AlmaLinux has issued two notable security updates: a critical update for cloud-init (ALSA-2025:10844) and a moderate update for glibc (ALSA-2025:11066).
1. Cloud-Init Security Update (ALSA-2025:10844)
- Severity: Important
- Release Date: July 18, 2025
- Summary: The cloud-init package is essential for cloud instances, as it includes scripts necessary for initialization, such as retrieving and installing SSH keys.
- Security Issue: A permissions flaw was identified in cloud-init (CVE-2024-6174), which can potentially compromise the security of cloud instances.
For further details, users can visit the AlmaLinux errata page: [ALSA-2025:10844](https://errata.almalinux.org/10/ALSA-2025-10844.html).
2. Glibc Security Update (ALSA-2025:11066)
- Severity: Moderate
- Release Date: July 18, 2025
- Summary: The glibc package contains standard C libraries and is critical for system functionality. It includes POSIX thread libraries, standard math libraries, and the name service cache daemon.
- Security Issue: A bug related to vector register overwriting was reported (CVE-2025-5702), which could affect the stability and security of applications relying on these libraries.
For more information, users can refer to the errata page for glibc: [ALSA-2025:11066](https://errata.almalinux.org/10/ALSA-2025-11066.html).
Both updates are crucial for maintaining the security and integrity of systems running AlmaLinux. Users are encouraged to apply these updates promptly to mitigate potential vulnerabilities. For any queries, the AlmaLinux community chat is available for support. Additionally, users can manage their notification settings through the AlmaLinux mailing list portal.
In conclusion, staying updated with these patches is vital for ensuring the robustness of cloud-based and general Linux operations. Regularly checking for updates and applying them can help prevent security breaches and maintain optimal system performance
1. Cloud-Init Security Update (ALSA-2025:10844)
- Severity: Important
- Release Date: July 18, 2025
- Summary: The cloud-init package is essential for cloud instances, as it includes scripts necessary for initialization, such as retrieving and installing SSH keys.
- Security Issue: A permissions flaw was identified in cloud-init (CVE-2024-6174), which can potentially compromise the security of cloud instances.
For further details, users can visit the AlmaLinux errata page: [ALSA-2025:10844](https://errata.almalinux.org/10/ALSA-2025-10844.html).
2. Glibc Security Update (ALSA-2025:11066)
- Severity: Moderate
- Release Date: July 18, 2025
- Summary: The glibc package contains standard C libraries and is critical for system functionality. It includes POSIX thread libraries, standard math libraries, and the name service cache daemon.
- Security Issue: A bug related to vector register overwriting was reported (CVE-2025-5702), which could affect the stability and security of applications relying on these libraries.
For more information, users can refer to the errata page for glibc: [ALSA-2025:11066](https://errata.almalinux.org/10/ALSA-2025-11066.html).
Both updates are crucial for maintaining the security and integrity of systems running AlmaLinux. Users are encouraged to apply these updates promptly to mitigate potential vulnerabilities. For any queries, the AlmaLinux community chat is available for support. Additionally, users can manage their notification settings through the AlmaLinux mailing list portal.
In conclusion, staying updated with these patches is vital for ensuring the robustness of cloud-based and general Linux operations. Regularly checking for updates and applying them can help prevent security breaches and maintain optimal system performance
Cloud-Init and Glibc updates for AlmaLinux
AlmaLinux has received two security updates: ALSA-2025:10844, a crucial cloud-init update, and ALSA-2025:11066, a moderate glibc security update
ALSA-2025:10844: cloud-init security update (Important)
ALSA-2025:11066: glibc security update (Moderate)Cloud-Init and Glibc updates for AlmaLinux @ Linux Compatible
