AlmaLinux has announced a series of important security updates for various components, including the kernel, kernel-rt, gdk-pixbuf2, glibc, and opentelemetry-collector. These updates aim to address vulnerabilities that could potentially impact the system's security.
1. Opentelemetry-Collector Updates (Moderate Severity):
- Two updates were issued (ALSA-2025:12831 and ALSA-2025:12850) addressing a security issue related to request smuggling due to the acceptance of invalid chunked data (CVE-2025-22871).
2. Kernel Updates (Important Severity):
- Multiple kernel updates (ALSA-2025:12746 and ALSA-2025:12752) were released to fix several vulnerabilities, including use-after-free issues and an integer overflow in the CIFS module. Notable CVEs include CVE-2025-21727, CVE-2025-21928, CVE-2025-22020, and CVE-2025-38087.
3. Kernel-RT Updates (Important Severity):
- Similar vulnerabilities addressed as in the regular kernel updates, with a focus on real-time performance.
4. Gdk-Pixbuf2 Update (Moderate Severity):
- An update (ALSA-2025:13315) was issued to fix a heap buffer overflow (CVE-2025-7345) in the gdk-pixbuf library.
5. Glibc Update (Moderate Severity):
- A security update (ALSA-2025:13240) was released to address a double free vulnerability in the glibc library (CVE-2025-8058).
For further inquiries or assistance, users can reach out through the AlmaLinux community chat
Summary of Security Updates:
1. Opentelemetry-Collector Updates (Moderate Severity):
- Two updates were issued (ALSA-2025:12831 and ALSA-2025:12850) addressing a security issue related to request smuggling due to the acceptance of invalid chunked data (CVE-2025-22871).
2. Kernel Updates (Important Severity):
- Multiple kernel updates (ALSA-2025:12746 and ALSA-2025:12752) were released to fix several vulnerabilities, including use-after-free issues and an integer overflow in the CIFS module. Notable CVEs include CVE-2025-21727, CVE-2025-21928, CVE-2025-22020, and CVE-2025-38087.
3. Kernel-RT Updates (Important Severity):
- Similar vulnerabilities addressed as in the regular kernel updates, with a focus on real-time performance.
4. Gdk-Pixbuf2 Update (Moderate Severity):
- An update (ALSA-2025:13315) was issued to fix a heap buffer overflow (CVE-2025-7345) in the gdk-pixbuf library.
5. Glibc Update (Moderate Severity):
- A security update (ALSA-2025:13240) was released to address a double free vulnerability in the glibc library (CVE-2025-8058).
Additional Information:
For users subscribed to AlmaLinux security notifications, detailed information about each update—including the severity, release dates, and specific vulnerabilities—can be found through the provided links to the AlmaLinux errata pages. Users are encouraged to review and apply these updates to ensure their systems remain secure.Future Considerations:
AlmaLinux users should remain vigilant about future updates and consider subscribing to errata notifications for timely information regarding security patches. Regularly updating systems not only mitigates security risks but also ensures compatibility and performance improvements.For further inquiries or assistance, users can reach out through the AlmaLinux community chat
Opentelemetry-Collector, Kernel, GDK-Pixbuf2, glibc updates for Almalinux
AlmaLinux has received several security updates, including kernel, kernel-rt, gdk-pixbuf2, glibc, and opentelemetry-collector:
ALSA-2025:12831: opentelemetry-collector security update (Moderate)
ALSA-2025:12746: kernel security update (Important)
ALSA-2025:12752: kernel security update (Important)
ALSA-2025:12753: kernel-rt security update (Important)
ALSA-2025:13315: gdk-pixbuf2 security update (Moderate)
ALSA-2025:13240: glibc security update (Moderate)
ALSA-2025:12850: opentelemetry-collector security update (Moderate)Opentelemetry-Collector, Kernel, GDK-Pixbuf2, glibc updates for Almalinux @ Linux Compatible
