Linux Security Roundup for Week 52, 2025

Security 10913 Published 2025-12-28 08:44 by Philipp Esselbach

News

Here is a roundup of this week's security updates released for AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, and SUSE Linux. The updates include patches for vulnerable packages such as binutils, curl, Chromium, PHP, PostgreSQL, and more, aiming to enhance the overall security of the systems by patching known issues. Red Hat has also issued updates to address vulnerabilities in the kernel, Git-LFS, webkit2gtk3, mod_md, and Grafana, while SUSE Linux received patches for duc, python311-tornado6, Mozilla Firefox, taglib, and MariaDB, among others.

AlmaLinux

AlmaLinux 8 has received several security updates affecting various packages, including binutils, curl, python39, and others. These updates aim to address potential vulnerabilities in the mentioned packages, with some patches being rated as Important or Moderate. Additionally, other security updates have been released for AlmaLinux, covering container-tools, mod_md, openssh, and more. The updates are meant to enhance the overall security of the system by patching known vulnerabilities.

Debian GNU/Linux

Several security updates have been released for Debian GNU/Linux, addressing vulnerabilities in popular packages such as Chromium, PHP, WordPress, and more. The updates also include fixes for the usbmuxd package, which is used to manage iPhone and iPod Touch devices, as well as a patch for the PostgreSQL connection pooler pgbouncer. Additionally, security updates have been released for python-urllib3, Rails, and gst-plugins-good 1.0, among others.

Fedora Linux

Several security updates have been released for Fedora Linux, including upgrades to various tools and libraries that affect different versions of the operating system. The updates include patches for packages such as pgAdmin, Moby-Engine, Gobuster, and more, which were made available for both Fedora 42 and Fedora 43. Additionally, there are important security updates available for users running Fedora 42, including mingw-libsoup and RetroArch.

Oracle Linux

Oracle has launched several updates for its Linux platform, including security patches and bug fixes for various releases such as Oracle Linux 10 and version 9. These updates aim to improve the functionality of several packages and address vulnerabilities. The company has also issued security advisories for specific versions of Oracle Linux, like the ELSA-2025-23732 advisory for Oracle Linux 8's httpd:2.4 security updates. Multiple articles have reported on these updates, highlighting various affected components such as NodeJS, Git-LFS, mod_md, and the Unbreakable Enterprise kernel.

Red Hat Enterprise Linux

Red Hat has released several security updates to address vulnerabilities in various packages, including kernel, Git-LFS, webkit2gtk3, mod_md, and Grafana. These updates have been rated as having a moderate or important security impact by Red Hat Product Security. The company also issued updates for rsync, keylime, go-rpm-macros, kernel, grafana, and httpd, which are available through CVE links. The WebKitGTK4 and webkit2gtk3 packages were updated to address vulnerabilities with an important security impact rated by CVSS base scores.

Rocky Linux

Rocky Linux users are advised to update their systems due to available security patches addressing potential vulnerabilities. Several key packages have received updates, including Kernel, Podman, Python, LibSSH, Apache, and PHP, among others. The updates aim to fix various security issues that could impact system stability and integrity. Users can find more information about the specific updates and how to apply them by following the links provided in each article.

Slackware Linux

A security issue has been fixed in the net-snmp packages for Slackware 15.0 and current, addressing a critical vulnerability triggered by a specially crafted trap. New updates are available to mitigate this risk. Additionally, new vim packages have also been released for Slackware 15.0 and -current, fixing a buffer overflow issue involving incomplete multi-byte characters. The updated packages include the latest version of vim-9.

SUSE Linux

Several security updates have been released for SUSE Linux, addressing vulnerabilities in various packages, including duc, python311-tornado6, and Mozilla Firefox. Additionally, security updates are available for taglib, MariaDB, glib2, kernel-devel, and other packages to fix potential issues. Important patches were also released for cheat, go-sendxmpp, and webkit2gtk3, while buildah was updated on openSUSE Tumbleweed to address a moderate vulnerability. Multiple security updates have been rolled out for SUSE Linux, including fixes for gnutls, buildah, and other critical packages to ensure system stability and security.