AlmaLinux has recently implemented a series of security updates addressing vulnerabilities within various packages, including the kernel, Python libraries, libxml2, and glibc. The updates are classified as moderate in severity and were released on August 6, 2025. The following notable updates were issued:
1. Kernel Security Updates:
- Multiple kernel packages received updates to fix various vulnerabilities, including page size overflows, out-of-bounds reads, and user-after-free (UAF) vulnerabilities. Key CVEs include CVE-2025-22091 and CVE-2025-22121.
2. Python Security Updates:
- The `python3.12-setuptools` and `python-setuptools` packages were updated to address a path traversal vulnerability (CVE-2025-47273). The `python-requests` library also received a fix for a credentials leak issue (CVE-2024-47081).
3. LibXML2 and Glibc Updates:
- The `libxml2` library received an update for an out-of-bounds read vulnerability (CVE-2025-32415), while the `glibc` package addressed a double free issue (CVE-2025-8058).
4. Additional Kernel Updates:
- Further kernel updates were issued to correct various vulnerabilities related to memory corruption and uninitialized accesses.
Each of these updates is crucial for maintaining the security and stability of AlmaLinux systems. Users are encouraged to stay informed about these updates and apply them promptly. For more detailed information about each security issue, users can refer to the specific CVE pages linked in the notifications.
For continuous updates and management of notification settings, users can visit the AlmaLinux mailing list management page or join the community chat for further inquiries.
Extension:
As cyber threats evolve, maintaining an up-to-date operating system is vital for ensuring system integrity and security. AlmaLinux users should regularly check for updates and consider implementing automated update mechanisms if feasible. Additionally, users may also want to explore best practices for securing their Linux environments, such as employing firewalls, intrusion detection systems, and regular security audits to complement the software updates. Engaging with the AlmaLinux community can also provide valuable insights and support for managing security effectively
1. Kernel Security Updates:
- Multiple kernel packages received updates to fix various vulnerabilities, including page size overflows, out-of-bounds reads, and user-after-free (UAF) vulnerabilities. Key CVEs include CVE-2025-22091 and CVE-2025-22121.
2. Python Security Updates:
- The `python3.12-setuptools` and `python-setuptools` packages were updated to address a path traversal vulnerability (CVE-2025-47273). The `python-requests` library also received a fix for a credentials leak issue (CVE-2024-47081).
3. LibXML2 and Glibc Updates:
- The `libxml2` library received an update for an out-of-bounds read vulnerability (CVE-2025-32415), while the `glibc` package addressed a double free issue (CVE-2025-8058).
4. Additional Kernel Updates:
- Further kernel updates were issued to correct various vulnerabilities related to memory corruption and uninitialized accesses.
Each of these updates is crucial for maintaining the security and stability of AlmaLinux systems. Users are encouraged to stay informed about these updates and apply them promptly. For more detailed information about each security issue, users can refer to the specific CVE pages linked in the notifications.
For continuous updates and management of notification settings, users can visit the AlmaLinux mailing list management page or join the community chat for further inquiries.
Extension:
As cyber threats evolve, maintaining an up-to-date operating system is vital for ensuring system integrity and security. AlmaLinux users should regularly check for updates and consider implementing automated update mechanisms if feasible. Additionally, users may also want to explore best practices for securing their Linux environments, such as employing firewalls, intrusion detection systems, and regular security audits to complement the software updates. Engaging with the AlmaLinux community can also provide valuable insights and support for managing security effectively
Kernel, Python, LibXML2, Glibc updates for AlmaLinux
AlmaLinux has received several security updates, including kernel, python3.12-setuptools, libxml2, python-requests, and glibc security updates:
ALSA-2025:11855: kernel security update (Moderate)
ALSA-2025:12834: python3.12-setuptools security update (Moderate)
ALSA-2025:11850: kernel security update (Moderate)
ALSA-2025:13203: libxml2 security update (Moderate)
ALSA-2025:13234: python-requests security update (Moderate)
ALSA-2025:12980: glibc security update (Moderate)
ALSA-2025:11036: python-setuptools security update (Moderate)
ALSA-2025:11455: kernel security update (Moderate)Kernel, Python, LibXML2, Glibc updates for AlmaLinux @ Linux Compatible
