Linux Compatible - AlmaLinux

Kernel, Vim, FreeRDP, and Xwayland updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-14 06:14 by Philipp Esselbach 0

Kernels, PostgreSQL, Firefox, and Networking Tools updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-13 06:12 by Philipp Esselbach 0

Kernel, GPSD, Go, Tomcat 9, and Perl DBI updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-11 06:39 by Philipp Esselbach 0

AlmaLinux has issued security errata for versions 9 and 10 addressing vulnerabilities across libarchive, gpsd, the kernel, perl-DBI, golang, and tomcat9. The patches resolve command injection flaws in gpsd packages and a double-free error in libarchive used for RAR5 decompression, alongside fixes for XFS data corruption and cryptographic state handling within the kernel. Golang updates advance AlmaLinux 10 systems to version 1.26.5, remediating privilege escalation risks in Punycode label processing and directory traversal via symlinks. Tomcat 9 installations gain protections against information disclosure caused by a padding oracle flaw in EncryptInterceptor and bypassed encryption of sensitive data.

ALSA-2026:52674: libarchive security update (Moderate)
ALSA-2026:51153: gpsd-minimal security update (Important)
ALSA-2026:51075: gpsd security update (Important)
ALSA-2026:39494: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:45114: kernel security update (Important)
ALSA-2026:38513: perl-DBI security update (Important)
ALSA-2026:37436: golang security, bug fix, and enhancement update (Important)
ALSA-2026:36790: tomcat9 security, bug fix, and enhancement update (Important)

Kernel, Firefox, and Library updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-08 06:20 by Philipp Esselbach 0

Kernel, Node.js, Thunderbird, Firefox, and GIMP updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-07 07:10 by Philipp Esselbach 0

Patch Kernel, Thunderbird, and Perl updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-05 05:54 by Philipp Esselbach 0

AlmaLinux issued eight security errata covering versions 8 through 10 of its operating system. The patches resolve critical flaws in the Linux kernel, Thunderbird email client, GStreamer media framework, and several Perl modules including DBI and Archive::Tar. Attackers could exploit buffer overflows and use-after-free conditions to execute arbitrary code or bypass sandbox restrictions on affected systems.

ALSA-2026:49668: p11-kit security update (Moderate)
ALSA-2026:49508: gstreamer1-plugins-good security update (Important)
ALSA-2026:49612: perl-DBI security update (Important)
ALSA-2026:49523: perl-Archive-Tar security update (Important)
ALSA-2026:49927: fence-agents security update (Moderate)
ALSA-2026:49857: kernel security, bug fix, and enhancement update (Moderate)
ALSA-2026:49851: kernel-rt security, bug fix, and enhancement update (Moderate)
ALSA-2026:49922: thunderbird security update (Important)

Vim, Perl DBI, Archive-Tar, ldns, FRRouting, and GLib2 updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-04 07:31 by Philipp Esselbach 0

AlmaLinux released a batch of important security errata, targeting system versions 8, 9, and 10. The patches address critical vulnerabilities across six key packages, including vim, perl-DBI, perl-Archive-Tar, ldns, FRRouting, and mingw-glib2. Flaws in these components range from arbitrary code execution via malicious docstrings and crafted tar headers to heap corruption and DNS poisoning attacks caused by insufficient query-response matching.

ALSA-2026:48650: vim security update (Important)
ALSA-2026:49514: perl-DBI security update (Important)
ALSA-2026:49525: perl-Archive-Tar security update (Important)
ALSA-2026:49520: ldns security update (Important)
ALSA-2026:49524: perl-Archive-Tar security update (Important)
ALSA-2026:49511: frr security update (Important)
ALSA-2026:49512: mingw-glib2 security update (Important)

Linux Kernel, .NET Frameworks, and Unbound updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-03 07:09 by Philipp Esselbach 0

AlmaLinux released a batch of important security errata for versions 8 and 10, targeting core system components and developer frameworks. The kernel packages on both releases received patches for networking memory management flaws, double-free errors, and potential use-after-free vulnerabilities across multiple subsystems. .NET frameworks 8 through 10 received over a dozen patches addressing remote code execution attempts, privilege escalation flaws, and denial of service conditions linked to authentication bypasses and unsafe data deserialization. Additional advisories hardened the Unbound DNS resolver against cache poisoning and resource exhaustion attacks, patched Python Pillow for memory disclosure risks, and fixed stack overflow bugs in coreutils and perl archives.

