0" version="1.2.6" release="1.el9" src="PackageKit-1.2.6-1.el9.src.rpm">
          <filename>PackageKit-glib-devel-1.2.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">6165c4e85e7938eeee76f470976b61b4054e0fe3728654ec7d72fa211585b209</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2371</id>
    <title>dovecot bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dovecot.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2371" id="RLBA-2024:2371" type="self" title="RLBA-2024:2371" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dovecot-devel" arch="aarch64" epoch="1" version="2.3.16" release="11.el9" src="dovecot-2.3.16-11.el9.src.rpm">
          <filename>dovecot-devel-2.3.16-11.el9.aarch64.rpm</filename>
          <sum type="sha256">ec00c56969d47d424d13b96cb66fe17f44720e262c30861c51c1ab866b0aaf54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2383</id>
    <title>freeipmi bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for freeipmi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2383" id="RLBA-2024:2383" type="self" title="RLBA-2024:2383" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freeipmi-devel" arch="aarch64" epoch="0" version="1.6.14" release="2.el9" src="freeipmi-1.6.14-2.el9.src.rpm">
          <filename>freeipmi-devel-1.6.14-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8cc8226009f04d6b7db97a9f01b8f273da458218ea08c67f5418d93c06287da1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2527</id>
    <title>kronosnet bug fix and enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kronosnet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2527" id="RLBA-2024:2527" type="self" title="RLBA-2024:2527" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libknet1" arch="aarch64" epoch="0" version="1.28" release="1.el9" src="kronosnet-1.28-1.el9.src.rpm">
          <filename>libknet1-1.28-1.el9.aarch64.rpm</filename>
          <sum type="sha256">42625ebb17b41bde1cca2f86b23ca6161759035e802044eb8f9fe069753d71ec</sum>
        </package>
        <package name="libknet1-devel" arch="aarch64" epoch="0" version="1.28" release="1.el9" src="kronosnet-1.28-1.el9.src.rpm">
          <filename>libknet1-devel-1.28-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ace5bc1b5021ddbd5e399639206e56b310884d3f629aed39495aa9e872127d20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:2546</id>
    <title>389-ds-base enhancement update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.

Enhancement

* [RFE] allows plugins to log multi-factor authentication notification (JIRA:Rocky Linux-30588)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:2546" id="RLEA-2024:2546" type="self" title="RLEA-2024:2546" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="389-ds-base-devel" arch="aarch64" epoch="0" version="2.4.5" release="6.el9_4" src="389-ds-base-2.4.5-6.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">d2eec6872e7e1fa91dc2272aa09742d6acf5d71d795675870c9e5f4938f915ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2551</id>
    <title>Important: bind security update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind-dyndb-ldap, bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)

* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)

* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)

* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)

* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

Bug Fix(es):

* bind-dyndb-ldap: rebuilt to adapt ABI changes in bind

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263896" id="2263896" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263897" id="2263897" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263909" id="2263909" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263911" id="2263911" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263914" id="2263914" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263917" id="2263917" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2551" id="RLSA-2024:2551" type="self" title="RLSA-2024:2551" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="18.el9_4.1" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-devel-9.16.23-18.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">d2f23758f84d4fea811f6671e88f422af8fc5243de4fa7be06b778168d4eacc8</sum>
        </package>
        <package name="bind-doc" arch="noarch" epoch="2" version="9.16.23" release="18.el9_4.1" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-doc-9.16.23-18.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">8b6ceb2cff4a31dbfd4549385ffa41f8832ea282433d2f6a2cd9c436da71218f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2554</id>
    <title>.NET 8.0 bug fix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 8 to RC2 (JIRA:Rocky Linux-13785)

* Update .NET 8 to 8.0.0 GA (JIRA:Rocky Linux-15860)

* Update .NET 8.0 to SDK 8.0.101 and Runtime 8.0.1 (JIRA:Rocky Linux-19803)

* RFE: add -dbg packages to ship complete symbol files (JIRA:Rocky Linux-23070)

* Update .NET 8.0 to SDK 8.0.102 and Runtime 8.0.2 (JIRA:Rocky Linux-23804)

* Don't set a locale when running msbuild Exec on Unix (JIRA:Rocky Linux-23936)

* Update .NET 8.0 to SDK 8.0.103 and Runtime 8.0.3 [rhel-9] (JIRA:Rocky Linux-27553)

* Follow-up for Rocky Linux-22734: CheckCertificateRevocationList flag for SHA1 CAs [rhel-9.4.0.z] (JIRA:Rocky Linux-28344)

* Update .NET 8.0 to SDK 8.0.104 and Runtime 8.0.4 [rhel-9.4.0.z] (JIRA:Rocky Linux-31208)

* Update .NET 8 to RC1 (JIRA:Rocky Linux-4073)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2554" id="RLBA-2024:2554" type="self" title="RLBA-2024:2554" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.104" release="2.el9_4" src="dotnet8.0-8.0.104-2.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.104-2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ced46f12d6d9959bd5d4bbcc9966d87b793f4e141cb221068aa9127018d25455</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2552</id>
    <title>.NET 6.0 bug fix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23 (JIRA:Rocky Linux-11675)

* Update .NET 6.0 to SDK 6.0.124 and Runtime 6.0.24 (JIRA:Rocky Linux-14451)

* Update .NET 6.0 to SDK 6.0.125 and Runtime 6.0.25 (JIRA:Rocky Linux-15349)

* Update .NET 6.0 to SDK 6.0.126 and Runtime 6.0.26 (JIRA:Rocky Linux-19801)

* Update .NET 6.0 to SDK 6.0.122 and Runtime 6.0.22 (JIRA:Rocky Linux-1995)

* Update .NET 6.0 to SDK 6.0.127 and Runtime 6.0.27 (JIRA:Rocky Linux-23785)

* Update .NET 6.0 to SDK 6.0.128 and Runtime 6.0.28 [rhel-9] (JIRA:Rocky Linux-27541)

* Update .NET 6.0 to SDK 6.0.129 and Runtime 6.0.29 [rhel-9.4.0.z] (JIRA:Rocky Linux-31198)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2552" id="RLBA-2024:2552" type="self" title="RLBA-2024:2552" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.129" release="2.el9_4" src="dotnet6.0-6.0.129-2.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.129-2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">056992407e405436c35458186dee10ba68b383fac8fe236e9ce4f28fe00eba3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2556</id>
    <title>nmstate bug fix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nmstate.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner and aimed to satisfy enterprise needs to manage host networking through a northbound declarative API and multi provider support on the southbound.

Bug Fix(es):

* Support checkpoint on rollback when using global DNS of NetworkManager (JIRA:Rocky Linux-31190)

* Include driver information in systemd network link file created by
`nmstatectl persist-nic-names` (JIRA:Rocky Linux-32330)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2556" id="RLBA-2024:2556" type="self" title="RLBA-2024:2556" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nmstate-devel" arch="aarch64" epoch="0" version="2.2.27" release="2.el9_4" src="nmstate-2.2.27-2.el9_4.src.rpm">
          <filename>nmstate-devel-2.2.27-2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">65706a19fe08593eaa887b45f8d5a990fc6f6561affcba86cefdf52d3e8f2514</sum>
        </package>
        <package name="nmstate-static" arch="aarch64" epoch="0" version="2.2.27" release="2.el9_4" src="nmstate-2.2.27-2.el9_4.src.rpm">
          <filename>nmstate-static-2.2.27-2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">85cf95d9a57b5520b12226d79919e9395db67454e8aec7a1102f1bc3986262d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2558</id>
    <title>ipa bug fix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity
management, and authorization solution for both traditional and cloud-based
enterprise environments.

Bug Fix(es):

* Enforce OTP for ldap bind (in some scenarios) (JIRA:Rocky Linux-23377)

* Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER (JIRA:Rocky Linux-29745)

* Backport latest test fixes in ipa (JIRA: Rocky Linux-30905)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2558" id="RLBA-2024:2558" type="self" title="RLBA-2024:2558" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.11.0" release="10.el9_4" src="ipa-4.11.0-10.el9_4.src.rpm">
          <filename>python3-ipatests-4.11.0-10.el9_4.noarch.rpm</filename>
          <sum type="sha256">7725dac69c697105c653ca1561a9db64fc77128278183b1b7c5cb1efd9c3d65c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2561</id>
    <title>gnome-shell, gnome-menus, and gnome-shell-extensions bug fix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2025-10-17 21:52:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gnome-menus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GNOME Shell acts as a compositing manager for the desktop, and displays both
application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts.

GNOME Shell extensions allow for modifying the default GNOME Shell interface and its parts, such as window management and application launching.

Bug Fix(es):

* Qt5 custom window icons are not displayed in Activities overview or window list (JIRA:Rocky Linux-29659)

* [RFE] Group GNOME Settings, Tweaks, Extensions in the same categories J
(JIRA:Rocky Linux-32792)

* [RFE] Prevent workspaces from collapsing when more than six are present (JIRA:Rocky Linux-31885)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2561" id="RLBA-2024:2561" type="self" title="RLBA-2024:2561" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gnome-menus-devel" arch="aarch64" epoch="0" version="3.36.0" release="9.el9_4" src="gnome-menus-3.36.0-9.el9_4.src.rpm">
          <filename>gnome-menus-devel-3.36.0-9.el9_4.aarch64.rpm</filename>
          <sum type="sha256">031bfe8eaabe9a25b87ca7bf7ee4db8a36600a9e0dd749cd85d199d264a1b68f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2560</id>
    <title>Moderate: libvirt security and bug fix update</title>
    <issued date="2024-05-10 14:32:38" />
    <updated date="2024-05-10 14:34:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441)

* libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() [rhel-9] (JIRA:Rocky Linux-25081)

* libvirt: negative g_new0 length can lead to unbounded memory allocation [rhel-9] (JIRA:Rocky Linux-29515)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1441" id="CVE-2024-1441" type="cve" title="CVE-2024-1441" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2494" id="CVE-2024-2494" type="cve" title="CVE-2024-2494" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263841" id="2263841" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270115" id="2270115" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2560" id="RLSA-2024:2560" type="self" title="RLSA-2024:2560" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-daemon-plugin-sanlock" arch="aarch64" epoch="0" version="10.0.0" release="6.2.el9_4" src="libvirt-10.0.0-6.2.el9_4.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">83a5678d1015ff5eb3d7cc48a04aa75eabddc4eaa7e2dd29bb8b6766181af581</sum>
        </package>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="10.0.0" release="6.2.el9_4" src="libvirt-10.0.0-6.2.el9_4.src.rpm">
          <filename>libvirt-devel-10.0.0-6.2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">a607417a1c72a948ea3e3959eeda7db130ed7799c823e2d0cbcec93eb4206131</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="10.0.0" release="6.2.el9_4" src="libvirt-10.0.0-6.2.el9_4.src.rpm">
          <filename>libvirt-docs-10.0.0-6.2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">fad458e86d666869dbeacf3b58a1eab952a2005bffc1dcb0d2ac01344e0d3adb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:15661</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-14 08:18:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)

* kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)

* kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)

* kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22097" id="CVE-2025-22097" type="cve" title="CVE-2025-22097" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38332" id="CVE-2025-38332" type="cve" title="CVE-2025-38332" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38352" id="CVE-2025-38352" type="cve" title="CVE-2025-38352" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38449" id="CVE-2025-38449" type="cve" title="CVE-2025-38449" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360223" id="2360223" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2379246" id="2379246" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2382581" id="2382581" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383519" id="2383519" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:15661" id="RLSA-2025:15661" type="self" title="RLSA-2025:15661" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.42.2.el9_6" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.42.2.el9_6.aarch64.rpm</filename>
          <sum type="sha256">e0aac197b82951f3c5bb69ff7529801a3cee0610100a5694812d0d088dc4648d</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.42.2.el9_6" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.42.2.el9_6.aarch64.rpm</filename>
          <sum type="sha256">465692fd8819705f74cff54f30dfae74d648f89e344bfd6df2cf4eeb27954369</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3619</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-06-14 14:00:29" />
    <updated date="2024-06-14 14:02:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)

* kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" id="CVE-2024-26735" type="cve" title="CVE-2024-26735" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" id="CVE-2024-26993" type="cve" title="CVE-2024-26993" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273278" id="2273278" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278314" id="2278314" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3619" id="RLSA-2024:3619" type="self" title="RLSA-2024:3619" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.20.1.el9_4" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.20.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">04727fcd6c12572de5c428fbada8928153a3249a3419ec9ce51f609b3a46502b</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.20.1.el9_4" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.20.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">fedb67b30da5e904c9984a01401cfe6dfeab9264f91c534c4ff7f24ca417cf1d</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.20.1.el9_4" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.20.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">206ebe3603ee5c6675467a65f11757120c4b21b8aaf2b1718bc654e39999b8c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3339</id>
    <title>Important: glibc security update</title>
    <issued date="2024-06-14 14:00:33" />
    <updated date="2024-06-14 14:02:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT
(CVE-2024-2961)

* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)

* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)

* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)

* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273404" id="2273404" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2277202" id="2277202" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2277204" id="2277204" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2277205" id="2277205" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2277206" id="2277206" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3339" id="RLSA-2024:3339" type="self" title="RLSA-2024:3339" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.2" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-benchtests-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">80300343b1fb0e3abab509f61d25e3ab972f62ddf3358f92f96bb36be1846bb7</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.2" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-nss-devel-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">db9dabca64a60b776af30f6843d55dd26a65d17270ff7132f4b90074ec051165</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.2" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-static-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">e4e635db05acf5c4f5e0360ddba45a0d11e2cdbd52e655eaec574b5f28563584</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.2" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>nss_db-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">892faf67f24feaaa7393f52ac431cc881f674d9565e5dfb83fb495c9665b9409</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.2" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>nss_hesiod-2.34-100.el9_4.2.aarch64.rpm</filename>
          <sum type="sha256">03ab1dfb6eb5dca737cfb4916fe22cb18a1c74761c1cd01dc0144df37f8260e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2841</id>
    <title>.NET 6.0 bugfix update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2024-06-14 14:02:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 6.0 to SDK 6.0.130 and Runtime 6.0.30 [rhel-9.4.z] (Rocky Linux-35310)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2841" id="RLBA-2024:2841" type="self" title="RLBA-2024:2841" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.130" release="1.el9_4" src="dotnet6.0-6.0.130-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.130-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">cc1c4b05c96cfd56b3cd9e22bdaa0b85345766ac761a3ef0d40deded123ce1af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3501</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2024-06-14 14:00:33" />
    <updated date="2024-06-14 14:02:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for nghttp2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2268639" id="2268639" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3501" id="RLSA-2024:3501" type="self" title="RLSA-2024:3501" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnghttp2-devel" arch="aarch64" epoch="0" version="1.43.0" release="5.el9_4.3" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">4a0ec9eff49f0b1ffd3683892062c8032a38548b0bf406d0718cb4cf86852547</sum>
        </package>
        <package name="nghttp2" arch="aarch64" epoch="0" version="1.43.0" release="5.el9_4.3" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">41cfa412d53a7a6534025dba606aafa45763a9f4770ea3bc93c4084305ef0f79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2842</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2024-06-14 14:02:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)

* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2279695" id="2279695" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2279697" id="2279697" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2842" id="RLSA-2024:2842" type="self" title="RLSA-2024:2842" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.105" release="1.el9_4" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">adc8e19bf22c9d9b9b399121eecc6c65eaf836a40cb23fed73d2335924691aea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2843</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2025-10-17 21:52:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet7.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)

* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2279695" id="2279695" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2279697" id="2279697" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263085" id="2263085" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263086" id="2263086" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2843" id="RLSA-2024:2843" type="self" title="RLSA-2024:2843" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" arch="aarch64" epoch="0" version="7.0.119" release="1.el9_4" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">23e8bbdc58a773b141437a433f3a0ebedbacaee9d0adcd6cf9d703e1c3ac558b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3754</id>
    <title>Important: ipa security update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2024-06-14 14:02:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698)

* freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2698" id="CVE-2024-2698" type="cve" title="CVE-2024-2698" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3183" id="CVE-2024-3183" type="cve" title="CVE-2024-3183" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270353" id="2270353" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270685" id="2270685" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3754" id="RLSA-2024:3754" type="self" title="RLSA-2024:3754" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.11.0" release="15.el9_4" src="ipa-4.11.0-15.el9_4.src.rpm">
          <filename>python3-ipatests-4.11.0-15.el9_4.noarch.rpm</filename>
          <sum type="sha256">67e90e53fc46b5e151c183e4c5e16b75ca51e2d40f6c35b3ca4e54605abafc2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:3828</id>
    <title>libappstream-glib bug fix update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2025-10-17 21:52:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libappstream-glib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libappstream-glib package provides GObjects and helper methods for easy manipulation of AppStream metadata. It also provides a simple DOM (Document Object Model) implementation that simplifies editing nodes and converting to and from the standardized XML representation.

Bug Fix(es):

* flatpak / appstream compat issues [rhel-9.4.z] (JIRA:Rocky Linux-34564)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:3828" id="RLBA-2024:3828" type="self" title="RLBA-2024:3828" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libappstream-glib-devel" arch="aarch64" epoch="0" version="0.7.18" release="5.el9_4" src="libappstream-glib-0.7.18-5.el9_4.src.rpm">
          <filename>libappstream-glib-devel-0.7.18-5.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f9dda42b8850fce0c91f551de50c9c8c089a0013bb31f9c3a3c01507736ded1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:3832</id>
    <title>libvirt bug fix update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2024-06-14 14:02:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Bug Fix(es):

* live-migration with NBD TLS fails with "Certificate does not match the hostname " [rhel-9.4.z] (JIRA:Rocky Linux-33781)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:3832" id="RLBA-2024:3832" type="self" title="RLBA-2024:3832" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-daemon-plugin-sanlock" arch="aarch64" epoch="0" version="10.0.0" release="6.3.el9_4" src="libvirt-10.0.0-6.3.el9_4.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.3.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e50528761e767c243d469aab6a234783eacbe94bed0f7de8ce824d9c3f5d272e</sum>
        </package>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="10.0.0" release="6.3.el9_4" src="libvirt-10.0.0-6.3.el9_4.src.rpm">
          <filename>libvirt-devel-10.0.0-6.3.el9_4.aarch64.rpm</filename>
          <sum type="sha256">03c632b092d6b34bac5ab6b3a94b4b6e504b4aa7b63130d25a7ba902470761bd</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="10.0.0" release="6.3.el9_4" src="libvirt-10.0.0-6.3.el9_4.src.rpm">
          <filename>libvirt-docs-10.0.0-6.3.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3e9173449b264ac7075bd78155f4ee292bc768cab429a9b4505e441f600032a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3837</id>
    <title>Important: 389-ds-base security update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2024-06-14 14:02:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)

* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2199" id="CVE-2024-2199" type="cve" title="CVE-2024-2199" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3657" id="CVE-2024-3657" type="cve" title="CVE-2024-3657" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2267976" id="2267976" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2274401" id="2274401" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3837" id="RLSA-2024:3837" type="self" title="RLSA-2024:3837" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="389-ds-base-devel" arch="aarch64" epoch="0" version="2.4.5" release="8.el9_4" src="389-ds-base-2.4.5-8.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">389704cffb212bc0e6460568de3391503e47e4f8cf63634a9e3d610ffb43bbea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:3839</id>
    <title>ostree bug fix update</title>
    <issued date="2024-06-14 14:00:35" />
    <updated date="2024-06-14 14:02:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ostree.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OSTree is a tool for managing bootable, immutable, versioned file system trees.

Bug Fix(es):

* [9.4.z] Update ostree to 2024.6 (JIRA:Rocky Linux-36770)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:3839" id="RLBA-2024:3839" type="self" title="RLBA-2024:3839" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2024.6" release="1.el9_4" src="ostree-2024.6-1.el9_4.src.rpm">
          <filename>ostree-devel-2024.6-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">be7dbd827d29e70c88fba18e043b55abd4140f17dd22c3f388672d2a71390a4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:16086</id>
    <title>Moderate: mysql security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-12-05 09:06:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mysql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)

* mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)

* mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)

* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)

* mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)

* mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)

* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)

* mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)

* mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)

* mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)

* mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)

* mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)

* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)

* mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

* mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)

* mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)

* mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)

* mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)

* mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)

* mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)

* mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)

* mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)

* mysql: Replication unspecified vulnerability (CPU Jul 2025) (CVE-2025-53023)

* mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)

* mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)

* mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)

* mysql: Optimizer  unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)

* mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574" id="CVE-2025-21574" type="cve" title="CVE-2025-21574" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575" id="CVE-2025-21575" type="cve" title="CVE-2025-21575" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577" id="CVE-2025-21577" type="cve" title="CVE-2025-21577" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579" id="CVE-2025-21579" type="cve" title="CVE-2025-21579" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580" id="CVE-2025-21580" type="cve" title="CVE-2025-21580" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581" id="CVE-2025-21581" type="cve" title="CVE-2025-21581" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584" id="CVE-2025-21584" type="cve" title="CVE-2025-21584" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585" id="CVE-2025-21585" type="cve" title="CVE-2025-21585" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681" id="CVE-2025-30681" type="cve" title="CVE-2025-30681" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682" id="CVE-2025-30682" type="cve" title="CVE-2025-30682" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683" id="CVE-2025-30683" type="cve" title="CVE-2025-30683" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684" id="CVE-2025-30684" type="cve" title="CVE-2025-30684" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685" id="CVE-2025-30685" type="cve" title="CVE-2025-30685" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687" id="CVE-2025-30687" type="cve" title="CVE-2025-30687" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688" id="CVE-2025-30688" type="cve" title="CVE-2025-30688" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689" id="CVE-2025-30689" type="cve" title="CVE-2025-30689" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695" id="CVE-2025-30695" type="cve" title="CVE-2025-30695" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696" id="CVE-2025-30696" type="cve" title="CVE-2025-30696" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699" id="CVE-2025-30699" type="cve" title="CVE-2025-30699" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703" id="CVE-2025-30703" type="cve" title="CVE-2025-30703" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704" id="CVE-2025-30704" type="cve" title="CVE-2025-30704" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705" id="CVE-2025-30705" type="cve" title="CVE-2025-30705" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715" id="CVE-2025-30715" type="cve" title="CVE-2025-30715" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721" id="CVE-2025-30721" type="cve" title="CVE-2025-30721" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077" id="CVE-2025-50077" type="cve" title="CVE-2025-50077" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078" id="CVE-2025-50078" type="cve" title="CVE-2025-50078" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079" id="CVE-2025-50079" type="cve" title="CVE-2025-50079" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080" id="CVE-2025-50080" type="cve" title="CVE-2025-50080" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081" id="CVE-2025-50081" type="cve" title="CVE-2025-50081" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082" id="CVE-2025-50082" type="cve" title="CVE-2025-50082" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083" id="CVE-2025-50083" type="cve" title="CVE-2025-50083" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084" id="CVE-2025-50084" type="cve" title="CVE-2025-50084" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085" id="CVE-2025-50085" type="cve" title="CVE-2025-50085" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086" id="CVE-2025-50086" type="cve" title="CVE-2025-50086" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087" id="CVE-2025-50087" type="cve" title="CVE-2025-50087" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088" id="CVE-2025-50088" type="cve" title="CVE-2025-50088" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091" id="CVE-2025-50091" type="cve" title="CVE-2025-50091" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092" id="CVE-2025-50092" type="cve" title="CVE-2025-50092" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093" id="CVE-2025-50093" type="cve" title="CVE-2025-50093" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094" id="CVE-2025-50094" type="cve" title="CVE-2025-50094" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096" id="CVE-2025-50096" type="cve" title="CVE-2025-50096" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097" id="CVE-2025-50097" type="cve" title="CVE-2025-50097" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098" id="CVE-2025-50098" type="cve" title="CVE-2025-50098" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099" id="CVE-2025-50099" type="cve" title="CVE-2025-50099" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100" id="CVE-2025-50100" type="cve" title="CVE-2025-50100" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101" id="CVE-2025-50101" type="cve" title="CVE-2025-50101" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102" id="CVE-2025-50102" type="cve" title="CVE-2025-50102" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104" id="CVE-2025-50104" type="cve" title="CVE-2025-50104" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53023" id="CVE-2025-53023" type="cve" title="CVE-2025-53023" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359885" id="2359885" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359888" id="2359888" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359892" id="2359892" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359894" id="2359894" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359895" id="2359895" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359899" id="2359899" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359900" id="2359900" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359902" id="2359902" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359903" id="2359903" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359918" id="2359918" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359920" id="2359920" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359924" id="2359924" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359928" id="2359928" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359930" id="2359930" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359932" id="2359932" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359934" id="2359934" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359938" id="2359938" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359940" id="2359940" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359943" id="2359943" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359944" id="2359944" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359945" id="2359945" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359947" id="2359947" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359950" id="2359950" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359963" id="2359963" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359964" id="2359964" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2359972" id="2359972" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380264" id="2380264" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380273" id="2380273" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380274" id="2380274" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380278" id="2380278" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380280" id="2380280" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380283" id="2380283" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380284" id="2380284" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380290" id="2380290" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380291" id="2380291" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380295" id="2380295" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380298" id="2380298" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380306" id="2380306" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380308" id="2380308" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380309" id="2380309" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380310" id="2380310" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380311" id="2380311" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380312" id="2380312" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380313" id="2380313" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380320" id="2380320" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380321" id="2380321" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380322" id="2380322" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380326" id="2380326" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380327" id="2380327" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380334" id="2380334" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380335" id="2380335" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:16086" id="RLSA-2025:16086" type="self" title="RLSA-2025:16086" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mysql-devel" arch="aarch64" epoch="0" version="8.0.43" release="1.el9_6" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-devel-8.0.43-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f2469cf9f4177012e226e57f83d4912e08023b7b26483afaea033b247a089bf7</sum>
        </package>
        <package name="mysql-libs" arch="aarch64" epoch="0" version="8.0.43" release="1.el9_6" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-libs-8.0.43-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">13be8576a05ad04b46a5d38dc84779b297a13c58fbb524839e7eee7bf80520e0</sum>
        </package>
        <package name="mysql-test" arch="aarch64" epoch="0" version="8.0.43" release="1.el9_6" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-test-8.0.43-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">d666742a092e3c90827672ff44e7d707c53e4c1957665003c4b075d92c7393e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:16880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-17 21:54:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)

* kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)

* kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

* kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)

* kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38472" id="CVE-2025-38472" type="cve" title="CVE-2025-38472" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38527" id="CVE-2025-38527" type="cve" title="CVE-2025-38527" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38718" id="CVE-2025-38718" type="cve" title="CVE-2025-38718" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39682" id="CVE-2025-39682" type="cve" title="CVE-2025-39682" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39698" id="CVE-2025-39698" type="cve" title="CVE-2025-39698" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383916" id="2383916" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2388928" id="2388928" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2393166" id="2393166" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2393511" id="2393511" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2393519" id="2393519" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:16880" id="RLSA-2025:16880" type="self" title="RLSA-2025:16880" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.49.1.el9_6" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.49.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">9e642f4b0068fffa2142015c14015a8475305458421216304c16a3a049d78d4f</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.49.1.el9_6" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.49.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">01029c56a5f4dbc253e9c7877ab91c94ca74b7322629d11a3e992af13e287e2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:3983</id>
    <title>kernel bug fix update</title>
    <issued date="2024-07-02 14:11:24" />
    <updated date="2024-07-02 14:13:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Bug Fix(es):

* [DELL 9.4 BUG] - Screen shows garbage sometimes [rhel-9.4.z] (JIRA:Rocky Linux-36534)

* cifs - Unable to mount CIFS shares after upgrading to Rocky Linux9.4 (JIRA:Rocky Linux-36743)

* [Azure][Rocky Linux-9][MANA]System crash at skbuff when set mtu=100 [rhel-9.4.z] (JIRA:Rocky Linux-37622)

* selective backport from perf upstream v6.8 to fix AmpereOne and Nvidia support [rhel-9.4.z] (JIRA:Rocky Linux-34991)

* [Intel 9.5 FEAT] [SRF] performance: hwmon: (coretemp) Fix core count limitation [rhel-9.4.z] (JIRA:Rocky Linux-35447)

* CNB95: dpll: rebase DPLL to upstream v6.8 [rhel-9.4.z] (JIRA:Rocky Linux-36572)

* ice: IRQs being moved to isolated CPUs and causing latency issues [rhel-9.4.z] (JIRA:Rocky Linux-38512)

* Bluetooth device disappears from the device list after a few minutes with AX211 [rhel-9.4.z] (JIRA:Rocky Linux-38524)

* deadlock on dfs_cache_refresh  [rhel-9.4.z] (JIRA:Rocky Linux-38904)

* [DELL 9.3 BUG]Unexpected message "integrity: Problem loading X.509 certificate -126" occurred on boot screen. [rhel-9.4.z] (JIRA:Rocky Linux-39933)

* [rhel9-rt-debug] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:46 ( clocksource_mark_unstable) (JIRA:Rocky Linux-9296)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:3983" id="RLBA-2024:3983" type="self" title="RLBA-2024:3983" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.22.1.el9_4" src="kernel-5.14.0-427.22.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.22.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">53d4af5e43c223c6af55162d81222927aa52e22f840af7b31800d4ab9e728677</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.22.1.el9_4" src="kernel-5.14.0-427.22.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.22.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c9bfd841aaf5acb15cf7da7b809bf70b769b37d37ec37128c66dd71d04c4c932</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.22.1.el9_4" src="kernel-5.14.0-427.22.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.22.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">6502c217cdd3e4b7bd2a9dfe6e71a6d54dfc642a97fe4cb169fe6879e9a39062</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4078</id>
    <title>Important: python3.9 security update</title>
    <issued date="2024-07-02 14:11:27" />
    <updated date="2024-07-02 14:13:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276518" id="2276518" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276525" id="2276525" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4078" id="RLSA-2024:4078" type="self" title="RLSA-2024:4078" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.18" release="3.el9_4.1" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">4d7e504ea16c5fe12520f889739995038be21e9f3da37ddbdfa4d7928cce136e</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.18" release="3.el9_4.1" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">4eec1b03a7b7ae481ce12f4d5b97bddba9ace3b9de9a9f752510c2f4f3c26263</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.18" release="3.el9_4.1" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">4cf14df9bd690f47639b7f3c9a3bccec3ee1d528aacba1bccb7af88c918fb977</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3959</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-07-02 14:11:30" />
    <updated date="2024-07-02 14:13:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for flatpak.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275981" id="2275981" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3959" id="RLSA-2024:3959" type="self" title="RLSA-2024:3959" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flatpak-devel" arch="aarch64" epoch="0" version="1.12.9" release="1.el9_4" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-devel-1.12.9-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">cf451005b822d4c6de7325f647dee0851d3ce163cf25d7ad93a81e28384a1b69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:3999</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-07-02 14:11:30" />
    <updated date="2024-07-02 14:13:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for ghostscript.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2283508" id="2283508" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:3999" id="RLSA-2024:3999" type="self" title="RLSA-2024:3999" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgs-devel" arch="aarch64" epoch="0" version="9.54.0" release="16.el9_4" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>libgs-devel-9.54.0-16.el9_4.aarch64.rpm</filename>
          <sum type="sha256">2e85889839f73a0dbd559f8d083ef12d6ec7e4c19b8d691b273f7b7773c768bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4077</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-07-02 14:11:30" />
    <updated date="2024-07-02 14:13:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276518" id="2276518" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4077" id="RLSA-2024:4077" type="self" title="RLSA-2024:4077" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.7" release="1.el9_4.1" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">92723b9e4de9bb79d9ad265cc3e9a044a040e2420d836c071e54f3707cc55d4d</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.7" release="1.el9_4.1" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">9cdff15ac601a5f69422982578abc0b0075edf20dab80b701a9e42ff0a961141</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.7" release="1.el9_4.1" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">66cac638f0a1a8597288ba5b31d2655b598a1fb90f482c3e3f99874706c4cea5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4349</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-07-15 12:18:37" />
    <updated date="2024-07-15 12:19:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626)

* kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801)

* kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)

* kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)

* kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)

* kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)

* kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)

* kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)

Bug Fix(es):

* cifs - kernel panic with cifs_put_smb_ses (JIRA:Rocky Linux-28943)

* BUG: unable to handle page fault for address: ff16bf752f593ff8 [rhel-9.4.z] (JIRA:Rocky Linux-35672)

* [HPE 9.4 Bug] Request merge of AMD address translation library patch series [rhel-9.4.z] (JIRA:Rocky Linux-36220)

* [Rocky Linux9] kernel BUG at lib/list_debug.c:51! [rhel-9.4.z] (JIRA:Rocky Linux-36687)

* ice: DPLL-related fixes [rhel-9.4.z] (JIRA:Rocky Linux-36716)

* CNB95: net/sched: update TC core to upstream v6.8 [rhel-9.4.z] (JIRA:Rocky Linux-37641)

* IPv6: SR: backport fixes from upstream [rhel-9.4.z] (JIRA:Rocky Linux-37669)

* [RFE] Backport tmpfs noswap mount option [rhel-9.4.z] (JIRA:Rocky Linux-38252)

* Isolated cores causing issues on latest Rocky Linux9.4 kernel and not functioning as desired. [rhel-9.4.z] (JIRA:Rocky Linux-38595)

* [ice] Add automatic VF reset on Tx MDD events [rhel-9.4.z] (JIRA:Rocky Linux-39083)

* [HPEMC Rocky Linux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [rhel-9.4.z] (JIRA:Rocky Linux-34953)

* bnx2x: fix crashes in PCI error handling, resource leaks [rhel-9.4.z] (JIRA:Rocky Linux-43272)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" id="CVE-2021-47400" type="cve" title="CVE-2021-47400" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52626" id="CVE-2023-52626" type="cve" title="CVE-2023-52626" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" id="CVE-2023-52667" type="cve" title="CVE-2023-52667" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26801" id="CVE-2024-26801" type="cve" title="CVE-2024-26801" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" id="CVE-2024-26974" type="cve" title="CVE-2024-26974" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" id="CVE-2024-27393" type="cve" title="CVE-2024-27393" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" id="CVE-2024-35870" type="cve" title="CVE-2024-35870" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" id="CVE-2024-35960" type="cve" title="CVE-2024-35960" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2271680" id="2271680" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273429" id="2273429" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278354" id="2278354" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2280745" id="2280745" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281350" id="2281350" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281740" id="2281740" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281920" id="2281920" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282336" id="2282336" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4349" id="RLSA-2024:4349" type="self" title="RLSA-2024:4349" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.24.1.el9_4" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.24.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">363defeafcd25d8d4b329deb29b187ce8d7455e1c08897a7673011eb8a511962</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.24.1.el9_4" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.24.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">fdb6b00396ae102d573c4b489febce333813993541195421bda69617e14ed851</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.24.1.el9_4" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.24.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">9b56dc9309898083b99ecb41326ee5bdad47e7d6099317452ab1790a957f4559</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4450</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-15 12:18:41" />
    <updated date="2024-07-15 12:20:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)

* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2295320" id="2295320" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2295321" id="2295321" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2295323" id="2295323" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4450" id="RLSA-2024:4450" type="self" title="RLSA-2024:4450" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.107" release="1.el9_4" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.107-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">25273481c8d37c999242079bfb8bdd821d68f042d705f288e6ef08701192b8e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-26 12:33:00" />
    <updated date="2024-07-26 12:35:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for java-21-openjdk.
This update affects Rocky Linux 8, Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)

* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)

* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)

* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)

* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297961" id="2297961" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297962" id="2297962" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297963" id="2297963" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297976" id="2297976" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297977" id="2297977" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4573" id="RLSA-2024:4573" type="self" title="RLSA-2024:4573" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-21-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5055a202a9526066108c17b98f0ccb8815cb6aca963181f86b62f23ed91b06e5</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">64de7fecbf97a103b47a87d710df8fc956fbde6ea2f739937708887ae32b5358</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">79f48f2d748720325ddb0cab0aeb04a5493b56846bf4e9166eb823bb8df1b3f7</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">00325e6f074bfc0b06acd666066cccdeb300dfd317cc7e6ffa0a5f77e9662ce8</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">09809fa490e0aa4f85b03f7a5d08f58ea8be2868bd5149709dcc45d6db6c38f4</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">145a026fde386eda2e34fa487f11a44cdccea92735f2a8d7e71ebe4501e124be</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">65db11d5373a963aadc0eb58e76b9434dbb8135780cd2db3c784f6ca2b71ee9b</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2be668fc5b4aa5e3c7cc619d5e3871ec2d7188062804bd9a84abbbfd2c7bd0fa</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">c4a56e9457aa6d0a2be3d786b55ce30cfce805b681f911358eccb35d120247f6</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">33a95370a33d763f56c93954183b9d17f4acbaafdd4d39de37c9ca9479143fa0</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">75f2a457caa62ae172fead1953e27df1e1f28cfe3afa2ee3a71fd1a3afd936c3</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">08eb5508de3f956ddd842c96d3396559e5028f713771452b75805be285c39a42</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">bb19a0177980833a348048d7ae95e8a195de66951190aee11e0a74df00f4f685</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="21.0.4.0.7" release="1.el9" src="java-21-openjdk-21.0.4.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.4.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">bcccd202d12d57015d04cdc941287199cad90937a02e60cd1009fc4e1e95f4a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4583</id>
    <title>Important: kernel security update</title>
    <issued date="2024-07-26 12:33:50" />
    <updated date="2024-07-26 12:35:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

* kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548)

* kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596)

* kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

* kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638)

* kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783)

* kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858)

* kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

* kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435)

* kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)

* kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904)

* kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543)

* kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586)

* kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593)

* kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270)

* kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957)

* kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47548" id="CVE-2021-47548" type="cve" title="CVE-2021-47548" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47596" id="CVE-2021-47596" type="cve" title="CVE-2021-47596" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" id="CVE-2022-48627" type="cve" title="CVE-2022-48627" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52638" id="CVE-2023-52638" type="cve" title="CVE-2023-52638" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" id="CVE-2024-26783" type="cve" title="CVE-2024-26783" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26858" id="CVE-2024-26858" type="cve" title="CVE-2024-26858" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27397" id="CVE-2024-27397" type="cve" title="CVE-2024-27397" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" id="CVE-2024-27435" type="cve" title="CVE-2024-27435" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" id="CVE-2024-35958" type="cve" title="CVE-2024-35958" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" id="CVE-2024-36270" type="cve" title="CVE-2024-36270" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36886" id="CVE-2024-36886" type="cve" title="CVE-2024-36886" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" id="CVE-2024-36904" type="cve" title="CVE-2024-36904" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36957" id="CVE-2024-36957" type="cve" title="CVE-2024-36957" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38543" id="CVE-2024-38543" type="cve" title="CVE-2024-38543" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" id="CVE-2024-38586" type="cve" title="CVE-2024-38586" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38593" id="CVE-2024-38593" type="cve" title="CVE-2024-38593" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38663" id="CVE-2024-38663" type="cve" title="CVE-2024-38663" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2267509" id="2267509" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273082" id="2273082" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273466" id="2273466" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275735" id="2275735" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2277238" id="2277238" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2280434" id="2280434" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281131" id="2281131" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281925" id="2281925" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2283401" id="2283401" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284541" id="2284541" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284581" id="2284581" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293230" id="2293230" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293380" id="2293380" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293402" id="2293402" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293456" id="2293456" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293653" id="2293653" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2294225" id="2294225" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4583" id="RLSA-2024:4583" type="self" title="RLSA-2024:4583" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.26.1.el9_4" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.26.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">83deee8a444fe0bcfa1d83f8ea51bf20a70fd8937f06b6ce1c1ee9c083095b96</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.26.1.el9_4" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.26.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">29994e9df64fbe0f2a8eb039d99b5965cd561a5bf58e618f3b8c269392851040</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.26.1.el9_4" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.26.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c02689a49e4b212201ff2fefb8a4cab201db425bbfa2589b43e192fcff135d62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4623</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-26 12:33:55" />
    <updated date="2025-10-14 08:16:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for qt5-qtbase.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2295867" id="2295867" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4623" id="RLSA-2024:4623" type="self" title="RLSA-2024:4623" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtbase-static" arch="aarch64" epoch="0" version="5.15.9" release="10.el9_4" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-10.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c460cd6c550657adba4bf53f2d4bc5df8bc09c6f6bf946b980b74b9a43407e25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4928</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-08-01 01:29:12" />
    <updated date="2024-08-01 01:30:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458)

* kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773)

* kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737)

* kernel: dm: call the resume method on internal suspend (CVE-2024-26880)

* kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852)

* kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

* kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046)

* kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030)

* kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857)

* kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907)

* kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885)

* kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809)

* kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459)

* kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924)

* kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952)

* kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743)

* kernel: epoll: be better about file lifetimes (CVE-2024-38580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" id="CVE-2021-47459" type="cve" title="CVE-2021-47459" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48743" id="CVE-2022-48743" type="cve" title="CVE-2022-48743" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52458" id="CVE-2023-52458" type="cve" title="CVE-2023-52458" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" id="CVE-2023-52809" type="cve" title="CVE-2023-52809" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" id="CVE-2024-26737" type="cve" title="CVE-2024-26737" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" id="CVE-2024-26773" type="cve" title="CVE-2024-26773" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" id="CVE-2024-26852" type="cve" title="CVE-2024-26852" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" id="CVE-2024-26880" type="cve" title="CVE-2024-26880" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" id="CVE-2024-26982" type="cve" title="CVE-2024-26982" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" id="CVE-2024-27030" type="cve" title="CVE-2024-27030" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" id="CVE-2024-27046" type="cve" title="CVE-2024-27046" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" id="CVE-2024-35857" type="cve" title="CVE-2024-35857" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" id="CVE-2024-35885" type="cve" title="CVE-2024-35885" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" id="CVE-2024-35907" type="cve" title="CVE-2024-35907" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" id="CVE-2024-36924" type="cve" title="CVE-2024-36924" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" id="CVE-2024-36952" type="cve" title="CVE-2024-36952" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" id="CVE-2024-38580" type="cve" title="CVE-2024-38580" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2265794" id="2265794" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273236" id="2273236" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273274" id="2273274" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275690" id="2275690" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275761" id="2275761" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278337" id="2278337" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278435" id="2278435" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278473" id="2278473" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281247" id="2281247" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281647" id="2281647" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281700" id="2281700" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282669" id="2282669" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282898" id="2282898" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284506" id="2284506" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284598" id="2284598" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293316" id="2293316" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293412" id="2293412" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4928" id="RLSA-2024:4928" type="self" title="RLSA-2024:4928" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.28.1.el9_4" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.28.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">1f6c79d139c8a594f6c49853d49307960b8859f0a1a8636242f763040efed33b</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.28.1.el9_4" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.28.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c06f41658fe6d35ed518875a3a197f45c1ee2802a5d71ce38a8fa712b4ef6d0a</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.28.1.el9_4" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.28.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">a018226a0c7d29537d401f21a9443292de0162db0b18ea4ea25417954e59057a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4935</id>
    <title>Important: freeradius security update</title>
    <issued date="2024-08-01 01:29:16" />
    <updated date="2024-08-01 01:30:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for freeradius.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: forgery attack (CVE-2024-3596)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263240" id="2263240" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4935" id="RLSA-2024:4935" type="self" title="RLSA-2024:4935" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freeradius-mysql" arch="aarch64" epoch="0" version="3.0.21" release="40.el9_4" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-mysql-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">727224c8daf48483148ceea1d7513a778acdda5dd08b914d2b2869e7cec5b3db</sum>
        </package>
        <package name="freeradius-perl" arch="aarch64" epoch="0" version="3.0.21" release="40.el9_4" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-perl-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">9bcce978fd081a0129e65a5eb543dec1a340d1a5dbcedf1ffac1e20f0f217b8b</sum>
        </package>
        <package name="freeradius-postgresql" arch="aarch64" epoch="0" version="3.0.21" release="40.el9_4" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-postgresql-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">1859abc2c2822972cd63fa5dbba5a1d8d4a5ac0000f5910ab99efbf463af2e5d</sum>
        </package>
        <package name="freeradius-rest" arch="aarch64" epoch="0" version="3.0.21" release="40.el9_4" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-rest-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">2c8b1976b64aedfe30e997e80f8684bc56e2b1ad00fd803bb15af82505109e5a</sum>
        </package>
        <package name="freeradius-sqlite" arch="aarch64" epoch="0" version="3.0.21" release="40.el9_4" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-sqlite-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c50699e8edd2c935f745a8ee72f5a345accb9a4dd2bd8a7617096cf6f75955b5</sum>
        </package>
        <package name="freeradius-unixODBC" arch="aarch64" epoch="0" version="3.0.21" release="40.el9_4" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-unixODBC-3.0.21-40.el9_4.aarch64.rpm</filename>
          <sum type="sha256">674db0b9bb0dfc911b7184f199c74a307b6bd8de9bb89ef3f42780c5a35b1da4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:5363</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-21 14:53:21" />
    <updated date="2024-08-21 14:54:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Errata Tool Automation could not update the description because it is longer (4803) than ET limit of 4000 characters. (OSCI-6058)
Please update the description manually.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47606" id="CVE-2021-47606" type="cve" title="CVE-2021-47606" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52651" id="CVE-2023-52651" type="cve" title="CVE-2023-52651" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" type="cve" title="CVE-2023-52864" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21823" id="CVE-2024-21823" type="cve" title="CVE-2024-21823" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" id="CVE-2024-26600" type="cve" title="CVE-2024-26600" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" id="CVE-2024-26808" type="cve" title="CVE-2024-26808" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" type="cve" title="CVE-2024-26828" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" id="CVE-2024-26853" type="cve" title="CVE-2024-26853" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26868" id="CVE-2024-26868" type="cve" title="CVE-2024-26868" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" id="CVE-2024-26897" type="cve" title="CVE-2024-26897" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27049" id="CVE-2024-27049" type="cve" title="CVE-2024-27049" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" id="CVE-2024-27052" type="cve" title="CVE-2024-27052" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" id="CVE-2024-27065" type="cve" title="CVE-2024-27065" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" id="CVE-2024-27417" type="cve" title="CVE-2024-27417" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27434" id="CVE-2024-27434" type="cve" title="CVE-2024-27434" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33621" id="CVE-2024-33621" type="cve" title="CVE-2024-33621" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" type="cve" title="CVE-2024-35789" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35800" id="CVE-2024-35800" type="cve" title="CVE-2024-35800" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" id="CVE-2024-35823" type="cve" title="CVE-2024-35823" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" id="CVE-2024-35845" type="cve" title="CVE-2024-35845" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" id="CVE-2024-35848" type="cve" title="CVE-2024-35848" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" id="CVE-2024-35852" type="cve" title="CVE-2024-35852" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" id="CVE-2024-35899" type="cve" title="CVE-2024-35899" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35911" id="CVE-2024-35911" type="cve" title="CVE-2024-35911" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35937" id="CVE-2024-35937" type="cve" title="CVE-2024-35937" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" id="CVE-2024-35969" type="cve" title="CVE-2024-35969" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" id="CVE-2024-36005" type="cve" title="CVE-2024-36005" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" id="CVE-2024-36017" type="cve" title="CVE-2024-36017" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" id="CVE-2024-36020" type="cve" title="CVE-2024-36020" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" id="CVE-2024-36489" type="cve" title="CVE-2024-36489" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36903" id="CVE-2024-36903" type="cve" title="CVE-2024-36903" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36921" id="CVE-2024-36921" type="cve" title="CVE-2024-36921" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36922" id="CVE-2024-36922" type="cve" title="CVE-2024-36922" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" id="CVE-2024-36929" type="cve" title="CVE-2024-36929" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" id="CVE-2024-36941" type="cve" title="CVE-2024-36941" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" id="CVE-2024-36971" type="cve" title="CVE-2024-36971" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37353" id="CVE-2024-37353" type="cve" title="CVE-2024-37353" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37356" id="CVE-2024-37356" type="cve" title="CVE-2024-37356" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38391" id="CVE-2024-38391" type="cve" title="CVE-2024-38391" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" id="CVE-2024-38558" type="cve" title="CVE-2024-38558" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38575" id="CVE-2024-38575" type="cve" title="CVE-2024-38575" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" id="CVE-2024-39487" type="cve" title="CVE-2024-39487" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40928" id="CVE-2024-40928" type="cve" title="CVE-2024-40928" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" id="CVE-2024-40954" type="cve" title="CVE-2024-40954" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" id="CVE-2024-40958" type="cve" title="CVE-2024-40958" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" id="CVE-2024-40961" type="cve" title="CVE-2024-40961" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2265838" id="2265838" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273405" id="2273405" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275600" id="2275600" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275655" id="2275655" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275715" id="2275715" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275748" id="2275748" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278380" id="2278380" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278417" id="2278417" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278429" id="2278429" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278519" id="2278519" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278989" id="2278989" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281057" id="2281057" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281097" id="2281097" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281133" id="2281133" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281190" id="2281190" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281237" id="2281237" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281257" id="2281257" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281265" id="2281265" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281272" id="2281272" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281639" id="2281639" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281667" id="2281667" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281821" id="2281821" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281900" id="2281900" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281949" id="2281949" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282719" id="2282719" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284400" id="2284400" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284417" id="2284417" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284474" id="2284474" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284496" id="2284496" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284511" id="2284511" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284513" id="2284513" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284543" id="2284543" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2292331" id="2292331" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293208" id="2293208" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293418" id="2293418" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293441" id="2293441" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293657" id="2293657" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293658" id="2293658" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293686" id="2293686" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293687" id="2293687" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293688" id="2293688" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297056" id="2297056" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297512" id="2297512" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297538" id="2297538" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297542" id="2297542" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297545" id="2297545" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:5363" id="RLSA-2024:5363" type="self" title="RLSA-2024:5363" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.31.1.el9_4" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.31.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">526e091284485c499095dd04ea6befcc862a31e739471dd93f3b118b69c11f97</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.31.1.el9_4" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.31.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3458bf9d381a17aca65763edf19d7ce31151f51a51895b38a75e49b58d36b406</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.31.1.el9_4" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.31.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">9a38fff5c6a7af7c34cbb48620f5d135052ddaad48aff70eaa4c6f64718283ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:5231</id>
    <title>Important: bind and bind-dyndb-ldap security update</title>
    <issued date="2024-08-21 14:53:26" />
    <updated date="2024-08-21 14:54:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind-dyndb-ldap, bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)

* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)

* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2298893" id="2298893" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2298901" id="2298901" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2298904" id="2298904" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:5231" id="RLSA-2024:5231" type="self" title="RLSA-2024:5231" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="18.el9_4.6" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-devel-9.16.23-18.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">822ccfdf45ea3b7f56d84dd1cad6b79946540433418de6f038089557e502965f</sum>
        </package>
        <package name="bind-doc" arch="noarch" epoch="2" version="9.16.23" release="18.el9_4.6" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-doc-9.16.23-18.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">daeca2e33af99da35b03d30bf7ffd4190c0e147b87eda5f11bb716856d5a44fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:5192</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2024-08-21 14:53:26" />
    <updated date="2024-08-21 14:54:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

* 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5953" id="CVE-2024-5953" type="cve" title="CVE-2024-5953" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6237" id="CVE-2024-6237" type="cve" title="CVE-2024-6237" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2292104" id="2292104" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293579" id="2293579" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:5192" id="RLSA-2024:5192" type="self" title="RLSA-2024:5192" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="389-ds-base-devel" arch="aarch64" epoch="0" version="2.4.5" release="9.el9_4" src="389-ds-base-2.4.5-9.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-9.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3914154e2565a0f83ed5be77e3da2dab11dbf6f76dc364e39ba74f504064ff34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:5533</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-21 14:53:26" />
    <updated date="2024-08-21 14:54:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.12-setuptools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297771" id="2297771" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:5533" id="RLSA-2024:5533" type="self" title="RLSA-2024:5533" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-setuptools-wheel" arch="noarch" epoch="0" version="68.2.2" release="3.el9_4.1" src="python3.12-setuptools-68.2.2-3.el9_4.1.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-3.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">88392789f4736337f4f20525fb6a4654fa678b1f4697392906fcce12108172aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6567</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-09-17 00:55:50" />
    <updated date="2024-09-17 00:57:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

* kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629)

* kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630)

* kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)

* kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886)

* kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946)

* kernel: KVM: SVM: Flush pages under kvm-&amp;gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791)

* kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797)

* kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875)

* kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)

* kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801)

* kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883)

* kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019)

* kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619)

* kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979)

* kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559)

* kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927)

* kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936)

* kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040)

* kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044)

* kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055)

* kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096)

* kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082)

* kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096)

* kernel: Revert &amp;#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&amp;#34; (CVE-2024-42102)

* kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131)

* kernel: nvme: avoid double free special payload (CVE-2024-41073)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" type="cve" title="CVE-2023-52463" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52801" id="CVE-2023-52801" type="cve" title="CVE-2023-52801" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" id="CVE-2024-26629" type="cve" title="CVE-2024-26629" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26630" id="CVE-2024-26630" type="cve" title="CVE-2024-26630" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26720" id="CVE-2024-26720" type="cve" title="CVE-2024-26720" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26886" id="CVE-2024-26886" type="cve" title="CVE-2024-26886" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26946" id="CVE-2024-26946" type="cve" title="CVE-2024-26946" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" id="CVE-2024-35791" type="cve" title="CVE-2024-35791" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35797" id="CVE-2024-35797" type="cve" title="CVE-2024-35797" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" id="CVE-2024-35875" type="cve" title="CVE-2024-35875" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36000" id="CVE-2024-36000" type="cve" title="CVE-2024-36000" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36019" id="CVE-2024-36019" type="cve" title="CVE-2024-36019" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36883" id="CVE-2024-36883" type="cve" title="CVE-2024-36883" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36979" id="CVE-2024-36979" type="cve" title="CVE-2024-36979" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" id="CVE-2024-38559" type="cve" title="CVE-2024-38559" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" id="CVE-2024-38619" type="cve" title="CVE-2024-38619" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" id="CVE-2024-40927" type="cve" title="CVE-2024-40927" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40936" id="CVE-2024-40936" type="cve" title="CVE-2024-40936" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" id="CVE-2024-41040" type="cve" title="CVE-2024-41040" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" id="CVE-2024-41044" type="cve" title="CVE-2024-41044" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41055" id="CVE-2024-41055" type="cve" title="CVE-2024-41055" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" id="CVE-2024-41073" type="cve" title="CVE-2024-41073" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41096" id="CVE-2024-41096" type="cve" title="CVE-2024-41096" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" id="CVE-2024-42082" type="cve" title="CVE-2024-42082" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" id="CVE-2024-42096" type="cve" title="CVE-2024-42096" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42102" id="CVE-2024-42102" type="cve" title="CVE-2024-42102" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42131" id="CVE-2024-42131" type="cve" title="CVE-2024-42131" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2265797" id="2265797" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2269434" id="2269434" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2269436" id="2269436" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2273141" id="2273141" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275678" id="2275678" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278206" id="2278206" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281052" id="2281052" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281151" id="2281151" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281727" id="2281727" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281968" id="2281968" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282709" id="2282709" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284271" id="2284271" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284402" id="2284402" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293273" id="2293273" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293276" id="2293276" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293440" id="2293440" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297511" id="2297511" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297520" id="2297520" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300409" id="2300409" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300414" id="2300414" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300429" id="2300429" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300491" id="2300491" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300520" id="2300520" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300713" id="2300713" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2301465" id="2301465" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2301496" id="2301496" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2301637" id="2301637" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6567" id="RLSA-2024:6567" type="self" title="RLSA-2024:6567" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.35.1.el9_4" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.35.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">5eee1a84b4f4b280848fe87f2fc33cbc90860c6a7ed12fdad030d048611007ed</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.35.1.el9_4" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.35.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">bc39a13f30a85049d837d5bb6ad7a5dbe7fddcb947e2a22fd8587423c2b133aa</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.35.1.el9_4" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.35.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3f29c044f1f6a92cd3e3a25871b4eaeab56a037ae3fb563ff5e062b56e46fe38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6464</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2024-09-17 00:55:53" />
    <updated date="2024-09-17 00:57:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for glib2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib2: Signal subscription vulnerabilities (CVE-2024-34397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2279632" id="2279632" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6464" id="RLSA-2024:6464" type="self" title="RLSA-2024:6464" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glib2-static" arch="aarch64" epoch="0" version="2.68.4" release="14.el9_4.1" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-static-2.68.4-14.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">13d70d746a4bafdc7f25e53fd98f0707a80df81ed5a09b37a19ff8aca8e434c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:5999</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-09-17 00:55:55" />
    <updated date="2024-09-17 00:57:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:5999" id="RLSA-2024:5999" type="self" title="RLSA-2024:5999" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-docs" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-docs-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">079cbe9d62933ddae3fd540a9eee839fa2444d06290df3783b3e338132f9f328</sum>
        </package>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-private-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">86aaeacfda43e814dec4187bfaac179959ef6422bb2205b4aa0f99a8c077964c</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-server-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">219bfde5f12b5798c01998c8d3e44433de8050d0a1e2b6688b388a44f7916581</sum>
        </package>
        <package name="postgresql-static" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-static-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">6fd086bb62ae859e9bfdcdb734c7d39ec542af2bb9bfd785a23ad0deaa28fe0e</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-test-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c747fa3a74262f871598566ec1e0dc991801aaf336027c4ac1caa4f25adb5370</sum>
        </package>
        <package name="postgresql-upgrade-devel" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-upgrade-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">d75ca5a5062444f6e4c9289162391d21c04b0dbd8572b47bad62a10d8ee6e381</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6146</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-17 00:55:55" />
    <updated date="2024-09-17 00:57:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2302255" id="2302255" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6146" id="RLSA-2024:6146" type="self" title="RLSA-2024:6146" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.1" release="4.el9_4.3" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-debug-3.12.1-4.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">486964d60d8f8cce099e3091f905485e7f5939f90f6d98cd03afabebc0395868</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.1" release="4.el9_4.3" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-idle-3.12.1-4.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">9d76b9354e441d9c385c8405fc98c79022cee0450d14c207590dd4e94ddb74bf</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.1" release="4.el9_4.3" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-test-3.12.1-4.el9_4.3.aarch64.rpm</filename>
          <sum type="sha256">8ccadfc5dd4ccdfcad79967e5c7cf8342ab3910ea3b010d30b570ea36f1b8757</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6287</id>
    <title>libguestfs bug fix and enhancement update</title>
    <issued date="2024-09-17 00:55:55" />
    <updated date="2024-09-17 00:57:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libguestfs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libguestfs packages contain a library used for accessing and modifying virtual machine disk images.

Bug Fix(es) and Enhancement(s):

* sgdisk fails with "Invalid partition data!" for win2019, win2022, win2025 guests with three additional online disks [rhel-9.4.z] (JIRA:Rocky Linux-56697)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6287" id="RLBA-2024:6287" type="self" title="RLBA-2024:6287" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libguestfs-devel" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>libguestfs-devel-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">702467449c5e324a7d56bf08a6f4246754ed1ed5a22b82a83ea979903c6d7d13</sum>
        </package>
        <package name="libguestfs-gobject" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>libguestfs-gobject-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">21ee4c327b4df2225495e80e29ae4b6a27d6899773aab717f6d564c8378e8064</sum>
        </package>
        <package name="libguestfs-gobject-devel" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>libguestfs-gobject-devel-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">6164cd9993d1ee5588c89bad0a7a7100169b16a30b9dd9b2cab3c467897e76c4</sum>
        </package>
        <package name="libguestfs-man-pages-ja" arch="noarch" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>libguestfs-man-pages-ja-1.50.1-8.el9_4.noarch.rpm</filename>
          <sum type="sha256">e4c9e9a41c1cd9d1ef0c9ec76a679ce2f017793fb4e2595f0acada92a479fa1c</sum>
        </package>
        <package name="libguestfs-man-pages-uk" arch="noarch" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>libguestfs-man-pages-uk-1.50.1-8.el9_4.noarch.rpm</filename>
          <sum type="sha256">28b763d121ae802142ecb91ecc4860f1c504c4aac15c284f9e5df6101bf6a504</sum>
        </package>
        <package name="lua-guestfs" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>lua-guestfs-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">0ad8c851572998cdf3db8a6723504e2d8542501849b1c799a4c09e11f7d2ed47</sum>
        </package>
        <package name="ocaml-libguestfs" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>ocaml-libguestfs-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">bcd81b175edd41e82a740cadf1d8beb299e41d4f03ce2471ae5cced2f5d1e9e8</sum>
        </package>
        <package name="ocaml-libguestfs-devel" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>ocaml-libguestfs-devel-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">250d223699508a6eb8d6ea3af83e9e975500d342474120a37596291200d61a9b</sum>
        </package>
        <package name="php-libguestfs" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>php-libguestfs-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">373eee6e5ed96b28c2f8887628bbb8d68783d70d5275982db2e7610676061c10</sum>
        </package>
        <package name="ruby-libguestfs" arch="aarch64" epoch="1" version="1.50.1" release="8.el9_4" src="libguestfs-1.50.1-8.el9_4.src.rpm">
          <filename>ruby-libguestfs-1.50.1-8.el9_4.aarch64.rpm</filename>
          <sum type="sha256">22bebf7b2821eab02345e07b030ca1ee7bdccd3b01ca84658cb7c29cc7221771</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6416</id>
    <title>augeas bug fix and enhancement update</title>
    <issued date="2024-09-17 00:55:55" />
    <updated date="2024-09-17 00:57:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for augeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Augeas is a configuration editing tool. It parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native config files.

Bug Fix(es) and Enhancement(s):

* libguestfs pops up error when ?there is a trailing comma after character like nosuid in guest /etc/fstab [rhel-9.4.z] (JIRA:Rocky Linux-56992)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6416" id="RLBA-2024:6416" type="self" title="RLBA-2024:6416" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="augeas-devel" arch="aarch64" epoch="0" version="1.13.0" release="6.el9_4" src="augeas-1.13.0-6.el9_4.src.rpm">
          <filename>augeas-devel-1.13.0-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">79a76f0b6d2209dd8201eece8832f9cafe189bfc03c40c6e5eea3f5c0c62fab2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6669</id>
    <title>libvirt bug fix and enhancement update</title>
    <issued date="2024-09-17 00:55:55" />
    <updated date="2024-09-17 00:57:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Bug Fix(es) and Enhancement(s):

* Opening a vpx:// URL fails if the backing VMX file has a "*" character in any key [rhel-9.4.z] (JIRA:Rocky Linux-58676)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6669" id="RLBA-2024:6669" type="self" title="RLBA-2024:6669" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-daemon-plugin-sanlock" arch="aarch64" epoch="0" version="10.0.0" release="6.7.el9_4" src="libvirt-10.0.0-6.7.el9_4.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.7.el9_4.aarch64.rpm</filename>
          <sum type="sha256">a2da07a4391b9c1a5fb376d14d46fd4547432ec7af9104130933ea8d95e461c6</sum>
        </package>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="10.0.0" release="6.7.el9_4" src="libvirt-10.0.0-6.7.el9_4.src.rpm">
          <filename>libvirt-devel-10.0.0-6.7.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f10d83b17fa4c86765af2a90506fa02099d62211795d2cfa4fbb4aca7f76194a</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="10.0.0" release="6.7.el9_4" src="libvirt-10.0.0-6.7.el9_4.src.rpm">
          <filename>libvirt-docs-10.0.0-6.7.el9_4.aarch64.rpm</filename>
          <sum type="sha256">583707c8277d563d96120eee291dc2f4b0561c48d2a33e3038ca08bac9963bdc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6529</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-17 00:55:55" />
    <updated date="2024-09-17 00:57:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for dovecot.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)

* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2305909" id="2305909" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2305910" id="2305910" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6529" id="RLSA-2024:6529" type="self" title="RLSA-2024:6529" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dovecot-devel" arch="aarch64" epoch="1" version="2.3.16" release="11.el9_4.1" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-devel-2.3.16-11.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">5142136121d459b31473daccbcf1232ccf817cfff5b5efbbf7fb691cf92b1c48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:17084</id>
    <title>Important: ipa security update</title>
    <issued date="2025-10-10 05:50:32" />
    <updated date="2025-10-23 08:07:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2389448" id="2389448" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:17084" id="RLSA-2025:17084" type="self" title="RLSA-2025:17084" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.12.2" release="14.el9_6.5" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>python3-ipatests-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">8e46484e7c4d8f85fa2c5e8883f566cfb107243c2f9ddbf9a6fc618eb76b970d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:17162</id>
    <title>Moderate: perl-JSON-XS security update</title>
    <issued date="2025-10-10 05:50:59" />
    <updated date="2025-12-05 09:06:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for perl-JSON-XS.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.

Security Fix(es):

* JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40928" id="CVE-2025-40928" type="cve" title="CVE-2025-40928" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2393878" id="2393878" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:17162" id="RLSA-2025:17162" type="self" title="RLSA-2025:17162" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-JSON-XS" arch="aarch64" epoch="1" version="4.04" release="1.el9_6" src="perl-JSON-XS-4.04-1.el9_6.src.rpm">
          <filename>perl-JSON-XS-4.04-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">df8791b984381e2d9e0b0790fa007c4b4192cbb845fc269215a650e5a2a35589</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:7346</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-09-30 14:31:39" />
    <updated date="2024-09-30 14:33:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for cups-filters.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)

* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2314252" id="2314252" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2314253" id="2314253" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2314256" id="2314256" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:7346" id="RLSA-2024:7346" type="self" title="RLSA-2024:7346" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cups-filters-devel" arch="aarch64" epoch="0" version="1.28.7" release="17.el9_4" src="cups-filters-1.28.7-17.el9_4.src.rpm">
          <filename>cups-filters-devel-1.28.7-17.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e68d3d7ad2d032a9b6a297717f08a10e4ed71534e0d3c4913f62ca340839da25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6757</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-09-30 14:31:39" />
    <updated date="2024-09-30 14:33:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libnbd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2302865" id="2302865" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6757" id="RLSA-2024:6757" type="self" title="RLSA-2024:6757" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnbd-devel" arch="aarch64" epoch="0" version="1.18.1" release="4.el9_4" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>libnbd-devel-1.18.1-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">d128478b34370efe9ee0896855efbbef311e73b6abec364da0e8b6eca9210534</sum>
        </package>
        <package name="ocaml-libnbd" arch="aarch64" epoch="0" version="1.18.1" release="4.el9_4" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>ocaml-libnbd-1.18.1-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">cd9cc09ad86f5c4b8c8967785c2d4c2c60af9efb54c22abe491c047b690adb80</sum>
        </package>
        <package name="ocaml-libnbd-devel" arch="aarch64" epoch="0" version="1.18.1" release="4.el9_4" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>ocaml-libnbd-devel-1.18.1-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">055e085d9ab5cfeaa2eab798dac7cfdd57d037fc28d8849f51990a03b3704038</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8121</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-10-25 17:16:21" />
    <updated date="2024-10-25 17:18:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 8, Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)

* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)

* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)

* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)

* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2251025" id="2251025" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318524" id="2318524" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318530" id="2318530" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318534" id="2318534" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8121" id="RLSA-2024:8121" type="self" title="RLSA-2024:8121" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">866374f38a7dabd20eaa986cd5f0031c936f9b25027d5de37203a6b04184fd7e</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a888c6fe841387bfb836651f6c2c42b841085e7e81e536635bdc9e80e7f75fa9</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d8ed41aa02032307613d55039f085f3d41f85d4acf4609050bfe7c73b8c6d44e</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9408ec6b17a1bf5b83d190f125aaa39da5cf3ab4aee0dfb0cbc04c5ae0ec747a</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a156d14121e9965520700bef4be617c14f30354bf23aed86424265d1c66ac754</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">bb54995f9da22132f3150630e4f684a303a21eedffb2a524e87442ccdd5fe772</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4bef09ad049c70884f0a3b6a92f5f943828e0f72061116b5bd2262bf852ba2b2</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">51ba5618ed198820bcc431f755466aeff6efe6ee5815b35f280c777826d5ddb7</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b7f0a654944eb88885fba91c05fbd09e80bdb364dfd3800b2a9ce501e67022e9</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">e36c421300b787be5e3b10d625cb477f775f2b9029d55ceed2c335971dccf828</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">622116d4da95698e2761810fb16506a2e306974178feb826c236872b423ac14a</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">23e27ffe79c2f227f3e9ecb2a77997780d729fa67c2faf06afe98421393d1aae</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a93e0ce384a9b417e826c2e84485e8b49410089e9364a943c596a21cdc34ff8d</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="2.el9" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.25.0.9-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b7cb5fb257a3c56bf239a7dae2c4eebd9479b7c5e5a2c4750fabcc5fef49d7ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8127</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-10-25 17:16:21" />
    <updated date="2024-10-25 17:18:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-21-openjdk.
This update affects Rocky Linux 8, Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The OpenJDK 21 runtime environment.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)

* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)

* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)

* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)

* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2251025" id="2251025" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318524" id="2318524" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318526" id="2318526" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318530" id="2318530" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318534" id="2318534" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8127" id="RLSA-2024:8127" type="self" title="RLSA-2024:8127" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-21-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">74de6e677cbd7e65f5da8376bd2b7ef7caf1e40981109fc2278e5c85efec3dd7</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2366c5183fe3ccd33af4f41818c0597625b10c5435b5809c304548a79071ac19</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4fa5ceb407ea880e1bc3b8ef7131a87cc1e01661d820086a5998454c1bf142e3</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b8d81bc79702c6bb6640d19d7e29b01768af6fbeb425228538e84d8af8afda6e</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f4f6ce2bcafc625cfd0ada783a4b9b13170693ce26350ac56aa4af7de6ef69d9</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6f688ac8cf23c25b48932d4952e9065ad29ba33cc1dc1615adb5f89b20daf3c4</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">daaf06af7b2e24fc52903c5b499b8539394a647fcdb6c8b4c0f86be0694c81d5</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">28da2ba1b3000e88fe221fb74fb7e3bbff613476d39ad44a796e7a4558aa0437</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">97bd1cff6e3d71e39c4a614975db3bf335362fd2b0990e298202614e3efa5ad2</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">94b0a2aa0834f1f82eceae2b2c430ae1eac359a08052859076ec4912327b0c0d</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ce9f8badf1d14d343dd6f83b07ba04d3a7500921c5262094b8e6b8f9acd479b0</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">cf25f1847cd2470af82ed92a0ed756173c62c6720551355e9d1774508faf2def</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6590ae6f1d5078db174a8a21b3162ef355fb64fe9d0a6f333b574af896c5ac67</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.10" release="3.el9" src="java-21-openjdk-21.0.5.0.10-3.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.5.0.10-3.el9.aarch64.rpm</filename>
          <sum type="sha256">572f97a660dcce2f6b100b85b8c0bd7a9edaa6048f9bbfd3431d06a4ed247ad0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8124</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-10-25 17:16:21" />
    <updated date="2024-10-25 17:18:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-17-openjdk.
This update affects Rocky Linux 8, Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)

* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)

* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)

* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)

* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2251025" id="2251025" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318524" id="2318524" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318526" id="2318526" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318530" id="2318530" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318534" id="2318534" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8124" id="RLSA-2024:8124" type="self" title="RLSA-2024:8124" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-17-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a2d8dc5c6c720a408b6019775b3debf9741326d5966d74e64bb82cc46df55735</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">70e5a0a015bcdd0d11231393a7d1bc74f60b0fd4e98f85acf114ff7c4c3824b7</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5c92a81db3f4cc1e5f39074b4d29ad6bc880cd78c225efb13a1b5f70579397f0</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">86a629c1e34c91cd38fdc11f56f0f953f9e3fb1e5425434ced17a626a6619db0</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">9bd02cfda1713687fa3eca2791b30a7001c474f032ee31f91ede55a52e6396e1</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">524e4034cba8739c595cdfb5b089c73bcc21977f28581330f04ae4102583f8bf</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">97e2ba6fe0552ecf4758146c73b030771a4eced73b1c377b7c783e5a6c69c053</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">06b12fac34479cc9c50022dd8aed9927d54a72426d815544f753c9a429d93f48</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c8505dec754374bd38cb7aec247de7eda337cd64939b1735e0ad6f6b7d2d4ba1</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">87ad8ee59bb5adb3456dd5aa0d722918e54134eeda3d92fd0c52bf0b1409d661</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a0c13fff271db88ce0f74491cf35f280fc000f9f08883fd68dd1436c5b92a25b</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4d13cac7745bb067a38836d7aa33f1dd71d59ad019e3aafebb7dacb22930e2f1</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">de9dd56d458b36920d46d059e6e369ad03da249fcbfdaac7af8d6801bbc0dab3</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="3.el9" src="java-17-openjdk-17.0.13.0.11-3.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.13.0.11-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f1a4db4354dfbdd580cfe3148da1e2d3313550db4791a735a848e27c5ea12e5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8117</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-10-25 17:16:21" />
    <updated date="2024-10-25 17:18:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 8, Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)

* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)

* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)

* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)

* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2251025" id="2251025" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318524" id="2318524" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318526" id="2318526" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318530" id="2318530" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318534" id="2318534" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8117" id="RLSA-2024:8117" type="self" title="RLSA-2024:8117" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">01096b93f51ee2a48548992f7c5e4948956f87b6e1cd5aaa2041e4e3c14baa27</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">463c035e420982fd87e184fdc41f9e953c1f982cb44da75a7758e165f73c6e72</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1d7342763eb9a8d925f89fb1f4462a1fde90e70aa619d0c384d01d00f8d00a13</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">854021c6601a2dfc2a0dc2654d1ff78df0160871f657615ef4b17703fc95ed4c</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">598b28eb5b8be5ce9b0b15dd5bdc411c61ae39deee2dd781b1017c6cb7b9c463</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b864306f0dc5804f3ebbba5760c64ef942557d2e44c7eaf043724dc500b02c72</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8aa2958a48b31c500ce9b32222f78ac970fdfd70f27ffdb728ed2bb8462ef57d</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">956ea49f7bb5401869df2fb957efb62b39814cf4bb53129ca5714610d389898b</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">68d00d734fc1fa13eff11e36a9c523382f3b7f83af4bdeaf30c8aedb99d97acf</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="2.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.432.b06-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0d6e0d13e82b7bb68ee2ecc201ca0dd908eb501d68afc9f466066dfb7f798359</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8162</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-25 17:17:17" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)

* kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)

* kernel: Revert &amp;#34;net/mlx5: Block entering switchdev mode with ns inconsistency&amp;#34; (CVE-2023-52658)

* kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989)

* kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385)

* kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)

* kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)

* kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556)

* kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483)

* kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)

* kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959)

* kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)

* kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272)

* kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" id="CVE-2021-47385" type="cve" title="CVE-2021-47385" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" id="CVE-2023-52658" type="cve" title="CVE-2023-52658" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" id="CVE-2024-27403" type="cve" title="CVE-2024-27403" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" id="CVE-2024-35989" type="cve" title="CVE-2024-35989" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" id="CVE-2024-36889" type="cve" title="CVE-2024-36889" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" id="CVE-2024-36978" type="cve" title="CVE-2024-36978" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" id="CVE-2024-38556" type="cve" title="CVE-2024-38556" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39483" id="CVE-2024-39483" type="cve" title="CVE-2024-39483" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" id="CVE-2024-39502" type="cve" title="CVE-2024-39502" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" id="CVE-2024-40959" type="cve" title="CVE-2024-40959" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" id="CVE-2024-42079" type="cve" title="CVE-2024-42079" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42272" id="CVE-2024-42272" type="cve" title="CVE-2024-42272" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" id="CVE-2024-42284" type="cve" title="CVE-2024-42284" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270700" id="2270700" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281127" id="2281127" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281149" id="2281149" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2281847" id="2281847" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282355" id="2282355" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284571" id="2284571" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293078" id="2293078" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293443" id="2293443" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2295921" id="2295921" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297474" id="2297474" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297543" id="2297543" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300517" id="2300517" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8162" id="RLSA-2024:8162" type="self" title="RLSA-2024:8162" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.40.1.el9_4" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.40.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">e30cbdfea2abe3184bca7a9561f2be27875480c1225b1702a3b4aefc328d91ff</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.40.1.el9_4" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.40.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">4ee0e3662a5b9be528f081954d7cb7698eddde053345301457834c18320aaadc</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.40.1.el9_4" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.40.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">2bab63a212c0554ac649c0392171032e9660bf52ebaf8bcdb42660eda11e0937</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:7448</id>
    <title>glibc bug fix and enhancement update</title>
    <issued date="2024-10-25 17:17:21" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Bug Fix(es) and Enhancement(s):

* glibc: Previously used TLS sometimes incorrectly reverted to initial state after dlopen [rhel-9.4.z] (JIRA:Rocky Linux-46763)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:7448" id="RLBA-2024:7448" type="self" title="RLBA-2024:7448" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.4" src="glibc-2.34-100.el9_4.4.src.rpm">
          <filename>glibc-benchtests-2.34-100.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">d7e0a00e27fd7b284df2a267e62c236d8c2247482fe83272e39ec98df25eb125</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.4" src="glibc-2.34-100.el9_4.4.src.rpm">
          <filename>glibc-nss-devel-2.34-100.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">caa9886b1e2ea8660fe6fefedc91eba2268781e597ac1bb63c8a30fe7b5f1dc9</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.4" src="glibc-2.34-100.el9_4.4.src.rpm">
          <filename>glibc-static-2.34-100.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">64fb801b7cad82d4f79884cd1477dd68899753077983c8f62657151538f199ef</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.4" src="glibc-2.34-100.el9_4.4.src.rpm">
          <filename>nss_db-2.34-100.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">ec2c4e8798459ef736ba2edb9255b9f0586e5f1f8e54cfb51e7040e6f38c3297</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="100.el9_4.4" src="glibc-2.34-100.el9_4.4.src.rpm">
          <filename>nss_hesiod-2.34-100.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">fd2f80798a09723cf0d3ca2aa273e04606c85ae4f7aa0dfa77edcb83a7749f4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8446</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-10-25 17:17:21" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2309426" id="2309426" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8446" id="RLSA-2024:8446" type="self" title="RLSA-2024:8446" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.18" release="3.el9_4.6" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">8ff60735d74e56efb1e9605f32cefe689ebb378be6afc863303d0d6db3f7326c</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.18" release="3.el9_4.6" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">47dc0d914f1e0f5b9135f77dfd9605219ab7eff236e5b0df6f4cc44ed295ece9</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.18" release="3.el9_4.6" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">ca1558d01d3fad3d6f887f115a29351e4ae592a4afc1b74dda7f980bb79d104e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:7867</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-25 17:17:22" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)

* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315729" id="2315729" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315730" id="2315730" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315731" id="2315731" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:7867" id="RLSA-2024:7867" type="self" title="RLSA-2024:7867" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.135" release="1.el9_4" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.135-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">18653ae2734e430750c1e95315f2b470fc2ac0fbd35081cdba63b92830c13a85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8037</id>
    <title>Moderate: OpenIPMI security update</title>
    <issued date="2024-10-25 17:17:22" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for OpenIPMI.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.

