<?xml version='1.0' encoding='UTF-8'?>
<updates><update from="packager@tuxcare.com" status="final" type="bugfix" version="1">
    <id>CLSA-2026:1774531799</id>
    <title>Update of alt-openssl11</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- strip debug symbols from binary files</description>
    <severity>Important</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- strip debug symbols from binary files</summary>
    <pushcount>0</pushcount>
    <issued date="2026-03-26 13:30:04 UTC" />
    <updated date="2026-03-26 13:30:04 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1774531799.html" id="CLSA-2026:1774531799" title="CLSA-2026:1774531799" type="self" />
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl11" release="3.1.el8" src="alt-openssl11-1.1.1w-3.1.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-1.1.1w-3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">81951cf73e0c5c1e41ac8835dd4cc8c70680f46b70d5d7fe7e49390ff32dd89e</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-devel" release="3.1.el8" src="alt-openssl11-1.1.1w-3.1.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-devel-1.1.1w-3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">46e79afc98985e1fb47de5c3ce353ddef9ee976aa724e4754ba2ef51f2c1ce18</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-libs" release="3.1.el8" src="alt-openssl11-1.1.1w-3.1.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-libs-1.1.1w-3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">1f0853b47a81ef70854242c5469abd2f1744dbfab4ae260bf701641e91fa6ed9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1775146688</id>
    <title>alt-openssl11: Fix of 2 CVEs</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2023-5678: fix excessive time in DH check/generation with large Q
  parameter by adding bounds checks in DH_check_pub_key and DH_generate_key
- CVE-2024-0727: fix PKCS12 decoding NULL pointer dereference by adding NULL
  checks where ContentInfo data can be NULL</description>
    <severity>Moderate</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2023-5678: fix excessive time in DH check/generation with large Q
  parameter by adding bounds checks in DH_check_pub_key and DH_generate_key
- CVE-2024-0727: fix PKCS12 decoding NULL pointer dereference by adding NULL
  checks where ContentInfo data can be NULL</summary>
    <pushcount>0</pushcount>
    <issued date="2026-04-02 16:18:12 UTC" />
    <updated date="2026-04-02 16:18:12 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1775146688.html" id="CLSA-2026:1775146688" title="CLSA-2026:1775146688" type="self" />
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl11" release="3.2.el8" src="alt-openssl11-1.1.1w-3.2.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-1.1.1w-3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">fdab2626fc41a64d2d452982cb8bf59d997a60fc25667eb12fd43211382994b5</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-devel" release="3.2.el8" src="alt-openssl11-1.1.1w-3.2.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-devel-1.1.1w-3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">615fb8f5964ae3884723cff20edae1cc9942086b15925d73a8dd0323b8e80d7f</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-libs" release="3.2.el8" src="alt-openssl11-1.1.1w-3.2.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-libs-1.1.1w-3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">342e434615fa9998f3fac7eace30148c853f8be38cb4a0d11afdf9323a9124ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1776705646</id>
    <title>alt-openssl11: Fix of 4 CVEs</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2026-28387: fix use-after-free in DANE client code by using X509_free()
  instead of OPENSSL_free() to properly release reference-counted X509 objects
- CVE-2026-28388: fix NULL pointer dereference when processing a delta CRL
  that has a Delta CRL Indicator but lacks a CRL Number extension
- CVE-2026-28389: fix NULL pointer dereference in CMS KeyAgreeRecipientInfo
  processing when KeyEncryptionAlgorithmIdentifier omits the optional
  parameter field, by using safe X509_ALGOR_get0() extraction
- CVE-2026-28390: fix NULL pointer dereference in CMS KeyTransportRecipientInfo
  processing when RSA-OAEP SourceFunc parameters are missing, by using safe
  X509_ALGOR_get0() extraction and OPENSSL_memdup() for label data</description>
    <severity>Important</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2026-28387: fix use-after-free in DANE client code by using X509_free()
  instead of OPENSSL_free() to properly release reference-counted X509 objects
- CVE-2026-28388: fix NULL pointer dereference when processing a delta CRL
