Here is a roundup of last week's Linux security updates for AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux.

AlmaLinux

• ALSA-2025:3617: gimp security update (Important)
• ALSA-2025:3615: libxslt security update (Important)
• ALSA-2025:3645: tomcat security update (Moderate)
• ALSA-2025:3634: python3.11 security update (Low)
• ALSA-2025:3631: python3.12 security update (Low)
• ALSA-2025:3713: webkit2gtk3 security update (Important)
• ALSA-2025:3683: tomcat security update (Moderate)
• ALSA-2025:3772: go-toolset:rhel8 security update (Moderate)
• ALSA-2025:3773: delve and golang security update (Important)

Debian GNU/Linux

• [DLA 4117-1] atop security update
• ELA-1381-1 ruby2.1 security update
• [DLA 4118-1] ghostscript security update
• ELA-1382-1 linux-6.1 security update
• [DLA 4120-1] libnet-easytcp-perl security update
• [DLA 4121-1] phpmyadmin security update
• [DLA 4119-1] lemonldap-ng security update
• [DSA 5897-1] lemonldap-ng security update
• ELA-1343-2 proftpd-dfsg regression update
• [DLA 4122-1] libbssolv-perl security update
• [DSA 5898-1] chromium security update
• ELA-1385-1 php5 security update
• ELA-1384-1 php7.0 security update
• ELA-1383-1 php7.3 security update
• [DSA 5899-1] webkit2gtk security update
• [DSA 5900-1] linux security update
• [DLA 4123-1] wpa security update

Fedora Linux

• Fedora 40 Update: containernetworking-plugins-1.5.1-2.fc40
• Fedora 41 Update: matrix-synapse-1.118.0-4.fc41
• Fedora 41 Update: cri-tools1.29-1.29.0-11.fc41
• Fedora 40 Update: perl-Data-Entropy-0.008-1.fc40
• Fedora 41 Update: webkitgtk-2.48.1-2.fc41
• Fedora 41 Update: openvpn-2.6.14-1.fc41
• Fedora 41 Update: perl-Data-Entropy-0.008-1.fc41
• Fedora 41 Update: thunderbird-128.9.0-1.fc41
• Fedora 41 Update: mariadb10.11-10.11.11-1.fc41
• Fedora 40 Update: augeas-1.14.2-0.4.20250324git4dffa3d.fc40
• Fedora 40 Update: ghostscript-10.02.1-14.fc40
• Fedora 42 Update: uboot-tools-2025.04-1.fc42
• Fedora 40 Update: thunderbird-128.9.0-1.fc40
• Fedora 40 Update: openvpn-2.6.14-1.fc40
• Fedora 41 Update: zabbix-7.0.11-1.fc41
• Fedora 42 Update: firefox-137.0-2.fc42
• Fedora 42 Update: perl-Data-Entropy-0.008-1.fc42
• Fedora 42 Update: matrix-synapse-1.127.1-1.fc42
• Fedora 42 Update: cri-tools1.29-1.29.0-11.fc42
• Fedora 42 Update: upx-5.0.0-1.fc42
• Fedora 42 Update: yarnpkg-1.22.22-7.fc42
• Fedora 42 Update: condor-23.9.6-6.fc42
• Fedora 42 Update: corosync-3.1.9-3.fc42
• Fedora 42 Update: nextcloud-31.0.2-1.fc42
• Fedora 42 Update: suricata-7.0.10-1.fc42
• Fedora 42 Update: varnish-7.6.1-5.fc42
• Fedora 40 Update: chromium-135.0.7049.84-1.fc40
• Fedora 40 Update: zabbix-6.0.39-1.fc40
• Fedora 41 Update: chromium-135.0.7049.84-1.fc41