Security Fix(es):

* openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42934" id="CVE-2024-42934" type="cve" title="CVE-2024-42934" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2308375" id="2308375" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8037" id="RLSA-2024:8037" type="self" title="RLSA-2024:8037" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="OpenIPMI-devel" arch="aarch64" epoch="0" version="2.0.32" release="5.el9_4" src="OpenIPMI-2.0.32-5.el9_4.src.rpm">
          <filename>OpenIPMI-devel-2.0.32-5.el9_4.aarch64.rpm</filename>
          <sum type="sha256">cbd8550faa86af1b166b9fbdae7467355eed7f426cceb4669f706dbe9d360ad7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:7869</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-25 17:17:22" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)

* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315729" id="2315729" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315730" id="2315730" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315731" id="2315731" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2316161" id="2316161" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:7869" id="RLSA-2024:7869" type="self" title="RLSA-2024:7869" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.110" release="1.el9_4" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.110-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">b87355ee4c3f805c1cd62cc131cc171bba1c14aed429dd7139d67940ed785ed4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8374</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-10-25 17:17:22" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2309426" id="2309426" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8374" id="RLSA-2024:8374" type="self" title="RLSA-2024:8374" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.7" release="1.el9_4.6" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">bf44aaa21b29cd1b930cf68d17c357f0693ac08e0fceb15b5b8cc42887def5ab</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.7" release="1.el9_4.6" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">f4c72cbe86f1f9e4ce1315443c7641a4ad319b1c318af121811ca16e23e9e349</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.7" release="1.el9_4.6" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.6.aarch64.rpm</filename>
          <sum type="sha256">99fa99b0ef0273ffb96f00e01e4d115345728b002fd0ec1208e43f0923324674</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8447</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-10-25 17:17:22" />
    <updated date="2024-10-25 17:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2309426" id="2309426" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8447" id="RLSA-2024:8447" type="self" title="RLSA-2024:8447" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.1" release="4.el9_4.4" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-debug-3.12.1-4.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">274d8b22050e1163fc41c3db4697de9577d0caf96dcc3f5ebffb52396b9957fb</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.1" release="4.el9_4.4" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-idle-3.12.1-4.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">212646a747a18c736aea15ef28d1c209d0000faac55e05da137b036177c4f9ae</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.1" release="4.el9_4.4" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-test-3.12.1-4.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">a3b0db26627c3e37634650d7b2597e9508accbb02e899d1dc0b2a03e0726e9d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-08 15:57:49" />
    <updated date="2024-11-08 15:59:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)

* kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)

* kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

* kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)

* kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)

* kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)

* kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)

* kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)

* kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)

* kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)

* kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)

* kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)

* kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)

* kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)

* kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)

* kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)

* kernel: ext4: fix uninitialized ratelimit_state-&amp;gt;lock access in __ext4_fill_super() (CVE-2024-40998)

* kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)

* kernel: xfs: don&amp;#39;t walk off the end of a directory data block (CVE-2024-41013)

* kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)

* kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)

* kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" id="CVE-2021-47383" type="cve" title="CVE-2021-47383" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" type="cve" title="CVE-2024-2201" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26640" id="CVE-2024-26640" type="cve" title="CVE-2024-26640" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26826" id="CVE-2024-26826" type="cve" title="CVE-2024-26826" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" id="CVE-2024-26923" type="cve" title="CVE-2024-26923" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" id="CVE-2024-26935" type="cve" title="CVE-2024-26935" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" id="CVE-2024-26961" type="cve" title="CVE-2024-26961" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36244" id="CVE-2024-36244" type="cve" title="CVE-2024-36244" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" id="CVE-2024-39472" type="cve" title="CVE-2024-39472" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39504" id="CVE-2024-39504" type="cve" title="CVE-2024-39504" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" id="CVE-2024-40904" type="cve" title="CVE-2024-40904" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" id="CVE-2024-40931" type="cve" title="CVE-2024-40931" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" id="CVE-2024-40960" type="cve" title="CVE-2024-40960" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" id="CVE-2024-40972" type="cve" title="CVE-2024-40972" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" id="CVE-2024-40977" type="cve" title="CVE-2024-40977" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" id="CVE-2024-40995" type="cve" title="CVE-2024-40995" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" id="CVE-2024-40998" type="cve" title="CVE-2024-40998" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41005" id="CVE-2024-41005" type="cve" title="CVE-2024-41005" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" id="CVE-2024-41013" type="cve" title="CVE-2024-41013" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" id="CVE-2024-41014" type="cve" title="CVE-2024-41014" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2268118" id="2268118" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270100" id="2270100" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2275604" id="2275604" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2277171" id="2277171" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278176" id="2278176" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278235" id="2278235" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2282357" id="2282357" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293654" id="2293654" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2296067" id="2296067" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297476" id="2297476" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297488" id="2297488" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297515" id="2297515" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297544" id="2297544" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297556" id="2297556" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297561" id="2297561" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297579" id="2297579" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297582" id="2297582" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297589" id="2297589" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300296" id="2300296" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2300297" id="2300297" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2311715" id="2311715" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8617" id="RLSA-2024:8617" type="self" title="RLSA-2024:8617" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="427.42.1.el9_4" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.42.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">251fa1fd9ce3588c5332cfd1d6d0cd25470cee8feec6f686f9abee8efeac2420</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="427.42.1.el9_4" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-427.42.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">cdd24aaf2330f6ac71e42bd6db5f64428288206a5723f123b5ac9ab1388d8715</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="427.42.1.el9_4" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.42.1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">51512c80ed10e7772af4bb6a36ec52868c51377c308cbdb67578e2b4b2a604b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8800</id>
    <title>Important: openexr security update</title>
    <issued date="2024-11-08 15:57:54" />
    <updated date="2024-11-08 15:59:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for openexr.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format.  This package containes the binaries for OpenEXR.

Security Fix(es):

* OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5841" id="CVE-2023-5841" type="cve" title="CVE-2023-5841" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2262397" id="2262397" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8800" id="RLSA-2024:8800" type="self" title="RLSA-2024:8800" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openexr-devel" arch="aarch64" epoch="0" version="3.1.1" release="2.el9_4.1" src="openexr-3.1.1-2.el9_4.1.src.rpm">
          <filename>openexr-devel-3.1.1-2.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">3604df89d4c0025c34cb56208573932eab1f3e71ee2f8f3b555476ae26a17c8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8914</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-11-08 15:57:54" />
    <updated date="2024-11-08 15:59:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libtiff.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" id="CVE-2024-7006" type="cve" title="CVE-2024-7006" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2302996" id="2302996" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8914" id="RLSA-2024:8914" type="self" title="RLSA-2024:8914" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtiff-tools" arch="aarch64" epoch="0" version="4.4.0" release="12.el9_4.1" src="libtiff-4.4.0-12.el9_4.1.src.rpm">
          <filename>libtiff-tools-4.4.0-12.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">3e3daa27c5b074ef5fb976b16c4d38464554514e3dc487a5663dba10875c1183</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:8935</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-11-08 15:57:54" />
    <updated date="2024-11-08 15:59:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for edk2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119" id="CVE-2024-6119" type="cve" title="CVE-2024-6119" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2306158" id="2306158" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:8935" id="RLSA-2024:8935" type="self" title="RLSA-2024:8935" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="edk2-aarch64" arch="noarch" epoch="0" version="20231122" release="6.el9_4.4" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">5716082e60f11bdb5afb834aa9e7a69545546758a50e3f5de497ff21124083c9</sum>
        </package>
        <package name="edk2-ovmf" arch="noarch" epoch="0" version="20231122" release="6.el9_4.4" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">01c5a535b13fcaa13e5d134ca94d118368f1d15fe2f030b6d9b1a1644d773c7b</sum>
        </package>
        <package name="edk2-tools" arch="aarch64" epoch="0" version="20231122" release="6.el9_4.4" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-tools-20231122-6.el9_4.4.aarch64.rpm</filename>
          <sum type="sha256">91b8d2e33cb949288914f712014f0590494081fa0217a23577ec9c77b5175a9c</sum>
        </package>
        <package name="edk2-tools-doc" arch="noarch" epoch="0" version="20231122" release="6.el9_4.4" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-tools-doc-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">4f0b359eaaec46670c1e9cdfe3d831a1027e7d0e14290fe07e49339de2ee9a91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9138</id>
    <title>libappstream-glib bug fix and enhancement update</title>
    <issued date="2024-11-19 16:02:19" />
    <updated date="2025-10-17 21:52:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libappstream-glib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9138" id="RLBA-2024:9138" type="self" title="RLBA-2024:9138" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libappstream-glib-devel" arch="aarch64" epoch="0" version="0.7.18" release="5.el9_4" src="libappstream-glib-0.7.18-5.el9_4.src.rpm">
          <filename>libappstream-glib-devel-0.7.18-5.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f9dda42b8850fce0c91f551de50c9c8c089a0013bb31f9c3a3c01507736ded1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9230</id>
    <title>qt5-qtbase bug fix and enhancement update</title>
    <issued date="2024-11-19 16:02:19" />
    <updated date="2025-10-14 08:16:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qtbase.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9230" id="RLBA-2024:9230" type="self" title="RLBA-2024:9230" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtbase-static" arch="aarch64" epoch="0" version="5.15.9" release="10.el9_4" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-10.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c460cd6c550657adba4bf53f2d4bc5df8bc09c6f6bf946b980b74b9a43407e25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9270</id>
    <title>libblkio bug fix and enhancement update</title>
    <issued date="2024-11-19 16:02:19" />
    <updated date="2025-10-17 21:53:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libblkio.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9270" id="RLBA-2024:9270" type="self" title="RLBA-2024:9270" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libblkio-devel" arch="aarch64" epoch="0" version="1.5.0" release="1.el9_4" src="libblkio-1.5.0-1.el9_4.src.rpm">
          <filename>libblkio-devel-1.5.0-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f168c19ad31b4b9cd27e0b94f293dd5c74f1175e58087231a8b6f710bcd4e281</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9279</id>
    <title>augeas bug fix and enhancement update</title>
    <issued date="2024-11-19 16:02:19" />
    <updated date="2024-11-19 16:04:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for augeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9279" id="RLBA-2024:9279" type="self" title="RLBA-2024:9279" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="augeas-devel" arch="aarch64" epoch="0" version="1.13.0" release="6.el9_4" src="augeas-1.13.0-6.el9_4.src.rpm">
          <filename>augeas-devel-1.13.0-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">79a76f0b6d2209dd8201eece8832f9cafe189bfc03c40c6e5eea3f5c0c62fab2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9284</id>
    <title>postgresql bug fix and enhancement update</title>
    <issued date="2024-11-19 16:02:19" />
    <updated date="2024-11-19 16:04:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9284" id="RLBA-2024:9284" type="self" title="RLBA-2024:9284" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-docs" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-docs-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">079cbe9d62933ddae3fd540a9eee839fa2444d06290df3783b3e338132f9f328</sum>
        </package>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-private-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">86aaeacfda43e814dec4187bfaac179959ef6422bb2205b4aa0f99a8c077964c</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-server-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">219bfde5f12b5798c01998c8d3e44433de8050d0a1e2b6688b388a44f7916581</sum>
        </package>
        <package name="postgresql-static" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-static-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">6fd086bb62ae859e9bfdcdb734c7d39ec542af2bb9bfd785a23ad0deaa28fe0e</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-test-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">c747fa3a74262f871598566ec1e0dc991801aaf336027c4ac1caa4f25adb5370</sum>
        </package>
        <package name="postgresql-upgrade-devel" arch="aarch64" epoch="0" version="13.16" release="1.el9_4" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-upgrade-devel-13.16-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">d75ca5a5062444f6e4c9289162391d21c04b0dbd8572b47bad62a10d8ee6e381</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:17760</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-18 08:06:29" />
    <updated date="2025-10-27 08:07:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)

* kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)

* kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)

* kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53373" id="CVE-2023-53373" type="cve" title="CVE-2023-53373" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38556" id="CVE-2025-38556" type="cve" title="CVE-2025-38556" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38614" id="CVE-2025-38614" type="cve" title="CVE-2025-38614" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39757" id="CVE-2025-39757" type="cve" title="CVE-2025-39757" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2389456" id="2389456" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2389491" id="2389491" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2394615" id="2394615" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2396379" id="2396379" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:17760" id="RLSA-2025:17760" type="self" title="RLSA-2025:17760" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.52.1.el9_6" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.52.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">e4ca5f93e1e6eb92984fe8dd53689a0981b0ced1b03500c17ccb8ba86f524525</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.52.1.el9_6" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.52.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f70d0d1fadf1860dd273e06a88b06ab4bd53b3dd5101cd0d64908dd7b03525a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9548</id>
    <title>Important: openexr security update</title>
    <issued date="2024-11-19 16:02:19" />
    <updated date="2024-11-19 16:04:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for openexr.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format.  This package containes the binaries for OpenEXR.

Security Fix(es):

* OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5841" id="CVE-2023-5841" type="cve" title="CVE-2023-5841" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2262397" id="2262397" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9548" id="RLSA-2024:9548" type="self" title="RLSA-2024:9548" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openexr-devel" arch="aarch64" epoch="0" version="3.1.1" release="2.el9_4.1" src="openexr-3.1.1-2.el9_4.1.src.rpm">
          <filename>openexr-devel-3.1.1-2.el9_4.1.aarch64.rpm</filename>
          <sum type="sha256">3604df89d4c0025c34cb56208573932eab1f3e71ee2f8f3b555476ae26a17c8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:18149</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-18 08:06:29" />
    <updated date="2025-11-01 08:07:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es):

* dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)

* dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)

* dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2403083" id="2403083" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2403085" id="2403085" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2403086" id="2403086" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:18149" id="RLSA-2025:18149" type="self" title="RLSA-2025:18149" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.121" release="1.el9_6" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.121-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">2b2af6865763ef77e09ab6e9de2c82a3856a820ccdf6c1364b63972028a500c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:18151</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-18 08:06:29" />
    <updated date="2025-11-01 08:07:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet9.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es):

* dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)

* dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)

* dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2403083" id="2403083" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2403085" id="2403085" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2403086" id="2403086" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:18151" id="RLSA-2025:18151" type="self" title="RLSA-2025:18151" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" arch="aarch64" epoch="0" version="9.0.111" release="1.el9_6" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.111-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">a491bddc2721f7fa5fc7513103ca6a75d305cb4120485c4ac2c52b81fefd3210</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9313</id>
    <title>libtirpc bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtirpc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9313" id="RLBA-2024:9313" type="self" title="RLBA-2024:9313" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtirpc-devel" arch="aarch64" epoch="0" version="1.3.3" release="9.el9" src="libtirpc-1.3.3-9.el9.src.rpm">
          <filename>libtirpc-devel-1.3.3-9.el9.aarch64.rpm</filename>
          <sum type="sha256">b4363b5bae970e0f2502036bdb72cce15f9d40905577ba929432d8bf4c5efe8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9320</id>
    <title>libpciaccess bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libpciaccess.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9320" id="RLBA-2024:9320" type="self" title="RLBA-2024:9320" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libpciaccess-devel" arch="aarch64" epoch="0" version="0.16" release="7.el9" src="libpciaccess-0.16-7.el9.src.rpm">
          <filename>libpciaccess-devel-0.16-7.el9.aarch64.rpm</filename>
          <sum type="sha256">5c3d83cb9efecbb787dfcbb4b900a137928a2076fafd63e96218a8095ae2e3a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9324</id>
    <title>jitterentropy bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jitterentropy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9324" id="RLBA-2024:9324" type="self" title="RLBA-2024:9324" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jitterentropy-devel" arch="aarch64" epoch="0" version="3.5.0" release="1.el9" src="jitterentropy-3.5.0-1.el9.src.rpm">
          <filename>jitterentropy-devel-3.5.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a520fbe1eeda127717bb90e3ebb8e9aba4ad4b5f5ccb7c7bb0f0aebcf00893b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9332</id>
    <title>librhsm bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librhsm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9332" id="RLBA-2024:9332" type="self" title="RLBA-2024:9332" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librhsm-devel" arch="aarch64" epoch="0" version="0.0.3" release="9.el9" src="librhsm-0.0.3-9.el9.src.rpm">
          <filename>librhsm-devel-0.0.3-9.el9.aarch64.rpm</filename>
          <sum type="sha256">106cd29839cdea8f0555c001c13c3d1b62590306b0ce98bd7f9c6b16582f50c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9330</id>
    <title>libsolv bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsolv.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9330" id="RLBA-2024:9330" type="self" title="RLBA-2024:9330" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsolv-devel" arch="aarch64" epoch="0" version="0.7.24" release="3.el9" src="libsolv-0.7.24-3.el9.src.rpm">
          <filename>libsolv-devel-0.7.24-3.el9.aarch64.rpm</filename>
          <sum type="sha256">83a75ec871c4bc0e9bb596af240af6374fef64f69329563564b536be9f89bcc7</sum>
        </package>
        <package name="libsolv-tools" arch="aarch64" epoch="0" version="0.7.24" release="3.el9" src="libsolv-0.7.24-3.el9.src.rpm">
          <filename>libsolv-tools-0.7.24-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4ba2ab41c26ba64225718eeaf659c61d5bf5634361d5b5524d8f1b46efc81abc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:9335</id>
    <title>gdbm bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gdbm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Beta Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:9335" id="RLEA-2024:9335" type="self" title="RLEA-2024:9335" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gdbm" arch="aarch64" epoch="1" version="1.23" release="1.el9" src="gdbm-1.23-1.el9.src.rpm">
          <filename>gdbm-1.23-1.el9.aarch64.rpm</filename>
          <sum type="sha256">6bc0721ccf06e0ff751c247d533100aad155112dfc75632e2c0c5fef1bf8513e</sum>
        </package>
        <package name="gdbm-devel" arch="aarch64" epoch="1" version="1.23" release="1.el9" src="gdbm-1.23-1.el9.src.rpm">
          <filename>gdbm-devel-1.23-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2eb73f5458ac87462706cc98445d1f72ef58ab195d1df80c6ac18830b5248d7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9339</id>
    <title>pcre bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pcre.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9339" id="RLBA-2024:9339" type="self" title="RLBA-2024:9339" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pcre-static" arch="aarch64" epoch="0" version="8.44" release="4.el9" src="pcre-8.44-4.el9.src.rpm">
          <filename>pcre-static-8.44-4.el9.aarch64.rpm</filename>
          <sum type="sha256">16f7754117924220c3f619f8039fe1c6e983f4befcc827209c99f2c71284d43b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9338</id>
    <title>libdnf bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdnf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9338" id="RLBA-2024:9338" type="self" title="RLBA-2024:9338" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdnf-devel" arch="aarch64" epoch="0" version="0.69.0" release="12.el9" src="libdnf-0.69.0-12.el9.src.rpm">
          <filename>libdnf-devel-0.69.0-12.el9.aarch64.rpm</filename>
          <sum type="sha256">13a0c8246122cffb61b414403fccd8dbc4dfa240a0ff5d34dd202a4b864f023d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9342</id>
    <title>libnvme bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnvme.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Beta Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9342" id="RLBA-2024:9342" type="self" title="RLBA-2024:9342" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnvme-devel" arch="aarch64" epoch="0" version="1.9" release="3.el9" src="libnvme-1.9-3.el9.src.rpm">
          <filename>libnvme-devel-1.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">80f22772c3015c744b3b20d6777c5cc796f83ff78de9fc6e74923cfe7caf5f0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9348</id>
    <title>libtevent bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtevent.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9348" id="RLBA-2024:9348" type="self" title="RLBA-2024:9348" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtevent-devel" arch="aarch64" epoch="0" version="0.16.1" release="1.el9" src="libtevent-0.16.1-1.el9.src.rpm">
          <filename>libtevent-devel-0.16.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">6ea55444620102bf3e2203ad693ac357e9930a0831c30580df67b4355c5c68de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9349</id>
    <title>libtdb bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9349" id="RLBA-2024:9349" type="self" title="RLBA-2024:9349" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtdb-devel" arch="aarch64" epoch="0" version="1.4.10" release="1.el9" src="libtdb-1.4.10-1.el9.src.rpm">
          <filename>libtdb-devel-1.4.10-1.el9.aarch64.rpm</filename>
          <sum type="sha256">6041412cd6c6e1b9775eaf190624a002c9e605699fcb7dc0a9dc191a78622bb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9350</id>
    <title>evolution-mapi, openchange, and samba bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openchange, evolution-mapi, samba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9350" id="RLBA-2024:9350" type="self" title="RLBA-2024:9350" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnetapi-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>libnetapi-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">6bf189cf0f40513629e2a6f633cb1e11e111a8c37c8aff5db9b3f409b681cc75</sum>
        </package>
        <package name="libsmbclient-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>libsmbclient-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">76cc7f38cf2df50c3f2bb3ecdc87b36b6e2105712ac9d14cbb8e84396695ae5b</sum>
        </package>
        <package name="libwbclient-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>libwbclient-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">0e11bbd528342db29c985b34c9e3388d075a0b940787efca5ab9be3a05480ec9</sum>
        </package>
        <package name="python3-samba-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>python3-samba-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">308d17e325a51c19e28192b2ba68624fada3caa2c5742a9aa4a8f6624fbbaea1</sum>
        </package>
        <package name="python3-samba-test" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>python3-samba-test-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">a358386f2eddd1bcc909cfcb45016f804c732657088d35c6e560c5b3bacced6c</sum>
        </package>
        <package name="samba-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">43b590b2b60d3a8e5fa9d057b40394c6c68098795b37fa8c8a19ec36f395f3d5</sum>
        </package>
        <package name="samba-pidl" arch="noarch" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-pidl-4.20.2-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">90ec7188e7bccfa4d4720acf672cad5272d6183fb483b8d86615421ccde688ee</sum>
        </package>
        <package name="samba-test" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-test-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9fb1df7d9b3b7849f7553f131e51a3dacea102080da8699f879d08bb90f524a0</sum>
        </package>
        <package name="samba-test-libs" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-test-libs-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9386acbb143f7877072294ca9b8fe57682c7f4d2ced88d305dabef71f2cdca5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9346</id>
    <title>libtalloc bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtalloc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9346" id="RLBA-2024:9346" type="self" title="RLBA-2024:9346" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtalloc-devel" arch="aarch64" epoch="0" version="2.4.2" release="1.el9" src="libtalloc-2.4.2-1.el9.src.rpm">
          <filename>libtalloc-devel-2.4.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">3a36ac6ee01cc12ad96a2b3903d4d49a221870c16d1beb1a3d3f1e532fadcb70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9353</id>
    <title>cryptsetup bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-14 08:19:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cryptsetup.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9353" id="RLBA-2024:9353" type="self" title="RLBA-2024:9353" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cryptsetup-devel" arch="aarch64" epoch="0" version="2.7.2" release="3.el9_5" src="cryptsetup-2.7.2-3.el9_5.src.rpm">
          <filename>cryptsetup-devel-2.7.2-3.el9_5.aarch64.rpm</filename>
          <sum type="sha256">823f95dc795bb2190e706ca5ee01697507318793d9468d221a6172dbcd7f983e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9351</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9351" id="RLBA-2024:9351" type="self" title="RLBA-2024:9351" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.9.5" release="4.el9_5.4" src="sssd-2.9.5-4.el9_5.4.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.5-4.el9_5.4.aarch64.rpm</filename>
          <sum type="sha256">9026392df35d6f9f91fa37dcb5d42af8be98d3bf221baf797c0d780a44dd0c99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9366</id>
    <title>ima-evm-utils bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ima-evm-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9366" id="RLBA-2024:9366" type="self" title="RLBA-2024:9366" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ima-evm-utils-devel" arch="aarch64" epoch="0" version="1.5" release="2.el9.0.1" src="ima-evm-utils-1.5-2.el9.0.1.src.rpm">
          <filename>ima-evm-utils-devel-1.5-2.el9.0.1.aarch64.rpm</filename>
          <sum type="sha256">4df65e086e192825d5d50609aecf64175f723c0f7a7f37a1ea47ace0ad175e63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9360</id>
    <title>opencryptoki bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opencryptoki.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9360" id="RLBA-2024:9360" type="self" title="RLBA-2024:9360" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opencryptoki-devel" arch="aarch64" epoch="0" version="3.23.0" release="1.el9" src="opencryptoki-3.23.0-1.el9.src.rpm">
          <filename>opencryptoki-devel-3.23.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">35395611c2d80dedb4654a3ca80f7b6509f1f1a06818bc1d3d05529289d95c4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9373</id>
    <title>device-mapper-multipath bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for device-mapper-multipath.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9373" id="RLBA-2024:9373" type="self" title="RLBA-2024:9373" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-multipath-devel" arch="aarch64" epoch="0" version="0.8.7" release="32.el9" src="device-mapper-multipath-0.8.7-32.el9.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-32.el9.aarch64.rpm</filename>
          <sum type="sha256">78c05ad34b1eae8a86ad22623f1b711ddd6832ba13bec73c23b05ca51270b17d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9372</id>
    <title>tpm2-tss bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tpm2-tss.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9372" id="RLBA-2024:9372" type="self" title="RLBA-2024:9372" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tpm2-tss-devel" arch="aarch64" epoch="0" version="3.2.3" release="1.el9" src="tpm2-tss-3.2.3-1.el9.src.rpm">
          <filename>tpm2-tss-devel-3.2.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">7e761af5bc0f1ad06ad61534bd9b1bfdeba8ef52bd0033868a0442dcb48170bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9374</id>
    <title>cifs-utils bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cifs-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9374" id="RLBA-2024:9374" type="self" title="RLBA-2024:9374" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cifs-utils-devel" arch="aarch64" epoch="0" version="7.0" release="5.el9" src="cifs-utils-7.0-5.el9.src.rpm">
          <filename>cifs-utils-devel-7.0-5.el9.aarch64.rpm</filename>
          <sum type="sha256">9a32a43c09fc1eac2566783348eaad9c986ed41b661402dce873b19f32a6dfab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9375</id>
    <title>nghttp2 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nghttp2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9375" id="RLBA-2024:9375" type="self" title="RLBA-2024:9375" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnghttp2-devel" arch="aarch64" epoch="0" version="1.43.0" release="6.el9" src="nghttp2-1.43.0-6.el9.src.rpm">
          <filename>libnghttp2-devel-1.43.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">f5dec082038da43a4f20cdda2a9f5ef577304c4a56fef40e7fd4e994927ea44c</sum>
        </package>
        <package name="nghttp2" arch="aarch64" epoch="0" version="1.43.0" release="6.el9" src="nghttp2-1.43.0-6.el9.src.rpm">
          <filename>nghttp2-1.43.0-6.el9.aarch64.rpm</filename>
          <sum type="sha256">7c15f2ab9bea0033ce6316ff71a383dbd2af356655ed427a60de429fd7c33b0d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9376</id>
    <title>nfs-utils bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nfs-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Beta Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9376" id="RLBA-2024:9376" type="self" title="RLBA-2024:9376" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnfsidmap-devel" arch="aarch64" epoch="1" version="2.5.4" release="27.el9" src="nfs-utils-2.5.4-27.el9.src.rpm">
          <filename>libnfsidmap-devel-2.5.4-27.el9.aarch64.rpm</filename>
          <sum type="sha256">a3211cad74af62fa94f27a57ce18aeca739d72395a9605f604177d37266ce68b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9377</id>
    <title>libdb bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libdb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9377" id="RLBA-2024:9377" type="self" title="RLBA-2024:9377" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libdb-cxx" arch="aarch64" epoch="0" version="5.3.28" release="54.el9" src="libdb-5.3.28-54.el9.src.rpm">
          <filename>libdb-cxx-5.3.28-54.el9.aarch64.rpm</filename>
          <sum type="sha256">51a761b3340dd6c9710e956695525ec68fc7c83e9458d80f85da2308f74d5a32</sum>
        </package>
        <package name="libdb-cxx-devel" arch="aarch64" epoch="0" version="5.3.28" release="54.el9" src="libdb-5.3.28-54.el9.src.rpm">
          <filename>libdb-cxx-devel-5.3.28-54.el9.aarch64.rpm</filename>
          <sum type="sha256">08cc9de3f5c24509580a360ec3d91b325d74482e2c1c3227349dd3a20c65fc07</sum>
        </package>
        <package name="libdb-devel-doc" arch="noarch" epoch="0" version="5.3.28" release="54.el9" src="libdb-5.3.28-54.el9.src.rpm">
          <filename>libdb-devel-doc-5.3.28-54.el9.noarch.rpm</filename>
          <sum type="sha256">ae225eeddfb02562548d289bf5ffac2bb66693e957186b25d3c9166ca81d3d2f</sum>
        </package>
        <package name="libdb-sql" arch="aarch64" epoch="0" version="5.3.28" release="54.el9" src="libdb-5.3.28-54.el9.src.rpm">
          <filename>libdb-sql-5.3.28-54.el9.aarch64.rpm</filename>
          <sum type="sha256">2ee1aecb109abd9cac043de72b0af69b7dfc4b5809ef9ba33a3758c0a50439c0</sum>
        </package>
        <package name="libdb-sql-devel" arch="aarch64" epoch="0" version="5.3.28" release="54.el9" src="libdb-5.3.28-54.el9.src.rpm">
          <filename>libdb-sql-devel-5.3.28-54.el9.aarch64.rpm</filename>
          <sum type="sha256">7033bc6d1a675ca27c10d3c849048df70fe8f112a228f907f288b3737572e8bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9382</id>
    <title>ledmon bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ledmon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Beta Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9382" id="RLBA-2024:9382" type="self" title="RLBA-2024:9382" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ledmon-devel" arch="aarch64" epoch="0" version="1.0.0" release="1.el9" src="ledmon-1.0.0-1.el9.src.rpm">
          <filename>ledmon-devel-1.0.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">69c05e5e91d916b3238746ecd6cba1347b514065a7a06382644ad2654df3e9ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9386</id>
    <title>fuse bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fuse.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9386" id="RLBA-2024:9386" type="self" title="RLBA-2024:9386" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fuse-devel" arch="aarch64" epoch="0" version="2.9.9" release="16.el9" src="fuse-2.9.9-16.el9.src.rpm">
          <filename>fuse-devel-2.9.9-16.el9.aarch64.rpm</filename>
          <sum type="sha256">1114e4b3180369c627ab7a01d85b72a79702a7b97aab451351938fc3cac22069</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9393</id>
    <title>libbpf bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libbpf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9393" id="RLBA-2024:9393" type="self" title="RLBA-2024:9393" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libbpf-devel" arch="aarch64" epoch="2" version="1.4.0" release="1.el9" src="libbpf-1.4.0-1.el9.src.rpm">
          <filename>libbpf-devel-1.4.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4612955cd4344efbf01f2da26eebf4de6690dc2fd4496fbd87b20f0fc47ebc9a</sum>
        </package>
        <package name="libbpf-static" arch="aarch64" epoch="2" version="1.4.0" release="1.el9" src="libbpf-1.4.0-1.el9.src.rpm">
          <filename>libbpf-static-1.4.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9b24b7d90f52b8c55d8b190ee5d773734724f0edc3db16567e461a567eb9e73d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9395</id>
    <title>quota bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for quota.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9395" id="RLBA-2024:9395" type="self" title="RLBA-2024:9395" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="quota-devel" arch="aarch64" epoch="1" version="4.09" release="2.el9" src="quota-4.09-2.el9.src.rpm">
          <filename>quota-devel-4.09-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cc545eedb8608c0b601d9657bfca91b1bcae18e1baae9eadd2c2c4db89e786ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9394</id>
    <title>lvm2 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for lvm2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9394" id="RLBA-2024:9394" type="self" title="RLBA-2024:9394" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="device-mapper-devel" arch="aarch64" epoch="9" version="1.02.198" release="2.el9" src="lvm2-2.03.24-2.el9.src.rpm">
          <filename>device-mapper-devel-1.02.198-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3ba6e7c96ea469ad48073c0c3714df2ba63be57b48fd627e2a5711e0c6602721</sum>
        </package>
        <package name="device-mapper-event-devel" arch="aarch64" epoch="9" version="1.02.198" release="2.el9" src="lvm2-2.03.24-2.el9.src.rpm">
          <filename>device-mapper-event-devel-1.02.198-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1fad8657bd30a29ad3e11b0a7abff5f11d9127d161ed9fda51e09b1a0e9eb846</sum>
        </package>
        <package name="lvm2-devel" arch="aarch64" epoch="9" version="2.03.24" release="2.el9" src="lvm2-2.03.24-2.el9.src.rpm">
          <filename>lvm2-devel-2.03.24-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2e55c1753565776d80ea546c437937a1e9ecb4070f9dba564006770986c4ef98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9403</id>
    <title>pcre2 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pcre2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9403" id="RLBA-2024:9403" type="self" title="RLBA-2024:9403" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pcre2-tools" arch="aarch64" epoch="0" version="10.40" release="6.el9" src="pcre2-10.40-6.el9.src.rpm">
          <filename>pcre2-tools-10.40-6.el9.aarch64.rpm</filename>
          <sum type="sha256">bf46870d966cc1d155e6c04796be6c764e8b1d1c10559c292c4cefbe896d6d5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9391</id>
    <title>oniguruma bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for oniguruma.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9391" id="RLBA-2024:9391" type="self" title="RLBA-2024:9391" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="oniguruma-devel" arch="aarch64" epoch="0" version="6.9.6" release="1.el9.6" src="oniguruma-6.9.6-1.el9.6.src.rpm">
          <filename>oniguruma-devel-6.9.6-1.el9.6.aarch64.rpm</filename>
          <sum type="sha256">36bf4fd415a177022a51f6cd3b6bc2c7ad043fc836dcb5df6bf1b49c9e5265ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9402</id>
    <title>libksba bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libksba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9402" id="RLBA-2024:9402" type="self" title="RLBA-2024:9402" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libksba-devel" arch="aarch64" epoch="0" version="1.5.1" release="7.el9" src="libksba-1.5.1-7.el9.src.rpm">
          <filename>libksba-devel-1.5.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">9a3214308f4683c7b3ba9f4bfc30569a858a6b10adefc4791e8e62501bfc6ad4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9413</id>
    <title>Moderate: bluez security update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for bluez.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Rocky Enterprise Software Foundation), and pcmcia configuration files. 

Security Fix(es):

* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)

* BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)

* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)

* bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)

* bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)

* bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)

* bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)

* bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)

* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)

* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44431" id="CVE-2023-44431" type="cve" title="CVE-2023-44431" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50229" id="CVE-2023-50229" type="cve" title="CVE-2023-50229" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50230" id="CVE-2023-50230" type="cve" title="CVE-2023-50230" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51580" id="CVE-2023-51580" type="cve" title="CVE-2023-51580" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51592" id="CVE-2023-51592" type="cve" title="CVE-2023-51592" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51594" id="CVE-2023-51594" type="cve" title="CVE-2023-51594" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51596" id="CVE-2023-51596" type="cve" title="CVE-2023-51596" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2253391" id="2253391" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278787" id="2278787" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278945" id="2278945" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278955" id="2278955" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278962" id="2278962" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278965" id="2278965" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278967" id="2278967" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278969" id="2278969" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278972" id="2278972" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2278974" id="2278974" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9413" id="RLSA-2024:9413" type="self" title="RLSA-2024:9413" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bluez-libs-devel" arch="aarch64" epoch="0" version="5.72" release="2.el9" src="bluez-5.72-2.el9.src.rpm">
          <filename>bluez-libs-devel-5.72-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d4735c2a3046f38825d8cca84e199af88b3b8a36fe4a6298478b1eb80887c672</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9415</id>
    <title>nftables bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nftables.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9415" id="RLBA-2024:9415" type="self" title="RLBA-2024:9415" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nftables-devel" arch="aarch64" epoch="1" version="1.0.9" release="3.el9" src="nftables-1.0.9-3.el9.src.rpm">
          <filename>nftables-devel-1.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">13f5a5e006383b76dbfb27c44741371ce92c27a82c53546d9a3e9ab34f01cadc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9419</id>
    <title>libtracefs bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtracefs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9419" id="RLBA-2024:9419" type="self" title="RLBA-2024:9419" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtracefs-devel" arch="aarch64" epoch="0" version="1.6.4" release="1.el9" src="libtracefs-1.6.4-1.el9.src.rpm">
          <filename>libtracefs-devel-1.6.4-1.el9.aarch64.rpm</filename>
          <sum type="sha256">548d42fa0ffd6f489c78079341fbe1f08d70722f8f53d6d6b1ebf11b1dcc44e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9426</id>
    <title>libuser bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libuser.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9426" id="RLBA-2024:9426" type="self" title="RLBA-2024:9426" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libuser-devel" arch="aarch64" epoch="0" version="0.63" release="15.el9" src="libuser-0.63-15.el9.src.rpm">
          <filename>libuser-devel-0.63-15.el9.aarch64.rpm</filename>
          <sum type="sha256">a640c87f15f6734bb73c88d5234c587f380c5072646642de0d3f8f36a886c4e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9428</id>
    <title>ndctl bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ndctl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9428" id="RLBA-2024:9428" type="self" title="RLBA-2024:9428" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cxl-devel" arch="aarch64" epoch="0" version="78" release="2.el9" src="ndctl-78-2.el9.src.rpm">
          <filename>cxl-devel-78-2.el9.aarch64.rpm</filename>
          <sum type="sha256">dd65e0b23b721f4ceeeb4b0ea6fbc3761c33936c401da193e1b542b4b3055f41</sum>
        </package>
        <package name="daxctl-devel" arch="aarch64" epoch="0" version="78" release="2.el9" src="ndctl-78-2.el9.src.rpm">
          <filename>daxctl-devel-78-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0d70139561ab5423249c9772aefa25709953af355281c4caf5c9e710eecfbafa</sum>
        </package>
        <package name="ndctl-devel" arch="aarch64" epoch="0" version="78" release="2.el9" src="ndctl-78-2.el9.src.rpm">
          <filename>ndctl-devel-78-2.el9.aarch64.rpm</filename>
          <sum type="sha256">77e5534f63d8a270aa99e27e52360cfdd8f998fe372f9e4244b1bffccd7b00e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9425</id>
    <title>kmod bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for kmod.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9425" id="RLBA-2024:9425" type="self" title="RLBA-2024:9425" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kmod-devel" arch="aarch64" epoch="0" version="28" release="10.el9" src="kmod-28-10.el9.src.rpm">
          <filename>kmod-devel-28-10.el9.aarch64.rpm</filename>
          <sum type="sha256">3b60d29237678ada675ef036045d65bfbe1c3b39f214aa4ef0c8b1b048a129f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9431</id>
    <title>util-linux bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for util-linux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9431" id="RLBA-2024:9431" type="self" title="RLBA-2024:9431" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfdisk-devel" arch="aarch64" epoch="0" version="2.37.4" release="20.el9" src="util-linux-2.37.4-20.el9.src.rpm">
          <filename>libfdisk-devel-2.37.4-20.el9.aarch64.rpm</filename>
          <sum type="sha256">0470c087c15b6983681af9d86f90ae2557ad145db34f8260b3d6a12e517bde89</sum>
        </package>
        <package name="libsmartcols-devel" arch="aarch64" epoch="0" version="2.37.4" release="20.el9" src="util-linux-2.37.4-20.el9.src.rpm">
          <filename>libsmartcols-devel-2.37.4-20.el9.aarch64.rpm</filename>
          <sum type="sha256">b4bd4122f5c4d19766f316707b861dcbf093f4249cf1bdc23e9fdb31871b1987</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9433</id>
    <title>hwdata bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for hwdata.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9433" id="RLBA-2024:9433" type="self" title="RLBA-2024:9433" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="hwdata-devel" arch="noarch" epoch="0" version="0.348" release="9.15.el9" src="hwdata-0.348-9.15.el9.src.rpm">
          <filename>hwdata-devel-0.348-9.15.el9.noarch.rpm</filename>
          <sum type="sha256">1d0724dcf76022c6f7ff1d0242fbb440222579817ebbb160679d9b1e63303a0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9434</id>
    <title>avahi bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:42" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for avahi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9434" id="RLBA-2024:9434" type="self" title="RLBA-2024:9434" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="avahi-compat-howl" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-compat-howl-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">3f3bfbbec5ddd69641e878cd029a126c331c62c12e9abfc7e932272f0c133652</sum>
        </package>
        <package name="avahi-compat-howl-devel" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">2c8574d883ba7d1e03598985d4e197378adb334a2b04cb88f73d642d27ddb764</sum>
        </package>
        <package name="avahi-compat-libdns_sd" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">40e8f8f950c603eec8cf5a8379f964b5b2d80a4bdc121896f7dc6c5e18564013</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">ffbdc76888fdf45193b86dea02252d94a170bd269522cda02a5a8ea2187fc35d</sum>
        </package>
        <package name="avahi-devel" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-devel-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">7d04e4f452c22706e2fde8acb2b3205df3e9ef8f6cd9286a17a343e9f9f8e5a8</sum>
        </package>
        <package name="avahi-glib-devel" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-glib-devel-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">d6b6604a7fadaf9f8ac6af28dc6c2a7a5b877c28ad2008b334296b123c1a1eee</sum>
        </package>
        <package name="avahi-gobject" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-gobject-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">179a364997edc87f60f36ab541c53058dc0a8ab79c48b67299781dfd0cc881b4</sum>
        </package>
        <package name="avahi-gobject-devel" arch="aarch64" epoch="0" version="0.8" release="21.el9" src="avahi-0.8-21.el9.src.rpm">
          <filename>avahi-gobject-devel-0.8-21.el9.aarch64.rpm</filename>
          <sum type="sha256">032d6e6e3f2dd3f35686afa7d8f6ea746c6449aa2ba503e142beb3770763ccca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9471</id>
    <title>samba bug fix update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for samba.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Bug Fix(es):

* smbd-notifyd O(n*n) performance issue ( https://bugzilla.samba.org/show_bug.cgi?id=14430 ) [rhel-9.5.z] (JIRA:Rocky Linux-59912)

* Package certs directories in samba-common for gpupdate [rhel-9.5.z] (JIRA:Rocky Linux-59913)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9471" id="RLBA-2024:9471" type="self" title="RLBA-2024:9471" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnetapi-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>libnetapi-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">6bf189cf0f40513629e2a6f633cb1e11e111a8c37c8aff5db9b3f409b681cc75</sum>
        </package>
        <package name="libsmbclient-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>libsmbclient-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">76cc7f38cf2df50c3f2bb3ecdc87b36b6e2105712ac9d14cbb8e84396695ae5b</sum>
        </package>
        <package name="libwbclient-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>libwbclient-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">0e11bbd528342db29c985b34c9e3388d075a0b940787efca5ab9be3a05480ec9</sum>
        </package>
        <package name="python3-samba-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>python3-samba-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">308d17e325a51c19e28192b2ba68624fada3caa2c5742a9aa4a8f6624fbbaea1</sum>
        </package>
        <package name="python3-samba-test" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>python3-samba-test-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">a358386f2eddd1bcc909cfcb45016f804c732657088d35c6e560c5b3bacced6c</sum>
        </package>
        <package name="samba-devel" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-devel-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">43b590b2b60d3a8e5fa9d057b40394c6c68098795b37fa8c8a19ec36f395f3d5</sum>
        </package>
        <package name="samba-pidl" arch="noarch" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-pidl-4.20.2-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">90ec7188e7bccfa4d4720acf672cad5272d6183fb483b8d86615421ccde688ee</sum>
        </package>
        <package name="samba-test" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-test-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9fb1df7d9b3b7849f7553f131e51a3dacea102080da8699f879d08bb90f524a0</sum>
        </package>
        <package name="samba-test-libs" arch="aarch64" epoch="0" version="4.20.2" release="2.el9_5" src="samba-4.20.2-2.el9_5.src.rpm">
          <filename>samba-test-libs-4.20.2-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9386acbb143f7877072294ca9b8fe57682c7f4d2ced88d305dabef71f2cdca5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:10983</id>
    <title>Moderate: python3.9:3.9.21 security update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

* python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2321440" id="2321440" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2325776" id="2325776" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:10983" id="RLSA-2024:10983" type="self" title="RLSA-2024:10983" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.21" release="1.el9_5" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-debug-3.9.21-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">ed1e182470bad934b48ba22e7a6b55f7c025beb8ebc3ec4b78e3f2661f79acce</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.21" release="1.el9_5" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-idle-3.9.21-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">3f9a24081f6e5f5321c8db90360dfa38e3554a670110c03d2d0a50ceb20f5d6d</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.21" release="1.el9_5" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-test-3.9.21-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">58c02eda9a62bee4c3c02f120450cb77172cc4adc15ada2bf4df4d819f3ee523</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11243</id>
    <title>shadow-utils bug fix update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for shadow-utils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. 