  that has a Delta CRL Indicator but lacks a CRL Number extension
- CVE-2026-28389: fix NULL pointer dereference in CMS KeyAgreeRecipientInfo
  processing when KeyEncryptionAlgorithmIdentifier omits the optional
  parameter field, by using safe X509_ALGOR_get0() extraction
- CVE-2026-28390: fix NULL pointer dereference in CMS KeyTransportRecipientInfo
  processing when RSA-OAEP SourceFunc parameters are missing, by using safe
  X509_ALGOR_get0() extraction and OPENSSL_memdup() for label data</summary>
    <pushcount>0</pushcount>
    <issued date="2026-04-20 17:20:50 UTC" />
    <updated date="2026-04-20 17:20:50 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1776705646.html" id="CLSA-2026:1776705646" title="CLSA-2026:1776705646" type="self" />
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl11" release="3.3.el8" src="alt-openssl11-1.1.1w-3.3.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-1.1.1w-3.3.el8.x86_64.rpm</filename>
          <sum type="sha256">7cb9c76a871b36469dc13fcae7e5e774739e7dcb67f768ebba97f4ab9dd53f18</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-devel" release="3.3.el8" src="alt-openssl11-1.1.1w-3.3.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-devel-1.1.1w-3.3.el8.x86_64.rpm</filename>
          <sum type="sha256">28e3c29fa7a3e15cfeab9bc0c267a0832ba11d7d634061ea9d112d718964b26c</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-libs" release="3.3.el8" src="alt-openssl11-1.1.1w-3.3.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-libs-1.1.1w-3.3.el8.x86_64.rpm</filename>
          <sum type="sha256">627ffd24ca643e203b5d8d3e66f38f2c5e9ec2492f6ba6c13d666f19f12476fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="bugfix" version="1">
    <id>CLSA-2026:1780392038</id>
    <title>Update of els-php-release</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- Pin $releasever to the EL major version in the repo file to avoid HTTP 404
  on point-release hosts where $releasever resolves to e.g. 7.9</description>
    <severity>None</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- Pin $releasever to the EL major version in the repo file to avoid HTTP 404
  on point-release hosts where $releasever resolves to e.g. 7.9</summary>
    <pushcount>0</pushcount>
    <issued date="2026-06-02 09:20:51 UTC" />
    <updated date="2026-06-02 09:20:51 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1780392038.html" id="CLSA-2026:1780392038" title="CLSA-2026:1780392038" type="self" />
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="0" name="els-php-release" release="4.el8" src="els-php-release-1.1.0-4.el8.src.rpm" version="1.1.0">
          <filename>els-php-release-1.1.0-4.el8.x86_64.rpm</filename>
          <sum type="sha256">1602f4f990db53a3ba2b80f6d0a4da9a981f38487f9a56f5e1decead802fe389</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1781794962</id>
    <title>alt-openssl: Fix of CVE-2026-45447</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- Fix CVE-2026-45447 (PKCS7_verify use-after-free)
- Guard -Wno-error=incompatible-pointer-types/-implicit-function-declaration
  to gcc &gt;= 6 (rhel &gt;= 8) so the build no longer fails on CL7 gcc 4.8.5</description>
    <severity>None</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- Fix CVE-2026-45447 (PKCS7_verify use-after-free)
- Guard -Wno-error=incompatible-pointer-types/-implicit-function-declaration
  to gcc &gt;= 6 (rhel &gt;= 8) so the build no longer fails on CL7 gcc 4.8.5</summary>
    <pushcount>0</pushcount>
    <issued date="2026-06-18 15:02:54 UTC" />
    <updated date="2026-06-18 15:02:54 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1781794962.html" id="CLSA-2026:1781794962" title="CLSA-2026:1781794962" type="self" />
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl" release="4.el8" src="alt-openssl-1.0.2u-4.el8.src.rpm" version="1.0.2u">
          <filename>alt-openssl-1.0.2u-4.el8.x86_64.rpm</filename>
          <sum type="sha256">56e954f8bb4506f18a60b1301b8acf51065f8ddd1936347ec26a76a523f054ff</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl-devel" release="4.el8" src="alt-openssl-1.0.2u-4.el8.src.rpm" version="1.0.2u">
          <filename>alt-openssl-devel-1.0.2u-4.el8.x86_64.rpm</filename>
          <sum type="sha256">ea96012f7c08a804a11392fad95cb0296ab70efbf389abc70a473ac33c778827</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl-libs" release="4.el8" src="alt-openssl-1.0.2u-4.el8.src.rpm" version="1.0.2u">
          <filename>alt-openssl-libs-1.0.2u-4.el8.x86_64.rpm</filename>
          <sum type="sha256">795463f2d27d9475a8de053734c0ce983bf566558e7185a2f755f106469a3c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1781800941</id>
