Summary of Updates:
- Kernel Security Update (ALSA-2025:15782):- Severity: Moderate
- Release Date: September 26, 2025
- Notable Fixes:
- CVE-2025-22068: Ensures proper setting of queue cancellation when frozen.
- CVE-2025-38332: Corrects BIOS version handling in lpfc.
- Additional security enhancements against various vulnerabilities.
- Firefox Security Update (ALSA-2025:16109):
- Severity: Important
- Release Date: September 25, 2025
- Key Fixes:
- CVE-2025-10527: Addresses a sandbox escape due to use-after-free in Canvas2D.
- CVE-2025-10529: Fixes a same-origin policy bypass.
- Other memory safety issues and integer overflows.
- Thunderbird Security Updates:
- ALSA-2025:16157 and ALSA-2025:16156 (both Important, released on September 26, 2025)
- ALSA-2025:16589 (Important, released on September 25, 2025)
- Each addresses the same critical vulnerabilities as noted for Firefox, including the sandbox escape and memory safety bugs.
AlmaLinux users are encouraged to promptly update their systems to mitigate potential risks associated with these vulnerabilities. For detailed information regarding each update, including the complete list of fixed vulnerabilities, users can visit the provided links to the respective errata pages.
Additionally, users can manage their notification settings and seek assistance through the AlmaLinux community chat, ensuring they stay informed about future updates and security advisories.
In conclusion, these updates highlight AlmaLinux's commitment to security by addressing significant vulnerabilities across essential software, thereby promoting a safer computing environment for its users. Regular updates and vigilance are crucial in maintaining system integrity and protecting against emerging threats
Kernel, Firefox, Thunderbird updates for AlmaLinux
AlmaLinux has released several security updates for its users, including Kernel, Firefox, and Thunderbird updates. The kernel update (ALSA-2025:15782) fixes seven vulnerabilities with a severity level of Moderate, while the Firefox/Thunderbird updates (ALSA-2025:16109, ALSA-2025:16157, ALSA-2025:16156, and ALSA-2025:16589) fix seven vulnerabilities each with a severity level of Important.
ALSA-2025:15782: kernel security update (Moderate)
ALSA-2025:16109: firefox security update (Important)
ALSA-2025:16157: thunderbird security update (Important)
ALSA-2025:16156: thunderbird security update (Important)
ALSA-2025:16589: thunderbird security update (Important)
ALSA-2025:16260: firefox security update (Important)Kernel, Firefox, Thunderbird updates for AlmaLinux @ Linux Compatible