Bug Fix(es):

* Disable shadow-utils/SSSD integration by default (JIRA:Rocky Linux-56352)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11243" id="RLBA-2024:11243" type="self" title="RLBA-2024:11243" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="shadow-utils-subid-devel" arch="aarch64" epoch="2" version="4.9" release="10.el9_5" src="shadow-utils-4.9-10.el9_5.src.rpm">
          <filename>shadow-utils-subid-devel-4.9-10.el9_5.aarch64.rpm</filename>
          <sum type="sha256">7e3801c452d3d12d7092ce103373d06acf661941f99b8ec2728a0c6fc601db86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:0377</id>
    <title>Moderate: Security and bug fixes for NetworkManager</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-03-17 20:18:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for NetworkManager.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

Security and bug fix(es):

* Routes in table different to main are not deleted on reapply [rhel-9.5.z] (JIRA:Rocky Linux-73013)
* Route to VPN server not stored in routing table that is specified by ipv4.route-table [rhel-9.5.z] (JIRA:Rocky Linux-73166)
* VPN connections do not support ipv4.routing-rules settings [rhel-9.5.z] (JIRA:Rocky Linux-73167)
* CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [rhel-9.5.z] (JIRA:Rocky Linux-64726)</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:0377" id="RLSA-2025:0377" type="self" title="RLSA-2025:0377" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="NetworkManager-libnm-devel" arch="aarch64" epoch="1" version="1.48.10" release="5.el9_5" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-libnm-devel-1.48.10-5.el9_5.aarch64.rpm</filename>
          <sum type="sha256">2c754e6f511f7155d7896b839a15779daaf681738a4dc5ee3b75affac36da601</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2025:0927</id>
    <title>libnfnetlink bug fix update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:54:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnfnetlink.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libnfnetlink is a userspace library that provides some low-level nfnetlink handling functions.  It is used as a foundation for other, netfilter subsystem specific libraries such as libnfnetlink_conntrack, libnfnetlink_log and libnfnetlink_queue.

Bug Fix(es):

* Fix for OpenScanHub results (JIRA:Rocky Linux-5798)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2025:0927" id="RLBA-2025:0927" type="self" title="RLBA-2025:0927" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnfnetlink-devel" arch="aarch64" epoch="0" version="1.0.1" release="23.el9_5" src="libnfnetlink-1.0.1-23.el9_5.src.rpm">
          <filename>libnfnetlink-devel-1.0.1-23.el9_5.aarch64.rpm</filename>
          <sum type="sha256">c74a31e4b7c0ca87495edd999906f0fa5af01a0202be75236a186537bfdade8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2025:0930</id>
    <title>ipset bug fix update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipset.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The ipset packages provide the ipset utility and the ipset service to manage IP sets in the Linux kernel. Depending on the type, an IP set may store IP addresses, networks, (TCP/UDP) port numbers, MAC addresses, interface names or combinations of them in a way that ensures high speed when matching an entry against a set.

Bug Fix(es):

* ipset-service - comments refer to wrong path (JIRA:Rocky Linux-5788)

* ipset 7.11 cannot parse service names (JIRA:Rocky Linux-67098)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2025:0930" id="RLBA-2025:0930" type="self" title="RLBA-2025:0930" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ipset-devel" arch="aarch64" epoch="0" version="7.11" release="11.el9_5" src="ipset-7.11-11.el9_5.src.rpm">
          <filename>ipset-devel-7.11-11.el9_5.aarch64.rpm</filename>
          <sum type="sha256">591857b8b9259572f80a14261526da5755d0b99191ad9a1f6585d2ceb391d0fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:1346</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-03-17 20:16:43" />
    <updated date="2025-10-17 21:53:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for gcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

* jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1850004" id="1850004" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:1346" id="RLSA-2025:1346" type="self" title="RLSA-2025:1346" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gcc-plugin-devel" arch="aarch64" epoch="0" version="11.5.0" release="5.el9_5" src="gcc-11.5.0-5.el9_5.src.rpm">
          <filename>gcc-plugin-devel-11.5.0-5.el9_5.aarch64.rpm</filename>
          <sum type="sha256">c2ca97eee1c91b88401ed5ae904e4492d28cdd23f97c508c206e5332f4974087</sum>
        </package>
        <package name="libstdc++-static" arch="aarch64" epoch="0" version="11.5.0" release="5.el9_5" src="gcc-11.5.0-5.el9_5.src.rpm">
          <filename>libstdc++-static-11.5.0-5.el9_5.aarch64.rpm</filename>
          <sum type="sha256">5a9c2b5d5773da91ff08e23251c2a534369d7a3b031423786ff885636b87ce8a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9088</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for edk2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)

* openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)

* openssl: denial of service via null dereference (CVE-2024-0727)

* edk2: Temporary DoS vulnerability (CVE-2024-1298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129" id="CVE-2023-6129" type="cve" title="CVE-2023-6129" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237" id="CVE-2023-6237" type="cve" title="CVE-2023-6237" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" id="CVE-2024-0727" type="cve" title="CVE-2024-0727" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298" id="CVE-2024-1298" type="cve" title="CVE-2024-1298" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2257571" id="2257571" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2258502" id="2258502" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2259944" id="2259944" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2284243" id="2284243" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9088" id="RLSA-2024:9088" type="self" title="RLSA-2024:9088" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="edk2-aarch64" arch="noarch" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-aarch64-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">4028b087e6ae46a5aa42437a1a23327bd87d42b19b7c98774b5211ed6500c120</sum>
        </package>
        <package name="edk2-ovmf" arch="noarch" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-ovmf-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">fc0caf09a366d9af2744b360332c131580cca70d734a06cc6db99a13300aff34</sum>
        </package>
        <package name="edk2-tools" arch="aarch64" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-tools-20240524-6.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">cb522dd68986719995f49146ad1b95361b6f35e137671655d1916040706ab108</sum>
        </package>
        <package name="edk2-tools-doc" arch="noarch" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-tools-doc-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">ec645e377e76dbab6c94506732165121cf304972dad9ee8f5fd5b58c5420bff9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9086</id>
    <title>libnet bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:52:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnet.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9086" id="RLBA-2024:9086" type="self" title="RLBA-2024:9086" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnet-devel" arch="aarch64" epoch="0" version="1.2" release="7.el9" src="libnet-1.2-7.el9.src.rpm">
          <filename>libnet-devel-1.2-7.el9.aarch64.rpm</filename>
          <sum type="sha256">98fe829093f426982c524c01ad66a634b3c3831c60381febbb1dc1cf85669cc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9092</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for freerdp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: Integer Overflow leading to Heap Overflow in freerdp_bitmap_planar_context_reset (CVE-2024-22211)

* freerdp: out-of-bounds read in ncrush_decompress (CVE-2024-32459)

* freerdp: OutOfBound Read in interleaved_decompress (CVE-2024-32460)

* freerdp: Integer overflow &amp; OutOfBound Write in clear_decompress_residual_data (CVE-2024-32039)

* freerdp: integer underflow in nsc_rle_decode (CVE-2024-32040)

* freerdp: OutOfBound Read in zgfx_decompress_segment (CVE-2024-32041)

* freerdp: OutOfBound Read in planar_skip_plane_rle (CVE-2024-32458)

* freerdp: out-of-bounds read (CVE-2024-32662)

* FreeRDP: ExtractRunLengthRegular* out of bound read (CVE-2024-32658)

* freerdp: zgfx_decompress out of memory (CVE-2024-32660)

* freerdp: freerdp_image_copy out of bound read (CVE-2024-32659)

* freerdp: rdp_write_logon_info_v1 NULL access (CVE-2024-32661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22211" id="CVE-2024-22211" type="cve" title="CVE-2024-22211" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32039" id="CVE-2024-32039" type="cve" title="CVE-2024-32039" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32040" id="CVE-2024-32040" type="cve" title="CVE-2024-32040" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32041" id="CVE-2024-32041" type="cve" title="CVE-2024-32041" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32458" id="CVE-2024-32458" type="cve" title="CVE-2024-32458" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32459" id="CVE-2024-32459" type="cve" title="CVE-2024-32459" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32460" id="CVE-2024-32460" type="cve" title="CVE-2024-32460" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32658" id="CVE-2024-32658" type="cve" title="CVE-2024-32658" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32659" id="CVE-2024-32659" type="cve" title="CVE-2024-32659" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32660" id="CVE-2024-32660" type="cve" title="CVE-2024-32660" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32661" id="CVE-2024-32661" type="cve" title="CVE-2024-32661" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32662" id="CVE-2024-32662" type="cve" title="CVE-2024-32662" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2259483" id="2259483" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276721" id="2276721" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276722" id="2276722" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276723" id="2276723" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276724" id="2276724" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276725" id="2276725" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276726" id="2276726" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276804" id="2276804" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276961" id="2276961" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276968" id="2276968" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276970" id="2276970" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276971" id="2276971" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9092" id="RLSA-2024:9092" type="self" title="RLSA-2024:9092" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freerdp-devel" arch="aarch64" epoch="2" version="2.11.7" release="1.el9" src="freerdp-2.11.7-1.el9.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">576d119bc3f3d1f39aba3920a1d2864bdcd5549971b9ad8997735793c861311d</sum>
        </package>
        <package name="libwinpr-devel" arch="aarch64" epoch="2" version="2.11.7" release="1.el9" src="freerdp-2.11.7-1.el9.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9aba2d6f61c524e6fe1b668639f8509cb54903d42f5183ee2b598ea1d11f0d8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9093</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for xorg-x11-server-Xwayland.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)

* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2271997" id="2271997" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2271998" id="2271998" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2272000" id="2272000" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9093" id="RLSA-2024:9093" type="self" title="RLSA-2024:9093" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-Xwayland-devel" arch="aarch64" epoch="0" version="23.2.7" release="1.el9" src="xorg-x11-server-Xwayland-23.2.7-1.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2261d8e1a81b148a825a875c606f45e7c5a9f6304b5505091fe217d345a0303d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9100</id>
    <title>sip bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:52:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sip.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9100" id="RLBA-2024:9100" type="self" title="RLBA-2024:9100" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-sip-devel" arch="aarch64" epoch="0" version="4.19.25" release="2.el9" src="sip-4.19.25-2.el9.src.rpm">
          <filename>python3-sip-devel-4.19.25-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7c32dd02eb59ad55226d27a1d05824f5c108bc231f0988d67c7724609e966729</sum>
        </package>
        <package name="sip" arch="aarch64" epoch="0" version="4.19.25" release="2.el9" src="sip-4.19.25-2.el9.src.rpm">
          <filename>sip-4.19.25-2.el9.aarch64.rpm</filename>
          <sum type="sha256">66912b7d6bc7afab15bb3258e9bb07f9b7bcd43d5ec455129341baac4c5e1520</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9103</id>
    <title>perl-Tk bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:52:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for perl-Tk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9103" id="RLBA-2024:9103" type="self" title="RLBA-2024:9103" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-Tk-devel" arch="aarch64" epoch="0" version="804.035" release="8.el9" src="perl-Tk-804.035-8.el9.src.rpm">
          <filename>perl-Tk-devel-804.035-8.el9.aarch64.rpm</filename>
          <sum type="sha256">835d0980c35e6046d03f096a566aa4b0cee5a848e495d1146d46782cad4d3d17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9118</id>
    <title>anaconda bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for anaconda.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9118" id="RLBA-2024:9118" type="self" title="RLBA-2024:9118" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="anaconda-widgets-devel" arch="aarch64" epoch="0" version="34.25.5.9" release="1.el9.rocky.0.3" src="anaconda-34.25.5.9-1.el9.rocky.0.3.src.rpm">
          <filename>anaconda-widgets-devel-34.25.5.9-1.el9.rocky.0.3.aarch64.rpm</filename>
          <sum type="sha256">20feccb116f16375c7129646eb069d6e64032be44ab1e7ea77f856b1af5502b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9122</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for xorg-x11-server.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)

* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2271997" id="2271997" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2271998" id="2271998" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2272000" id="2272000" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9122" id="RLSA-2024:9122" type="self" title="RLSA-2024:9122" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-devel" arch="aarch64" epoch="0" version="1.20.11" release="26.el9" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-26.el9.aarch64.rpm</filename>
          <sum type="sha256">28039c16132ecbd2a480bef12f6d654aa02f96a2c67a03db3c46d726fd30bca0</sum>
        </package>
        <package name="xorg-x11-server-source" arch="noarch" epoch="0" version="1.20.11" release="26.el9" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-26.el9.noarch.rpm</filename>
          <sum type="sha256">aa02d1e143dd7d2601abb5ed40844bf5637d265e4b30b07ec86e93ba4b90c328</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9128</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libvirt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: Crash of virtinterfaced via virConnectListInterfaces() (CVE-2024-8235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8235" id="CVE-2024-8235" type="cve" title="CVE-2024-8235" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2308680" id="2308680" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9128" id="RLSA-2024:9128" type="self" title="RLSA-2024:9128" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvirt-daemon-plugin-sanlock" arch="aarch64" epoch="0" version="10.5.0" release="7.4.el9_5" src="libvirt-10.5.0-7.4.el9_5.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.5.0-7.4.el9_5.aarch64.rpm</filename>
          <sum type="sha256">a5239d89e1a9f81e57dd4acfd0e6686c17fc81b3ec743549fecf7a09cd792f40</sum>
        </package>
        <package name="libvirt-devel" arch="aarch64" epoch="0" version="10.5.0" release="7.4.el9_5" src="libvirt-10.5.0-7.4.el9_5.src.rpm">
          <filename>libvirt-devel-10.5.0-7.4.el9_5.aarch64.rpm</filename>
          <sum type="sha256">38326b8af7972e621cbdb39b43ac01a1da30451ba95cbe699292f6ae7ef961aa</sum>
        </package>
        <package name="libvirt-docs" arch="aarch64" epoch="0" version="10.5.0" release="7.4.el9_5" src="libvirt-10.5.0-7.4.el9_5.src.rpm">
          <filename>libvirt-docs-10.5.0-7.4.el9_5.aarch64.rpm</filename>
          <sum type="sha256">cbab8ac489866607b656f92517f28560d3b18d1812be28c818cebfbd9b3f164a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9131</id>
    <title>nbdkit bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nbdkit.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9131" id="RLBA-2024:9131" type="self" title="RLBA-2024:9131" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nbdkit-devel" arch="aarch64" epoch="0" version="1.38.3" release="1.el9" src="nbdkit-1.38.3-1.el9.src.rpm">
          <filename>nbdkit-devel-1.38.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b89546cf9f7b56de9367fb24910bac7c5aa2919fb4d6af6a3563ed122c85391b</sum>
        </package>
        <package name="nbdkit-example-plugins" arch="aarch64" epoch="0" version="1.38.3" release="1.el9" src="nbdkit-1.38.3-1.el9.src.rpm">
          <filename>nbdkit-example-plugins-1.38.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">7e0b622a938460b3bbfff27538b50909fba61e10c0b5e627e4a569fcce98c8af</sum>
        </package>
        <package name="nbdkit-srpm-macros" arch="noarch" epoch="0" version="1.38.3" release="1.el9" src="nbdkit-1.38.3-1.el9.src.rpm">
          <filename>nbdkit-srpm-macros-1.38.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">34f01c36104f439d3e231ba7c5b13b5d6480d90d7d9c744b39e7ec65439224b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9141</id>
    <title>libmaxminddb bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:52:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmaxminddb.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9141" id="RLBA-2024:9141" type="self" title="RLBA-2024:9141" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmaxminddb-devel" arch="aarch64" epoch="0" version="1.5.2" release="4.el9" src="libmaxminddb-1.5.2-4.el9.src.rpm">
          <filename>libmaxminddb-devel-1.5.2-4.el9.aarch64.rpm</filename>
          <sum type="sha256">1ab6a92ac95db12af0f0613636a285377374c09aa6663ec5abd5c104229182ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9147</id>
    <title>ipa bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9147" id="RLBA-2024:9147" type="self" title="RLBA-2024:9147" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.12.2" release="1.el9_5.4" src="ipa-4.12.2-1.el9_5.4.src.rpm">
          <filename>python3-ipatests-4.12.2-1.el9_5.4.noarch.rpm</filename>
          <sum type="sha256">10e3a62af67d86e7b31a966c667b26ffd63c771f7923c9f6e858ed4300daa264</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9151</id>
    <title>libnbd bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnbd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9151" id="RLBA-2024:9151" type="self" title="RLBA-2024:9151" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnbd-devel" arch="aarch64" epoch="0" version="1.20.2" release="2.el9" src="libnbd-1.20.2-2.el9.src.rpm">
          <filename>libnbd-devel-1.20.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ce0bd496c622654dd0d0c4c362b836dc458e107b3732951074996d561459a053</sum>
        </package>
        <package name="ocaml-libnbd" arch="aarch64" epoch="0" version="1.20.2" release="2.el9" src="libnbd-1.20.2-2.el9.src.rpm">
          <filename>ocaml-libnbd-1.20.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4f0b014614a6482717ee16859f7bfc6fdcd68eaeb3df769b8e1d8005139a303b</sum>
        </package>
        <package name="ocaml-libnbd-devel" arch="aarch64" epoch="0" version="1.20.2" release="2.el9" src="libnbd-1.20.2-2.el9.src.rpm">
          <filename>ocaml-libnbd-devel-1.20.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9e2f84e5a8895a1bfa7a97f2c4d7b29242f5cddf83aec27f01654a6604de2a4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9155</id>
    <title>WALinuxAgent bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for WALinuxAgent.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9155" id="RLBA-2024:9155" type="self" title="RLBA-2024:9155" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="WALinuxAgent-cvm" arch="noarch" epoch="0" version="2.7.0.6" release="10.el9.rocky.0" src="WALinuxAgent-2.7.0.6-10.el9.rocky.0.src.rpm">
          <filename>WALinuxAgent-cvm-2.7.0.6-10.el9.rocky.0.noarch.rpm</filename>
          <sum type="sha256">4d94f632639ed39dacf498cc1eebb413a674a3bbab9d7847e74e959936b245d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9165</id>
    <title>crash bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for crash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9165" id="RLBA-2024:9165" type="self" title="RLBA-2024:9165" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="crash-devel" arch="aarch64" epoch="0" version="8.0.5" release="1.el9" src="crash-8.0.5-1.el9.src.rpm">
          <filename>crash-devel-8.0.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">48c0a2ca4c2d00b23c8c87590ac589b4446842ff65d26a21692b636420420747</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9166</id>
    <title>udisks2 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-14 08:16:37" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for udisks2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9166" id="RLBA-2024:9166" type="self" title="RLBA-2024:9166" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libudisks2-devel" arch="aarch64" epoch="0" version="2.9.4" release="11.el9" src="udisks2-2.9.4-11.el9.src.rpm">
          <filename>libudisks2-devel-2.9.4-11.el9.aarch64.rpm</filename>
          <sum type="sha256">62f368a0322e8f94fab5f4b537d5be4a39ac95f2c3902e606ac836dcd9f6f8a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9167</id>
    <title>Moderate: poppler security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for poppler.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6239" id="CVE-2024-6239" type="cve" title="CVE-2024-6239" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293594" id="2293594" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9167" id="RLSA-2024:9167" type="self" title="RLSA-2024:9167" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="poppler-cpp-devel" arch="aarch64" epoch="0" version="21.01.0" release="21.el9" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">8d9a83a06ccc63bed4523e72b5ba9ddd09d6b9b792784ee8365831cdc0e8b9df</sum>
        </package>
        <package name="poppler-devel" arch="aarch64" epoch="0" version="21.01.0" release="21.el9" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-devel-21.01.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">9cb51b1d6239fc28b4a5994e9324f217ceae38cdefc1f26c587f411d27896847</sum>
        </package>
        <package name="poppler-glib-devel" arch="aarch64" epoch="0" version="21.01.0" release="21.el9" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">cfe2fbe1572b821177ee8e351baaf2180b0767deabd0aef6116e2717a9bcef39</sum>
        </package>
        <package name="poppler-glib-doc" arch="noarch" epoch="0" version="21.01.0" release="21.el9" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-glib-doc-21.01.0-21.el9.noarch.rpm</filename>
          <sum type="sha256">d459cecff008a42c1d4d1e43b435a32634bed7b9972de4ff73617e3a455ef29f</sum>
        </package>
        <package name="poppler-qt5-devel" arch="aarch64" epoch="0" version="21.01.0" release="21.el9" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-21.el9.aarch64.rpm</filename>
          <sum type="sha256">34b534a9036ac5d608ee84a1afec20438c9c0c668f5e427ff46efb74b7ff2782</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9157</id>
    <title>egl-wayland bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for egl-wayland.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9157" id="RLBA-2024:9157" type="self" title="RLBA-2024:9157" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="egl-wayland-devel" arch="aarch64" epoch="0" version="1.1.9" release="3.el9" src="egl-wayland-1.1.9-3.el9.src.rpm">
          <filename>egl-wayland-devel-1.1.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">6553f2012d1bea6f84df5c131420af5582f77b26c40a5364b6dc8778dccf47d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9179</id>
    <title>glslang, shaderc, spirv-tools, vulkan-headers, vulkan-loader, vulkan-tools, vulkan-utility-libraries, vulkan-validation-layers, and vulkan-volk bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for vulkan-utility-libraries, vulkan-validation-layers, vulkan-headers, vulkan-tools, spirv-tools, vulkan-volk, vulkan-loader, glslang, shaderc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9179" id="RLBA-2024:9179" type="self" title="RLBA-2024:9179" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glslang-devel" arch="aarch64" epoch="0" version="14.2.0" release="3.el9" src="glslang-14.2.0-3.el9.src.rpm">
          <filename>glslang-devel-14.2.0-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7653c6b0a770df340b5577b49cab65e758b5c9ed101fe3c644be988348d3c09b</sum>
        </package>
        <package name="libshaderc-devel" arch="aarch64" epoch="0" version="2024.0" release="1.el9" src="shaderc-2024.0-1.el9.src.rpm">
          <filename>libshaderc-devel-2024.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ad33ad55ec710752a7b04199c96ecb937fb62a706370430309137d46adaaae86</sum>
        </package>
        <package name="spirv-tools-devel" arch="aarch64" epoch="0" version="2024.2" release="1.el9" src="spirv-tools-2024.2-1.el9.src.rpm">
          <filename>spirv-tools-devel-2024.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5c463aa0a19e2e66b18ee7a0aa3e0f937174d4a70b4207b7506e1bca13637a73</sum>
        </package>
        <package name="vulkan-utility-libraries-devel" arch="aarch64" epoch="0" version="1.3.283.0" release="1.el9" src="vulkan-utility-libraries-1.3.283.0-1.el9.src.rpm">
          <filename>vulkan-utility-libraries-devel-1.3.283.0-1.el9.aarch64.rpm</filename>
          <sum type="sha256">d9d3430749100f7df6e8fb4e2b69398ab6413c196fe8cc4ebba01cdce7450185</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9181</id>
    <title>Moderate: jose security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for jose.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in Rocky Linux.

Security Fix(es):

* jose: resource exhaustion (CVE-2024-28176)

* jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50967" id="CVE-2023-50967" type="cve" title="CVE-2023-50967" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2268820" id="2268820" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2270538" id="2270538" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9181" id="RLSA-2024:9181" type="self" title="RLSA-2024:9181" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libjose-devel" arch="aarch64" epoch="0" version="14" release="1.el9" src="jose-14-1.el9.src.rpm">
          <filename>libjose-devel-14-1.el9.aarch64.rpm</filename>
          <sum type="sha256">848aeb985c3bd262839a07306773354523cae4560c3ef2243bbd39aa2a251699</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9184</id>
    <title>Moderate: gtk3 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for gtk3.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.

Security Fix(es):

* gtk3: gtk2: Library injection from CWD (CVE-2024-6655)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" id="CVE-2024-6655" type="cve" title="CVE-2024-6655" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2297098" id="2297098" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9184" id="RLSA-2024:9184" type="self" title="RLSA-2024:9184" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gtk3-devel-docs" arch="aarch64" epoch="0" version="3.24.31" release="5.el9" src="gtk3-3.24.31-5.el9.src.rpm">
          <filename>gtk3-devel-docs-3.24.31-5.el9.aarch64.rpm</filename>
          <sum type="sha256">98f2149dde2eb013f5c5e23d69a24739e8694e4ee9481252409c5e7043359ce0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9190</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

* python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276525" id="2276525" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2292921" id="2292921" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2307370" id="2307370" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9190" id="RLSA-2024:9190" type="self" title="RLSA-2024:9190" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.2" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">6b6ee317b291de132952ff984f95e6d86c37d8654ddf0e2524ff009d76b13387</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.2" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">7b6d69f7466cacb2fbfaf418390cc22f430375f6be417b49f5b11448ea3fb773</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.2" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">64b9f43563422447a4694a121fa440c213c5e2b13b30cb66bf12be34c08780ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9192</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

* python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2276525" id="2276525" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2307370" id="2307370" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9192" id="RLSA-2024:9192" type="self" title="RLSA-2024:9192" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.2" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">00d22f90f1b9fab13d0c6bd39f1bae71d43bd70fcef8d201ce09bf9e1cc22d56</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.2" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">2e6b763214e2616f93a89fc7482935fea278c344c6fae1be9d0510bc997331a7</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.2" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">900f54f4dc0008b4db2bd77199bb3128d30956552574044cbfa7203580d9399e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9202</id>
    <title>mesa bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mesa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9202" id="RLBA-2024:9202" type="self" title="RLBA-2024:9202" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mesa-libOSMesa" arch="aarch64" epoch="0" version="24.1.2" release="3.el9" src="mesa-24.1.2-3.el9.src.rpm">
          <filename>mesa-libOSMesa-24.1.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">bcf2141b84f8ce83fe57288c5e689d76997e19d6dcae71a4ea9abf9fd618c87c</sum>
        </package>
        <package name="mesa-libOSMesa-devel" arch="aarch64" epoch="0" version="24.1.2" release="3.el9" src="mesa-24.1.2-3.el9.src.rpm">
          <filename>mesa-libOSMesa-devel-24.1.2-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5f020f5f3ec13f2a7688e127717062251ee94a64bcc75c32ae244fc51ddecc62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9189</id>
    <title>libtool bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtool.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9189" id="RLBA-2024:9189" type="self" title="RLBA-2024:9189" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtool-ltdl-devel" arch="aarch64" epoch="0" version="2.4.6" release="46.el9" src="libtool-2.4.6-46.el9.src.rpm">
          <filename>libtool-ltdl-devel-2.4.6-46.el9.aarch64.rpm</filename>
          <sum type="sha256">1e01c9a01287f5e0420bfc8ae249d5d63bd1d82d6ea4ea34958c161d3c6814fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9208</id>
    <title>bind9.18 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bind9.18.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Beta Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9208" id="RLBA-2024:9208" type="self" title="RLBA-2024:9208" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind9.18-devel" arch="aarch64" epoch="2" version="9.18.29" release="1.el9_5.1" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-devel-9.18.29-1.el9_5.1.aarch64.rpm</filename>
          <sum type="sha256">4a2724c374f83cf4bc3807bb48536edfc4f2e8bb56572b24b4a4581d22406d95</sum>
        </package>
        <package name="bind9.18-doc" arch="noarch" epoch="2" version="9.18.29" release="1.el9_5.1" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-doc-9.18.29-1.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">a6ef797885ebc1ab67bdda539f25c3cfdcea04cb21181b48a531e803a6f1999f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9217</id>
    <title>corosync bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for corosync.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9217" id="RLBA-2024:9217" type="self" title="RLBA-2024:9217" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="corosynclib" arch="aarch64" epoch="0" version="3.1.8" release="2.el9" src="corosync-3.1.8-2.el9.src.rpm">
          <filename>corosynclib-3.1.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">a278119afbf5dd3323af0a0d4c1a981759e572a2ba2cdf949c812b8c57bc43c7</sum>
        </package>
        <package name="corosync-vqsim" arch="aarch64" epoch="0" version="3.1.8" release="2.el9" src="corosync-3.1.8-2.el9.src.rpm">
          <filename>corosync-vqsim-3.1.8-2.el9.aarch64.rpm</filename>
          <sum type="sha256">ae33a11ab39cb87c0abe5659bac27161c3da38339b39dfd17e18ca875ce2965b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9221</id>
    <title>gdm bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gdm.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9221" id="RLBA-2024:9221" type="self" title="RLBA-2024:9221" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gdm-devel" arch="aarch64" epoch="1" version="40.1" release="27.el9" src="gdm-40.1-27.el9.src.rpm">
          <filename>gdm-devel-40.1-27.el9.aarch64.rpm</filename>
          <sum type="sha256">5702a7afe3da6ef6a164493aca46f808af53ab0fce0230136b82983188ab544e</sum>
        </package>
        <package name="gdm-pam-extensions-devel" arch="aarch64" epoch="1" version="40.1" release="27.el9" src="gdm-40.1-27.el9.src.rpm">
          <filename>gdm-pam-extensions-devel-40.1-27.el9.aarch64.rpm</filename>
          <sum type="sha256">ec6a6d5c34820feacb2c095541ae05d9a2cd64cfb3f62f3705c1b6a1634e6605</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9232</id>
    <title>libslirp bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libslirp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9232" id="RLBA-2024:9232" type="self" title="RLBA-2024:9232" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libslirp-devel" arch="aarch64" epoch="0" version="4.4.0" release="8.el9" src="libslirp-4.4.0-8.el9.src.rpm">
          <filename>libslirp-devel-4.4.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">f07f0a91cd13091c985ec2c60708278e1434400ba3c4f011a2adeb297d7ecda0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9236</id>
    <title>libstoragemgmt bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libstoragemgmt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9236" id="RLBA-2024:9236" type="self" title="RLBA-2024:9236" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libstoragemgmt-devel" arch="aarch64" epoch="0" version="1.10.1" release="1.el9" src="libstoragemgmt-1.10.1-1.el9.src.rpm">
          <filename>libstoragemgmt-devel-1.10.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">dcfac8d85b2d99a863899740dbea022f3945d0d883a15f5ca3f05d248671e361</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9247</id>
    <title>python3.12-setuptools bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-14 08:16:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-setuptools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9247" id="RLBA-2024:9247" type="self" title="RLBA-2024:9247" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-setuptools-wheel" arch="noarch" epoch="0" version="68.2.2" release="4.el9" src="python3.12-setuptools-68.2.2-4.el9.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-4.el9.noarch.rpm</filename>
          <sum type="sha256">76ba63c4ceb20ffa906a97af42ef7db1b98ed0dbaf8cfa9c7c21f7bc195d3632</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9254</id>
    <title>openblas bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openblas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9254" id="RLBA-2024:9254" type="self" title="RLBA-2024:9254" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openblas-devel" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-devel-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">4651125975cfe1e49bbffe1056cf54175b643f65af3ecf3c53d159f805e0b7fa</sum>
        </package>
        <package name="openblas-openmp64_" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-openmp64_-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2e7138e6dc9c438ad5ebb9c8a4e9193b633b1720e3e7d20cdede6d8cad357e67</sum>
        </package>
        <package name="openblas-openmp64" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-openmp64-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8a79b16d2b11348e995fc3615383ce2f2cd5d408cb90217043b8fcbdb0051674</sum>
        </package>
        <package name="openblas-serial64_" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-serial64_-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">06e78ea7991804ce1846227c042f5d438f14f0d0b1fc13f8b3c23f1e84a8b6d7</sum>
        </package>
        <package name="openblas-serial64" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-serial64-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">494aa3239864d30eb9bd3d8604d21feac4a29d26e91c9fc4e5d71e4f4019aeee</sum>
        </package>
        <package name="openblas-static" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-static-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">600cda1243dae4b633eb9f05e2570e05377a7d0cdcd0304f3163b3d4f3e491a1</sum>
        </package>
        <package name="openblas-threads" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-threads-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">cd8359fa03a105fc2e37d897f7f3a3ee6edeb00adf63749535cedafeb80965ce</sum>
        </package>
        <package name="openblas-threads64_" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-threads64_-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">fd8c1406078d50eb76b253ba49dfbd0dc05a6299b1ecd73228021e45eff489b2</sum>
        </package>
        <package name="openblas-threads64" arch="aarch64" epoch="0" version="0.3.26" release="2.el9" src="openblas-0.3.26-2.el9.src.rpm">
          <filename>openblas-threads64-0.3.26-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c8a826bf63690a187c55caaffc33112271e086d29ec0aa1c50633046f7668801</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9252</id>
    <title>gnome-software bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:08" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gnome-software.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9252" id="RLBA-2024:9252" type="self" title="RLBA-2024:9252" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gnome-software-devel" arch="aarch64" epoch="0" version="45.3" release="3.el9" src="gnome-software-45.3-3.el9.src.rpm">
          <filename>gnome-software-devel-45.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">814c165b1e2fff846e3501855d6b13d229eb934ef801ddf7c1238bc44195754e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9266</id>
    <title>cups-filters bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cups-filters.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9266" id="RLBA-2024:9266" type="self" title="RLBA-2024:9266" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cups-filters-devel" arch="aarch64" epoch="0" version="1.28.7" release="18.el9_5" src="cups-filters-1.28.7-18.el9_5.src.rpm">
          <filename>cups-filters-devel-1.28.7-18.el9_5.aarch64.rpm</filename>
          <sum type="sha256">f5add2367fc40ae0d23f58d42e8016b975468fde0172db2782fe727c9fb517ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9271</id>
    <title>ibus bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:09" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ibus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9271" id="RLBA-2024:9271" type="self" title="RLBA-2024:9271" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ibus-devel" arch="aarch64" epoch="0" version="1.5.25" release="6.el9" src="ibus-1.5.25-6.el9.src.rpm">
          <filename>ibus-devel-1.5.25-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6161e536ea8b2cb1146b2c58703793681403d174f6fa532922787af14fad9df1</sum>
        </package>
        <package name="ibus-devel-docs" arch="noarch" epoch="0" version="1.5.25" release="6.el9" src="ibus-1.5.25-6.el9.src.rpm">
          <filename>ibus-devel-docs-1.5.25-6.el9.noarch.rpm</filename>
          <sum type="sha256">89b090af4b76a5c6904867a9804f5bf2daff35de655c3415235c038d3c1f2ca7</sum>
        </package>
        <package name="ibus-gtk4" arch="aarch64" epoch="0" version="1.5.25" release="6.el9" src="ibus-1.5.25-6.el9.src.rpm">
          <filename>ibus-gtk4-1.5.25-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6297a1e81067e761bc2d26dcf33eb2fe2e65ce01f315848ad40186da4de91fc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9274</id>
    <title>xmlsec1 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xmlsec1.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9274" id="RLBA-2024:9274" type="self" title="RLBA-2024:9274" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xmlsec1-devel" arch="aarch64" epoch="0" version="1.2.29" release="13.el9" src="xmlsec1-1.2.29-13.el9.src.rpm">
          <filename>xmlsec1-devel-1.2.29-13.el9.aarch64.rpm</filename>
          <sum type="sha256">3f9594038dde3f1cfaefb3b7229d35f7e95712968850b4c5114e42a30405e23b</sum>
        </package>
        <package name="xmlsec1-gcrypt" arch="aarch64" epoch="0" version="1.2.29" release="13.el9" src="xmlsec1-1.2.29-13.el9.src.rpm">
          <filename>xmlsec1-gcrypt-1.2.29-13.el9.aarch64.rpm</filename>
          <sum type="sha256">edf369ade7b2459ca8a81f5c8a30f5d09f705dfd5a8b9611c062fde1bc57af5e</sum>
        </package>
        <package name="xmlsec1-gnutls" arch="aarch64" epoch="0" version="1.2.29" release="13.el9" src="xmlsec1-1.2.29-13.el9.src.rpm">
          <filename>xmlsec1-gnutls-1.2.29-13.el9.aarch64.rpm</filename>
          <sum type="sha256">72a589da6cba21ba0c5b223d59bc154eb110588ec607123967796d8770e09274</sum>
        </package>
        <package name="xmlsec1-gnutls-devel" arch="aarch64" epoch="0" version="1.2.29" release="13.el9" src="xmlsec1-1.2.29-13.el9.src.rpm">
          <filename>xmlsec1-gnutls-devel-1.2.29-13.el9.aarch64.rpm</filename>
          <sum type="sha256">1c6bcfbb15a3abb4863d5633cc4d954f080b13d691baa1c3ec184977cb01b6fe</sum>
        </package>
        <package name="xmlsec1-openssl-devel" arch="aarch64" epoch="0" version="1.2.29" release="13.el9" src="xmlsec1-1.2.29-13.el9.src.rpm">
          <filename>xmlsec1-openssl-devel-1.2.29-13.el9.aarch64.rpm</filename>
          <sum type="sha256">7a3866c001dfb8388938ec1f1fe3eb8cd0e5dd9efe7b4d02c7d0875704031d9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9222</id>
    <title>libiptcdata bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:04" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libiptcdata.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9222" id="RLBA-2024:9222" type="self" title="RLBA-2024:9222" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libiptcdata-devel" arch="aarch64" epoch="0" version="1.0.5" release="10.el9" src="libiptcdata-1.0.5-10.el9.src.rpm">
          <filename>libiptcdata-devel-1.0.5-10.el9.aarch64.rpm</filename>
          <sum type="sha256">86b1f111afe4afa1cfc0b524117b3538f2ddb38a9ae7f4010d2b61cb7cb1f3b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9227</id>
    <title>qt5-qttools bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qt5-qttools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9227" id="RLBA-2024:9227" type="self" title="RLBA-2024:9227" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qttools-static" arch="aarch64" epoch="0" version="5.15.9" release="5.el9" src="qt5-qttools-5.15.9-5.el9.src.rpm">
          <filename>qt5-qttools-static-5.15.9-5.el9.aarch64.rpm</filename>
          <sum type="sha256">f8746cb3a057c53a5a4fa17c9cb4f082c9ce2f180c37bb7356fc7c7716b7e0d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9239</id>
    <title>wireshark bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:06" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for wireshark.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9239" id="RLBA-2024:9239" type="self" title="RLBA-2024:9239" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="wireshark-devel" arch="aarch64" epoch="1" version="3.4.10" release="7.el9" src="wireshark-3.4.10-7.el9.src.rpm">
          <filename>wireshark-devel-3.4.10-7.el9.aarch64.rpm</filename>
          <sum type="sha256">430e0374a7c814a324f3524ef64994171ff76c44be48ef174c6d44c611b8b09a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9267</id>
    <title>dovecot bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dovecot.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9267" id="RLBA-2024:9267" type="self" title="RLBA-2024:9267" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dovecot-devel" arch="aarch64" epoch="1" version="2.3.16" release="14.el9" src="dovecot-2.3.16-14.el9.src.rpm">
          <filename>dovecot-devel-2.3.16-14.el9.aarch64.rpm</filename>
          <sum type="sha256">6da2763051e12c34424062744e20e4850e4428477eb26e88b99b9f6bb44b48fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:9272</id>
    <title>source-highlight bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:10" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for source-highlight.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:9272" id="RLEA-2024:9272" type="self" title="RLEA-2024:9272" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="source-highlight-devel" arch="aarch64" epoch="0" version="3.1.9" release="12.el9" src="source-highlight-3.1.9-12.el9.src.rpm">
          <filename>source-highlight-devel-3.1.9-12.el9.aarch64.rpm</filename>
          <sum type="sha256">7703a6619084db17ec50e537acf78cc9654a54c0039b7453d95c0c5cd80fca22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9289</id>
    <title>sanlock bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sanlock.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9289" id="RLBA-2024:9289" type="self" title="RLBA-2024:9289" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="sanlock-devel" arch="aarch64" epoch="0" version="3.9.3" release="2.el9" src="sanlock-3.9.3-2.el9.src.rpm">
          <filename>sanlock-devel-3.9.3-2.el9.aarch64.rpm</filename>
          <sum type="sha256">fbdbf1b73bbbb3641f8ebec8b50c05c697a2101dd5ade4d23138065effb5a1d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9294</id>
    <title>varnish bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9294" id="RLBA-2024:9294" type="self" title="RLBA-2024:9294" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="6.el9" src="varnish-6.6.2-6.el9.src.rpm">
          <filename>varnish-devel-6.6.2-6.el9.aarch64.rpm</filename>
          <sum type="sha256">f3da03ad1805bbc797febb462c3a7dd4f467269ca88e149273a5e0420c6bf966</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:9296</id>
    <title>libguestfs bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libguestfs.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:9296" id="RLEA-2024:9296" type="self" title="RLEA-2024:9296" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libguestfs-devel" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>libguestfs-devel-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">d20e96c8258f5b22439c2b0e5b7658997436033e784077db52aa1ae242ad7922</sum>
        </package>
        <package name="libguestfs-gobject" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>libguestfs-gobject-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">098b9898a80dc9497b7af835952acbdd0dd6bc50d1e8bed0a51135fc78260f47</sum>
        </package>
        <package name="libguestfs-gobject-devel" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>libguestfs-gobject-devel-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">47f599512105bb1ac4938a09d674f88d7645eeac5cf304c11652e5301ffd0d83</sum>
        </package>
        <package name="libguestfs-man-pages-ja" arch="noarch" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>libguestfs-man-pages-ja-1.50.2-1.el9.noarch.rpm</filename>
          <sum type="sha256">f79077e53314806cdb868bb9a1739483ad4d82903e5bf467402c7c4bf6cf40f3</sum>
        </package>
        <package name="libguestfs-man-pages-uk" arch="noarch" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>libguestfs-man-pages-uk-1.50.2-1.el9.noarch.rpm</filename>
          <sum type="sha256">eb6620e920d65aaca1fa7e9ef19266567352164ecd4b5b2a8506ea873e5721e9</sum>
        </package>
        <package name="lua-guestfs" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>lua-guestfs-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2ae27432a68dde472bc039fb79b8cc7fb8d917515d9c6b43dfc0c0d8bfbcca9a</sum>
        </package>
        <package name="ocaml-libguestfs" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>ocaml-libguestfs-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">765f2196ecd9eea30cf29a56997951a03d9165ff439e738fe898175d47f8de7d</sum>
        </package>
        <package name="ocaml-libguestfs-devel" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>ocaml-libguestfs-devel-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">51310dad6387b1ffe868ae1389450bd71d2518d8627d41bb615a0343ffeee6d6</sum>
        </package>
        <package name="php-libguestfs" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>php-libguestfs-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">819d241712e10722c2998b5bb421151a1b8022b02e6abe4089e27820c7b76575</sum>
        </package>
        <package name="ruby-libguestfs" arch="aarch64" epoch="1" version="1.50.2" release="1.el9" src="libguestfs-1.50.2-1.el9.src.rpm">
          <filename>ruby-libguestfs-1.50.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a109c1a798fa7bd6a49642bc6e6c18a85fa51a6b96e37e752802e1d80ded5d83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9310</id>
    <title>cjose bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for cjose.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9310" id="RLBA-2024:9310" type="self" title="RLBA-2024:9310" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="cjose-devel" arch="aarch64" epoch="0" version="0.6.1" release="17.el9" src="cjose-0.6.1-17.el9.src.rpm">
          <filename>cjose-devel-0.6.1-17.el9.aarch64.rpm</filename>
          <sum type="sha256">aa3432c9eb3ea6d68a8853f084d5ff5c90d7b6aa8d50e2c83cb7a03db7ff821d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9441</id>
    <title>ocaml-augeas bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ocaml-augeas.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9441" id="RLBA-2024:9441" type="self" title="RLBA-2024:9441" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ocaml-augeas" arch="aarch64" epoch="0" version="0.6" release="23.el9" src="ocaml-augeas-0.6-23.el9.src.rpm">
          <filename>ocaml-augeas-0.6-23.el9.aarch64.rpm</filename>
          <sum type="sha256">78d06b2ae03ad3065c576f81fd48220cdb70eec2834b44a4b18f43c429995a97</sum>
        </package>
        <package name="ocaml-augeas-devel" arch="aarch64" epoch="0" version="0.6" release="23.el9" src="ocaml-augeas-0.6-23.el9.src.rpm">
          <filename>ocaml-augeas-devel-0.6-23.el9.aarch64.rpm</filename>
          <sum type="sha256">018f8d3396adde142a724359e421520f1c12322a184949311691d924048d25dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9440</id>
    <title>libabigail bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libabigail.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9440" id="RLBA-2024:9440" type="self" title="RLBA-2024:9440" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libabigail" arch="aarch64" epoch="0" version="2.5" release="1.el9" src="libabigail-2.5-1.el9.src.rpm">
          <filename>libabigail-2.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">61fa0eeb7aee5be1eac1b716528e3e53bb4b97d3123ae9c578954977a3bef054</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9444</id>
    <title>openjade bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for openjade.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9444" id="RLBA-2024:9444" type="self" title="RLBA-2024:9444" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openjade" arch="aarch64" epoch="0" version="1.3.2" release="72.el9" src="openjade-1.3.2-72.el9.src.rpm">
          <filename>openjade-1.3.2-72.el9.aarch64.rpm</filename>
          <sum type="sha256">72ae24c04748a6e0f761601575d4d7b15e1eb459137ba2a7c9fce1769ed41f65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9443</id>
    <title>perl-libxml-perl bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for perl-libxml-perl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9443" id="RLBA-2024:9443" type="self" title="RLBA-2024:9443" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-libxml-perl" arch="noarch" epoch="0" version="0.08" release="45.el9" src="perl-libxml-perl-0.08-45.el9.src.rpm">
          <filename>perl-libxml-perl-0.08-45.el9.noarch.rpm</filename>
          <sum type="sha256">338da4dff612bd7879eff08635962c4a2f866af0b30cd5e2fa64f28117a5716c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:9448</id>
    <title>OpenJDK 11 is no longer the default system-wide version of Java on Rocky Linux 9</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-11-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The 11.0.25 release is the last release of Rocky Enterprise Software Foundation build of OpenJDK 11 that Rocky Enterprise Software Foundation plans to fully support. The full support for Rocky Enterprise Software Foundation build of OpenJDK 11 ends on 31 October 2024.