    <title>alt-openssl11: Fix of CVE-2026-45447</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2026-45447: fix use-after-free in PKCS7_verify triggered by a crafted
  PKCS#7 / S-MIME message with an empty digestAlgorithms ASN.1 SET, which made
  OpenSSL free a caller-owned BIO; free the BIO chain explicitly and stop at
  the caller-supplied indata BIO</description>
    <severity>Critical</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2026-45447: fix use-after-free in PKCS7_verify triggered by a crafted
  PKCS#7 / S-MIME message with an empty digestAlgorithms ASN.1 SET, which made
  OpenSSL free a caller-owned BIO; free the BIO chain explicitly and stop at
  the caller-supplied indata BIO</summary>
    <pushcount>0</pushcount>
    <issued date="2026-06-18 16:42:38 UTC" />
    <updated date="2026-06-18 16:42:38 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1781800941.html" id="CLSA-2026:1781800941" title="CLSA-2026:1781800941" type="self">
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2026-45447" id="CVE-2026-45447" title="CVE-2026-45447" type="cve" />
    </references>
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl11" release="3.4.el8" src="alt-openssl11-1.1.1w-3.4.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-1.1.1w-3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">ec96c23b1149f443004e5e4108e677c7b1e17af086c844e6a100226a1e3cc8fa</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-devel" release="3.4.el8" src="alt-openssl11-1.1.1w-3.4.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-devel-1.1.1w-3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">c64b5c07c2c80382101366ffbd224c4e7e3cafcc61b4fbbd3e35d690f2bbbbc6</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-libs" release="3.4.el8" src="alt-openssl11-1.1.1w-3.4.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-libs-1.1.1w-3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">14370839efee947e7cf9beb0f0ec254f090b3b99cf9b2f9afc75abde89cbf178</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="bugfix" version="1">
    <id>CLSA-2026:1785514639</id>
    <title>Update of alt-common-release</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- Ship alt-common-els-rollout.repo with the els-alt-1..6 gradual-rollout slots
  (enabled) and their -bypass counterparts (disabled), so the ALT slot
  rollout reaches clients gradually instead of only at graduation to stable
- postinst: write /etc/apt/sources.list.d/alt-common-els-rollout.list with the
  els-alt-1..6 gradual-rollout slots on rollout.alt.tuxcare.com (active) and
  their slot-N-bypass counterparts (commented out); the rollout host has no
  channel segment and takes no credentials, so no /etc/apt/auth.conf.d entry
  is added. postrm removes the file. (ELS-2641)
- %post now pins $releasever in alt-common-els.repo too, not just the rollout
  file: the Amazon Linux 2 branch only covered the stable repo on AL2, so a
  plain el7 host reporting 7Server or 7.9 still asked for el/7Server/ (ELS-2334)</description>
    <severity>None</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- Ship alt-common-els-rollout.repo with the els-alt-1..6 gradual-rollout slots
  (enabled) and their -bypass counterparts (disabled), so the ALT slot
  rollout reaches clients gradually instead of only at graduation to stable
- postinst: write /etc/apt/sources.list.d/alt-common-els-rollout.list with the
  els-alt-1..6 gradual-rollout slots on rollout.alt.tuxcare.com (active) and
  their slot-N-bypass counterparts (commented out); the rollout host has no
  channel segment and takes no credentials, so no /etc/apt/auth.conf.d entry
  is added. postrm removes the file. (ELS-2641)
- %post now pins $releasever in alt-common-els.repo too, not just the rollout
  file: the Amazon Linux 2 branch only covered the stable repo on AL2, so a
  plain el7 host reporting 7Server or 7.9 still asked for el/7Server/ (ELS-2334)</summary>
    <pushcount>0</pushcount>
    <issued date="2026-07-31 16:17:28 UTC" />
    <updated date="2026-07-31 16:17:28 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1785514639.html" id="CLSA-2026:1785514639" title="CLSA-2026:1785514639" type="self" />
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="0" name="alt-common-release" release="6.el8" src="alt-common-release-1.0.0-6.el8.src.rpm" version="1.0.0">
          <filename>alt-common-release-1.0.0-6.el8.x86_64.rpm</filename>
          <sum type="sha256">d18daa711514a401c3e3b2106fc721f69e86fabd68ae029765009b66faedde18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1785921264</id>