ALSA-2026:49214: kernel security update (Important)
ALSA-2026:49213: kernel-rt security update (Important)
ALSA-2026:37282: unbound security update (Important)
ALSA-2026:41899: .NET 9.0 security, bug fix, and enhancement update (Important)
ALSA-2026:47736: fence-agents security update (Important)
ALSA-2026:41901: .NET 8.0 security, bug fix, and enhancement update (Important)
ALSA-2026:41900: .NET 10.0 security, bug fix, and enhancement update (Important)
ALSA-2026:48225: perl:5.32 security update (Important)
ALBA-2026:47115: coreutils bug fix and enhancement update (None)
ALSA-2026:48021: python-pillow security update (Important)
ALSA-2026:48790: osbuild-composer security update (Important)
ALSA-2026:47017: kernel security, bug fix, and enhancement update (Important)

Kernel security, bug fix, and enhancement update for AlmaLinux 9

AlmaLinux 2626 Published 2026-08-02 07:56 by Philipp Esselbach 0

AlmaLinux released errata ALSA-2026:47040 for version 9 to patch five kernel vulnerabilities affecting network security, memory management, and storage subsystems. The update resolves specific issues tied to CVE-2025-39797 through CVE-2026-64017 while fixing a general protection fault that triggered during NFS state revocation operations. Deployment also enables Pretimeout Watchdog Panic functionality for x86 processors, which streamlines crash reporting and system recovery procedures.

ALSA-2026:47040: kernel security, bug fix, and enhancement update (Important)

.NET, Linux Kernel, OpenSSH, and DNS Resolver updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-01 07:07 by Philipp Esselbach 0

Node.js, OpenSSH, and Vim updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-31 08:36 by Philipp Esselbach 0

AlmaLinux issued five security errata addressing critical vulnerabilities in Node.js versions 22 and 24, OpenSSH clients, and Vim across its Linux distributions. The advisories resolve denial-of-service flaws in the brace-expansion and tar libraries that impact Node.js packages, while a distinct Vim patch targets arbitrary code execution risks arising from malicious Python docstrings and crafted tags files used during omni-completion. OpenSSH updates mitigate severe threats including remote man-in-the-middle attacks via X11 forwarding, client-side denials of service triggered by double-free errors in DH-GEX validation, heap out-of-bounds reads in GSSAPI cleanup, use-after-free conditions during host key re-exchange, and scp file misplacement issues.

ALSA-2026:48034: nodejs24 security update (Important)
ALSA-2026:48032: nodejs-nodemon security update (Important)
ALSA-2026:48033: nodejs22 security update (Important)
ALSA-2026:47757: openssh security update (Important)
ALSA-2026:48703: vim security update (Important)
ALSA-2026:47755: openssh security update (Moderate)

Gstreamer1-plugins-bad-free, Rest, NodeJS, and more updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-30 08:42 by Philipp Esselbach 0

AlmaLinux released a batch of important security errata, targeting multiple core libraries across both the AlmaLinux 8 and 10 operating systems. The updates address memory corruption flaws in gstreamer1-plugins-bad-free, libXfont2, rest, nodejs versions 22 and 24, and libtiff that could allow remote code execution or cause system crashes. Administrators will also find patches for denial-of-service vulnerabilities in the Node.js tar and brace-expansion modules alongside a weak random number generation issue inside the librest PKCE implementation.

ALSA-2026:47180: gstreamer1-plugins-bad-free security update (Important)
ALSA-2026:47079: libXfont2 security update (Important)
ALSA-2026:47085: rest security update (Important)
ALSA-2026:47059: nodejs:22 security update (Important)
ALSA-2026:47060: nodejs:24 security update (Important)
ALSA-2026:47184: libtiff security update (Important)
ALSA-2026:47731: gstreamer1-plugins-bad-free security update (Important)
ALSA-2026:47103: libXfont2 security update (Important)

Sssd, Kernel, Dovecot, go-fdo-server updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-29 07:01 by Philipp Esselbach 0

AlmaLinux released security updates for packages including sssd, kernel, kernel-rt, dovecot, go-fdo-server, and go-fdo-client across AlmaLinux versions 8 and 10. The sssd update addresses privilege escalation via sudo LDAP provider searches (CVE-2026-14474) and Kerberos authentication bypass through GPO cache path traversal (CVE-2026-14476), while also resolving bugs in the AD UPN override tool. Kernel and kernel-rt packages fix a use-after-free vulnerability in ipv6 ICMPv6 handling (CVE-2026-53006), and dovecot resolves a denial of service issue caused by excessive IMAP bracing (CVE-2026-42006). The go-fdo-server and go-fdo-client updates for AlmaLinux 10 patch privilege escalation via Punycode processing (CVE-2026-39821) and denial of service attacks targeting DNS SAN entries (CVE-2026-27145).