Oracle Linux

• ELSA-2025-3634 Low: Oracle Linux 9 python3.11 security update
• ELSA-2025-3645 Moderate: Oracle Linux 9 tomcat security update
• ELSA-2025-3631 Low: Oracle Linux 9 python3.12 security update
• ELSA-2025-3617 Important: Oracle Linux 9 gimp security update
• ELBA-2025-20214 Oracle Linux 9 kmod bug fix update
• ELBA-2025-20213 Oracle Linux 9 kexec-tools bug fix update
• ELSA-2025-3683 Moderate: Oracle Linux 8 tomcat security update
• ELSA-2025-3615 Important: Oracle Linux 8 libxslt security update
• ELBA-2025-20209 Oracle Linux 8 kexec-tools bug fix update
• ELSA-2025-2879 Important: Oracle Linux 7 xorg-x11-server security update
• ELBA-2025-3742 Oracle Linux 9 .NET 9.0 bug fix and enhancement update
• ELSA-2025-3713 Important: Oracle Linux 9 webkit2gtk3 security update
• ELBA-2025-3712 Oracle Linux 9 .NET 8.0 bug fix and enhancement update
• ELSA-2025-3367 Important: Oracle Linux 8 grub2 security update
• ELEA-2025-3114 Oracle Linux 8 microcode_ctl bug fix and enhancement update
• ELBA-2025-3741 Oracle Linux 8 .NET 9.0 bug fix and enhancement update
• ELBA-2025-3711 Oracle Linux 8 .NET 8.0 bug fix and enhancement update
• ELBA-2025-2991 Oracle Linux 9 microcode_ctl bug fix and enhancement update
• ELSA-2025-3772 Moderate: Oracle Linux 8 go-toolset:ol8 security update
• ELSA-2025-3773 Important: Oracle Linux 9 delve and golang security update
• ELBA-2025-20206 Oracle Linux 8 oVirt 4.5 ovirt-ansible-collection bug fix update

Red Hat Enterprise Linux

• RHSA-2025:3624: Important: libxslt security update
• RHSA-2025:3625: Important: libxslt security update
• RHSA-2025:3626: Important: libxslt security update
• RHSA-2025:3617: Important: gimp security update
• RHSA-2025:3620: Important: firefox security update
• RHSA-2025:3621: Important: firefox security update
• RHSA-2025:3622: Important: python-jinja2 security update
• RHSA-2025:3623: Important: firefox security update
• RHSA-2025:3618: Important: grafana security update
• RHSA-2025:3619: Important: libxslt security update
• RHSA-2025:3616: Important: grafana security update
• RHSA-2025:3615: Important: libxslt security update
• RHSA-2025:3612: Important: libxslt security update
• RHSA-2025:3614: Important: libxslt security update
• RHSA-2025:3613: Important: libxslt security update
• RHSA-2025:3647: Moderate: tomcat security update
• RHSA-2025:3635: Important: Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates
• RHSA-2025:3637: Important: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
• RHSA-2025:3636: Important: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
• RHSA-2025:3634: Low: python3.11 security update
• RHSA-2025:3631: Low: python3.12 security update
• RHSA-2025:3629: Important: gimp security update
• RHSA-2025:3628: Important: firefox security update
• RHSA-2025:3627: Important: libxslt security update
• RHSA-2025:3666: Low: openssl security update
• RHSA-2025:3663: Moderate: 389-ds-base security update
• RHSA-2025:3670: Moderate: redhat-ds:12 security update
• RHSA-2025:3482: Moderate: Red Hat OpenStack Platform 17.1 (openstack-ironic) security update
• RHSA-2025:3646: Moderate: tomcat security update
• RHSA-2025:3645: Moderate: tomcat security update
• RHSA-2025:3608: Moderate: Red Hat JBoss Web Server 6.1.0 release and security update
• RHSA-2025:3609: Moderate: Red Hat JBoss Web Server 6.1.0 release and security update
• RHSA-2025:3671: Important: python-jinja2 security update
• RHSA-2025:3685: Important: Red Hat Edge Manager Version 0.5.1 (Technology Preview) security fixes
• RHSA-2025:3698: Important: opentelemetry-collector security update
• RHSA-2025:3684: Moderate: tomcat security update
• RHSA-2025:3683: Moderate: tomcat security update
• RHSA-2025:3709: Important: updated discovery container images
• RHSA-2025:3568: Important: OpenShift Container Platform 4.14.50 security and extras update
• RHSA-2025:3720: Important: multicluster engine for Kubernetes 2.8.1 container image updates
• RHSA-2025:3713: Important: webkit2gtk3 security update
• RHSA-2025:3755: Important: webkit2gtk3 security update
• RHSA-2025:3763: Important: Red Hat Advanced Cluster Management 2.13.2 container image updates
• RHSA-2025:3756: Important: webkit2gtk3 security update
• RHSA-2025:3772: Moderate: go-toolset:rhel8 security update
• RHSA-2025:3773: Important: delve and golang security update
• RHSA-2025:3569: Important: OpenShift Container Platform 4.14.50 bug fix and security update
• RHSA-2025:3577: Important: OpenShift Container Platform 4.18.8 bug fix and security update
• RHSA-2025:3801: Important: RHEL AI 1.5 hdf5 security update
• RHSA-2025:3573: Important: OpenShift Container Platform 4.12.75 packages and security update