    <title>alt-openssl11: Fix of CVE-2025-69419</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- HollowByte: grow the handshake init_buf incrementally as data is received
  instead of pre-allocating the full peer-declared message size, so a peer
  that claims a large message but never sends it can no longer strand memory
  (ELS-2635). Backport of OpenSSL 3.0 commit c5785a5e35 (PR #30794); handled
  by OpenSSL as a "bug or hardening" fix with no CVE assigned</description>
    <severity>Important</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- HollowByte: grow the handshake init_buf incrementally as data is received
  instead of pre-allocating the full peer-declared message size, so a peer
  that claims a large message but never sends it can no longer strand memory
  (ELS-2635). Backport of OpenSSL 3.0 commit c5785a5e35 (PR #30794); handled
  by OpenSSL as a "bug or hardening" fix with no CVE assigned</summary>
    <pushcount>0</pushcount>
    <issued date="2026-08-05 09:14:38 UTC" />
    <updated date="2026-08-05 09:14:38 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1785921264.html" id="CLSA-2026:1785921264" title="CLSA-2026:1785921264" type="self">
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2025-69419" id="CVE-2025-69419" title="CVE-2025-69419" type="cve" />
    </references>
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl11" release="3.5.el8" src="alt-openssl11-1.1.1w-3.5.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-1.1.1w-3.5.el8.x86_64.rpm</filename>
          <sum type="sha256">17213878bfc795a16b5caf93510bf95c85f1c83f1ec47384cf01c5c146bfb290</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-devel" release="3.5.el8" src="alt-openssl11-1.1.1w-3.5.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-devel-1.1.1w-3.5.el8.x86_64.rpm</filename>
          <sum type="sha256">35366d9752d1457858e6257e3645c94e208ca846d3be95e39cb6049854d4cecd</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-libs" release="3.5.el8" src="alt-openssl11-1.1.1w-3.5.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-libs-1.1.1w-3.5.el8.x86_64.rpm</filename>
          <sum type="sha256">d64f394087683a770982bc1194906214f2d5baed18ac15ce0eb0e6e7f842f092</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1786473548</id>
    <title>alt-openssl11: Fix of 2 CVEs</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2026-34180: asn1: avoid content length truncation in asn1_ex_c2i() so a
  primitive element longer than 2GB can no longer cause a heap buffer over-read
- CVE-2026-42766: cms: check that PasswordRecipientInfo.keyDerivationAlgorithm
  is present before dereferencing it, avoiding a NULL pointer dereference</description>
    <severity>Important</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2026-34180: asn1: avoid content length truncation in asn1_ex_c2i() so a
  primitive element longer than 2GB can no longer cause a heap buffer over-read
- CVE-2026-42766: cms: check that PasswordRecipientInfo.keyDerivationAlgorithm
  is present before dereferencing it, avoiding a NULL pointer dereference</summary>
    <pushcount>0</pushcount>
    <issued date="2026-08-11 18:39:22 UTC" />
    <updated date="2026-08-11 18:39:22 UTC" />
    <references href="https://errata.tuxcare.com/els_alt_common/el8/CLSA-2026-1786473548.html" id="CLSA-2026:1786473548" title="CLSA-2026:1786473548" type="self">
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2026-34180" id="CVE-2026-34180" title="CVE-2026-34180" type="cve" />
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2026-42766" id="CVE-2026-42766" title="CVE-2026-42766" type="cve" />
    </references>
    <pkglist>
      <collection>
        <name>tuxcare-el8-els-alt-common</name>
        <package arch="x86_64" epoch="1" name="alt-openssl11" release="3.6.el8" src="alt-openssl11-1.1.1w-3.6.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-1.1.1w-3.6.el8.x86_64.rpm</filename>
          <sum type="sha256">b6e2d5a61776d665ab929fa7259d2d17a2f5177fc5b95710a4a22e111532c01c</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-devel" release="3.6.el8" src="alt-openssl11-1.1.1w-3.6.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-devel-1.1.1w-3.6.el8.x86_64.rpm</filename>
          <sum type="sha256">4c47f6313902980c2a6a7ae3d07438c9092179232b676af9bf372a96298af4dc</sum>
        </package>
        <package arch="x86_64" epoch="1" name="alt-openssl11-libs" release="3.6.el8" src="alt-openssl11-1.1.1w-3.6.el8.src.rpm" version="1.1.1w">
          <filename>alt-openssl11-libs-1.1.1w-3.6.el8.x86_64.rpm</filename>
          <sum type="sha256">a26bd65c63bfe74df79ed49bdb39042d58e3fc8113c3eca01292b65842711ebb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>