Linux Security Roundup for Week 46, 2025

In the past week, various Linux distributions, including AlmaLinux, Debian GNU/Linux, Fedora, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware, SUSE Linux, and Ubuntu, have released crucial security updates to address vulnerabilities across multiple packages. These updates target potential risks that could lead to local privilege escalation, information disclosure, or code execution if unaddressed. Each distribution has tailored its updates to specific package vulnerabilities, releasing critical patches where necessary.

AlmaLinux

AlmaLinux has issued important security updates for several packages, notably the kernel and xorg-x11-server-Xwayland. Additional updates include fixes for expat, osbuild-composer, valkey, qt6-qtsvg, bind, and runc. A kernel-rt package update addresses three vulnerabilities, including a significant one related to conditional IBPB mitigation (CVE-2025-40300). Notably, a separate kernel security update for AlmaLinux 9 addresses vulnerabilities affecting AMD processors and x86/vmscape.

Debian GNU/Linux

Debian has rolled out multiple security updates across various packages, including gdk-pixbuf, Incus, strongSwan, libarchive, and Firefox-ESR. These updates resolve vulnerabilities that could lead to heap buffer overflows, local privilege escalation, and code execution. Other affected packages include gst-plugins, LXD, Chromium, and Squid.

Fedora Linux

Fedora has addressed vulnerabilities in packages like Xwayland, Chromium, .NET Runtime, and Rust libraries, releasing updates for versions 41, 42, and 43. These updates tackle issues such as out-of-bounds writes and denial-of-service attacks, enhancing system security.

Oracle Linux

Oracle has provided several security updates, including a critical update for the Unbreakable Enterprise kernel, along with enhancements for ca-certificates and Oracle Common Release across versions 7, 8, 9, and 10. Oracle Linux 7 also received updates addressing OpenJDK security vulnerabilities.

Red Hat Enterprise Linux

Red Hat has released updates for various versions, patching vulnerabilities in kernel, Bind, Thunderbird, Squid, and more. The updates have been rated with varying security impacts, ranging from moderate to important.

Rocky Linux

Rocky Linux users should be aware of a security update for LibTIFF addressing critical stability issues, along with updates for xorg-x11-server-Xwayland and libssh. Kernel updates have also been released for Rocky Linux 8, addressing security issues.

Slackware Linux

Slackware has received updates from Mozilla, including a new version of Firefox (140.5.0esr) and Thunderbird, which fix security vulnerabilities. Xpdf packages have also been updated to improve security and address bugs.

SUSE Linux

SUSE has released several security updates covering vulnerabilities in Java, Mozilla Thunderbird, Python-Django, Chromium, and others. Kernel live patches have also been updated to bolster system security.

Ubuntu Linux

Ubuntu has issued various security updates addressing vulnerabilities in Intel Microcode, Rust-sudo-rs, Raptor, and the Linux kernel. These updates aim to mitigate potential risks for users.

Conclusion

The ongoing security updates across these various Linux distributions highlight the importance of maintaining system integrity and protecting against vulnerabilities. Users are encouraged to promptly apply these updates to ensure their systems remain secure and stable against potential threats. Continuous vigilance and timely updates are key in the ever-evolving landscape of cybersecurity

Linux Security Roundup for Week 46, 2025

Multiple Linux distributions have released security updates over the past week to address vulnerabilities in various packages. Distributions such as AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux have all issued updates to patch issues in packages like kernels, web browsers, and libraries. These security updates aim to improve the overall security and stability of each distribution by addressing vulnerabilities that could lead to local privilege escalation, information disclosure, or code execution if left unpatched. Each distribution has released specific updates for its versions, with some also releasing critical updates to address significant security issues.

Linux Security Roundup for Week 46, 2025 @ Linux Compatible