AlmaLinux has rolled out important security updates as of May 16, 2025, addressing vulnerabilities in key components including the Kernel, Yelp, .NET versions 8.0 and 9.0, and Redis. Here’s a summary of the updates:
1. Kernel Security Update (ALSA-2025:7531): This update fixes a PCI device reference count leak and a missing range check in the netfilter ipset component. The fixes address vulnerabilities identified as CVE-2022-49011 and CVE-2024-53141.
2. Yelp Security Update (ALSA-2025:7569): Yelp, the GNOME desktop help browser, received a critical fix for an arbitrary file read vulnerability (CVE-2025-3155).
3. Kernel-RT Security Update (ALSA-2025:7532): Similar to the standard kernel update, this Real-Time kernel update also addresses the same vulnerabilities as the standard kernel.
4. .NET 8.0 Security Update (ALSA-2025:7589): This update includes fixes for a spoofing vulnerability affecting .NET and Visual Studio (CVE-2025-26646). The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.
5. .NET 9.0 Security Update (ALSA-2025:7571): It mirrors the updates in .NET 8.0, with similar fixes for the spoofing vulnerability. The new versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.
6. Redis Security Update (ALSA-2025:7686): Redis has been updated to fix a Denial of Service (DoS) vulnerability that could be exploited due to unlimited growth of output buffers by unauthenticated clients (CVE-2025-21605).
These updates are crucial for maintaining system security and stability, and users are encouraged to apply them promptly. For further details, users can refer to the specific errata pages linked in each update notification.
To enhance the security posture of AlmaLinux, users can also stay informed about future updates and engage with the community for support through the AlmaLinux chat or mailing lists. Regular updates, active community involvement, and prompt application of security patches are essential practices to safeguard systems against vulnerabilities
1. Kernel Security Update (ALSA-2025:7531): This update fixes a PCI device reference count leak and a missing range check in the netfilter ipset component. The fixes address vulnerabilities identified as CVE-2022-49011 and CVE-2024-53141.
2. Yelp Security Update (ALSA-2025:7569): Yelp, the GNOME desktop help browser, received a critical fix for an arbitrary file read vulnerability (CVE-2025-3155).
3. Kernel-RT Security Update (ALSA-2025:7532): Similar to the standard kernel update, this Real-Time kernel update also addresses the same vulnerabilities as the standard kernel.
4. .NET 8.0 Security Update (ALSA-2025:7589): This update includes fixes for a spoofing vulnerability affecting .NET and Visual Studio (CVE-2025-26646). The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.
5. .NET 9.0 Security Update (ALSA-2025:7571): It mirrors the updates in .NET 8.0, with similar fixes for the spoofing vulnerability. The new versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.
6. Redis Security Update (ALSA-2025:7686): Redis has been updated to fix a Denial of Service (DoS) vulnerability that could be exploited due to unlimited growth of output buffers by unauthenticated clients (CVE-2025-21605).
These updates are crucial for maintaining system security and stability, and users are encouraged to apply them promptly. For further details, users can refer to the specific errata pages linked in each update notification.
To enhance the security posture of AlmaLinux, users can also stay informed about future updates and engage with the community for support through the AlmaLinux chat or mailing lists. Regular updates, active community involvement, and prompt application of security patches are essential practices to safeguard systems against vulnerabilities
Kernel, Yelp, .NET, Redis updates for AlmaLinux
AlmaLinux has received several security updates, including Kernel, Yelp, Kernel-RT,.NET 8.0,.NET 9.0, and Redis security updates:
ALSA-2025:7531: kernel security update (Important)
ALSA-2025:7569: yelp and yelp-xsl security update (Important)
ALSA-2025:7532: kernel-rt security update (Important)
ALSA-2025:7589: .NET 8.0 security update (Important)
ALSA-2025:7571: .NET 9.0 security update (Important)
ALSA-2025:7686: redis:6 security update (Important)Kernel, Yelp, .NET, Redis updates for AlmaLinux @ Linux Compatible