As a consequence, Rocky Enterprise Software Foundation build of OpenJDK 17 will be the default system-wide Java version on Rocky Linux 9 after 31 October 2024.

Please refer to the Release Notes for Rocky Enterprise Software Foundation Build of OpenJDK 11.0.25 [1] for more details, including the Extended Life Cycle Support (ELS) phase for Rocky Enterprise Software Foundation build of OpenJDK 11 and for migration instructions.

See [2] for instructions on configuring Rocky Enterprise Software Foundation build of OpenJDK 17 on Rocky Linux and selecting the default Rocky Enterprise Software Foundation build of OpenJDK version to use system wide. 

[1]
https://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/11/html/release_notes_for_red_hat_build_of_openjdk_11.0.25/endfullsupport

[2]
https://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/17/html-single/configuring_red_hat_build_of_openjdk_17_on_index</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:9448" id="RLEA-2024:9448" type="self" title="RLEA-2024:9448" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-11-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">c5d4dbc01b4ab1b14838eb4c206f136875e246d03922be0a3ca4d63b498ceea8</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">150a8fc077464ea2e36e5909dd4876a804b6d1bb087174b941fd9bebdb57f1fd</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">9007689126a368271c6423335e6865c9dbfd6094360d46042bb91aecdef4c18e</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8d2a31686c1e9a4b518a1e8569329d69d50889f62f5754d7876c3221c77ddaa3</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">360cf90d26713515c4a82eff3cb87d5b328c6e61ffcb8797b8246c3450566067</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">5a842c5962fdf812cff2cc93409597f31bcf274b942f0e6a18c96e64a6b34336</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">48a55f9aa0a5c95f0c5e81f77583f62f22f2bc81e45eec5891cf1170e1649c4b</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4fa7fc113302c02f3eb32db3f43617b61dbd34ce3731a4a5421181e454d0b3c9</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">65c6a4dd98f050d07a11029583cbd24ad1e7ea7f0df2997f1248b9a769456341</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b4896d604bb7ef3e14bc3122791a49048fec2dbf1eebf30fed79284bd7364b34</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">df070c3d0fa3e4e5d9ff284e1740a192c6fb9627a6c5ba82425be8b1e824d2e0</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">69d2e117d91b8d750a43d4b8f2db72a189b0b71b6ba9119191fb841348f9c02c</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">2d4c8545a8f73319cc9ec277b76d8141aa67e5fa7fadf7ea64ae5a797455d83b</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="11.0.25.0.9" release="3.el9" src="java-11-openjdk-11.0.25.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.25.0.9-3.el9.aarch64.rpm</filename>
          <sum type="sha256">4a16290e68f988cc412143bcec1277cb4d774f74853e6c35c63fb06e39707896</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:9463</id>
    <title>OpenJDK 17 is now the default system-wide version of Java on Rocky Linux 9</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-17-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The 11.0.25 release is the last release of Rocky Enterprise Software Foundation build of OpenJDK 11 that Rocky Enterprise Software Foundation plans to fully support. The full support for Rocky Enterprise Software Foundation build of OpenJDK 11 ends on 31 October 2024.

As a consequence, Rocky Enterprise Software Foundation build of OpenJDK 17 will be the default system-wide Java version on Rocky Linux 9 after 31 October 2024.

Please refer to the Release Notes for Rocky Enterprise Software Foundation Build of OpenJDK 11.0.25 [1] for more details, including the Extended Life Cycle Support (ELS) phase for Rocky Enterprise Software Foundation build of OpenJDK 11 and for migration instructions.

See [2] for instructions on configuring Rocky Enterprise Software Foundation build of OpenJDK 17 on Rocky Linux and selecting the default Rocky Enterprise Software Foundation build of OpenJDK version to use system wide. 

[1]
https://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/11/html/release_notes_for_red_hat_build_of_openjdk_11.0.25/endfullsupport

[2]
https://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/17/html-single/configuring_red_hat_build_of_openjdk_17_on_index</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:9463" id="RLEA-2024:9463" type="self" title="RLEA-2024:9463" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-17-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">29830fbff9d7b8b49a4428acd578354c9d819f6c484ba9810438ef991a59c4d9</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">ecca24e35c0456db5cdbf64b3718858b45db3a5295ed6fee712fe0017b408716</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">fe83f1b18c308e0b140bb6d9e649696957c6af8dec414d317f78cd10f300f3ad</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">25443466a35e8335939830a1cfa37c6950509fe8e7543ba7ac96cc4eb0b3fff2</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">de5689ac3f08a28b0ccce9624118cc2b797f947eec17c2cdd66ee65e3b8bed68</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">76319eb84225597cd6377f4f0dda6efeb08299329a8aee47f613bf593a320300</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">cc5e7d6b9b685a944b419a24748e859fe2300bd10bcea10a265c8415293202e8</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">2b7803a80886596bbe1273b06e123d71577aa2b966694a56ef97d96b1ab7f432</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">054fff2020daaa6fbdb1dd5fbb8fd3ce064e8f03a3016b17fd7ce1298ddebdd2</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">6169022daa51b28f05cbbfa3034bb66b33fa6e9971054d0d162b5c7b077ebb5e</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">eabd6244d40094b60cf6024fe83673f66f3bbda1cbf8903fe2c5ea6462849040</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">7c707e39ad2f5fe8a0a0db10dd509c20c6ac40b92809012e1017d0bf0738c5ac</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">ebc44174ca2740bd1a145cf05656f69a97a54712ea76a4e57fa00d96c8a393d8</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="17.0.13.0.11" release="4.el9" src="java-17-openjdk-17.0.13.0.11-4.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.13.0.11-4.el9.aarch64.rpm</filename>
          <sum type="sha256">2697f5dbf40aebb0ced57cc838f280209223c46ce85042504ddc85c7ebb1b7c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9462</id>
    <title>freeradius bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-14 08:17:12" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for freeradius.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Bug Fix(es):

* SIGSEGV after upgraded to freeradius.x86_64 3.0.21-40.el9_4 [rhel-9.5.z] (JIRA:Rocky Linux-61557)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9462" id="RLBA-2024:9462" type="self" title="RLBA-2024:9462" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="freeradius-mysql" arch="aarch64" epoch="0" version="3.0.21" release="43.el9_5" src="freeradius-3.0.21-43.el9_5.src.rpm">
          <filename>freeradius-mysql-3.0.21-43.el9_5.aarch64.rpm</filename>
          <sum type="sha256">cc67bfd02c78ca0198a7f39f02dfac4430b984fa04133c5e30385549e84a1fbb</sum>
        </package>
        <package name="freeradius-perl" arch="aarch64" epoch="0" version="3.0.21" release="43.el9_5" src="freeradius-3.0.21-43.el9_5.src.rpm">
          <filename>freeradius-perl-3.0.21-43.el9_5.aarch64.rpm</filename>
          <sum type="sha256">872127a545956002743af3214a43074d1d4369433f00b12c212d0aad956a2af0</sum>
        </package>
        <package name="freeradius-postgresql" arch="aarch64" epoch="0" version="3.0.21" release="43.el9_5" src="freeradius-3.0.21-43.el9_5.src.rpm">
          <filename>freeradius-postgresql-3.0.21-43.el9_5.aarch64.rpm</filename>
          <sum type="sha256">d7c881a7e298b11467b1c815b1f2047d91e3c7d65c483d201f490e6f520a6d1d</sum>
        </package>
        <package name="freeradius-rest" arch="aarch64" epoch="0" version="3.0.21" release="43.el9_5" src="freeradius-3.0.21-43.el9_5.src.rpm">
          <filename>freeradius-rest-3.0.21-43.el9_5.aarch64.rpm</filename>
          <sum type="sha256">f9cd0325309017a1419a25b3886e02f4db29288f92c20e8c9c01c6c4a20c3395</sum>
        </package>
        <package name="freeradius-sqlite" arch="aarch64" epoch="0" version="3.0.21" release="43.el9_5" src="freeradius-3.0.21-43.el9_5.src.rpm">
          <filename>freeradius-sqlite-3.0.21-43.el9_5.aarch64.rpm</filename>
          <sum type="sha256">352f3889fec560a68126a0728e504f0862b2a77b5084b15a9b074ff209d4f3f1</sum>
        </package>
        <package name="freeradius-unixODBC" arch="aarch64" epoch="0" version="3.0.21" release="43.el9_5" src="freeradius-3.0.21-43.el9_5.src.rpm">
          <filename>freeradius-unixODBC-3.0.21-43.el9_5.aarch64.rpm</filename>
          <sum type="sha256">77a428d6ed842f11a2314f3a84c817f9951ef3e3ead2b90ed5a88c2902380c07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9464</id>
    <title>java-1.8.0-openjdk bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-1.8.0-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Rocky Linux 9.5 GA release was prepared with the most recent release of OpenJDK 8 at that time, which was OpenJDK 8u422, released on 16 July 2024. OpenJDK 8u432 was subsequently released on 15 October 2024, with existing Rocky Linux 9 releases (9.0, 9.2, and 9.4) being updated at that time. This update now brings OpenJDK 8u432 to Rocky Linux 9.5.

For more information about the changes in OpenJDK 8u432, see the release notes listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9464" id="RLBA-2024:9464" type="self" title="RLBA-2024:9464" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">1e8def21322e67a47590fe5d0a79a122dc13b353aa8a0b8c538ca7a002c254a9</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">a44a5eef190703074e1791b05df7720a1df1722a49f612a7f496538424eeb3c3</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8cb32cb9d4cbea1708c8035e9d5dca1593732f5b363ec293d0822b94009b1ec5</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">066bd192fec647b4ff4aa85b0c69318837b9b023da1bc200e40f546eec9fb7bc</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">73838cb2f4fd5215187389dac47eb333f46ef7e0d94368055e8c2196e69cef91</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">f6d853b48ce9b566bd399e68d66745b08b40187955837b0827dc2dbcdf323d67</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">134acebc6200cfa5eea8a3d54678061e17bc937ee31ccf1d59940b45b76e04ac</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">492f2333722b62ba1788005d12bb0870f4d9c5efd002b0770f1f2cbedae23b99</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">30f5ebf80e0209be619deae4ca80825b05865a992f9062121e3f3a0994395144</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="1.8.0.432.b06" release="3.el9" src="java-1.8.0-openjdk-1.8.0.432.b06-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.432.b06-3.el9.aarch64.rpm</filename>
          <sum type="sha256">b3ee074957fbc89a2f8c78eacfe067dbddfbf3d1d6a2362470922631319bd753</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9465</id>
    <title>java-21-openjdk bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for java-21-openjdk.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Rocky Linux 9.5 GA release was prepared with the most recent release of OpenJDK 21 at that time, which was OpenJDK 21.0.4, released on 16 July 2024. OpenJDK 21.0.5 was subsequently released on 15 October 2024, with existing Rocky Linux 9 releases (9.0, 9.2, and 9.4) being updated at that time. This update now brings OpenJDK 21.0.5 to Rocky Linux 9.5.

For more information about the changes in OpenJDK 21.0.5, see the release notes listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9465" id="RLBA-2024:9465" type="self" title="RLBA-2024:9465" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-21-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0f647703bb595ecd46940bce5b0472424ecd0d1f8958316e3b54d812653aa0c4</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">f4dcb8dfae488c3292090e315d1dea4d93fe0d6a3e068cfb5998cc8ea793251e</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">b1eb967b211dbe2c592a6fc420723af8b318076db48b2b0b56eb3b2312a6b327</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">64828894e8072b27c0230f1b0eac9b609a018e500971e5367c096436a7f46c09</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9a4d4a993779349af2da15ddcd3fad65b6ff7d97254b2fdcfa588fd3855d9d5a</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d2b7fb1853a6b9d5b00cb1e1fa7dbaf49849c4159f9e9e621f77add997acde4f</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5fc86358f3e0a88779c9f3a6977cbd05705bca4a9f22aed0c2dd473bdec68921</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">50867eb23e968b39dfec611801dd8d175e09c631cadbd4b68a61be3086d93cdc</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">081c7bec4e0f4f2c2ee29e76538832c3ad2fa24defbfaedb1d3ec1337abfcd2f</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7119abb4753ed15cf85cf7a7132f3dd2f8ca85b05390ea0782dcdfb2f81a995d</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">c87d6163796f96fd328e1ddb4a947c12a65563a97a79da597c2473ec38dac1a4</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">40799c8f6820042d252a62ac5ea2414fc586abf5edde0aa00604552edd8a8981</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">38f15e61599d790e5036ab5cffb566361f22fccb83859ec5eef7394abdafa74d</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="21.0.5.0.11" release="2.el9" src="java-21-openjdk-21.0.5.0.11-2.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.5.0.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9ecb71777c87ccf8bb3c5b313a2a1325f89b9a9b9f49dad670db149f0447d980</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9683</id>
    <title>evolution bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for evolution.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

Bug Fix(es):

* WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice [rhel-9.5.z] (JIRA:Rocky Linux-62680)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9683" id="RLBA-2024:9683" type="self" title="RLBA-2024:9683" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="evolution-devel" arch="aarch64" epoch="0" version="3.40.4" release="10.el9_5.1" src="evolution-3.40.4-10.el9_5.1.src.rpm">
          <filename>evolution-devel-3.40.4-10.el9_5.1.aarch64.rpm</filename>
          <sum type="sha256">93b5c818456a746fcd12cebd14b93000a55a60c93aeb5882f7367f8d19737151</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:10858</id>
    <title>Important: ruby security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for ruby.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* rexml: REXML ReDoS vulnerability (CVE-2024-49761)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49761" id="CVE-2024-49761" type="cve" title="CVE-2024-49761" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2322153" id="2322153" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:10858" id="RLSA-2024:10858" type="self" title="RLSA-2024:10858" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ruby-doc" arch="noarch" epoch="0" version="3.0.7" release="163.el9_5" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>ruby-doc-3.0.7-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">9b24423a8768ece429ac9752ae2383617a64271157c87d7c87c3d4735a9d7755</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:10978</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

* python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12254" id="CVE-2024-12254" type="cve" title="CVE-2024-12254" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2321440" id="2321440" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2330804" id="2330804" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:10978" id="RLSA-2024:10978" type="self" title="RLSA-2024:10978" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.2" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">6b6ee317b291de132952ff984f95e6d86c37d8654ddf0e2524ff009d76b13387</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.2" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">7b6d69f7466cacb2fbfaf418390cc22f430375f6be417b49f5b11448ea3fb773</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.2" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">64b9f43563422447a4694a121fa440c213c5e2b13b30cb66bf12be34c08780ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:11111</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2321440" id="2321440" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:11111" id="RLSA-2024:11111" type="self" title="RLSA-2024:11111" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.2" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">00d22f90f1b9fab13d0c6bd39f1bae71d43bd70fcef8d201ce09bf9e1cc22d56</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.2" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">2e6b763214e2616f93a89fc7482935fea278c344c6fae1be9d0510bc997331a7</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.2" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">900f54f4dc0008b4db2bd77199bb3128d30956552574044cbfa7203580d9399e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:11219</id>
    <title>Moderate: edk2:20240524 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for edk2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38796" id="CVE-2024-38796" type="cve" title="CVE-2024-38796" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315390" id="2315390" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:11219" id="RLSA-2024:11219" type="self" title="RLSA-2024:11219" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="edk2-aarch64" arch="noarch" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-aarch64-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">4028b087e6ae46a5aa42437a1a23327bd87d42b19b7c98774b5211ed6500c120</sum>
        </package>
        <package name="edk2-ovmf" arch="noarch" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-ovmf-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">fc0caf09a366d9af2744b360332c131580cca70d734a06cc6db99a13300aff34</sum>
        </package>
        <package name="edk2-tools" arch="aarch64" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-tools-20240524-6.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">cb522dd68986719995f49146ad1b95361b6f35e137671655d1916040706ab108</sum>
        </package>
        <package name="edk2-tools-doc" arch="noarch" epoch="0" version="20240524" release="6.el9_5.3" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-tools-doc-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">ec645e377e76dbab6c94506732165121cf304972dad9ee8f5fd5b58c5420bff9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11223</id>
    <title>javapackages-tools bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for javapackages-tools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The javapackages-tools packages provide macros and scripts to support Java packaging.

Bug Fix(es):

* javapackages-tools: Make OpenJDK 17 default JRE/JDK [rhel-9.5.z] (JIRA:Rocky Linux-62403)

* javapackages-tools: Include java-21-headless in generated auto-requires [rhel-9.5.z] (JIRA:Rocky Linux-62409)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11223" id="RLBA-2024:11223" type="self" title="RLBA-2024:11223" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="javapackages-generators" arch="noarch" epoch="0" version="6.0.0" release="7.el9_5" src="javapackages-tools-6.0.0-7.el9_5.src.rpm">
          <filename>javapackages-generators-6.0.0-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">5afaca645f3ae6bc603139715ebb04300926e69f714d36c428f1cf33e64030eb</sum>
        </package>
        <package name="javapackages-local" arch="noarch" epoch="0" version="6.0.0" release="7.el9_5" src="javapackages-tools-6.0.0-7.el9_5.src.rpm">
          <filename>javapackages-local-6.0.0-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">149da2e9b3156051e9073e55f33362a47bc8ec8f07313e61264260997363464d</sum>
        </package>
        <package name="maven-local" arch="noarch" epoch="0" version="6.0.0" release="7.el9_5" src="javapackages-tools-6.0.0-7.el9_5.src.rpm">
          <filename>maven-local-6.0.0-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">bb69f6e0f3eaae62a8bd3cd54403bdf3c2267d36852fc94e5c4a046624a944e3</sum>
        </package>
        <package name="python3-javapackages" arch="noarch" epoch="0" version="6.0.0" release="7.el9_5" src="javapackages-tools-6.0.0-7.el9_5.src.rpm">
          <filename>python3-javapackages-6.0.0-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">8e443104c3cab7f7b9e90d2b6e417acbb7e390ce3784c7e8139b9f1457b4d001</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11228</id>
    <title>bcc bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bcc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.

Bug Fix(es):

* The bcc-tools 'bio*' does not run as expected on Rocky Linux 9.4 [rhel-9.5.z] (JIRA:Rocky Linux-65192)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11228" id="RLBA-2024:11228" type="self" title="RLBA-2024:11228" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bcc-devel" arch="aarch64" epoch="0" version="0.30.0" release="7.el9_5" src="bcc-0.30.0-7.el9_5.src.rpm">
          <filename>bcc-devel-0.30.0-7.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9279714030b6b65b76e63867c05ec9a45b7a66a123ace3595987890374a29af9</sum>
        </package>
        <package name="bcc-doc" arch="noarch" epoch="0" version="0.30.0" release="7.el9_5" src="bcc-0.30.0-7.el9_5.src.rpm">
          <filename>bcc-doc-0.30.0-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">edc236c3c2416b0de7899a9dc9f213e8fd962fa01892fb9223f6b6f7f6c29d60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:11232</id>
    <title>Moderate: unbound:1.16.2 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for unbound.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8508" id="CVE-2024-8508" type="cve" title="CVE-2024-8508" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2316321" id="2316321" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:11232" id="RLSA-2024:11232" type="self" title="RLSA-2024:11232" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unbound-devel" arch="aarch64" epoch="0" version="1.16.2" release="8.el9_5.1" src="unbound-1.16.2-8.el9_5.1.src.rpm">
          <filename>unbound-devel-1.16.2-8.el9_5.1.aarch64.rpm</filename>
          <sum type="sha256">3d58446169ad79998fefa23369d5e7d4d720718fe6ed856af7e11fb51f1b0f7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9291</id>
    <title>nginx bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:54" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nginx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9291" id="RLBA-2024:9291" type="self" title="RLBA-2024:9291" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nginx-mod-devel" arch="aarch64" epoch="2" version="1.20.1" release="20.el9.0.1" src="nginx-1.20.1-20.el9.0.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-20.el9.0.1.aarch64.rpm</filename>
          <sum type="sha256">f9ba9f0c5d0e1b49cfb1957b13bd7a4e6df2588a275bfab9594e367bea06139c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9300</id>
    <title>libtiff bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtiff.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9300" id="RLBA-2024:9300" type="self" title="RLBA-2024:9300" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtiff-tools" arch="aarch64" epoch="0" version="4.4.0" release="13.el9" src="libtiff-4.4.0-13.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-13.el9.aarch64.rpm</filename>
          <sum type="sha256">1241b9214e657c4dfe8636302e5fc2ba5c1ed8ec46975a87884f762978141a56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9305</id>
    <title>OpenIPMI bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for OpenIPMI.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9305" id="RLBA-2024:9305" type="self" title="RLBA-2024:9305" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="OpenIPMI-devel" arch="aarch64" epoch="0" version="2.0.36" release="1.el9" src="OpenIPMI-2.0.36-1.el9.src.rpm">
          <filename>OpenIPMI-devel-2.0.36-1.el9.aarch64.rpm</filename>
          <sum type="sha256">0a7a8b6b67632cb7f256e4488b4e5d050f970f119f48bc19e2b3caeb8365ca59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9439</id>
    <title>Moderate: fontforge security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for fontforge.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. 

Security Fix(es):

* fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)

* fontforge: command injection via crafted filenames (CVE-2024-25081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25081" id="CVE-2024-25081" type="cve" title="CVE-2024-25081" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25082" id="CVE-2024-25082" type="cve" title="CVE-2024-25082" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2266180" id="2266180" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2266181" id="2266181" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9439" id="RLSA-2024:9439" type="self" title="RLSA-2024:9439" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fontforge" arch="aarch64" epoch="0" version="20201107" release="6.el9" src="fontforge-20201107-6.el9.src.rpm">
          <filename>fontforge-20201107-6.el9.aarch64.rpm</filename>
          <sum type="sha256">6bc034083ff3ba48a011bc9462493f2400ae603f2f8ab851c93b95b4aa89aeef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9466</id>
    <title>mutter bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for mutter, gnome-shell.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Mutter is a compositing window manager that displays and manages desktop through OpenGL. It combines the window-management logic inherited from the Metacity window manager with a display engine that uses the Clutter toolkit. 

Bug Fix(es):

* gnome-shell crash on wl_copy [rhel-9.5.z] (JIRA:Rocky Linux-62993)

* gnome-shell crash on ctrl-alt-shift -left/right shortcuts [rhel-9.5.z] (JIRA:Rocky Linux-62997)

* Some application popups switch workspaces and steal focus on Xorg sessions [rhel-9.5.z] (JIRA:Rocky Linux-63000)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9466" id="RLBA-2024:9466" type="self" title="RLBA-2024:9466" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mutter-devel" arch="aarch64" epoch="0" version="40.9" release="22.el9_5" src="mutter-40.9-22.el9_5.src.rpm">
          <filename>mutter-devel-40.9-22.el9_5.aarch64.rpm</filename>
          <sum type="sha256">a3ceeaef7944eb89980ae557baa14cec1b5f2ecfcb39ee16e340acf60071bc0d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9567</id>
    <title>.NET 6.0 bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for dotnet6.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation.

Bug Fix(es) and Enhancement(s):

* Update .NET 6.0 to SDK 6.0.136 and Runtime 6.0.36 [rhel-9.5.z] (Rocky Linux-65365)Bug Fix(es) and Enhancement(s):

* Update .NET 6.0 to SDK 6.0.136 and Runtime 6.0.36 [rhel-9.5.z] (JIRA:Rocky Linux-65365)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9567" id="RLBA-2024:9567" type="self" title="RLBA-2024:9567" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" arch="aarch64" epoch="0" version="6.0.136" release="1.el9_5" src="dotnet6.0-6.0.136-1.el9_5.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.136-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9a32ddf017b13d313fa82423b9d150daf349bf27682fd7209047a41bedee11c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:9827</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-14 08:17:13" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libvpx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5197" id="CVE-2024-5197" type="cve" title="CVE-2024-5197" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2291198" id="2291198" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:9827" id="RLSA-2024:9827" type="self" title="RLSA-2024:9827" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvpx-devel" arch="aarch64" epoch="0" version="1.9.0" release="8.el9_5" src="libvpx-1.9.0-8.el9_5.src.rpm">
          <filename>libvpx-devel-1.9.0-8.el9_5.aarch64.rpm</filename>
          <sum type="sha256">8340a4034aab7923ce041c90b7678dc45d5de5e5cabca9a0adb3ac69d92cfbd7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11218</id>
    <title>nmstate bug fix and enhancement update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nmstate.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner and aimed to satisfy enterprise needs to manage host networking through a northbound declarative API and multi provider support on the southbound.

Bug Fix(es) and Enhancement(s):

* Disabling ipv6 on ovs-interface is failing due to verification error  [rhel-9.5.z] (JIRA:Rocky Linux-60242)

* nmstatectl gc mode does not support blackhole routes [rhel-9.5.z] (JIRA:Rocky Linux-58666)

* nncp route-rules applied breaks br-ex connectivity [rhel-9.5.z] (JIRA:Rocky Linux-60261)

* nmstate: Connectivity issue with a configuration has `ipv4 dhcp: true` and `ipv6 enabled: false`. [rhel-9.5.z] (JIRA:Rocky Linux-61899)

* Pod interface removed [rhel-9.5.z] (JIRA:Rocky Linux-65031)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11218" id="RLBA-2024:11218" type="self" title="RLBA-2024:11218" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nmstate-devel" arch="aarch64" epoch="0" version="2.2.39" release="1.el9_5" src="nmstate-2.2.39-1.el9_5.src.rpm">
          <filename>nmstate-devel-2.2.39-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">cbda805ea966b54e3521a1ba719bb7f0137915c05067faf58e057dc10d21a5a7</sum>
        </package>
        <package name="nmstate-static" arch="aarch64" epoch="0" version="2.2.39" release="1.el9_5" src="nmstate-2.2.39-1.el9_5.src.rpm">
          <filename>nmstate-static-2.2.39-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">5d4e1700ff07fb2b21ba03e9401c95fcfafb3fa769d9001371face2baf073484</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11224</id>
    <title>ostree bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ostree.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OSTree is a tool for managing bootable, immutable, versioned file system trees.

Bug Fix(es):

* [9.5] ostree Backport https://github.com/ostreedev/ostree/pull/3300 (JIRA:Rocky Linux-62772)

* [rhel-9.5.z] Rebase ostree to 2024.9 (JIRA:Rocky Linux-68351)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11224" id="RLBA-2024:11224" type="self" title="RLBA-2024:11224" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ostree-devel" arch="aarch64" epoch="0" version="2024.9" release="1.el9_5" src="ostree-2024.9-1.el9_5.src.rpm">
          <filename>ostree-devel-2024.9-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">beb9d6a5c765ea3851330a8fcee4a946c922bf6de6821f7ef545899baecef6fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:11237</id>
    <title>Moderate: libsndfile:1.0.31 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libsndfile.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50612" id="CVE-2024-50612" type="cve" title="CVE-2024-50612" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2322057" id="2322057" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:11237" id="RLSA-2024:11237" type="self" title="RLSA-2024:11237" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsndfile-devel" arch="aarch64" epoch="0" version="1.0.31" release="8.el9_5.2" src="libsndfile-1.0.31-8.el9_5.2.src.rpm">
          <filename>libsndfile-devel-1.0.31-8.el9_5.2.aarch64.rpm</filename>
          <sum type="sha256">64f77f6eb0d250bb3c7c9e58208c35ef637bdfd3ffa18aef56e5fc4c2ce29756</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11241</id>
    <title>seabios bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:18:59" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for seabios.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The seabios packages contain an open-source legacy BIOS implementation that can be used as a coreboot payload. They implement the standard BIOS calling interfaces that a typical x86 proprietary BIOS implements.

Bug Fix(es):

* amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-9.5.z] (JIRA:Rocky Linux-68955)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11241" id="RLBA-2024:11241" type="self" title="RLBA-2024:11241" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="seabios-bin" arch="noarch" epoch="0" version="1.16.3" release="2.el9_5.1" src="seabios-1.16.3-2.el9_5.1.src.rpm">
          <filename>seabios-bin-1.16.3-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">8928d209011e99e7f23d8c3a0053bc3e0a6c6c6e9a68251e2c7ef0125f288c3e</sum>
        </package>
        <package name="seavgabios-bin" arch="noarch" epoch="0" version="1.16.3" release="2.el9_5.1" src="seabios-1.16.3-2.el9_5.1.src.rpm">
          <filename>seavgabios-bin-1.16.3-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">e34541684cb8c726bc494c91ef3fc57c134d841f496834823fcf68c7b696b125</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:0312</id>
    <title>Important: raptor2 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for raptor2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. 

Security Fix(es):

* raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57823" id="CVE-2024-57823" type="cve" title="CVE-2024-57823" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2336921" id="2336921" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:0312" id="RLSA-2025:0312" type="self" title="RLSA-2025:0312" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="raptor2-devel" arch="aarch64" epoch="0" version="2.0.15" release="32.el9_5" src="raptor2-2.0.15-32.el9_5.src.rpm">
          <filename>raptor2-devel-2.0.15-32.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9fa0a19896f78159a1d7b7b322d07a5a9f1fdd2fac466c723b95da320d852caa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2025:0515</id>
    <title>libisoburn bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libisoburn.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Libisoburn is a front-end for libraries libburn and libisofs which enables creation and expansion of ISO-9660 filesystems on all CD/ DVD/BD media supported by libburn. This includes media like DVD+RW, which do not support multi-session management on media level and even plain disk files or block devices. Price for that is thorough specialization on data files in ISO-9660 filesystem images. And so libisoburn is not suitable for audio (CD-DA) or any other CD layout which does not entirely consist of ISO-9660 sessions.

Bug Fix(es):

* genisoimage doesn't work after in-place upgrading OS from rhel8.10 to rhel9.4 [rhel-9.5.z] (JIRA:Rocky Linux-74055)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2025:0515" id="RLBA-2025:0515" type="self" title="RLBA-2025:0515" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libisoburn-devel" arch="aarch64" epoch="0" version="1.5.4" release="5.el9_5" src="libisoburn-1.5.4-5.el9_5.src.rpm">
          <filename>libisoburn-devel-1.5.4-5.el9_5.aarch64.rpm</filename>
          <sum type="sha256">b2a0b4dc68d597a8e908e8682e28eeebf720681bb7ba67a81fe05c754f4d1531</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:0426</id>
    <title>Moderate: java-21-openjdk security update for Rocky Linux 8.10, 9.4 and 9.5</title>
    <issued date="2025-02-13 20:34:26" />
    <updated date="2025-02-13 20:37:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for java-21-openjdk.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* JDK: Enhance array handling (CVE-2025-21502)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:0426" id="RLSA-2025:0426" type="self" title="RLSA-2025:0426" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="java-21-openjdk-demo-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">a8292caf17c7dd0b13d5f9ca6837fe1cd5480c5c4644e214d4463a43d3555244</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">95b9c3243266118a18fa2204b601717372fe4c7cd49bee2dbccb8434d864cd18</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">ab01a950e7c47b7eb31bc43d5e8d3dfe685d01d2e7328e289f5791ee5e9e0eea</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">222e0773baa60772ddc96fd4befa57804fa84b43459bb51a34788525656ec25c</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">e3529f9cd77b09df3b7282596c04bec714748a5662f1a138bd50f78e7a57bcd5</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">9cbcf5e831f85de83be41ec460e9a2d5f1176d3fec9f92a32539ac0a19b91b2e</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">882b3fe3fdea9fa70529f3aa784d0e581da8681b30c03e57711159c96ba21b79</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">191d3ab7cdc7259539c28343e61c586e963a3c5e91d16e58c657bfb20d56237e</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4910c52d3d1d5f1a68ef86e344f793f632601d274b0732c926d8b3712dbfb33e</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4b52f2c47f40e86b5b99548f843a7faa1974fb631a1b226ed66312b49e120e22</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">8cfa44813b8998ebb9e00841aba0ca153517ddaaf94c9218bf3f51240372181b</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">963f6be33ea87764657694a1a26f9dedba11145e9bbb71ba34076d30c9d56ac9</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">c6bfb1e4678e9bbe23fcf7db509ef6ddeb496983d3f04ee43ae615a26546dcac</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" arch="aarch64" epoch="1" version="21.0.6.0.7" release="1.el9" src="java-21-openjdk-21.0.6.0.7-1.el9.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.6.0.7-1.el9.aarch64.rpm</filename>
          <sum type="sha256">1e764470e99fbedc509122ec413dad8295f859ca0e12bb5e319fa72c1e415ac6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2025:0915</id>
    <title>389-ds-base bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:19:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Bug Fix(es):

* Wrong set of entries returned for some search filters [rhel-9.5.z] (JIRA:Rocky Linux-65775)

* deadlock during cleanAllRuv [rhel-9.5.z] (JIRA:Rocky Linux-66138)

* cleanallruv consums CPU and is slow [rhel-9.5.z] (JIRA:Rocky Linux-67163)

* Freelist ordering causes high wtime [rhel-9.5.z] (JIRA:Rocky Linux-70257)

* Some nsslapd-haproxy-trusted-ip values are discarded upon a restart. [rhel-9.5.z] (JIRA:Rocky Linux-74350)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2025:0915" id="RLBA-2025:0915" type="self" title="RLBA-2025:0915" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="389-ds-base-devel" arch="aarch64" epoch="0" version="2.5.2" release="5.el9_5" src="389-ds-base-2.5.2-5.el9_5.src.rpm">
          <filename>389-ds-base-devel-2.5.2-5.el9_5.aarch64.rpm</filename>
          <sum type="sha256">7146ca639168b262811e7e9ae02692c7a5467b9e00dfaacb9177b30998dd6908</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:1329</id>
    <title>Moderate: doxygen security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:54:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for doxygen.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. 