Slackware Linux

• python3 (SSA:2025-099-01)

SUSE Linux

• openSUSE-SU-2025:0115-1: important: Security update for chromium, gn
• SUSE-SU-2025:1149-1: moderate: Security update for webkit2gtk3
• SUSE-SU-2025:1153-1: important: Security update for go1.24
• SUSE-SU-2025:1157-1: important: Security update for MozillaThunderbird
• SUSE-SU-2025:1155-1: moderate: Security update for govulncheck-vulndb
• SUSE-SU-2025:1162-1: moderate: Security update for xen
• SUSE-SU-2025:1164-1: important: Security update for giflib
• SUSE-SU-2025:1177-1: important: Security update for the Linux Kernel
• SUSE-SU-2025:1172-1: moderate: Security update for poppler
• SUSE-SU-2025:1173-1: moderate: Security update for poppler
• SUSE-SU-2025:1176-1: important: Security update for the Linux Kernel
• SUSE-SU-2025:1178-1: important: Security update for the Linux Kernel
• openSUSE-SU-2025:0117-1: important: Security update for doomsday
• SUSE-SU-2025:1180-1: important: Security update for the Linux Kernel
• openSUSE-SU-2025:14976-1: moderate: libpoppler-cpp2-25.04.0-1.1 on GA media
• openSUSE-SU-2025:14973-1: moderate: etcd-3.5.21-1.1 on GA media
• openSUSE-SU-2025:14975-1: moderate: libmozjs-128-0-128.9.0-1.1 on GA media
• openSUSE-SU-2025:14972-1: moderate: apache2-mod_auth_openidc-2.4.16.11-1.1 on GA media
• openSUSE-SU-2025:14971-1: moderate: MozillaFirefox-137.0-1.1 on GA media
• SUSE-SU-2025:1193-1: moderate: Security update for apparmor
• openSUSE-SU-2025:14978-1: moderate: govulncheck-vulndb-0.0.20250408T210408-1.1 on GA media
• SUSE-SU-2025:1195-1: important: Security update for the Linux Kernel
• SUSE-SU-2025:1199-1: moderate: Security update for fontforge
• SUSE-SU-2025:1201-1: important: Security update for expat
• openSUSE-SU-2025:14983-1: moderate: pgadmin4-9.2-1.1 on GA media
• openSUSE-SU-2025:14984-1: moderate: liblzma5-32bit-5.8.1-1.1 on GA media
• openSUSE-SU-2025:14981-1: moderate: fontforge-20230101-6.1 on GA media
• openSUSE-SU-2025:14986-1: moderate: python311-Django-5.1.8-1.1 on GA media
• openSUSE-SU-2025:14987-1: moderate: python311-PyJWT-2.10.1-2.1 on GA media

Ubuntu Linux

• [USN-7417-1] libdbd-mysql-perl vulnerabilities
• [USN-7416-1] Kamailio vulnerabilities
• [USN-7418-1] Ruby vulnerabilities
• [USN-7406-6] Linux kernel (NVIDIA Tegra IGX) vulnerabilities
• [USN-7402-4] Linux kernel vulnerabilities
• [USN-7422-1] FIS-GT.M vulnerabilities
• [USN-6885-4] Apache HTTP Server regression
• [USN-7420-1] Linux kernel (Azure) vulnerabilities
• [USN-7408-3] Linux kernel (FIPS) vulnerabilities
• [USN-7408-4] Linux kernel (HWE) vulnerabilities
• [USN-7421-1] Linux kernel (Azure) vulnerabilities
• [USN-7406-5] Linux kernel (NVIDIA) vulnerabilities
• [USN-7419-1] Vim vulnerabilities
• [USN-7423-1] GNU binutils vulnerabilities
• [USN-7424-1] Expat vulnerability
• [USN-7425-1] Erlang vulnerability
• [USN-7427-1] .NET vulnerability
• [USN-7426-1] poppler vulnerabilities
• [USN-7429-1] Linux kernel vulnerabilities
• [USN-7428-1] Linux kernel vulnerabilities
• [USN-7428-2] Linux kernel (FIPS) vulnerabilities
• [USN-7429-2] Linux kernel (FIPS) vulnerabilities
• [USN-7430-1] Dino vulnerability
• [USN-7346-3] OpenSC vulnerabilities
• [USN-7426-2] poppler vulnerabilities
• [USN-7431-1] HAProxy vulnerability
• [USN-7432-1] libsoup vulnerabilities