ALSA-2026:46990: sssd security, bug fix, and enhancement update (Important)
ALSA-2026:47011: kernel security update (Important)
ALSA-2026:47010: kernel-rt security update (Important)
ALSA-2026:46532: dovecot security update (Important)
ALSA-2026:46395: go-fdo-server security update (Important)
ALSA-2026:46394: go-fdo-client security update (Important)

Uibreswan and Grafana updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-28 07:16 by Philipp Esselbach 0

AlmaLinux released four important security errata covering Libreswan across versions 8 through 10 and Grafana for version 8. The Libreswan updates patch four separate flaws that enable denial of service attacks or daemon crashes when attackers send malformed IKE packets or improperly formatted X.509 certificates. A dedicated Grafana release fixes a validation weakness in the go-billy Git library while adjusting a build macro for the Konflux pipeline. Operators need to deploy these patches immediately to close CVE gaps spanning from 2026-12413 through 2026-50722 before threat actors exploit the VPN tunneling weaknesses.

ALSA-2026:46398: libreswan security update (Important)
ALSA-2026:46397: libreswan security update (Important)
ALSA-2026:46391: grafana security, bug fix, and enhancement update (Important)
ALSA-2026:46396: libreswan security update (Important)

CVE-2026-46323 Security Patch and XFS Reflink Fix updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-26 07:37 by Philipp Esselbach 0

AlmaLinux released two kernel errata: an important security update for AlmaLinux 10 and a bugfix advisory for AlmaLinux 9. The AlmaLinux 10 patch addresses CVE-2026-46323, which resolves a use-after-free vulnerability in the net/gro subsystem caused by improper handling of zerocopy skbs. The AlmaLinux 9 advisory fixes data corruption issues with XFS reflink operations in version almalinux-9.8.z, resolving JIRA issue AlmaLinux-193937.

ALSA-2026:44270: kernel security update (Important)
ALBA-2026:39332: kernel bug fix and enhancement update (None)

Kernel, OpenJDK 8/17/21, SSSD, and OpenSSL updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-25 06:45 by Philipp Esselbach 0

Libpq, Mariadb-Connector-C, and Glibc updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-24 06:46 by Philipp Esselbach 0

AlmaLinux released security updates targeting the libpq, mariadb-connector-c, and glibc packages for AlmaLinux versions 9 and 10 to address important vulnerabilities affecting database connectivity and core system libraries. The patches resolve buffer overflow flaws in PostgreSQL's libpq that allow a server superuser to overwrite client stack memory, plus a SQL injection weakness in the MariaDB connector caused by improper big5 character set handling. A moderate-severity update for glibc on AlmaLinux 9 resolves three additional bugs, including information disclosure via ungetwc with specific wide character encodings and out-of-bounds writes triggered by TSIG record processing. System administrators should install these updates to mitigate the documented risks, which include potential stack memory corruption, data exfiltration, denial of service, and application crashes across the affected components.

ALSA-2026:44391: libpq security update (Important)
ALSA-2026:43505: mariadb-connector-c security update (Important)
ALSA-2026:44308: libpq security update (Important)
ALSA-2026:42952: glibc security update (Moderate)

Apache HTTP Server, glibc, Go Toolset, Grafana, SSSD, Dovecot, and Core Libraries updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-23 06:39 by Philipp Esselbach 0

Gstreamer, Freerdp, httpd, WebKitGTK updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-22 08:03 by Philipp Esselbach 0

Python, Jackson, GIMP, Pacemaker, and more updates for AlmaLinux

AlmaLinux 2626 Published 2026-07-21 07:14 by Philipp Esselbach 0

AlmaLinux issued ten security advisories, targeting distribution versions 8, 9, and 10. The patches resolve high-risk vulnerabilities in widely deployed tools including Python 3.14, the Jackson data-binding suite, GIMP, Pacemaker, fence-agents, libtiff, capstone, HPLIP, and Maven. Attackers could exploit these flaws to bypass authentication, trigger arbitrary code execution, cause memory corruption, or force denial of service conditions on affected systems. Infrastructure teams should deploy the updated packages through standard repository channels before threat actors take advantage of the published CVEs.

ALSA-2026:25902: fence-agents security update (Important)
ALSA-2026:39323: pacemaker security update (Important)
ALSA-2026:41892: libtiff security, bug fix, and enhancement update (Important)
ALSA-2026:39309: capstone security update (Low)
ALSA-2026:40831: hplip security update (Important)
ALSA-2026:40856: python3.14 security update (Important)
ALSA-2026:40895: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update (Important)
ALSA-2026:40751: gimp security update (Important)
ALSA-2026:40841: maven:3.8 security update (Important)
ALSA-2026:40894: hplip security update (Important)