Security Fix(es):

* jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1850004" id="1850004" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:1329" id="RLSA-2025:1329" type="self" title="RLSA-2025:1329" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="doxygen" arch="aarch64" epoch="1" version="1.9.1" release="12.el9_5" src="doxygen-1.9.1-12.el9_5.src.rpm">
          <filename>doxygen-1.9.1-12.el9_5.aarch64.rpm</filename>
          <sum type="sha256">dbf85505264dd853b69c83a3e0af5bb18b8c34038226e35862a4cbc3304a61c5</sum>
        </package>
        <package name="doxygen-doxywizard" arch="aarch64" epoch="1" version="1.9.1" release="12.el9_5" src="doxygen-1.9.1-12.el9_5.src.rpm">
          <filename>doxygen-doxywizard-1.9.1-12.el9_5.aarch64.rpm</filename>
          <sum type="sha256">0021c82678982944ab6207a17b37e601069c85319a2d833ba2021d44016e48bd</sum>
        </package>
        <package name="doxygen-latex" arch="aarch64" epoch="1" version="1.9.1" release="12.el9_5" src="doxygen-1.9.1-12.el9_5.src.rpm">
          <filename>doxygen-latex-1.9.1-12.el9_5.aarch64.rpm</filename>
          <sum type="sha256">6ad65f93af0231f11e45337d53ef17e786d4cb8e11339d0bae90765d73bf0b5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:1670</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:19:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind9.18.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

* bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12705" id="CVE-2024-12705" type="cve" title="CVE-2024-12705" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2342879" id="2342879" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2342880" id="2342880" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:1670" id="RLSA-2025:1670" type="self" title="RLSA-2025:1670" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind9.18-devel" arch="aarch64" epoch="2" version="9.18.29" release="1.el9_5.1" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-devel-9.18.29-1.el9_5.1.aarch64.rpm</filename>
          <sum type="sha256">4a2724c374f83cf4bc3807bb48536edfc4f2e8bb56572b24b4a4581d22406d95</sum>
        </package>
        <package name="bind9.18-doc" arch="noarch" epoch="2" version="9.18.29" release="1.el9_5.1" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-doc-9.18.29-1.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">a6ef797885ebc1ab67bdda539f25c3cfdcea04cb21181b48a531e803a6f1999f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:1671</id>
    <title>Important: mysql security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-14 08:17:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for mysql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

* krb5: GSS message token handling (CVE-2024-37371)

* curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

* mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

* mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

* mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

* mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

* mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

* mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

* mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

* mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

* mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

* mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

* mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

* curl: curl netrc password leak (CVE-2024-11053)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

* mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

* mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

* mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

* mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

* mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

* mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

* mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

* mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053" id="CVE-2024-11053" type="cve" title="CVE-2024-11053" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193" id="CVE-2024-21193" type="cve" title="CVE-2024-21193" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194" id="CVE-2024-21194" type="cve" title="CVE-2024-21194" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196" id="CVE-2024-21196" type="cve" title="CVE-2024-21196" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197" id="CVE-2024-21197" type="cve" title="CVE-2024-21197" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198" id="CVE-2024-21198" type="cve" title="CVE-2024-21198" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199" id="CVE-2024-21199" type="cve" title="CVE-2024-21199" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201" id="CVE-2024-21201" type="cve" title="CVE-2024-21201" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203" id="CVE-2024-21203" type="cve" title="CVE-2024-21203" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212" id="CVE-2024-21212" type="cve" title="CVE-2024-21212" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213" id="CVE-2024-21213" type="cve" title="CVE-2024-21213" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218" id="CVE-2024-21218" type="cve" title="CVE-2024-21218" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219" id="CVE-2024-21219" type="cve" title="CVE-2024-21219" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230" id="CVE-2024-21230" type="cve" title="CVE-2024-21230" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231" id="CVE-2024-21231" type="cve" title="CVE-2024-21231" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236" id="CVE-2024-21236" type="cve" title="CVE-2024-21236" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237" id="CVE-2024-21237" type="cve" title="CVE-2024-21237" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238" id="CVE-2024-21238" type="cve" title="CVE-2024-21238" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239" id="CVE-2024-21239" type="cve" title="CVE-2024-21239" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241" id="CVE-2024-21241" type="cve" title="CVE-2024-21241" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247" id="CVE-2024-21247" type="cve" title="CVE-2024-21247" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371" id="CVE-2024-37371" type="cve" title="CVE-2024-37371" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" id="CVE-2024-5535" type="cve" title="CVE-2024-5535" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264" id="CVE-2024-7264" type="cve" title="CVE-2024-7264" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491" id="CVE-2025-21491" type="cve" title="CVE-2025-21491" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494" id="CVE-2025-21494" type="cve" title="CVE-2025-21494" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497" id="CVE-2025-21497" type="cve" title="CVE-2025-21497" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500" id="CVE-2025-21500" type="cve" title="CVE-2025-21500" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501" id="CVE-2025-21501" type="cve" title="CVE-2025-21501" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503" id="CVE-2025-21503" type="cve" title="CVE-2025-21503" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504" id="CVE-2025-21504" type="cve" title="CVE-2025-21504" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505" id="CVE-2025-21505" type="cve" title="CVE-2025-21505" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518" id="CVE-2025-21518" type="cve" title="CVE-2025-21518" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519" id="CVE-2025-21519" type="cve" title="CVE-2025-21519" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520" id="CVE-2025-21520" type="cve" title="CVE-2025-21520" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521" id="CVE-2025-21521" type="cve" title="CVE-2025-21521" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522" id="CVE-2025-21522" type="cve" title="CVE-2025-21522" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523" id="CVE-2025-21523" type="cve" title="CVE-2025-21523" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525" id="CVE-2025-21525" type="cve" title="CVE-2025-21525" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529" id="CVE-2025-21529" type="cve" title="CVE-2025-21529" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531" id="CVE-2025-21531" type="cve" title="CVE-2025-21531" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534" id="CVE-2025-21534" type="cve" title="CVE-2025-21534" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536" id="CVE-2025-21536" type="cve" title="CVE-2025-21536" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540" id="CVE-2025-21540" type="cve" title="CVE-2025-21540" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543" id="CVE-2025-21543" type="cve" title="CVE-2025-21543" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546" id="CVE-2025-21546" type="cve" title="CVE-2025-21546" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555" id="CVE-2025-21555" type="cve" title="CVE-2025-21555" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559" id="CVE-2025-21559" type="cve" title="CVE-2025-21559" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2294581" id="2294581" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2294676" id="2294676" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2301888" id="2301888" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318857" id="2318857" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318858" id="2318858" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318870" id="2318870" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318873" id="2318873" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318874" id="2318874" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318876" id="2318876" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318882" id="2318882" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318883" id="2318883" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318884" id="2318884" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318885" id="2318885" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318886" id="2318886" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318897" id="2318897" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318900" id="2318900" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318905" id="2318905" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318914" id="2318914" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318922" id="2318922" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318923" id="2318923" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318925" id="2318925" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318926" id="2318926" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2318927" id="2318927" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2331191" id="2331191" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339218" id="2339218" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339220" id="2339220" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339221" id="2339221" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339226" id="2339226" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339231" id="2339231" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339236" id="2339236" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339238" id="2339238" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339243" id="2339243" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339247" id="2339247" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339252" id="2339252" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339259" id="2339259" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339266" id="2339266" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339270" id="2339270" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339271" id="2339271" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339275" id="2339275" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339277" id="2339277" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339281" id="2339281" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339284" id="2339284" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339291" id="2339291" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339293" id="2339293" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339295" id="2339295" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339299" id="2339299" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339300" id="2339300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339304" id="2339304" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339305" id="2339305" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:1671" id="RLSA-2025:1671" type="self" title="RLSA-2025:1671" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mysql-devel" arch="aarch64" epoch="0" version="8.0.41" release="2.el9_5" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-devel-8.0.41-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">fe61a0fca686b915547e60fe0dfb851b7df8cbe9af2426931841309920ad3761</sum>
        </package>
        <package name="mysql-libs" arch="aarch64" epoch="0" version="8.0.41" release="2.el9_5" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-libs-8.0.41-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">ab143a21766af05716eb1ce276d4d570341292a0859c3525aaaa12149fe5ab41</sum>
        </package>
        <package name="mysql-test" arch="aarch64" epoch="0" version="8.0.41" release="2.el9_5" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-test-8.0.41-2.el9_5.aarch64.rpm</filename>
          <sum type="sha256">25e733f83d67996a58628d4a0ef8973e06f5e645a00c3080b0b146043a659d51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:1681</id>
    <title>Important: bind security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:19:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2342879" id="2342879" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:1681" id="RLSA-2025:1681" type="self" title="RLSA-2025:1681" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bind-devel" arch="aarch64" epoch="2" version="9.16.23" release="24.el9_5.3" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-devel-9.16.23-24.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">e29c7309d959b5704c954313b1549a3f4ddcd09cbf0cf4c9ad3ad3c998d29d74</sum>
        </package>
        <package name="bind-doc" arch="noarch" epoch="2" version="9.16.23" release="24.el9_5.3" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-doc-9.16.23-24.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">96351e8ec1debab68ce99c9bb73054b4dcec0a33b80ad748aa6b171b23f18a40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:1742</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-14 08:17:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for postgresql.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345548" id="2345548" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:1742" id="RLSA-2025:1742" type="self" title="RLSA-2025:1742" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="postgresql-docs" arch="aarch64" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-docs-13.20-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">472927e47c433b5ffafa5f3a319ad03478174ae515aa844be5dc3007d65be183</sum>
        </package>
        <package name="postgresql-private-devel" arch="aarch64" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-private-devel-13.20-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">5bad000a532d5450ca5dd76018e2f23fce05c2f0014c6e82ebbcba802814418a</sum>
        </package>
        <package name="postgresql-server-devel" arch="aarch64" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-server-devel-13.20-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9dbd1f15b5070208f48366e4e06029d76317a4ac84410fc86cee71f5b788cb71</sum>
        </package>
        <package name="postgresql-static" arch="aarch64" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-static-13.20-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">0ddf6305cd95191b75d995cf50b1eb097b5cc325f7bbe41ce011d3b200930e28</sum>
        </package>
        <package name="postgresql-test" arch="aarch64" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-test-13.20-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">dc279c26187bb96984af1b42820b50afce425589ee2c881fb53755928f90287a</sum>
        </package>
        <package name="postgresql-upgrade-devel" arch="aarch64" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-upgrade-devel-13.20-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">9428b376176eb9ee5bc93d28fb305ce7f2ab71c94cbed849b0945553d370e8fc</sum>
        </package>
        <package name="postgresql-test-rpm-macros" arch="noarch" epoch="0" version="13.20" release="1.el9_5" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-test-rpm-macros-13.20-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">e5eaba07630f085a67fd2cba30b9f9c769ce851e48f6b4457a32b4903805aee5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:11242</id>
    <title>Moderate: mpg123:1.32.9 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:53:25" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mpg123.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.

Security Fix(es):

* mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10573" id="CVE-2024-10573" type="cve" title="CVE-2024-10573" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2322980" id="2322980" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:11242" id="RLSA-2024:11242" type="self" title="RLSA-2024:11242" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mpg123-devel" arch="aarch64" epoch="0" version="1.32.9" release="1.el9_5" src="mpg123-1.32.9-1.el9_5.src.rpm">
          <filename>mpg123-devel-1.32.9-1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">59b86b6e9c7c8f010c4a4af8c0d866b45705fec81c3a9118cd134c2e8c354f6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2025:0924</id>
    <title>ipa bug fix update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-03-17 20:19:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Bug Fix(es):

* kinit with external idp user is failing  [rhel-9.5.z] (JIRA:Rocky Linux-76011)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2025:0924" id="RLBA-2025:0924" type="self" title="RLBA-2025:0924" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.12.2" release="1.el9_5.4" src="ipa-4.12.2-1.el9_5.4.src.rpm">
          <filename>python3-ipatests-4.12.2-1.el9_5.4.noarch.rpm</filename>
          <sum type="sha256">10e3a62af67d86e7b31a966c667b26ffd63c771f7923c9f6e858ed4300daa264</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:0936</id>
    <title>Moderate: mingw-glib2 security update</title>
    <issued date="2025-03-17 20:16:45" />
    <updated date="2025-10-17 21:54:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mingw-glib2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2325340" id="2325340" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:0936" id="RLSA-2025:0936" type="self" title="RLSA-2025:0936" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mingw32-glib2" arch="noarch" epoch="0" version="2.78.6" release="2.el9" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw32-glib2-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">63b3d77fe3c1d22c90222cbc2dffb95352b9917a475e7167ad32b986c18475d6</sum>
        </package>
        <package name="mingw32-glib2-static" arch="noarch" epoch="0" version="2.78.6" release="2.el9" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw32-glib2-static-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">79f3322af30c2de5ef1e21ea3be6148143cf03d1b505f258656c21945c602d48</sum>
        </package>
        <package name="mingw64-glib2" arch="noarch" epoch="0" version="2.78.6" release="2.el9" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw64-glib2-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">54be20079a6f834f3674e2b566461e04dc7f77753b894351f12710981643da7a</sum>
        </package>
        <package name="mingw64-glib2-static" arch="noarch" epoch="0" version="2.78.6" release="2.el9" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw64-glib2-static-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">e1a1d7d731bb203d20ff889c7d0abcf545a2aa5ee7f99150c2f8da9ae5373dd7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2458</id>
    <title>librepo bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-10-17 21:54:14" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for librepo.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2458" id="RLBA-2024:2458" type="self" title="RLBA-2024:2458" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="librepo-devel" arch="aarch64" epoch="0" version="1.14.5" release="2.el9" src="librepo-1.14.5-2.el9.src.rpm">
          <filename>librepo-devel-1.14.5-2.el9.aarch64.rpm</filename>
          <sum type="sha256">8aa7e73208f33a9db52970d2fc801957900212816b57ca98b96bee873b414f56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:9110</id>
    <title>opencsd bug fix and enhancement update</title>
    <issued date="2025-03-17 20:17:03" />
    <updated date="2025-10-17 21:52:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for opencsd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:9110" id="RLBA-2024:9110" type="self" title="RLBA-2024:9110" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="opencsd-devel" arch="aarch64" epoch="0" version="1.2.1" release="1.el9" src="opencsd-1.2.1-1.el9.src.rpm">
          <filename>opencsd-devel-1.2.1-1.el9.aarch64.rpm</filename>
          <sum type="sha256">0ee414ce5f2e72d5db5b607d7d20beef430c6006487e640a762f2c7aa269a99d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2430</id>
    <title>libfido2 bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-10-17 21:52:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libfido2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2430" id="RLBA-2024:2430" type="self" title="RLBA-2024:2430" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libfido2-devel" arch="aarch64" epoch="0" version="1.13.0" release="2.el9" src="libfido2-1.13.0-2.el9.src.rpm">
          <filename>libfido2-devel-1.13.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">12f5c4cffe203177e7d782228d689ae18aefbf2c21224fb968f6775e6b1baf0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2443</id>
    <title>libselinux bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-05-07 19:15:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libselinux.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2443" id="RLBA-2024:2443" type="self" title="RLBA-2024:2443" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libselinux-static" arch="aarch64" epoch="0" version="3.6" release="1.el9" src="libselinux-3.6-1.el9.src.rpm">
          <filename>libselinux-static-3.6-1.el9.aarch64.rpm</filename>
          <sum type="sha256">b2ecad2d87f380b90db8c6d4543e6788062187be91074eb5757ab019773436c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2500</id>
    <title>fwupd bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-05-07 19:15:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for fwupd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2500" id="RLBA-2024:2500" type="self" title="RLBA-2024:2500" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fwupd-devel" arch="aarch64" epoch="0" version="1.9.13" release="2.el9" src="fwupd-1.9.13-2.el9.src.rpm">
          <filename>fwupd-devel-1.9.13-2.el9.aarch64.rpm</filename>
          <sum type="sha256">34b4362194cb41de2d08da0060eb9f1db8ad6e10fe7720df0704bdea6de61a56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2519</id>
    <title>bash bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-10-17 21:54:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for bash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2519" id="RLBA-2024:2519" type="self" title="RLBA-2024:2519" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="bash-devel" arch="aarch64" epoch="0" version="5.1.8" release="9.el9" src="bash-5.1.8-9.el9.src.rpm">
          <filename>bash-devel-5.1.8-9.el9.aarch64.rpm</filename>
          <sum type="sha256">e5567dd06d4e5df5d41e5b6ffa4e6f4f949b1584a1406a9dd8fb56d9c12df95c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2514</id>
    <title>procps-ng bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-10-17 21:54:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for procps-ng.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2514" id="RLBA-2024:2514" type="self" title="RLBA-2024:2514" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="procps-ng-devel" arch="aarch64" epoch="0" version="3.3.17" release="14.el9" src="procps-ng-3.3.17-14.el9.src.rpm">
          <filename>procps-ng-devel-3.3.17-14.el9.aarch64.rpm</filename>
          <sum type="sha256">280c46f21f0bb440fd0312c1e847eb799956f68fab4d63afaa3de5a2b15b2444</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6173</id>
    <title>libmnl bug fix update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-10-17 21:54:15" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libmnl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libmnl is a minimalistic user-space library oriented to Netlink developers. There are a lot of common tasks in parsing, validating, constructing of both the Netlink header and TLVs that are repetitive and easy to get wrong. This library aims to provide simple helpers that allows you to re-use code and to avoid re-inventing the wheel.

Bug Fix(es):

* Missing zero attribute padding (JIRA:Rocky Linux-35953)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6173" id="RLBA-2024:6173" type="self" title="RLBA-2024:6173" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libmnl-devel" arch="aarch64" epoch="0" version="1.0.4" release="16.el9_4" src="libmnl-1.0.4-16.el9_4.src.rpm">
          <filename>libmnl-devel-1.0.4-16.el9_4.aarch64.rpm</filename>
          <sum type="sha256">6979eb8acfe25f2600b08f0d60025ba67d5249e5cf703868c0b27e4863659dc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6174</id>
    <title>libnftnl bug fix update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-10-17 21:54:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libnftnl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libnftnl packages provide a library for low-level interaction with nftables Netlink's API over libmnl.

Bug Fix(es):

* libnftnl-1.2.2-1.el9: Rocky Linux SAST Automation: address (selected) true positives (JIRA:Rocky Linux-28515)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6174" id="RLBA-2024:6174" type="self" title="RLBA-2024:6174" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libnftnl-devel" arch="aarch64" epoch="0" version="1.2.6" release="4.el9_4" src="libnftnl-1.2.6-4.el9_4.src.rpm">
          <filename>libnftnl-devel-1.2.6-4.el9_4.aarch64.rpm</filename>
          <sum type="sha256">d60be71a6c09d22441055c1c3b85e23990ed276c580b6d02989035bbf042bfa3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11252</id>
    <title>sssd bug fix update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-05-07 19:15:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for sssd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Bug Fix(es):

* SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9.5.z] (JIRA:Rocky Linux-66268)

* Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9.5.z] (JIRA:Rocky Linux-67673)

* sssd backend process segfaults when krb5.conf is invalid [rhel-9.5.z] (JIRA:Rocky Linux-68508)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11252" id="RLBA-2024:11252" type="self" title="RLBA-2024:11252" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsss_nss_idmap-devel" arch="aarch64" epoch="0" version="2.9.5" release="4.el9_5.4" src="sssd-2.9.5-4.el9_5.4.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.5-4.el9_5.4.aarch64.rpm</filename>
          <sum type="sha256">9026392df35d6f9f91fa37dcb5d42af8be98d3bf221baf797c0d780a44dd0c99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11253</id>
    <title>libsemanage bug fix update</title>
    <issued date="2025-05-07 19:13:03" />
    <updated date="2025-05-07 19:15:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libsemanage.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libsemanage library provides an API for the manipulation of SELinux binary policies. It is used by the checkpolicy compiler and similar utilitlies, as well as by programs such as load_policy, which must perform specific transformations on binary policies, such as customizing policy Boolean settings.

Bug Fix(es):

* semanage fails to get lock if / is on NFS (or /var/lib/selinux/) [rhel-9.5.z] (JIRA:Rocky Linux-69531)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11253" id="RLBA-2024:11253" type="self" title="RLBA-2024:11253" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libsemanage-devel" arch="aarch64" epoch="0" version="3.6" release="2.1.el9_5" src="libsemanage-3.6-2.1.el9_5.src.rpm">
          <filename>libsemanage-devel-3.6-2.1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">4e96df37a5885df2f41121ca994d19708e48d06bdd8f4a220e19aab50bcf68a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2120</id>
    <title>xxhash bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for xxhash.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2120" id="RLBA-2024:2120" type="self" title="RLBA-2024:2120" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xxhash-devel" arch="aarch64" epoch="0" version="0.8.2" release="1.el9" src="xxhash-0.8.2-1.el9.src.rpm">
          <filename>xxhash-devel-0.8.2-1.el9.aarch64.rpm</filename>
          <sum type="sha256">692a002fcefbba23b0b28aead243ec23a762ebfb105574f5037d2b48c0a06b75</sum>
        </package>
        <package name="xxhash-doc" arch="noarch" epoch="0" version="0.8.2" release="1.el9" src="xxhash-0.8.2-1.el9.src.rpm">
          <filename>xxhash-doc-0.8.2-1.el9.noarch.rpm</filename>
          <sum type="sha256">30b784f3abf2c54703cf18946f2359656c943729b1b339ccd559abdf929d60fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="enhancement" version="2">
    <id>RLEA-2024:2127</id>
    <title>nispor bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nispor.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLEA-2024:2127" id="RLEA-2024:2127" type="self" title="RLEA-2024:2127" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nispor-devel" arch="aarch64" epoch="0" version="1.2.14" release="1.el9" src="nispor-1.2.14-1.el9.src.rpm">
          <filename>nispor-devel-1.2.14-1.el9.aarch64.rpm</filename>
          <sum type="sha256">4f7381f565de52c244733db7393e1cbd393a39433f1f445898d9649a475bdd77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2175</id>
    <title>tpm2-abrmd bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for tpm2-abrmd.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2175" id="RLBA-2024:2175" type="self" title="RLBA-2024:2175" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="tpm2-abrmd-devel" arch="aarch64" epoch="0" version="2.4.0" release="4.el9" src="tpm2-abrmd-2.4.0-4.el9.src.rpm">
          <filename>tpm2-abrmd-devel-2.4.0-4.el9.aarch64.rpm</filename>
          <sum type="sha256">a639e8db75a0c786c0e5370d6ffe83c18aaac1f3ec7170676ae5af88bbc64b0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2178</id>
    <title>nautilus bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for nautilus.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2178" id="RLBA-2024:2178" type="self" title="RLBA-2024:2178" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nautilus-devel" arch="aarch64" epoch="0" version="40.2" release="15.el9" src="nautilus-40.2-15.el9.src.rpm">
          <filename>nautilus-devel-40.2-15.el9.aarch64.rpm</filename>
          <sum type="sha256">66cc47fcabf88d6ed1733a2da468ed59a1aa8b6175102c2ca1e0dfabb08743b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2209</id>
    <title>google-noto-cjk-fonts bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:24" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for google-noto-cjk-fonts.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2209" id="RLBA-2024:2209" type="self" title="RLBA-2024:2209" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="google-noto-sans-cjk-jp-fonts" arch="noarch" epoch="0" version="20230817" release="2.el9" src="google-noto-cjk-fonts-20230817-2.el9.src.rpm">
          <filename>google-noto-sans-cjk-jp-fonts-20230817-2.el9.noarch.rpm</filename>
          <sum type="sha256">983ca635d3803114d593b36c37465ef7c8ad191cc087964ef0377483c71f6ea1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2232</id>
    <title>papi bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for papi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2232" id="RLBA-2024:2232" type="self" title="RLBA-2024:2232" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="papi" arch="aarch64" epoch="0" version="6.0.0" release="16.el9" src="papi-6.0.0-16.el9.src.rpm">
          <filename>papi-6.0.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">27def630089e6983082ba5b8fedaec3ee958d3c096786d8225e9e054ca13de89</sum>
        </package>
        <package name="papi-testsuite" arch="aarch64" epoch="0" version="6.0.0" release="16.el9" src="papi-6.0.0-16.el9.src.rpm">
          <filename>papi-testsuite-6.0.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">3b2aff5092212d67ada8f0555d4c696e1a7c0450002db64586ebc419d2554930</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2273</id>
    <title>libadwaita bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libadwaita.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2273" id="RLBA-2024:2273" type="self" title="RLBA-2024:2273" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libadwaita-devel" arch="aarch64" epoch="0" version="1.4.2" release="2.el9" src="libadwaita-1.4.2-2.el9.src.rpm">
          <filename>libadwaita-devel-1.4.2-2.el9.aarch64.rpm</filename>
          <sum type="sha256">bbc00046382ae844838eb2c8dc59991a521321d5a4c24644549812da6b23094d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2199</id>
    <title>Important: pmix security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for pmix.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2238898" id="2238898" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2199" id="RLSA-2024:2199" type="self" title="RLSA-2024:2199" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pmix-pmi-devel" arch="aarch64" epoch="0" version="3.2.3" release="5.el9" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-pmi-devel-3.2.3-5.el9.aarch64.rpm</filename>
          <sum type="sha256">0760a304671f757dee965e17160f9a30cc28b5dad0c3f965fab53a1f3e162013</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2296</id>
    <title>libtimezonemap bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libtimezonemap.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2296" id="RLBA-2024:2296" type="self" title="RLBA-2024:2296" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtimezonemap-devel" arch="aarch64" epoch="0" version="0.4.5.1" release="13.el9" src="libtimezonemap-0.4.5.1-13.el9.src.rpm">
          <filename>libtimezonemap-devel-0.4.5.1-13.el9.aarch64.rpm</filename>
          <sum type="sha256">c920c315b7d032096e4ae6755e765a20ab8ba7ced0a10f06d79836ab9333defd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2300</id>
    <title>libzip bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libzip.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2300" id="RLBA-2024:2300" type="self" title="RLBA-2024:2300" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libzip-devel" arch="aarch64" epoch="0" version="1.7.3" release="8.el9" src="libzip-1.7.3-8.el9.src.rpm">
          <filename>libzip-devel-1.7.3-8.el9.aarch64.rpm</filename>
          <sum type="sha256">9173c9af780f6627392e3b6c52e0d6a0d6ca8a6552a5541a1edd951e0374a78d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2319</id>
    <title>python3.12-psycopg2 bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-psycopg2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2319" id="RLBA-2024:2319" type="self" title="RLBA-2024:2319" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-psycopg2-debug" arch="aarch64" epoch="0" version="2.9.6" release="2.el9" src="python3.12-psycopg2-2.9.6-2.el9.src.rpm">
          <filename>python3.12-psycopg2-debug-2.9.6-2.el9.aarch64.rpm</filename>
          <sum type="sha256">2e8aa41675dbfe6feec605a7b32da981895362ec28c34844ff54803e7abd92fe</sum>
        </package>
        <package name="python3.12-psycopg2-tests" arch="aarch64" epoch="0" version="2.9.6" release="2.el9" src="python3.12-psycopg2-2.9.6-2.el9.src.rpm">
          <filename>python3.12-psycopg2-tests-2.9.6-2.el9.aarch64.rpm</filename>
          <sum type="sha256">6b06884d52d9aeaff889b7337ad88b06f152f723dd25f3575db12079b5e61455</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2330</id>
    <title>gtk-vnc bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for gtk-vnc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2330" id="RLBA-2024:2330" type="self" title="RLBA-2024:2330" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gtk-vnc2-devel" arch="aarch64" epoch="0" version="1.3.0" release="2.el9" src="gtk-vnc-1.3.0-2.el9.src.rpm">
          <filename>gtk-vnc2-devel-1.3.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d7d5600afd53008029829107360e2088a90f1e4528d0033236717be38c3ffd1b</sum>
        </package>
        <package name="gvnc-devel" arch="aarch64" epoch="0" version="1.3.0" release="2.el9" src="gtk-vnc-1.3.0-2.el9.src.rpm">
          <filename>gvnc-devel-1.3.0-2.el9.aarch64.rpm</filename>
          <sum type="sha256">5f7aca0f181942956ceae4c19cee95062a79e674a9c5469408ba12d1eeed63ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2334</id>
    <title>liburing bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:36" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for liburing.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2334" id="RLBA-2024:2334" type="self" title="RLBA-2024:2334" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="liburing-devel" arch="aarch64" epoch="0" version="2.5" release="1.el9" src="liburing-2.5-1.el9.src.rpm">
          <filename>liburing-devel-2.5-1.el9.aarch64.rpm</filename>
          <sum type="sha256">932d27be35a4d881066a1d310755ec81fbeca91ee18dc1e87265a0fffabd9959</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2353</id>
    <title>Moderate: mingw components security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mingw-w64-tools, mingw-headers, mingw-zlib, mingw-binutils, mingw-winpthreads, mingw-libffi, mingw-gcc, mingw-crt, mingw-filesystem.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications.

Security Fix(es):

* binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1579" id="CVE-2023-1579" type="cve" title="CVE-2023-1579" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2180905" id="2180905" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2353" id="RLSA-2024:2353" type="self" title="RLSA-2024:2353" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mingw32-binutils" arch="aarch64" epoch="0" version="2.41" release="3.el9" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw32-binutils-2.41-3.el9.aarch64.rpm</filename>
          <sum type="sha256">10ab44a6cbdb15fb034417e356b9fb7362ceaa0aa76236a1379d6f889e01008e</sum>
        </package>
        <package name="mingw32-cpp" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw32-cpp-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">6a025b4ebfd6be2b378e3a191482fc2199b9dc42e9342cf4f4de446e9601d3ff</sum>
        </package>
        <package name="mingw32-crt" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-crt-11.0.1-3.el9.src.rpm">
          <filename>mingw32-crt-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">c51230f416183e0c57de307d407e2ffba39f5c4090da825baba386b61741f5fe</sum>
        </package>
        <package name="mingw32-filesystem" arch="noarch" epoch="0" version="148" release="3.el9" src="mingw-filesystem-148-3.el9.src.rpm">
          <filename>mingw32-filesystem-148-3.el9.noarch.rpm</filename>
          <sum type="sha256">ec3132796ec36ed721b243022b478be4a6daf1d12aee2c81ead248ed61269fcb</sum>
        </package>
        <package name="mingw32-gcc" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw32-gcc-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">497488028c54072f73da9c05a707e73d0e43b58239fb8d7a9885b5750dfc0ff5</sum>
        </package>
        <package name="mingw32-gcc-c++" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw32-gcc-c++-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">26039676bb6d6a48e9199c282066141b723ae8646dc4a5510d4c63b5e02830f0</sum>
        </package>
        <package name="mingw32-headers" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-headers-11.0.1-3.el9.src.rpm">
          <filename>mingw32-headers-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">560988b9c9a61ff67b3f1f0670c5eaf4120f8401537c565f0f61e332302c26f9</sum>
        </package>
        <package name="mingw32-libffi" arch="noarch" epoch="0" version="3.4.4" release="5.el9" src="mingw-libffi-3.4.4-5.el9.src.rpm">
          <filename>mingw32-libffi-3.4.4-5.el9.noarch.rpm</filename>
          <sum type="sha256">82884d1f13ad32562d9fef27bf9f08e81cf8d2dd347636f766d407a169312b36</sum>
        </package>
        <package name="mingw32-libgcc" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw32-libgcc-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">e137c5398d44915f9cc31a57a6fd7b72f6064839c1043fa8a49e827434ceb626</sum>
        </package>
        <package name="mingw32-winpthreads" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-winpthreads-11.0.1-3.el9.src.rpm">
          <filename>mingw32-winpthreads-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">a8065ddbe3b44cef323c79951887a7d0f254f3616bb3e6adb1c0d33eb8dcf393</sum>
        </package>
        <package name="mingw32-winpthreads-static" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-winpthreads-11.0.1-3.el9.src.rpm">
          <filename>mingw32-winpthreads-static-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">7803a68ccb1a6722b0c49a5ce9ab858af3bef55d4074323e4e5697ca1abc900d</sum>
        </package>
        <package name="mingw32-zlib" arch="noarch" epoch="0" version="1.3.1" release="1.el9" src="mingw-zlib-1.3.1-1.el9.src.rpm">
          <filename>mingw32-zlib-1.3.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">2530562f48a3336efba9314e50afdf65e2a40f7a189d7e9d247f4deff7882686</sum>
        </package>
        <package name="mingw32-zlib-static" arch="noarch" epoch="0" version="1.3.1" release="1.el9" src="mingw-zlib-1.3.1-1.el9.src.rpm">
          <filename>mingw32-zlib-static-1.3.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">6f4a4e8f898e1d700a1d55fae5f7c2bd46dc6cc36cde8a0384c680d5db413144</sum>
        </package>
        <package name="mingw64-binutils" arch="aarch64" epoch="0" version="2.41" release="3.el9" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw64-binutils-2.41-3.el9.aarch64.rpm</filename>
          <sum type="sha256">48ee4494b5d532a1c302f0773a0e62ab29fb499fb494c6140d7d5dede75e6317</sum>
        </package>
        <package name="mingw64-cpp" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw64-cpp-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">72e8473a9cfc80c733b81291dd84e3435875c5e6eb0716e173e72d25ee6c27f2</sum>
        </package>
        <package name="mingw64-crt" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-crt-11.0.1-3.el9.src.rpm">
          <filename>mingw64-crt-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">0d7cd781ab9b772bb9ed9c913794f1a531a4c543889e456da4f1e54ce9863582</sum>
        </package>
        <package name="mingw64-filesystem" arch="noarch" epoch="0" version="148" release="3.el9" src="mingw-filesystem-148-3.el9.src.rpm">
          <filename>mingw64-filesystem-148-3.el9.noarch.rpm</filename>
          <sum type="sha256">b3a67b1db16919e535260fd335e47d65753353e08bdc3527f0e3469724a2adc2</sum>
        </package>
        <package name="mingw64-gcc" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw64-gcc-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">4ee2738ae6217eb78dd34403fd5acd229aef2cbea7b42cd70f1722ada88b0150</sum>
        </package>
        <package name="mingw64-gcc-c++" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw64-gcc-c++-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">ccabcd3de507307fb11ebfb269799b6bed3cce7aa8b499df394f0922eff6d87c</sum>
        </package>
        <package name="mingw64-headers" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-headers-11.0.1-3.el9.src.rpm">
          <filename>mingw64-headers-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">f73ff4dd7c5e5cdca219e5b99083332fb5c2129180ce60df3d5bbc09583acba1</sum>
        </package>
        <package name="mingw64-libffi" arch="noarch" epoch="0" version="3.4.4" release="5.el9" src="mingw-libffi-3.4.4-5.el9.src.rpm">
          <filename>mingw64-libffi-3.4.4-5.el9.noarch.rpm</filename>
          <sum type="sha256">0cd6a2a72beaaffb990c814c762008d34a86d13b31b0f2603efb3c565892fcf0</sum>
        </package>
        <package name="mingw64-libgcc" arch="aarch64" epoch="0" version="13.2.1" release="7.el9" src="mingw-gcc-13.2.1-7.el9.src.rpm">
          <filename>mingw64-libgcc-13.2.1-7.el9.aarch64.rpm</filename>
          <sum type="sha256">942beaeb2e2d1d466215003407b2dd7a1fb74f025e83b7256d0ede83775429b5</sum>
        </package>
        <package name="mingw64-winpthreads" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-winpthreads-11.0.1-3.el9.src.rpm">
          <filename>mingw64-winpthreads-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">11140958e839c978d7e89b89499dc69209ef708e6f5b0dd26d9db33777548e00</sum>
        </package>
        <package name="mingw64-winpthreads-static" arch="noarch" epoch="0" version="11.0.1" release="3.el9" src="mingw-winpthreads-11.0.1-3.el9.src.rpm">
          <filename>mingw64-winpthreads-static-11.0.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">27f558bdf97f85be1b680494e4e7b4fb1da5a9e97f2b8615dd566bed8a3c1549</sum>
        </package>
        <package name="mingw64-zlib" arch="noarch" epoch="0" version="1.3.1" release="1.el9" src="mingw-zlib-1.3.1-1.el9.src.rpm">
          <filename>mingw64-zlib-1.3.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">3f6736c60ac8ee4a8ec9f52d247976c776fc2852c04910f7eb4253d77491c2c5</sum>
        </package>
        <package name="mingw64-zlib-static" arch="noarch" epoch="0" version="1.3.1" release="1.el9" src="mingw-zlib-1.3.1-1.el9.src.rpm">
          <filename>mingw64-zlib-static-1.3.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">1e9e75b213cdcf08078722f6dcf51633d25548004eb73dc120878b7c3867eb85</sum>
        </package>
        <package name="mingw-binutils-generic" arch="aarch64" epoch="0" version="2.41" release="3.el9" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw-binutils-generic-2.41-3.el9.aarch64.rpm</filename>
          <sum type="sha256">115158b1cf72c4903e04322f6304c7c16be4e5d895972dcd791b7bf9d0ffa2fe</sum>
        </package>
        <package name="mingw-filesystem-base" arch="noarch" epoch="0" version="148" release="3.el9" src="mingw-filesystem-148-3.el9.src.rpm">
          <filename>mingw-filesystem-base-148-3.el9.noarch.rpm</filename>
          <sum type="sha256">7b01e206f79e561a50b62f94540ad910b9f52435ca135bb0872511c0685f788c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2355</id>
    <title>expect bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:39" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for expect.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2355" id="RLBA-2024:2355" type="self" title="RLBA-2024:2355" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="expect-devel" arch="aarch64" epoch="0" version="5.45.4" release="16.el9" src="expect-5.45.4-16.el9.src.rpm">
          <filename>expect-devel-5.45.4-16.el9.aarch64.rpm</filename>
          <sum type="sha256">acc3b835f8ef7b1cb62247a35e1876aa5f3d57150c1b633a8e252469f0d29fb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2377</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:43" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for zziplib.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2246907" id="2246907" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2377" id="RLSA-2024:2377" type="self" title="RLSA-2024:2377" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="zziplib-devel" arch="aarch64" epoch="0" version="0.13.71" release="11.el9_4" src="zziplib-0.13.71-11.el9_4.src.rpm">
          <filename>zziplib-devel-0.13.71-11.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f7475717ee1fe9901407c454dc809c5737dde422d6a2c9cac7ac3448221e848d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2321</id>
    <title>python3.12-scipy bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-scipy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2321" id="RLBA-2024:2321" type="self" title="RLBA-2024:2321" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-scipy-tests" arch="aarch64" epoch="0" version="1.11.1" release="2.el9" src="python3.12-scipy-1.11.1-2.el9.src.rpm">
          <filename>python3.12-scipy-tests-1.11.1-2.el9.aarch64.rpm</filename>
          <sum type="sha256">0b170808476856584d6af19d0db29178b32eb1d4e317f3f8356526cd191ba4cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2317</id>
    <title>python3.12-wheel bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-wheel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2317" id="RLBA-2024:2317" type="self" title="RLBA-2024:2317" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-wheel-wheel" arch="noarch" epoch="0" version="0.41.2" release="3.el9" src="python3.12-wheel-0.41.2-3.el9.src.rpm">
          <filename>python3.12-wheel-wheel-0.41.2-3.el9.noarch.rpm</filename>
          <sum type="sha256">3821b8688e77ea37200acc53bf6533036f96fdf88ca3058ee06bf6c34d859eac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2350</id>
    <title>pyproject-rpm-macros bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:50" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pyproject-rpm-macros.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2350" id="RLBA-2024:2350" type="self" title="RLBA-2024:2350" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pyproject-rpm-macros" arch="noarch" epoch="0" version="1.12.0" release="1.el9" src="pyproject-rpm-macros-1.12.0-1.el9.src.rpm">
          <filename>pyproject-rpm-macros-1.12.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">20775a4ddbade42a6e7c60ba94593c3488a1def25fb78dafade4aa3668895699</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2522</id>
    <title>golang-github-cpuguy83-md2man bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for golang-github-cpuguy83-md2man.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2522" id="RLBA-2024:2522" type="self" title="RLBA-2024:2522" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="golang-github-cpuguy83-md2man" arch="aarch64" epoch="0" version="2.0.3" release="1.el9" src="golang-github-cpuguy83-md2man-2.0.3-1.el9.src.rpm">
          <filename>golang-github-cpuguy83-md2man-2.0.3-1.el9.aarch64.rpm</filename>
          <sum type="sha256">2f56484515ff06b6cb018ed62d86e8f02e577afcea5a0c80348b9b1a328a12a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2530</id>
    <title>python-flit-core bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-flit-core.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2530" id="RLBA-2024:2530" type="self" title="RLBA-2024:2530" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-flit-core" arch="noarch" epoch="0" version="3.9.0" release="5.el9" src="python-flit-core-3.9.0-5.el9.src.rpm">
          <filename>python3-flit-core-3.9.0-5.el9.noarch.rpm</filename>
          <sum type="sha256">9cf901105a1ed918488a5e3b6b349dcd22d84c15e020837f56d4c7af7852a06c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2531</id>
    <title>python3.11-pybind11 bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.11-pybind11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2531" id="RLBA-2024:2531" type="self" title="RLBA-2024:2531" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-pybind11" arch="aarch64" epoch="0" version="2.10.3" release="3.el9" src="python3.11-pybind11-2.10.3-3.el9.src.rpm">
          <filename>python3.11-pybind11-2.10.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">11931272430876e4e0bb17e6e891c779e3deabdb5fe88967e9007cf987de2e23</sum>
        </package>
        <package name="python3.11-pybind11-devel" arch="aarch64" epoch="0" version="2.10.3" release="3.el9" src="python3.11-pybind11-2.10.3-3.el9.src.rpm">
          <filename>python3.11-pybind11-devel-2.10.3-3.el9.aarch64.rpm</filename>
          <sum type="sha256">46b6a9d439695d40f863e30f26aaa680dcc0b7db3edf19c57e485de9583c99b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2535</id>
    <title>python3.12-pluggy bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-pluggy.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2535" id="RLBA-2024:2535" type="self" title="RLBA-2024:2535" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-pluggy" arch="noarch" epoch="0" version="1.2.0" release="3.el9" src="python3.12-pluggy-1.2.0-3.el9.src.rpm">
          <filename>python3.12-pluggy-1.2.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">7f714f51d1462257ceb9a9b1a01d9eb6908e83539e7c231c783c4e29d7e23415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2536</id>
    <title>python3.12-pytest bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-pytest.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2536" id="RLBA-2024:2536" type="self" title="RLBA-2024:2536" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-pytest" arch="noarch" epoch="0" version="7.4.2" release="2.el9" src="python3.12-pytest-7.4.2-2.el9.src.rpm">
          <filename>python3.12-pytest-7.4.2-2.el9.noarch.rpm</filename>
          <sum type="sha256">90f6824f59a36533ada96fadf19d528b614f43942223ee9a0a6eb0e0dbe66e36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2534</id>
    <title>python3.12-setuptools-rust bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-setuptools-rust.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2534" id="RLBA-2024:2534" type="self" title="RLBA-2024:2534" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-setuptools-rust" arch="noarch" epoch="0" version="1.7.0" release="2.el9" src="python3.12-setuptools-rust-1.7.0-2.el9.src.rpm">
          <filename>python3.12-setuptools-rust-1.7.0-2.el9.noarch.rpm</filename>
          <sum type="sha256">6d558168355c0dd6d6c95a43a97b55db9659d484842ed2ff1541daf270848aae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2541</id>
    <title>python3.12-semantic_version bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-semantic_version.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2541" id="RLBA-2024:2541" type="self" title="RLBA-2024:2541" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-semantic_version" arch="noarch" epoch="0" version="2.10.0" release="2.el9" src="python3.12-semantic_version-2.10.0-2.el9.src.rpm">
          <filename>python3.12-semantic_version-2.10.0-2.el9.noarch.rpm</filename>
          <sum type="sha256">1411d57f8717ffea3ea0c8b707c88b31be21f70935d7e2006fa28aaed2b24d6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2537</id>
    <title>python3.12-packaging bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-packaging.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2537" id="RLBA-2024:2537" type="self" title="RLBA-2024:2537" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-packaging" arch="noarch" epoch="0" version="23.2" release="2.el9" src="python3.12-packaging-23.2-2.el9.src.rpm">
          <filename>python3.12-packaging-23.2-2.el9.noarch.rpm</filename>
          <sum type="sha256">837d19fc361dce9d9f0869cbc0c13cf853fb4b6dd8f2fdd24eaf415a7de73352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2538</id>
    <title>python3.12-flit-core bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-flit-core.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2538" id="RLBA-2024:2538" type="self" title="RLBA-2024:2538" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-flit-core" arch="noarch" epoch="0" version="3.9.0" release="3.el9" src="python3.12-flit-core-3.9.0-3.el9.src.rpm">
          <filename>python3.12-flit-core-3.9.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">9783a1c92fac7ed8986ddd865aed69872dfbe14ba691372aefa0a75e4cf8f6bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2540</id>
    <title>python3.12-Cython bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-Cython.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2540" id="RLBA-2024:2540" type="self" title="RLBA-2024:2540" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-Cython" arch="aarch64" epoch="0" version="0.29.35" release="3.el9" src="python3.12-Cython-0.29.35-3.el9.src.rpm">
          <filename>python3.12-Cython-0.29.35-3.el9.aarch64.rpm</filename>
          <sum type="sha256">7605609f6bc14604ce08602e6724c25b0853ea9965a6d40bbccf104291e3180c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:4756</id>
    <title>Moderate: libuv security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for libuv.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2263292" id="2263292" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:4756" id="RLSA-2024:4756" type="self" title="RLSA-2024:4756" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libuv-devel" arch="aarch64" epoch="1" version="1.42.0" release="2.el9_4" src="libuv-1.42.0-2.el9_4.src.rpm">
          <filename>libuv-devel-1.42.0-2.el9_4.aarch64.rpm</filename>
          <sum type="sha256">934b6e5e4ef6577422d54b53cc2b2f49604887abe644c47070456b03f25737a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6180</id>
    <title>libwacom bug fix update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-14 08:16:28" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libwacom.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libwacom packages contain a library that provides access to a tablet model database. The libwacom packages expose the contents of this database to applications, allowing for tablet-specific user interfaces. The libwacom packages allow the GNOME tools to automatically configure screen mappings and calibrations, and provide device-specific configurations.

