Linux Security Roundup for Week 42, 2025

In the week of October 16, 2025, several Linux distributions, including AlmaLinux, Debian, Fedora, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware, SUSE, and Ubuntu, released important security updates to address various vulnerabilities in their packages. These updates, which vary in severity from moderate to important, cover critical software components such as the kernel, webkit2gtk3, libssh, Firefox, and OpenSSL, among others. Issues resolved include integer overflows, use-after-free bugs, privilege escalations, denial of service, and remote code execution. It is highly recommended for users to promptly apply these updates to maintain the security and stability of their systems. Many distributions provide detailed severity ratings using the Common Vulnerability Scoring System (CVSS).

AlmaLinux

AlmaLinux issued security updates targeting vulnerabilities in packages such as iputils, open-vm-tools, libtiff3, and vim. Key updates include patches for the kernel and webkit2gtk3, addressing vulnerabilities in HID and ALSA components. The severity of these updates ranges from moderate to important:
- Moderate: iputils, vim, kernel (multiple updates)
- Important: open-vm-tools, compat-libtiff3, webkit2gtk3, libsoup3

Debian GNU/Linux

Debian released multiple security updates for packages including the Linux kernel, libfcgi, ghostscript, and Firefox across different versions such as Bullseye LTS and Bookworm. The updates address critical vulnerabilities that can lead to privilege escalation and remote code execution. Key updates include:
- Kernel security updates: [DLA 4328-1], [DLA 4330-1]
- libfcgi security update: [DLA 4329-1]

Fedora Linux

Fedora Linux (versions 41 and 42) received updates to address vulnerabilities in Python, OpenSSL, and Apache HTTP Server. Notable updates include:
- Python updates: Addressing security vulnerabilities across multiple Python versions.
- OpenSSL update: Important for system security.

Oracle Linux

Oracle addressed vulnerabilities in multiple package versions across its distributions (7, 8, 9, and 10), including important updates for the kernel and webkit2gtk3:
- Important: Unbreakable Enterprise kernel security update for multiple versions.
- Moderate: Updates for vim and gnutls.

Red Hat Enterprise Linux

RHEL versions 8 and 9 received several important updates targeting vulnerabilities in the kernel and webkit2gtk3. Important updates include:
- Kernel updates: Addressing several significant vulnerabilities.
- webkit2gtk3 updates: For improved security.

Rocky Linux

Rocky Linux provided updates for vulnerabilities in Vim and the kernel, with important patches for .NET and Firefox:
- Important: .NET 8.0, .NET 9.0, Firefox updates.
- Moderate: Kernel updates.

Slackware Linux

Slackware introduced updates for several packages including Mozilla Thunderbird and Firefox, addressing various vulnerabilities:
- Critical: Updates for Samba and other security issues in libarchive and SQLite.

SUSE Linux

SUSE released updates for vulnerabilities in the Linux kernel, Docker, and OpenSSL, among others, across multiple service packs of SLE 15:
- Important: Kernel security updates (multiple live patches).
- Moderate: Updates for projects like HAProxy and libxslt.

Ubuntu Linux

Ubuntu delivered updates addressing security vulnerabilities in several packages, particularly the Linux kernel and Apache Subversion. Key updates include:
- Kernel updates: For Oracle Cloud and Raspberry Pi systems addressing multiple vulnerabilities.
- Other packages: Updates for Samba, Redis, .NET, and FFmpeg.

Conclusion

The continuous updates across these distributions illustrate the importance of maintaining security in the Linux ecosystem. Users are strongly encouraged to stay vigilant and apply updates promptly to safeguard their systems against potential threats. As vulnerabilities are increasingly exploited, proactive measures such as regular updates become critical for ensuring the integrity and security of Linux environments

Linux Security Roundup for Week 42, 2025

Here is a roundup of last week's security updates for several Linux distributions, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux, which have released security updates to address vulnerabilities in various packages. The updates range from moderate to important severity and affect packages such as the kernel, webkit2gtk3, libssh, Firefox, OpenSSL, and others, resolving issues like integer overflow, use-after-free bugs, privilege escalation, denial of service, and remote code execution. Users are advised to apply these security updates to ensure the stability and security of their systems, with some distributions providing detailed severity ratings through the Common Vulnerability Scoring System (CVSS) base score.

Linux Security Roundup for Week 42, 2025 @ Linux Compatible