Bug Fix(es):

* Backport libwacom updates for Cintiq and Intuos Pro devices to Rocky Linux9 [rhel-9.4.z] (JIRA:Rocky Linux-53014)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6180" id="RLBA-2024:6180" type="self" title="RLBA-2024:6180" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libwacom-devel" arch="aarch64" epoch="0" version="1.12.1" release="3.el9_4" src="libwacom-1.12.1-3.el9_4.src.rpm">
          <filename>libwacom-devel-1.12.1-3.el9_4.aarch64.rpm</filename>
          <sum type="sha256">3b922baff26a76938d6bd9dc29828f2d590cbbcd5752d469dd1ef7a59c952345</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6182</id>
    <title>libblkio bug fix update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:52:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for libblkio.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>libblkio is a library for high-performance block device I/O with support for multi-queue devices. A C API is provided so that applications can use the library from most programming languages.

Bug Fix(es):

* I/O error on a vhost-vdpa blk device using directsync cache mode [rhel-9.4.z] (JIRA:Rocky Linux-53566)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6182" id="RLBA-2024:6182" type="self" title="RLBA-2024:6182" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libblkio-devel" arch="aarch64" epoch="0" version="1.5.0" release="1.el9_4" src="libblkio-1.5.0-1.el9_4.src.rpm">
          <filename>libblkio-devel-1.5.0-1.el9_4.aarch64.rpm</filename>
          <sum type="sha256">f168c19ad31b4b9cd27e0b94f293dd5c74f1175e58087231a8b6f710bcd4e281</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6197</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for ghostscript.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510)

* ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869)

* ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29510" id="CVE-2024-29510" type="cve" title="CVE-2024-29510" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33869" id="CVE-2024-33869" type="cve" title="CVE-2024-33869" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33870" id="CVE-2024-33870" type="cve" title="CVE-2024-33870" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293950" id="2293950" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293958" id="2293958" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2293959" id="2293959" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6197" id="RLSA-2024:6197" type="self" title="RLSA-2024:6197" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgs-devel" arch="aarch64" epoch="0" version="9.54.0" release="17.el9_4" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>libgs-devel-9.54.0-17.el9_4.aarch64.rpm</filename>
          <sum type="sha256">ced00bea4406d6900b450f43169556a8cbd06c7496c300555742acf6f5800bfe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:6356</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for flatpak.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:6356" id="RLSA-2024:6356" type="self" title="RLSA-2024:6356" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="flatpak-devel" arch="aarch64" epoch="0" version="1.12.9" release="3.el9_5" src="flatpak-1.12.9-3.el9_5.src.rpm">
          <filename>flatpak-devel-1.12.9-3.el9_5.aarch64.rpm</filename>
          <sum type="sha256">3a73ec11e059ad01bdbdabcc7aec6933469af5b665c840fae76f69fe9eebdac4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11220</id>
    <title>ant bug fix update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for byte-buddy, jzlib, xerces-j2, xz-java, xml-commons-apis, jdepend, regexp, jakarta-mail, junit5, assertj-core, univocity-parsers, jakarta-oro, objectweb-asm, hamcrest, opentest4j, ant, antlr, apache-commons-logging, junit, xml-commons-resolver, jsch, bcel, jakarta-activation, bsf, apache-commons-net.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Apache Ant is a Java library and command-line tool, which drives processes described in build files as targets dependent upon each other. Ant provides a number of built-in tasks allowing to compile, assemble, test, and run Java applications. Ant can also be used effectively to build non-Java applications, for instance, C or C++ applications. Generally, Ant can be used to pilot any type of process which can be described in terms of targets and tasks.

Bug Fix(es):

* ant: Add OpenJDK bindings [rhel-9.5.z] (JIRA:Rocky Linux-62405)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11220" id="RLBA-2024:11220" type="self" title="RLBA-2024:11220" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="antlr-C++" arch="aarch64" epoch="0" version="2.7.7" release="70.el9_5" src="antlr-2.7.7-70.el9_5.src.rpm">
          <filename>antlr-C++-2.7.7-70.el9_5.aarch64.rpm</filename>
          <sum type="sha256">fadde8a7a28f2334266f0101f11bc0187b7531bae0bf686090f9824dec47880a</sum>
        </package>
        <package name="byte-buddy-agent" arch="noarch" epoch="0" version="1.10.20" release="7.el9_5" src="byte-buddy-1.10.20-7.el9_5.src.rpm">
          <filename>byte-buddy-agent-1.10.20-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">c3bdcfa9c3b7bf73866e0d1328400925f654f2533bee5f47ab5fcfacef4e3264</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:11222</id>
    <title>maven bug fix update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for jansi, cdi-api, google-guice, maven-wagon, plexus-cipher, guava, maven, httpcomponents-core, jakarta-annotations, apache-commons-io, maven-shared-utils, apache-commons-lang3, apache-commons-codec, plexus-interpolation, plexus-classworlds, sisu, plexus-sec-dispatcher, jsr-305, maven-resolver, httpcomponents-client, apache-commons-cli, plexus-containers, plexus-utils, slf4j, atinject, jsoup.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Bug Fix(es):

* maven: Suggest maven-openjdk17 [rhel-9.5.z] (JIRA:Rocky Linux-62398)

* maven: Add maven-openjdk21 [rhel-9.5.z] (JIRA:Rocky Linux-62407)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:11222" id="RLBA-2024:11222" type="self" title="RLBA-2024:11222" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="plexus-containers-container-default" arch="noarch" epoch="0" version="2.1.0" release="11.el9_5" src="plexus-containers-2.1.0-11.el9_5.src.rpm">
          <filename>plexus-containers-container-default-2.1.0-11.el9_5.noarch.rpm</filename>
          <sum type="sha256">99eb201e160e3d6363f388042eac35bd32d74e04182efe9416871ae2ef3e202c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2024:2525</id>
    <title>Moderate: mingw-pixman security update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mingw-pixman.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Pixman is a pixel manipulation library for the X Window System and Cairo.

Security Fix(es):

* pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" id="CVE-2022-44638" type="cve" title="CVE-2022-44638" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2139988" id="2139988" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2024:2525" id="RLSA-2024:2525" type="self" title="RLSA-2024:2525" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mingw32-pixman" arch="noarch" epoch="0" version="0.42.2" release="3.el9" src="mingw-pixman-0.42.2-3.el9.src.rpm">
          <filename>mingw32-pixman-0.42.2-3.el9.noarch.rpm</filename>
          <sum type="sha256">a5cb6e3f31dfd97f7a60273a071ba3fc53da6582a660e9255d0ad98c81b376b2</sum>
        </package>
        <package name="mingw64-pixman" arch="noarch" epoch="0" version="0.42.2" release="3.el9" src="mingw-pixman-0.42.2-3.el9.src.rpm">
          <filename>mingw64-pixman-0.42.2-3.el9.noarch.rpm</filename>
          <sum type="sha256">7fb1405bd7fb5f5a000d55cddfd16229d97edefaaf321dbbcf002966befeda7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2526</id>
    <title>qhull bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for qhull.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2526" id="RLBA-2024:2526" type="self" title="RLBA-2024:2526" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libqhull" arch="aarch64" epoch="1" version="7.2.1" release="11.el9" src="qhull-7.2.1-11.el9.src.rpm">
          <filename>libqhull-7.2.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">692b198892dd4198ff2a2717d8ecfbb294c0e15144bc8919b3b43ab79e8b82d5</sum>
        </package>
        <package name="libqhull_p" arch="aarch64" epoch="1" version="7.2.1" release="11.el9" src="qhull-7.2.1-11.el9.src.rpm">
          <filename>libqhull_p-7.2.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">2de76ab441c24c6b35f45fcc1d7b15e31f5650ab54ebf04f8b223b43a3df8716</sum>
        </package>
        <package name="libqhull_r" arch="aarch64" epoch="1" version="7.2.1" release="11.el9" src="qhull-7.2.1-11.el9.src.rpm">
          <filename>libqhull_r-7.2.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">f55c8c9ec018d83bbdca6af3a0c54ccff4ad63c0154390e15696125ea545b680</sum>
        </package>
        <package name="qhull-devel" arch="aarch64" epoch="1" version="7.2.1" release="11.el9" src="qhull-7.2.1-11.el9.src.rpm">
          <filename>qhull-devel-7.2.1-11.el9.aarch64.rpm</filename>
          <sum type="sha256">7393f9a92103aa8689c5f339437b3b803dca899335c1b2502e6decf0d3deb11b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2532</id>
    <title>python-sphinx bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python-sphinx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2532" id="RLBA-2024:2532" type="self" title="RLBA-2024:2532" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-sphinx" arch="noarch" epoch="1" version="3.4.3" release="8.el9" src="python-sphinx-3.4.3-8.el9.src.rpm">
          <filename>python3-sphinx-3.4.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">9f57fda12f6142127eadaf8b2783efe4896bb2a1ce58f83e8aaeb0501aa7cf0d</sum>
        </package>
        <package name="python3-sphinx-latex" arch="noarch" epoch="1" version="3.4.3" release="8.el9" src="python-sphinx-3.4.3-8.el9.src.rpm">
          <filename>python3-sphinx-latex-3.4.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">6a502985c3bfcd8520d0ab9a08df1fdb035a6e5fdf45ead14b9fac40a8ccf022</sum>
        </package>
        <package name="python-sphinx-doc" arch="noarch" epoch="1" version="3.4.3" release="8.el9" src="python-sphinx-3.4.3-8.el9.src.rpm">
          <filename>python-sphinx-doc-3.4.3-8.el9.noarch.rpm</filename>
          <sum type="sha256">e76aad8d57dae09b1a138dcb40a0e0701223c905dfdb6bc713b773b32ce40252</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2533</id>
    <title>perl-DateTime-TimeZone bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for perl-DateTime-TimeZone.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2533" id="RLBA-2024:2533" type="self" title="RLBA-2024:2533" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-DateTime-TimeZone" arch="noarch" epoch="0" version="2.62" release="1.el9" src="perl-DateTime-TimeZone-2.62-1.el9.src.rpm">
          <filename>perl-DateTime-TimeZone-2.62-1.el9.noarch.rpm</filename>
          <sum type="sha256">8888a9e9b117f654f782015d63bc4612fbb61db8b2db3f4b2eca9ec9b358f6e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2539</id>
    <title>python3.12-iniconfig bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-iniconfig.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2539" id="RLBA-2024:2539" type="self" title="RLBA-2024:2539" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-iniconfig" arch="noarch" epoch="0" version="1.1.1" release="3.el9" src="python3.12-iniconfig-1.1.1-3.el9.src.rpm">
          <filename>python3.12-iniconfig-1.1.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">f002c818355a3069f3ff8bb65b2caac6899786774613466799016557817a0479</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:2542</id>
    <title>python3.12-pybind11 bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-10-17 21:54:20" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for python3.12-pybind11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:2542" id="RLBA-2024:2542" type="self" title="RLBA-2024:2542" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-pybind11" arch="aarch64" epoch="0" version="2.11.1" release="3.el9" src="python3.12-pybind11-2.11.1-3.el9.src.rpm">
          <filename>python3.12-pybind11-2.11.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">ddaebfff2d65a5d84d0d9818376a22c8233652e8b4a1a5a38878b9af6b07626e</sum>
        </package>
        <package name="python3.12-pybind11-devel" arch="aarch64" epoch="0" version="2.11.1" release="3.el9" src="python3.12-pybind11-2.11.1-3.el9.src.rpm">
          <filename>python3.12-pybind11-devel-2.11.1-3.el9.aarch64.rpm</filename>
          <sum type="sha256">8d27bac814e5c2074808620c26526656c33ac9e48647e84d3964f03cb41e3be8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="bugfix" version="2">
    <id>RLBA-2024:6177</id>
    <title>pybind11 bug fix and enhancement update</title>
    <issued date="2025-05-07 19:13:05" />
    <updated date="2025-05-07 19:15:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update is available for pybind11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>pybind11 is a lightweight header-only library that exposes C++ types in Python and vice versa, mainly to create Python bindings of existing C++ code.

Bug Fix(es) and Enhancement(s):

* python3.11-pybind11-devel-2.10.3-2.el9 is still in the Rocky Linux 9.4 repos, masking the fix in python3.11-pybind11-devel-2.10.3-3.el9 (JIRA:Rocky Linux-38108)</description>
    <solution />
    <references>
      <reference href="https://errata.rockylinux.org/RLBA-2024:6177" id="RLBA-2024:6177" type="self" title="RLBA-2024:6177" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="pybind11-devel" arch="aarch64" epoch="1" version="2.6.2" release="6.el9_4" src="pybind11-2.6.2-6.el9_4.src.rpm">
          <filename>pybind11-devel-2.6.2-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">63557cffa99bc47441c82ed8e4707951a1dac501201903a89655c31e1bbce1a9</sum>
        </package>
        <package name="python3-pybind11" arch="aarch64" epoch="0" version="2.6.2" release="6.el9_4" src="pybind11-2.6.2-6.el9_4.src.rpm">
          <filename>python3-pybind11-2.6.2-6.el9_4.aarch64.rpm</filename>
          <sum type="sha256">d96bfe866a4fcea56745a55a92f785fcc60bf1eaa96e2bf36d1a0940f958621c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:4244</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-07-29 13:40:13" />
    <updated date="2025-07-29 15:00:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2339460" id="2339460" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:4244" id="RLSA-2025:4244" type="self" title="RLSA-2025:4244" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="125.el9_5.8" src="glibc-2.34-125.el9_5.8.src.rpm">
          <filename>glibc-benchtests-2.34-125.el9_5.8.aarch64.rpm</filename>
          <sum type="sha256">fdb46c54bc2795364eacab5ff8b440ea999927a389b6aebee92edfe3adf98517</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="125.el9_5.8" src="glibc-2.34-125.el9_5.8.src.rpm">
          <filename>glibc-nss-devel-2.34-125.el9_5.8.aarch64.rpm</filename>
          <sum type="sha256">32f767be615b276fc25a70cd7cfee4507c9c8f85c7e2f0ba875c9b30bbf185ad</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="125.el9_5.8" src="glibc-2.34-125.el9_5.8.src.rpm">
          <filename>glibc-static-2.34-125.el9_5.8.aarch64.rpm</filename>
          <sum type="sha256">4b6e1f3c71ad9c9aef57642f59fd8852f59fc4c58d1cef5d32c3bedcbe354744</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="125.el9_5.8" src="glibc-2.34-125.el9_5.8.src.rpm">
          <filename>nss_db-2.34-125.el9_5.8.aarch64.rpm</filename>
          <sum type="sha256">83dce84e250b8017bc172c6179eec388d8d015f24bc0a405d7958c2a13f6924b</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="125.el9_5.8" src="glibc-2.34-125.el9_5.8.src.rpm">
          <filename>nss_hesiod-2.34-125.el9_5.8.aarch64.rpm</filename>
          <sum type="sha256">365c021c5b8e45cfee92be5e5fde3ccc4f91e569ade4068594c5d783119b2d0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:4341</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-29 13:40:13" />
    <updated date="2025-07-29 15:00:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: kobject_uevent: Fix OOB access within zap_modalias_env() (CVE-2024-42292)

* kernel: ipvs: properly dereference pe in ip_vs_add_service (CVE-2024-42322)

* kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok (CVE-2024-44990)

* kernel: ELF: fix kernel.randomize_va_space double read (CVE-2024-46826)

* kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" id="CVE-2024-42292" type="cve" title="CVE-2024-42292" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" id="CVE-2024-42322" type="cve" title="CVE-2024-42322" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44990" id="CVE-2024-44990" type="cve" title="CVE-2024-44990" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46826" id="CVE-2024-46826" type="cve" title="CVE-2024-46826" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21927" id="CVE-2025-21927" type="cve" title="CVE-2025-21927" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2305437" id="2305437" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2305467" id="2305467" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2309853" id="2309853" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2315178" id="2315178" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356593" id="2356593" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:4341" id="RLSA-2025:4341" type="self" title="RLSA-2025:4341" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="503.40.1.el9_5" src="kernel-5.14.0-503.40.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.40.1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">bd180f38e17c8be6728231b6c9339d765e11764caabd6e8b7e794b86e16f93a8</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="503.40.1.el9_5" src="kernel-5.14.0-503.40.1.el9_5.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-503.40.1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">40b3a47206e7efab12a053f81c14e8c2a20837360c4d26965cb3329ec877e3bb</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="503.40.1.el9_5" src="kernel-5.14.0-503.40.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.40.1.el9_5.aarch64.rpm</filename>
          <sum type="sha256">c6de35c06bdbd5fc00e028636cc165c5d7eef4dca0d6acabb84929feaa2008e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:3631</id>
    <title>Low: python3.12 security update</title>
    <issued date="2025-07-29 13:40:15" />
    <updated date="2025-07-29 15:00:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" id="CVE-2024-7592" type="cve" title="CVE-2024-7592" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2305879" id="2305879" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:3631" id="RLSA-2025:3631" type="self" title="RLSA-2025:3631" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.3" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">d67f4e33f9a26d592c682009c85cb97c185545610d14a7fbe484afb241a7749d</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.3" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">821cd88fbec89d5e22f0ef9cd168b234f45adcde48a3923441446a1663bcc429</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.5" release="2.el9_5.3" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">b09d24ca43c52afd9f11100194f4284760f3c6165216b491e4cb882871204072</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:3634</id>
    <title>Low: python3.11 security update</title>
    <issued date="2025-07-29 13:40:15" />
    <updated date="2025-07-29 15:00:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" id="CVE-2024-7592" type="cve" title="CVE-2024-7592" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2305879" id="2305879" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:3634" id="RLSA-2025:3634" type="self" title="RLSA-2025:3634" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.3" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">fe1addf490514358c7a183995dc3db92c2cdd887c078b5062a261ae9471cf89a</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.3" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">ff1024193c6ebc2f3ff13b36e9e0ef755cdafec8566ec501410d49f7dce7dc5b</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.9" release="7.el9_5.3" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9_5.3.aarch64.rpm</filename>
          <sum type="sha256">7c435eb8fc00851bf0bd0197fa54ead0d5958042a98c43c6a776c21e2e2aa234</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:4491</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2025-07-29 13:40:15" />
    <updated date="2025-07-29 15:00:30" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2487" id="CVE-2025-2487" type="cve" title="CVE-2025-2487" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2353071" id="2353071" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:4491" id="RLSA-2025:4491" type="self" title="RLSA-2025:4491" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="389-ds-base-devel" arch="aarch64" epoch="0" version="2.5.2" release="9.el9_5" src="389-ds-base-2.5.2-9.el9_5.src.rpm">
          <filename>389-ds-base-devel-2.5.2-9.el9_5.aarch64.rpm</filename>
          <sum type="sha256">d7c4b0f09031e9498d888397c9d15fc7da2014af6cfaa65ff61245c47a8f779b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:4487</id>
    <title>Moderate: ruby security update</title>
    <issued date="2025-07-29 13:40:15" />
    <updated date="2025-10-17 21:53:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for ruby.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)

* CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219" id="CVE-2025-27219" type="cve" title="CVE-2025-27219" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27220" id="CVE-2025-27220" type="cve" title="CVE-2025-27220" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2349696" id="2349696" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2349699" id="2349699" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:4487" id="RLSA-2025:4487" type="self" title="RLSA-2025:4487" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="ruby-doc" arch="noarch" epoch="0" version="3.0.7" release="165.el9_5" src="ruby-3.0.7-165.el9_5.src.rpm">
          <filename>ruby-doc-3.0.7-165.el9_5.noarch.rpm</filename>
          <sum type="sha256">d9420c2c877c4d0c0165e5bd520997117baa9726db41e8bf880643adef71071d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:19105</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-06 09:06:00" />
    <updated date="2025-11-20 09:07:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718)

* kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)

* kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CVE-2025-39751)

* kernel: fs/smb: Fix inconsistent refcnt update (CVE-2025-39819)

* kernel: pstore/ram: Check start of empty przs during init (CVE-2023-53331)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53331" id="CVE-2023-53331" type="cve" title="CVE-2023-53331" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39718" id="CVE-2025-39718" type="cve" title="CVE-2025-39718" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39730" id="CVE-2025-39730" type="cve" title="CVE-2025-39730" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39751" id="CVE-2025-39751" type="cve" title="CVE-2025-39751" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39819" id="CVE-2025-39819" type="cve" title="CVE-2025-39819" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2393507" id="2393507" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2393731" id="2393731" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2394624" id="2394624" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2395806" id="2395806" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2395880" id="2395880" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:19105" id="RLSA-2025:19105" type="self" title="RLSA-2025:19105" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.58.1.el9_6" src="kernel-5.14.0-570.58.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.58.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">50aeada1d3d3c50e03c493b9a530522c1acf0419c79006448ba0001ec5c5ad74</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.58.1.el9_6" src="kernel-5.14.0-570.58.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.58.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">3e36c9d36a13019fc19b8e103a4aa300936b8de1dc094cd1c83477f13ba7fb77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:19113</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-06 09:06:00" />
    <updated date="2025-11-20 09:07:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for libtiff.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)

* libtiff: Libtiff Write-What-Where (CVE-2025-9900)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383598" id="2383598" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2392784" id="2392784" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:19113" id="RLSA-2025:19113" type="self" title="RLSA-2025:19113" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libtiff-tools" arch="aarch64" epoch="0" version="4.4.0" release="13.el9_6.2" src="libtiff-4.4.0-13.el9_6.2.src.rpm">
          <filename>libtiff-tools-4.4.0-13.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">6ef8dbbf40720666e90e08a6347a8171115e0e28305cce5f058a6a0f61071c89</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7138</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for protobuf.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: message parsing vulnerability in ProtocolBuffers (CVE-2022-1941)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1941" id="CVE-2022-1941" type="cve" title="CVE-2022-1941" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2291470" id="2291470" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7138" id="RLSA-2025:7138" type="self" title="RLSA-2025:7138" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="protobuf-compiler" arch="aarch64" epoch="0" version="3.14.0" release="16.el9" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-compiler-3.14.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">2d7e0222a9303a777b6559a046161199655bad67ffe0a1d29a2ec76377e1b2dd</sum>
        </package>
        <package name="protobuf-devel" arch="aarch64" epoch="0" version="3.14.0" release="16.el9" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-devel-3.14.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">2fc444bfc0e00f0f0cdae478b67f799fc04a204748aee93513e9913ecb31b9e9</sum>
        </package>
        <package name="protobuf-lite-devel" arch="aarch64" epoch="0" version="3.14.0" release="16.el9" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-16.el9.aarch64.rpm</filename>
          <sum type="sha256">9efe5ac85e28b60ccf1b23f40fa004002df785f44f2bdd2bee1e2287dee1b01d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7309</id>
    <title>Moderate: openjpeg2 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for openjpeg2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826)

* openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56826" id="CVE-2024-56826" type="cve" title="CVE-2024-56826" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56827" id="CVE-2024-56827" type="cve" title="CVE-2024-56827" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2335172" id="2335172" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2335174" id="2335174" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7309" id="RLSA-2025:7309" type="self" title="RLSA-2025:7309" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="openjpeg2-devel" arch="aarch64" epoch="0" version="2.4.0" release="8.el9" src="openjpeg2-2.4.0-8.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">ede75d0383ced40a0e748d2497a1dc8c8df90f7183d0126651c9d41d3e2b7b64</sum>
        </package>
        <package name="openjpeg2-tools" arch="aarch64" epoch="0" version="2.4.0" release="8.el9" src="openjpeg2-2.4.0-8.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-8.el9.aarch64.rpm</filename>
          <sum type="sha256">23950e4c3484e2e6fa1b5ccf65524e23d366391dabca4664079e74b2f8f696cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7109</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:31" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2343237" id="2343237" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7109" id="RLSA-2025:7109" type="self" title="RLSA-2025:7109" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.11" release="2.el9" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-debug-3.11.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">1456139534e68b82e5dbe531b4d6670d0825a359457f1ea4ae66364d005e4c71</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.11" release="2.el9" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-idle-3.11.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3a60a499287a4ce5a968a411e9786333565675bcf8050aba1d6ba1a1e3330d41</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.11" release="2.el9" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-test-3.11.11-2.el9.aarch64.rpm</filename>
          <sum type="sha256">9cd44ca4b0c568bc0d7a1cb492172d763a20d06825477635dbf761457bfbf51f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7163</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:32" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for xorg-x11-server.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

* X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)

* xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)

* xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)

* xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)

* xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)

* xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)

* xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)

* Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2317233" id="2317233" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345248" id="2345248" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345251" id="2345251" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345252" id="2345252" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345253" id="2345253" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345254" id="2345254" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345255" id="2345255" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345256" id="2345256" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345257" id="2345257" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7163" id="RLSA-2025:7163" type="self" title="RLSA-2025:7163" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-devel" arch="aarch64" epoch="0" version="1.20.11" release="28.el9_6" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-28.el9_6.aarch64.rpm</filename>
          <sum type="sha256">ab0fafcbb70f9644d5d2cfb58a03b60fd924d5212a209dc833505a68ea4f39ab</sum>
        </package>
        <package name="xorg-x11-server-source" arch="noarch" epoch="0" version="1.20.11" release="28.el9_6" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-28.el9_6.noarch.rpm</filename>
          <sum type="sha256">4f5f84d3030542f7f8e5e54cea563012231532e4385ceda2d121d15f7f4d5f04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7165</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for xorg-x11-server-Xwayland.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

* X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)

* xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)

* xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)

* xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)

* xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)

* xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)

* xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)

* Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2317233" id="2317233" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345248" id="2345248" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345251" id="2345251" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345252" id="2345252" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345253" id="2345253" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345254" id="2345254" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345255" id="2345255" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345256" id="2345256" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2345257" id="2345257" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7165" id="RLSA-2025:7165" type="self" title="RLSA-2025:7165" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-Xwayland-devel" arch="aarch64" epoch="0" version="23.2.7" release="3.el9_6" src="xorg-x11-server-Xwayland-23.2.7-3.el9_6.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-3.el9_6.aarch64.rpm</filename>
          <sum type="sha256">8a5b0f3e0f9808d047851e3640f874723fb459d71923b52d76a11e03878a5d51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:6977</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2343237" id="2343237" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:6977" id="RLSA-2025:6977" type="self" title="RLSA-2025:6977" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.21" release="2.el9" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-debug-3.9.21-2.el9.aarch64.rpm</filename>
          <sum type="sha256">3cfd1109facf7a6641cefc1afb78413c926c8b38ede0808052a192f745effe4f</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.21" release="2.el9" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-idle-3.9.21-2.el9.aarch64.rpm</filename>
          <sum type="sha256">d64d484621a3d62e0fead445769cf05a846564c5a353b855b013b10adc34c454</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.21" release="2.el9" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-test-3.9.21-2.el9.aarch64.rpm</filename>
          <sum type="sha256">7f8e05e2538061a2fd032b918276e04e0994bcbce9d6aca8353e64703c8249cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7107</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:34" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2343237" id="2343237" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7107" id="RLSA-2025:7107" type="self" title="RLSA-2025:7107" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.9" release="1.el9" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-debug-3.12.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">5758c50f6e463ca17813804949f8e17ef112a6577bc6059f7240f06e3bd171bb</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.9" release="1.el9" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-idle-3.12.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">e8943870e9f417ef6f18c07d27d2f31d3bde5b8d90d6db2516b3b0aa40e5286d</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.9" release="1.el9" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-test-3.12.9-1.el9.aarch64.rpm</filename>
          <sum type="sha256">69df4fcb65bbba68614b741d8d660851bb5c93dc257cebf8f03de4e51e87907a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7201</id>
    <title>Moderate: corosync security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for corosync.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.

Security Fix(es):

* corosync: Stack buffer overflow from 'orf_token_endian_convert' (CVE-2025-30472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30472" id="CVE-2025-30472" type="cve" title="CVE-2025-30472" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2354229" id="2354229" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7201" id="RLSA-2025:7201" type="self" title="RLSA-2025:7201" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="corosync-vqsim" arch="aarch64" epoch="0" version="3.1.9" release="2.el9_6" src="corosync-3.1.9-2.el9_6.src.rpm">
          <filename>corosync-vqsim-3.1.9-2.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f550cd9282ca2a8164b6aa02e8e5b78ea496468a52c795fd2eb305fdaf5206d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7395</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:40" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2487" id="CVE-2025-2487" type="cve" title="CVE-2025-2487" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2353071" id="2353071" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7395" id="RLSA-2025:7395" type="self" title="RLSA-2025:7395" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="389-ds-base-devel" arch="aarch64" epoch="0" version="2.6.1" release="8.el9_6" src="389-ds-base-2.6.1-8.el9_6.src.rpm">
          <filename>389-ds-base-devel-2.6.1-8.el9_6.aarch64.rpm</filename>
          <sum type="sha256">572770a6631a7639dd4154ba0f620ac26d53dbaa7effe7280514fc97f821333c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7402</id>
    <title>Moderate: nginx security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:44" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for nginx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741)

* nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742)

* nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41741" id="CVE-2022-41741" type="cve" title="CVE-2022-41741" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41742" id="CVE-2022-41742" type="cve" title="CVE-2022-41742" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7347" id="CVE-2024-7347" type="cve" title="CVE-2024-7347" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141495" id="2141495" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2141496" id="2141496" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2304966" id="2304966" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7402" id="RLSA-2025:7402" type="self" title="RLSA-2025:7402" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="nginx-mod-devel" arch="aarch64" epoch="2" version="1.20.1" release="22.el9_6.2" src="nginx-1.20.1-22.el9_6.2.src.rpm">
          <filename>nginx-mod-devel-1.20.1-22.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">ba3bb944ebe7f427a5424dae3e2bfad9f2aeb9da142e010661cc017e9514636f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7430</id>
    <title>Important: yelp security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-17 21:53:41" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for yelp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

* yelp: Arbitrary file read (CVE-2025-3155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3155" id="CVE-2025-3155" type="cve" title="CVE-2025-3155" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2357091" id="2357091" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7430" id="RLSA-2025:7430" type="self" title="RLSA-2025:7430" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="yelp-devel" arch="aarch64" epoch="2" version="40.3" release="2.el9_6.1" src="yelp-40.3-2.el9_6.1.src.rpm">
          <filename>yelp-devel-40.3-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">d7c60cc766eda20fbf57e6a6de1bbb1f84b319f8999e7e3913c7395069cf9f1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7437</id>
    <title>Moderate: avahi security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for avahi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52616" id="CVE-2024-52616" type="cve" title="CVE-2024-52616" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2326429" id="2326429" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7437" id="RLSA-2025:7437" type="self" title="RLSA-2025:7437" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="avahi-compat-howl" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-howl-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">03ec96e8681f8e05948f01a67852fd4f65600dc1fde5c29d1dc521408dd3b85c</sum>
        </package>
        <package name="avahi-compat-howl-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">fb0185a61f0e4c245fc253f5e2c6b59127516f85b36c8d182ff3b5b0aff1497d</sum>
        </package>
        <package name="avahi-compat-libdns_sd" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">7ef4a434cdce8199296d0aea9864d8a5d94d7cbeacbcd4a68a875c53aee83397</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">0bd3efc8b9a8cd01c46547bd95c2d4d1ce0bdf98a9f083d4bea02ec6074e5566</sum>
        </package>
        <package name="avahi-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-devel-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">b952c1ea5eb72a72ed39d37fdcb27ec41e2414c475ee2af1a2171f36d9739266</sum>
        </package>
        <package name="avahi-glib-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-glib-devel-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">66a77b583bbac83f6b08e8829bb53a8e202f3be6714a8445bef8700a57b6e718</sum>
        </package>
        <package name="avahi-gobject" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-gobject-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">83a597efcb9ae0f29e3efd8b0fd330f6ed643c2fa131de70e1d49ba49b91b9ee</sum>
        </package>
        <package name="avahi-gobject-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-gobject-devel-0.8-22.el9_6.aarch64.rpm</filename>
          <sum type="sha256">6bb24f6afdadbb6c62b066ee1f88d6fe9142e40e282e4852305ca20e43005dde</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7586</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for ghostscript.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27832" id="CVE-2025-27832" type="cve" title="CVE-2025-27832" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2354949" id="2354949" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7586" id="RLSA-2025:7586" type="self" title="RLSA-2025:7586" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libgs-devel" arch="aarch64" epoch="0" version="9.54.0" release="19.el9_6" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>libgs-devel-9.54.0-19.el9_6.aarch64.rpm</filename>
          <sum type="sha256">95fd8c1047993820ce962ee1eef6ecf0d2a964d4ea36020e09a459e2981fb7ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7598</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es):

* dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2365317" id="2365317" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7598" id="RLSA-2025:7598" type="self" title="RLSA-2025:7598" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.116" release="1.el9_6" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.116-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">b8695ba77d4e8bde4c61bad7232e945cd6eba6870ba49602ec3fa167e6a6da06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7600</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:48" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet9.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es):

* dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2365317" id="2365317" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7600" id="RLSA-2025:7600" type="self" title="RLSA-2025:7600" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" arch="aarch64" epoch="0" version="9.0.106" release="1.el9_6" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.106-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f4ce21faf353f34b8844dd5ff6ffddffc5736710e4ae81218918e7d3e8d2c395</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8142</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21964" id="CVE-2025-21964" type="cve" title="CVE-2025-21964" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356665" id="2356665" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8142" id="RLSA-2025:8142" type="self" title="RLSA-2025:8142" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.18.1.el9_6" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.18.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">4e142e177b7f633a0be738c6515c49070197b1a61bc1d55ba8aa95c6598ca540</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.18.1.el9_6" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.18.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">8c26a5a8bd966ed00031185d8c753e8e70e7ef14148fc029b08e3fc022ee900d</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.18.1.el9_6" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.18.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">a758bdb45170c6a6adbd2598440c6a3e48de11532642b900f4f383ed4607b4ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8183</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for gstreamer1-plugins-bad-free.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3887" id="CVE-2025-3887" type="cve" title="CVE-2025-3887" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367919" id="2367919" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8183" id="RLSA-2025:8183" type="self" title="RLSA-2025:8183" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="gstreamer1-plugins-bad-free-devel" arch="aarch64" epoch="0" version="1.22.12" release="4.el9_6" src="gstreamer1-plugins-bad-free-1.22.12-4.el9_6.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-4.el9_6.aarch64.rpm</filename>
          <sum type="sha256">ebced7e74b91c5a2f227b3f25dc2e7d3e3690e848d98dcd5b2d3ae7907dc9284</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8197</id>
    <title>Moderate: unbound security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for unbound.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8508" id="CVE-2024-8508" type="cve" title="CVE-2024-8508" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2316321" id="2316321" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8197" id="RLSA-2025:8197" type="self" title="RLSA-2025:8197" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unbound-devel" arch="aarch64" epoch="0" version="1.16.2" release="18.el9_6" src="unbound-1.16.2-18.el9_6.src.rpm">
          <filename>unbound-devel-1.16.2-18.el9_6.aarch64.rpm</filename>
          <sum type="sha256">52709947f618ee327224123497c40efe9ffbfdd389df44b2ec68d273c6c361bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8333</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424)

* kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3424" id="CVE-2022-3424" type="cve" title="CVE-2022-3424" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21764" id="CVE-2025-21764" type="cve" title="CVE-2025-21764" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2132640" id="2132640" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2348575" id="2348575" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8333" id="RLSA-2025:8333" type="self" title="RLSA-2025:8333" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.19.1.el9_6" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.19.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">9ddd6ccfd11423dc2d9259a2d65ab465ee0dada5e3a53fb5ba3aa379cb844900</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.19.1.el9_6" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.19.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">ad618d5f661c84f7db43331e9ac66c185fd963339fe0b8e39c0bb76fbb40f035</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.19.1.el9_6" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.19.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">be5aa69e30eecae1e6da19be08e28ca0671d15e215e0c8aab6c299f98db3fad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8337</id>
    <title>Important: varnish security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: request smuggling attacks (CVE-2025-47905)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47905" id="CVE-2025-47905" type="cve" title="CVE-2025-47905" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2364235" id="2364235" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8337" id="RLSA-2025:8337" type="self" title="RLSA-2025:8337" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="varnish-devel" arch="aarch64" epoch="0" version="6.6.2" release="6.el9_6.1" src="varnish-6.6.2-6.el9_6.1.src.rpm">
          <filename>varnish-devel-6.6.2-6.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">821bc849cc3a0b5f9d7050f634a1d12eb6593da024244b75d8691e3b67d21478</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8655</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367468" id="2367468" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8655" id="RLSA-2025:8655" type="self" title="RLSA-2025:8655" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.19" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-benchtests-2.34-168.el9_6.19.aarch64.rpm</filename>
          <sum type="sha256">a6b97c8da66d715a6b8fda6f1d5f279d1be49c689f5a7d941e7000ed352d0261</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.19" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-nss-devel-2.34-168.el9_6.19.aarch64.rpm</filename>
          <sum type="sha256">c026dac188dd7681b8e5120e195e9e8134ebd7f0a435ea9a0063a1a4c3ecc4e6</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.19" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-static-2.34-168.el9_6.19.aarch64.rpm</filename>
          <sum type="sha256">6205f7d6b6efb5a46ed38d662ab628e8a644749241c5fe68eed17934155c67ee</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.19" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>nss_db-2.34-168.el9_6.19.aarch64.rpm</filename>
          <sum type="sha256">dc8c6168938f66bbeb9d7b4110d1ff4b3b201c0fa3a4aca9a25ff9680d79a509</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.19" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>nss_hesiod-2.34-168.el9_6.19.aarch64.rpm</filename>
          <sum type="sha256">34896a0f0ec805ad516ea0156d8b470782678bf9b549db1d4022b42430d9b221</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8643</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)

* kernel: vlan: enforce underlying device type (CVE-2025-21920)

* kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)

* kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)

* kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)

* kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21920" id="CVE-2025-21920" type="cve" title="CVE-2025-21920" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21926" id="CVE-2025-21926" type="cve" title="CVE-2025-21926" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21997" id="CVE-2025-21997" type="cve" title="CVE-2025-21997" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22055" id="CVE-2025-22055" type="cve" title="CVE-2025-22055" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37785" id="CVE-2025-37785" type="cve" title="CVE-2025-37785" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37943" id="CVE-2025-37943" type="cve" title="CVE-2025-37943" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356587" id="2356587" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356639" id="2356639" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2357143" id="2357143" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360300" id="2360300" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360921" id="2360921" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367748" id="2367748" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8643" id="RLSA-2025:8643" type="self" title="RLSA-2025:8643" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.21.1.el9_6" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.21.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">c5a85dbf3c656bc823f178541f152b89d39a5e68d3a6b413faedcbf3493d0db9</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.21.1.el9_6" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.21.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">d2cd8562ac9aa610d81b26b0a95bedd32bc1bda9bbdc22e77b24ce442c6db48c</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.21.1.el9_6" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.21.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">3b9ec41037d5042c7bcf167caf2efe6f8b789ddb83130c0dfc726a1bf45918c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8813</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:56" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet8.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es):

* dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369701" id="2369701" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8813" id="RLSA-2025:8813" type="self" title="RLSA-2025:8813" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" arch="aarch64" epoch="0" version="8.0.117" release="1.el9_6" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.117-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f10a16ea2a022b3c6c8cbea0f48f97aaea1363d4227d58bf3a2467572cf88f6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:8817</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:57" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for dotnet9.0.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es):

* dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369701" id="2369701" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:8817" id="RLSA-2025:8817" type="self" title="RLSA-2025:8817" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" arch="aarch64" epoch="0" version="9.0.107" release="1.el9_6" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.107-1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">707a9ee53badad8fb806ee63da5e166ecbe1abaabca0671d908a3c72dd43d5b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9080</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:17:58" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)

* kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)

* kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)

* kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)

* kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)

* kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)

* kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21961" id="CVE-2025-21961" type="cve" title="CVE-2025-21961" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21963" id="CVE-2025-21963" type="cve" title="CVE-2025-21963" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21969" id="CVE-2025-21969" type="cve" title="CVE-2025-21969" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21979" id="CVE-2025-21979" type="cve" title="CVE-2025-21979" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21999" id="CVE-2025-21999" type="cve" title="CVE-2025-21999" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22126" id="CVE-2025-22126" type="cve" title="CVE-2025-22126" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37750" id="CVE-2025-37750" type="cve" title="CVE-2025-37750" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356584" id="2356584" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356633" id="2356633" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356642" id="2356642" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356652" id="2356652" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2357134" id="2357134" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360236" id="2360236" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363341" id="2363341" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9080" id="RLSA-2025:9080" type="self" title="RLSA-2025:9080" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.22.1.el9_6" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.22.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">4c80dc05cb1994cea43ccb6598769d688c383e15d652ceef3a1f0bf24d56838f</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.22.1.el9_6" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.22.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">982dacf3e86c87ffc7f3e04dea9af104f545a8ee6313da423c2de82b34f954ab</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.22.1.el9_6" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.22.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">7e6f421c603dc2acd697f710dcb0ff7a9a385275904a7f8152fde72b2d9d8a43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9118</id>
    <title>Important: libvpx security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:45" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for libvpx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5283" id="CVE-2025-5283" type="cve" title="CVE-2025-5283" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2368749" id="2368749" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9118" id="RLSA-2025:9118" type="self" title="RLSA-2025:9118" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="libvpx-devel" arch="aarch64" epoch="0" version="1.9.0" release="9.el9_6" src="libvpx-1.9.0-9.el9_6.src.rpm">
          <filename>libvpx-devel-1.9.0-9.el9_6.aarch64.rpm</filename>
          <sum type="sha256">0cb6ec6b42b3f63fdaef8e9b7bd08cb6c04e95dba031a8692f1379b283c08ece</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9184</id>
    <title>Important: ipa security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:01" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for ipa.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4404" id="CVE-2025-4404" type="cve" title="CVE-2025-4404" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2364606" id="2364606" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9184" id="RLSA-2025:9184" type="self" title="RLSA-2025:9184" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-ipatests" arch="noarch" epoch="0" version="4.12.2" release="14.el9_6.1" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>python3-ipatests-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">ea7a8844f3592352327b6269b9a9fb1eb4bf0df2bb485c317db5b931e5073b2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9302</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)

* kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)

* kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)

* kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)

* kernel: ext4: ignore xattrs past end (CVE-2025-37738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21883" id="CVE-2025-21883" type="cve" title="CVE-2025-21883" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21919" id="CVE-2025-21919" type="cve" title="CVE-2025-21919" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22104" id="CVE-2025-22104" type="cve" title="CVE-2025-22104" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23150" id="CVE-2025-23150" type="cve" title="CVE-2025-23150" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37738" id="CVE-2025-37738" type="cve" title="CVE-2025-37738" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2355415" id="2355415" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356618" id="2356618" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360265" id="2360265" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363268" id="2363268" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363305" id="2363305" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9302" id="RLSA-2025:9302" type="self" title="RLSA-2025:9302" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.23.1.el9_6" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.23.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">7f7831d5c311ba2bbc98634071e7912bd6d386541effa94346bc724d59e2fd7d</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.23.1.el9_6" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.23.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">df28a4262e2b4c180fa5b54aa962de7faac5cee37d1c684f3195c6ccb1a46a6a</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.23.1.el9_6" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.23.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">b23b28f156be5c2621527ad242f3e76c299f36e70a6cd79141d9ab39fce537a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9303</id>
    <title>Important: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-17 21:53:47" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for xorg-x11-server-Xwayland, xorg-x11-server.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)

* xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)

* xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)

* xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)

* xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369947" id="2369947" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369954" id="2369954" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369977" id="2369977" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369978" id="2369978" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369981" id="2369981" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9303" id="RLSA-2025:9303" type="self" title="RLSA-2025:9303" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="xorg-x11-server-devel" arch="aarch64" epoch="0" version="1.20.11" release="31.el9_6" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-31.el9_6.aarch64.rpm</filename>
          <sum type="sha256">a56d13cbcdc5079f53c6bc5c2699d47225761be51c6a0d6f6fbc0ab1ee661bb5</sum>
        </package>
        <package name="xorg-x11-server-source" arch="noarch" epoch="0" version="1.20.11" release="31.el9_6" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-31.el9_6.noarch.rpm</filename>
          <sum type="sha256">bc57af3d0506c15a8e120f607de0699f642936d82439771444b802f1de666da7</sum>
        </package>
        <package name="xorg-x11-server-Xwayland-devel" arch="aarch64" epoch="0" version="23.2.7" release="4.el9_6" src="xorg-x11-server-Xwayland-23.2.7-4.el9_6.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-4.el9_6.aarch64.rpm</filename>
          <sum type="sha256">e0e269ae20e40e72f2db2e10612db453bf4498c94702e96ca8d8435defad7421</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9462</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for qt5-qtbase.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5455" id="CVE-2025-5455" type="cve" title="CVE-2025-5455" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369722" id="2369722" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9462" id="RLSA-2025:9462" type="self" title="RLSA-2025:9462" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="qt5-qtbase-static" arch="aarch64" epoch="0" version="5.15.9" release="11.el9_6" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-11.el9_6.aarch64.rpm</filename>
          <sum type="sha256">72ee3f57014a9029825fc3508de9006131f09f5615e2b45e4dcd9e71f1fd8429</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9877</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:16" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Vector register overwrite bug in glibc (CVE-2025-5702)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5702" id="CVE-2025-5702" type="cve" title="CVE-2025-5702" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370472" id="2370472" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9877" id="RLSA-2025:9877" type="self" title="RLSA-2025:9877" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.20" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-benchtests-2.34-168.el9_6.20.aarch64.rpm</filename>
          <sum type="sha256">f20a5d85f551b23891f01f6a94d2dea1c141a6f7c25a69b7aed99cb7a786e9a3</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.20" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-nss-devel-2.34-168.el9_6.20.aarch64.rpm</filename>
          <sum type="sha256">a53f7f3c0fb34fc0779c314ef2bd12e4b9f800ff6d13d108970dbd0884a6201d</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.20" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-static-2.34-168.el9_6.20.aarch64.rpm</filename>
          <sum type="sha256">09b461c3f7bc0dc6e2790320c5a12a22622f3e0ea7241c2cc794c2115150dff6</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.20" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>nss_db-2.34-168.el9_6.20.aarch64.rpm</filename>
          <sum type="sha256">622944abb357531b59ee2d23b0643e3d0952550d0e994aa1f03de7bded2b91d7</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.20" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>nss_hesiod-2.34-168.el9_6.20.aarch64.rpm</filename>
          <sum type="sha256">f0cc48ec101bcf4060af8cd9d17c695d223d3a8ac9c7fa9a6f4e8f3df45aeb8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:10136</id>
    <title>Important: python3.9 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

* cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

* cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

* python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

* cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370010" id="2370010" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370013" id="2370013" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370014" id="2370014" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370016" id="2370016" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2372426" id="2372426" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:10136" id="RLSA-2025:10136" type="self" title="RLSA-2025:10136" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-debug" arch="aarch64" epoch="0" version="3.9.21" release="2.el9_6.1" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-debug-3.9.21-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">d2e01c33ba12f281b5f1d6ba6713ca94d564243c1f9d5ecf914cce774bcd7e53</sum>
        </package>
        <package name="python3-idle" arch="aarch64" epoch="0" version="3.9.21" release="2.el9_6.1" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-idle-3.9.21-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">49f4ac0b211c7e5fb56dcf2e7db967c1fba6d4671253b63967fc79a81a8dce1f</sum>
        </package>
        <package name="python3-test" arch="aarch64" epoch="0" version="3.9.21" release="2.el9_6.1" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-test-3.9.21-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">93794e7ee4ee59b2c173c9e813390a74a38c79d57c522971c0a7d9bea0f065af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:10148</id>
    <title>Important: python3.11 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:17" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

* cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

* cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

* python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

* cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370010" id="2370010" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370013" id="2370013" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370014" id="2370014" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370016" id="2370016" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2372426" id="2372426" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:10148" id="RLSA-2025:10148" type="self" title="RLSA-2025:10148" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.11-debug" arch="aarch64" epoch="0" version="3.11.11" release="2.el9_6.1" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-debug-3.11.11-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">89e43ea635446cfe106832c95885f4d65fb7e161b577020fa680cd0725ad448b</sum>
        </package>
        <package name="python3.11-idle" arch="aarch64" epoch="0" version="3.11.11" release="2.el9_6.1" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-idle-3.11.11-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">3d9a255717d58caa595533cdb4e24730765b749fe7f48437c6a317a1df5a6204</sum>
        </package>
        <package name="python3.11-test" arch="aarch64" epoch="0" version="3.11.11" release="2.el9_6.1" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-test-3.11.11-2.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">99148faad8ae5c6d045752a0cc40a9ff7c214263c3ea143c2c82f56964a54e3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:10189</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:18" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

* cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

* cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

* python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

* cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370010" id="2370010" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370013" id="2370013" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370014" id="2370014" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370016" id="2370016" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2372426" id="2372426" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:10189" id="RLSA-2025:10189" type="self" title="RLSA-2025:10189" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-debug" arch="aarch64" epoch="0" version="3.12.9" release="1.el9_6.1" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-debug-3.12.9-1.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">cf79e4c148fa55c3a39fb67613679e8be495bd72bd4047d0b42eaf43e827c48f</sum>
        </package>
        <package name="python3.12-idle" arch="aarch64" epoch="0" version="3.12.9" release="1.el9_6.1" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-idle-3.12.9-1.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">7ea5b657190de264752e66a9ca970dd215ad81caf356f11e1e138c695b296084</sum>
        </package>
        <package name="python3.12-test" arch="aarch64" epoch="0" version="3.12.9" release="1.el9_6.1" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-test-3.12.9-1.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">19b2bbdf1009ba4d100cad002013047215ea3136a922cadb19bc13c9564f5003</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:10379</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

* kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)

* kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)

* kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846)

* kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49846" id="CVE-2022-49846" type="cve" title="CVE-2022-49846" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21759" id="CVE-2025-21759" type="cve" title="CVE-2025-21759" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21887" id="CVE-2025-21887" type="cve" title="CVE-2025-21887" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22004" id="CVE-2025-22004" type="cve" title="CVE-2025-22004" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37799" id="CVE-2025-37799" type="cve" title="CVE-2025-37799" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2348596" id="2348596" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2355405" id="2355405" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2357142" id="2357142" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363432" id="2363432" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363876" id="2363876" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:10379" id="RLSA-2025:10379" type="self" title="RLSA-2025:10379" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.25.1.el9_6" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.25.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">8b1e28bc253bf10dfac72cf752edbcff7b41d6703d6bd6753c18e7623a2050fc</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.25.1.el9_6" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.25.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f0be58eb30ecc6de5a53bc07029984e04a17b32dcc72f2ce265cb06e8219f10d</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.25.1.el9_6" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.25.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">d177368373c0366c3b3f4aa4597c55089165d42b375b7458ac6b00607a126be7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:10837</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21991" id="CVE-2025-21991" type="cve" title="CVE-2025-21991" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356917" id="2356917" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:10837" id="RLSA-2025:10837" type="self" title="RLSA-2025:10837" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.26.1.el9_6" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.26.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">e032ee28ca1ae8800c8855aca628af15182c1a99f112e927aa200384cd584b75</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.26.1.el9_6" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.26.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">78bcc02dae04e7f03e82631035bf87ce2317101c629bccf6867a6b23c8e1aca4</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.26.1.el9_6" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.26.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">285acb0d3e86c0a86a88c0715dc79fa843a363878dd33640744b7e614db9b6b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:11140</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-17 21:53:51" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for glib2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: buffer overflow in set_connect_msg() (CVE-2024-52533)

* glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4373" id="CVE-2025-4373" type="cve" title="CVE-2025-4373" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2325340" id="2325340" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2364265" id="2364265" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:11140" id="RLSA-2025:11140" type="self" title="RLSA-2025:11140" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glib2-static" arch="aarch64" epoch="0" version="2.68.4" release="16.el9_6.2" src="glib2-2.68.4-16.el9_6.2.src.rpm">
          <filename>glib2-static-2.68.4-16.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">10b0881b6544fd077096af54060734de8b83a378799dd5ecc996ffd2ba925180</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:11402</id>
    <title>Moderate: avahi security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-17 21:53:52" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for avahi.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52615" id="CVE-2024-52615" type="cve" title="CVE-2024-52615" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2326418" id="2326418" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:11402" id="RLSA-2025:11402" type="self" title="RLSA-2025:11402" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="avahi-compat-howl" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-compat-howl-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">04bcf3318b3ab8ff614964118dd95bd25693477462bd55efdcce3a6df33f70c9</sum>
        </package>
        <package name="avahi-compat-howl-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">0e361c66dc1f2849a8a70e395b486f4221346906581c9d4df62d69a30e243447</sum>
        </package>
        <package name="avahi-compat-libdns_sd" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">38f0699e83a2b29128424582209a948907468e4ba60a8aa4d1b40550a949dee2</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">e0e95a1a55c5d78d54a9e78b96bfc348d7568370bd08452ebd5766ec3244600b</sum>
        </package>
        <package name="avahi-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-devel-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">64b63d70026a57a038ddacc1ae06918aa81ed0a8ad7879b3e1d4c91ecc2f09f8</sum>
        </package>
        <package name="avahi-glib-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-glib-devel-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">f0c8a9b259b2e19e9726069da7d0401259e7681a8e4861bdccc42964a903f05f</sum>
        </package>
        <package name="avahi-gobject" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-gobject-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">ee05494f6049fc45931d06fcb385aae668822f6cf1622f682c14eb867e07ea01</sum>
        </package>
        <package name="avahi-gobject-devel" arch="aarch64" epoch="0" version="0.8" release="22.el9_6.1" src="avahi-0.8-22.el9_6.1.src.rpm">
          <filename>avahi-gobject-devel-0.8-22.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">bcaa8fb984e73afd74731e6ef62593933763cb85543ba0ec01f3807048e8dfd0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:11411</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:23" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)

* kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58002" id="CVE-2024-58002" type="cve" title="CVE-2024-58002" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38089" id="CVE-2025-38089" type="cve" title="CVE-2025-38089" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2348513" id="2348513" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2375529" id="2375529" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:11411" id="RLSA-2025:11411" type="self" title="RLSA-2025:11411" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.28.1.el9_6" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.28.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">5f21b228b259d0b0630af71759be85be1e376db926d0b4b38492466893916b42</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.28.1.el9_6" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.28.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f087b82a8a574ba7cf2e068a341a28f313c42556f70e29542074033015a91f70</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.28.1.el9_6" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.28.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">6a2740baac687c407231bf2b69a1ee052edf0bf5d84bbe6a642e0fde7c4ad5a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:11849</id>
    <title>Important: unbound security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-17 21:53:53" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for unbound.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: Unbound Cache poisoning (CVE-2025-5994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5994" id="CVE-2025-5994" type="cve" title="CVE-2025-5994" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2380949" id="2380949" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:11849" id="RLSA-2025:11849" type="self" title="RLSA-2025:11849" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="unbound-devel" arch="aarch64" epoch="0" version="1.16.2" release="19.el9_6.1" src="unbound-1.16.2-19.el9_6.1.src.rpm">
          <filename>unbound-devel-1.16.2-19.el9_6.1.aarch64.rpm</filename>
          <sum type="sha256">1e2d3b49fa177200cd8ce7faf442364430d40a1fa2a5e38ad4fe65a9842bde94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:11861</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:26" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)

* kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)

* kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)

* kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)

* kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)

* kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)

* kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

* kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)

* kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)

* kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57980" id="CVE-2024-57980" type="cve" title="CVE-2024-57980" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21905" id="CVE-2025-21905" type="cve" title="CVE-2025-21905" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22085" id="CVE-2025-22085" type="cve" title="CVE-2025-22085" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22091" id="CVE-2025-22091" type="cve" title="CVE-2025-22091" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22113" id="CVE-2025-22113" type="cve" title="CVE-2025-22113" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22121" id="CVE-2025-22121" type="cve" title="CVE-2025-22121" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37797" id="CVE-2025-37797" type="cve" title="CVE-2025-37797" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37958" id="CVE-2025-37958" type="cve" title="CVE-2025-37958" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38086" id="CVE-2025-38086" type="cve" title="CVE-2025-38086" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38110" id="CVE-2025-38110" type="cve" title="CVE-2025-38110" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2348599" id="2348599" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356613" id="2356613" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360186" id="2360186" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360199" id="2360199" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360212" id="2360212" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360219" id="2360219" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363672" id="2363672" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367572" id="2367572" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2375305" id="2375305" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2376035" id="2376035" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:11861" id="RLSA-2025:11861" type="self" title="RLSA-2025:11861" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.30.1.el9_6" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.30.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">96017a152562a3a22a9e37961c80ae38337e1df406706c4208b4b3f74626ab60</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.30.1.el9_6" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.30.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">cdcffdecf5f455131d991ed646d0161eb64121954464c08beb16a44d94f091ef</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.30.1.el9_6" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.30.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">f18f1cdc048c21eb660255ef38ef79e2b04304224f62bee1c4bb9b8d9a204ba6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:12746</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:29" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)

* kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929)

* kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)

* kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)

* kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)

* kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

* kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)

* kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49788" id="CVE-2022-49788" type="cve" title="CVE-2022-49788" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21727" id="CVE-2025-21727" type="cve" title="CVE-2025-21727" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21928" id="CVE-2025-21928" type="cve" title="CVE-2025-21928" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21929" id="CVE-2025-21929" type="cve" title="CVE-2025-21929" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21962" id="CVE-2025-21962" type="cve" title="CVE-2025-21962" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22020" id="CVE-2025-22020" type="cve" title="CVE-2025-22020" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37890" id="CVE-2025-37890" type="cve" title="CVE-2025-37890" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38052" id="CVE-2025-38052" type="cve" title="CVE-2025-38052" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38087" id="CVE-2025-38087" type="cve" title="CVE-2025-38087" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2348516" id="2348516" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356592" id="2356592" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356594" id="2356594" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2356624" id="2356624" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360099" id="2360099" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2363378" id="2363378" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2366848" id="2366848" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2373380" id="2373380" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2375531" id="2375531" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:12746" id="RLSA-2025:12746" type="self" title="RLSA-2025:12746" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.32.1.el9_6" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.32.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">4884c4eeb00fd92ae105f88e349609fc0adb5ec26808d5523c93712ae1091271</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.32.1.el9_6" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.32.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">ca6c0fdc5f2b81c899fbd5b5afc8c7a2ea85aa796b2d5088ff642091177ef7b9</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.32.1.el9_6" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.32.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">c31d3b196621e4b380a86684fea00d3e1af51507987021363890da7d9fa288be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:12748</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-17 21:53:55" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for glibc.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Double free in glibc (CVE-2025-8058)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058" id="CVE-2025-8058" type="cve" title="CVE-2025-8058" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383146" id="2383146" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:12748" id="RLSA-2025:12748" type="self" title="RLSA-2025:12748" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="glibc-benchtests" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.23" src="glibc-2.34-168.el9_6.23.src.rpm">
          <filename>glibc-benchtests-2.34-168.el9_6.23.aarch64.rpm</filename>
          <sum type="sha256">8867f4934dda00e73b6b2b7fcf1e81d0f012b902fc83facb7a566257490af633</sum>
        </package>
        <package name="glibc-nss-devel" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.23" src="glibc-2.34-168.el9_6.23.src.rpm">
          <filename>glibc-nss-devel-2.34-168.el9_6.23.aarch64.rpm</filename>
          <sum type="sha256">f2d3ccf014f65393e76589501df19cca7274eb86b74a32a47e2f3b75b1ed61c8</sum>
        </package>
        <package name="glibc-static" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.23" src="glibc-2.34-168.el9_6.23.src.rpm">
          <filename>glibc-static-2.34-168.el9_6.23.aarch64.rpm</filename>
          <sum type="sha256">6de179044c478ed5a9b4d204d3aab8a08c8c0fe8ecf600d3d11c06a390ee3c52</sum>
        </package>
        <package name="nss_db" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.23" src="glibc-2.34-168.el9_6.23.src.rpm">
          <filename>nss_db-2.34-168.el9_6.23.aarch64.rpm</filename>
          <sum type="sha256">877e9eeb6f0c2e53dc3cfc9c94e121e5d9455e5973171557852f883ee2fc70af</sum>
        </package>
        <package name="nss_hesiod" arch="aarch64" epoch="0" version="2.34" release="168.el9_6.23" src="glibc-2.34-168.el9_6.23.src.rpm">
          <filename>nss_hesiod-2.34-168.el9_6.23.aarch64.rpm</filename>
          <sum type="sha256">2cea9f3e8b823d07958b277ff670e060119062e5b3cef3aefc16f146a8e12eff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:12834</id>
    <title>Moderate: python3.12-setuptools security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-12-05 09:06:46" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python3.12-setuptools.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2366982" id="2366982" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:12834" id="RLSA-2025:12834" type="self" title="RLSA-2025:12834" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3.12-setuptools-wheel" arch="noarch" epoch="0" version="68.2.2" release="5.el9_6" src="python3.12-setuptools-68.2.2-5.el9_6.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-5.el9_6.noarch.rpm</filename>
          <sum type="sha256">8b02eed2290a2371481be5984867444d756108f78900a8bd43b7999214127e9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:13602</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:33" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

* kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38079" id="CVE-2025-38079" type="cve" title="CVE-2025-38079" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38292" id="CVE-2025-38292" type="cve" title="CVE-2025-38292" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2373383" id="2373383" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2379219" id="2379219" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:13602" id="RLSA-2025:13602" type="self" title="RLSA-2025:13602" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.33.2.el9_6" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.33.2.el9_6.aarch64.rpm</filename>
          <sum type="sha256">20d5d6593c8b710d5018dbf85f17e9e623c58a06514c4ea3eb541aac601e3230</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.33.2.el9_6" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.33.2.el9_6.aarch64.rpm</filename>
          <sum type="sha256">a629ab7636ca2bbeb113eebbba22217e59e0ee9784347e639d083eee74c8fd1d</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.33.2.el9_6" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.33.2.el9_6.aarch64.rpm</filename>
          <sum type="sha256">ce0146088e3faf91c106b0e06d5066a7592bd3d51541395afc226828e7fbcdc5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:14420</id>
    <title>Important: kernel security update</title>
    <issued date="2025-10-04 00:11:30" />
    <updated date="2025-10-14 08:18:35" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: udp: Fix memory accounting leak. (CVE-2025-22058)

* kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)

* kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22058" id="CVE-2025-22058" type="cve" title="CVE-2025-22058" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37914" id="CVE-2025-37914" type="cve" title="CVE-2025-37914" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38417" id="CVE-2025-38417" type="cve" title="CVE-2025-38417" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2360276" id="2360276" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367500" id="2367500" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2383463" id="2383463" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:14420" id="RLSA-2025:14420" type="self" title="RLSA-2025:14420" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="kernel-cross-headers" arch="aarch64" epoch="0" version="5.14.0" release="570.37.1.el9_6" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.37.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">31008a523270dfd69428f6662ba44677cbd85ebbd090e682d34e0e76d6f9a8ad</sum>
        </package>
        <package name="kernel-tools-libs-devel" arch="aarch64" epoch="0" version="5.14.0" release="570.37.1.el9_6" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-tools-libs-devel-5.14.0-570.37.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">1409d6ebb7ca96950e8e938c2b90f11608cf69751cd9d3afcd382041379ad614</sum>
        </package>
        <package name="libperf" arch="aarch64" epoch="0" version="5.14.0" release="570.37.1.el9_6" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.37.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">5caa08cb52deb3a151c8296036f0941f03acff8856b1e0c51416fdec41f26c43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9114</id>
    <title>Important: apache-commons-beanutils security update</title>
    <issued date="2025-10-04 00:11:52" />
    <updated date="2025-12-05 09:06:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for apache-commons-beanutils.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans.

Security Fix(es):

* commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734" id="CVE-2025-48734" type="cve" title="CVE-2025-48734" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2368956" id="2368956" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9114" id="RLSA-2025:9114" type="self" title="RLSA-2025:9114" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="apache-commons-beanutils" arch="noarch" epoch="0" version="1.9.4" release="10.el9_6" src="apache-commons-beanutils-1.9.4-10.el9_6.src.rpm">
          <filename>apache-commons-beanutils-1.9.4-10.el9_6.noarch.rpm</filename>
          <sum type="sha256">3ce4b3ce7bbd85a2dbc780ab8d75906f54825fcac6175587cd81656feb49db6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9330</id>
    <title>Important: perl-YAML-LibYAML security update</title>
    <issued date="2025-10-04 00:11:52" />
    <updated date="2025-10-17 21:54:21" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for perl-YAML-LibYAML.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby.

Security Fix(es):

* yaml-libyaml: LibYAML Perl File Modification Vulnerability (CVE-2025-40908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40908" id="CVE-2025-40908" type="cve" title="CVE-2025-40908" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2369630" id="2369630" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9330" id="RLSA-2025:9330" type="self" title="RLSA-2025:9330" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-YAML-LibYAML" arch="aarch64" epoch="1" version="0.82" release="6.1.el9_6" src="perl-YAML-LibYAML-0.82-6.1.el9_6.src.rpm">
          <filename>perl-YAML-LibYAML-0.82-6.1.el9_6.aarch64.rpm</filename>
          <sum type="sha256">b121f82d5d420d5cead6cd06e01a91a8bbd78e3d92cb99947289feb7e03900ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:9517</id>
    <title>Important: perl-File-Find-Rule security update</title>
    <issued date="2025-10-04 00:11:52" />
    <updated date="2025-12-05 09:06:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for perl-File-Find-Rule.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>File::Find::Rule is a friendlier interface to File::Find.  It allows you to build rules which specify the desired files and directories.

Security Fix(es):

* perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-10007" id="CVE-2011-10007" type="cve" title="CVE-2011-10007" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2370424" id="2370424" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:9517" id="RLSA-2025:9517" type="self" title="RLSA-2025:9517" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-File-Find-Rule" arch="noarch" epoch="0" version="0.34" release="19.1.el9_6" src="perl-File-Find-Rule-0.34-19.1.el9_6.src.rpm">
          <filename>perl-File-Find-Rule-0.34-19.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">dbd78795acc7c16a1a04b9abcdc6b4b421d91902cb18261cad4707653c999c75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:10585</id>
    <title>Moderate: jq security update</title>
    <issued date="2025-10-04 00:11:48" />
    <updated date="2025-10-17 21:54:19" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for jq.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.

Security Fix(es):

* jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)

* jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23337" id="CVE-2024-23337" type="cve" title="CVE-2024-23337" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48060" id="CVE-2025-48060" type="cve" title="CVE-2025-48060" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367807" id="2367807" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2367842" id="2367842" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:10585" id="RLSA-2025:10585" type="self" title="RLSA-2025:10585" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="jq-devel" arch="aarch64" epoch="0" version="1.6" release="17.el9_6.2" src="jq-1.6-17.el9_6.2.src.rpm">
          <filename>jq-devel-1.6-17.el9_6.2.aarch64.rpm</filename>
          <sum type="sha256">af927c99fb69803957868f8bfdd2021249ac2a2ac5888a9fd1bb14156f1b7fae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2025:7350</id>
    <title>Moderate: perl-Module-ScanDeps security update</title>
    <issued date="2025-10-04 00:11:52" />
    <updated date="2025-12-05 09:06:49" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for perl-Module-ScanDeps.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>This module scans potential modules used by perl programs and returns a hash reference.  Its keys are the module names as they appear in %INC (e.g. Test/More.pm).  The values are hash references.

Security Fix(es):

* module-scandeps: local privilege escalation via unsanitized input (CVE-2024-10224)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.6 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10224" id="CVE-2024-10224" type="cve" title="CVE-2024-10224" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2327329" id="2327329" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2025:7350" id="RLSA-2025:7350" type="self" title="RLSA-2025:7350" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-Module-ScanDeps" arch="noarch" epoch="0" version="1.30" release="6.el9" src="perl-Module-ScanDeps-1.30-6.el9.src.rpm">
          <filename>perl-Module-ScanDeps-1.30-6.el9.noarch.rpm</filename>
          <sum type="sha256">7eaae734cb15497b12c09cc99603ed3001b2639578bc4674981c527c6ef90747</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2026:0700</id>
    <title>Moderate: transfig security update</title>
    <issued date="2026-01-17 09:05:17" />
    <updated date="2026-01-30 22:12:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for transfig.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).  Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.

Security Fix(es):

* xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46397" id="CVE-2025-46397" type="cve" title="CVE-2025-46397" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2362058" id="2362058" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2026:0700" id="RLSA-2026:0700" type="self" title="RLSA-2026:0700" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="transfig" arch="aarch64" epoch="1" version="3.2.7b" release="11.el9_7" src="transfig-3.2.7b-11.el9_7.src.rpm">
          <filename>transfig-3.2.7b-11.el9_7.aarch64.rpm</filename>
          <sum type="sha256">75652c0554dc342e3a47dbd409ee1e939784c75f64126c475aa05e4dd09d7be9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2026:2039</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-02-07 09:06:56" />
    <updated date="2026-02-18 09:07:02" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for fontforge.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. 

Security Fix(es):

* fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)

* fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)

* fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15269" id="CVE-2025-15269" type="cve" title="CVE-2025-15269" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15275" id="CVE-2025-15275" type="cve" title="CVE-2025-15275" />
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15279" id="CVE-2025-15279" type="cve" title="CVE-2025-15279" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2426421" id="2426421" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2426423" id="2426423" type="bugzilla" title="" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2426429" id="2426429" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2026:2039" id="RLSA-2026:2039" type="self" title="RLSA-2026:2039" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fontforge" arch="aarch64" epoch="0" version="20201107" release="7.el9_7" src="fontforge-20201107-7.el9_7.src.rpm">
          <filename>fontforge-20201107-7.el9_7.aarch64.rpm</filename>
          <sum type="sha256">c4b72a5402cffb1b8c99855d7e047ecaa5c88e8b8a45bf2b6612b0919928ff81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2026:6628</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-04-08 06:02:16" />
    <updated date="2026-04-22 06:07:38" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for fontforge.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. 

Security Fix(es):

* fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15270" id="CVE-2025-15270" type="cve" title="CVE-2025-15270" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2426434" id="2426434" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2026:6628" id="RLSA-2026:6628" type="self" title="RLSA-2026:6628" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="fontforge" arch="aarch64" epoch="0" version="20201107" release="8.el9_7" src="fontforge-20201107-8.el9_7.src.rpm">
          <filename>fontforge-20201107-8.el9_7.aarch64.rpm</filename>
          <sum type="sha256">e801b1985cc589ce7dc7481b3adb60ee5eafdc266bde86cdb8942c9048930558</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2026:18705</id>
    <title>Moderate: mingw-glib2 security update</title>
    <issued date="2026-05-28 15:43:13" />
    <updated date="2026-06-11 12:06:22" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for mingw-glib2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2416741" id="2416741" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2026:18705" id="RLSA-2026:18705" type="self" title="RLSA-2026:18705" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="mingw32-glib2" arch="noarch" epoch="0" version="2.78.6" release="3.el9" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw32-glib2-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">86a6db43ff6ac296f7bbaead8fd62151c237798cbe7252b16700a9aba21ede33</sum>
        </package>
        <package name="mingw32-glib2-static" arch="noarch" epoch="0" version="2.78.6" release="3.el9" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw32-glib2-static-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">b1947d415012d0ae6f755fc16b12835412869dd6edb0db1bbf2587c9a76a39c7</sum>
        </package>
        <package name="mingw64-glib2" arch="noarch" epoch="0" version="2.78.6" release="3.el9" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw64-glib2-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">921fab6668ae8ca9ffaec3864804a0f251b811488fff24fbdd0f4211b1aa9d36</sum>
        </package>
        <package name="mingw64-glib2-static" arch="noarch" epoch="0" version="2.78.6" release="3.el9" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw64-glib2-static-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">2624077c7daea26ca98e1ce9246352b60bfdb07c402f8ad516531da30c7e7591</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:6712</id>
    <title>Moderate: python-wheel security update</title>
    <issued date="2026-06-26 18:03:19" />
    <updated date="2026-07-10 18:07:00" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for python-wheel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40898" id="CVE-2022-40898" type="cve" title="CVE-2022-40898" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2165864" id="2165864" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:6712" id="RLSA-2023:6712" type="self" title="RLSA-2023:6712" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="python3-wheel" arch="noarch" epoch="1" version="0.36.2" release="8.el9" src="python-wheel-0.36.2-8.el9.src.rpm">
          <filename>python3-wheel-0.36.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">2978978db531c2af0b910c3f201ae99008581d07cfe0cc9a44709744bd0a1b78</sum>
        </package>
        <package name="python3-wheel-wheel" arch="noarch" epoch="1" version="0.36.2" release="8.el9" src="python-wheel-0.36.2-8.el9.src.rpm">
          <filename>python3-wheel-wheel-0.36.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">9bc98e3f0818e2ce07f2122350c4be6047cf72ed3b3ee434be3a94dd510161ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2023:2589</id>
    <title>Moderate: autotrace security update</title>
    <issued date="2026-06-28 00:03:40" />
    <updated date="2026-07-12 00:07:05" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update is available for autotrace.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32323" id="CVE-2022-32323" type="cve" title="CVE-2022-32323" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2107471" id="2107471" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2023:2589" id="RLSA-2023:2589" type="self" title="RLSA-2023:2589" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="autotrace" arch="aarch64" epoch="0" version="0.31.1" release="65.el9" src="autotrace-0.31.1-65.el9.src.rpm">
          <filename>autotrace-0.31.1-65.el9.aarch64.rpm</filename>
          <sum type="sha256">a42492d2d3c7769e0d43ecad04c0fd7abb5dabdae24b913304784af55ede39bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="releng@rockylinux.org" status="final" type="security" version="2">
    <id>RLSA-2026:36187</id>
    <title>Important: perl-HTTP-Daemon security update</title>
    <issued date="2026-07-08 12:04:06" />
    <updated date="2026-07-14 06:05:27" />
    <rights>Copyright 2026 Rocky Enterprise Software Foundation</rights>
    <release>Rocky Linux 9</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update is available for perl-HTTP-Daemon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list</summary>
    <description>The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests.

Security Fix(es):

* perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file() (CVE-2026-8450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution />
    <references>
      <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8450" id="CVE-2026-8450" type="cve" title="CVE-2026-8450" />
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2481773" id="2481773" type="bugzilla" title="" />
      <reference href="https://errata.rockylinux.org/RLSA-2026:36187" id="RLSA-2026:36187" type="self" title="RLSA-2026:36187" />
    </references>
    <pkglist>
      <collection short="rocky-linux-9-aarch64-crb-rpms">
        <name>rocky-linux-9-aarch64-crb-rpms</name>
        <package name="perl-HTTP-Daemon" arch="noarch" epoch="0" version="6.12" release="6.el9_8.1" src="perl-HTTP-Daemon-6.12-6.el9_8.1.src.rpm">
          <filename>perl-HTTP-Daemon-6.12-6.el9_8.1.noarch.rpm</filename>
          <sum type="sha256">836d0f8cce6b8d28bdbeef8d24ff4a2818b2bb4310b141c310e87d9b4b1f6ad4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>