Linux Compatible - AlmaLinux

Keylime, Kernel, Tomcat, MySQL updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-18 07:07 by Philipp Esselbach 0

AlmaLinux has released several security updates for its users, including patches for Keylime, Kernel, Tomcat, and MySQL vulnerabilities. The updates address issues such as identity takeover via duplicate UUID registration (CVE-2025-13609) in Keylime, can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925), and unspecified vulnerabilities in MySQL and its components.

ALSA-2025:23210: keylime security update (Important)
ALSA-2025:22865: kernel security update (Moderate)
ALSA-2025:23049: tomcat security update (Important)
ALSA-2025:23111: mysql:8.4 security update (Moderate)

Grafana and Kernel updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-16 08:51 by Philipp Esselbach 0

AlmaLinux has released two security updates to address vulnerabilities in Grafana and the kernel packages. The first update, ALSA-2025:23087, fixes a moderate-level vulnerability in Grafana related to unbounded allocation when parsing GNU sparse maps (CVE-2025-58183). The second update, ALSA-2025:22395, addresses multiple moderate-level vulnerabilities in the kernel packages, including issues with ublk, nfsd, memory failure, and network interface drivers.

ALSA-2025:23087: grafana security update (Moderate)
ALSA-2025:22395: kernel security update (Moderate)

Wireshark, Firefox, MySQL, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-13 09:05 by Philipp Esselbach 0

Rocky Linux has released several security updates, including important updates for Wireshark and Firefox. Moderate updates have also been released for various MySQL versions, as well as Luksmeta, Grafana, and Libsoup3. In addition to these, important updates are available for Tomcat, while another update is necessary for the MySQL 8.4 version. A total of 11 security updates have been made available by Rocky Linux.

ALSA-2025:23142: wireshark security update (Important)
ALSA-2025:23034: firefox security update (Important)
ALSA-2025:23109: mysql security update (Moderate)
ALSA-2025:23134: mysql:8.0 security update (Moderate)
ALSA-2025:23137: mysql:8.4 security update (Moderate)
ALSA-2025:23086: luksmeta security update (Moderate)
ALSA-2025:23128: firefox security update (Important)
ALSA-2025:23048: tomcat security update (Important)
ALSA-2025:23088: grafana security update (Moderate)
ALSA-2025:23139: libsoup3 security update (Moderate)
ALSA-2025:23083: wireshark security update (Important)
ALSA-2025:23035: firefox security update (Important)
ALSA-2025:23008: mysql8.4 security update (Moderate)

Kernel and Abrt updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-11 09:00 by Philipp Esselbach 0

There are two separate security updates for AlmaLinux: one for AlmaLinux 10 (ALSA-2025:22854) and another for AlmaLinux 8 (ALSA-2025:22760). The kernel package in AlmaLinux 10 has been updated to fix several vulnerabilities, including oops due to an uninitialized variable and possible UAFs. Meanwhile, the abrt security update for AlmaLinux 8 fixes a command-injection vulnerability that could lead to local privilege escalation.

ALSA-2025:22854: kernel security update (Moderate)
ALSA-2025:22760: abrt security update (Important)

Webkit2GTK3 and Kernel updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-10 08:27 by Philipp Esselbach 0

Three security updates have been released for AlmaLinux 8 and 9, addressing vulnerabilities in WebKitGTK3 and the Linux kernel. The first update (ALSA-2025:22790) fixes 15 issues in WebKitGTK3, including potential DoS attacks, memory corruption, and information disclosure. The second and third updates (ALSA-2025:22405 and ALSA-2025:22800) address vulnerabilities in the Linux kernel, including potential crashes, DoS attacks, and information disclosure

ALSA-2025:22790: webkit2gtk3 security update (Important)
ALSA-2025:22405: kernel security update (Moderate)
ALSA-2025:22789: webkit2gtk3 security update (Important)
ALSA-2025:22800: kernel-rt security update (Moderate)
ALSA-2025:22801: kernel security update (Moderate)

Go-Toolset, GIMP, Firefox, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-06 08:23 by Philipp Esselbach 0

AlmaLinux has released several security updates. These updates include patches for various packages, such as go-toolset, GIMP, Firefox, kernel-rt, and others. The severity of the updates ranges from moderate to important, with some addressing critical vulnerabilities in applications like pcs, kea, buildah, ipa, and valkey.

ALSA-2025:22668: go-toolset:rhel8 security update (Moderate)
ALSA-2025:22417: gimp:2.8 security update (Important)
ALSA-2025:22363: firefox security update (Important)
ALSA-2025:22387: kernel-rt security update (Moderate)
ALSA-2025:22388: kernel security update (Moderate)
ALSA-2025:21931: kernel security update (Moderate)
ALSA-2025:21036: pcs security update (Important)
ALSA-2025:21038: kea security update (Important)
ALSA-2025:22012: buildah security update (Important)
ALSA-2025:22361: qt6-qtquick3d security update (Moderate)
ALSA-2025:20994: ipa security update (Important)
ALSA-2025:22394: qt6-qtsvg security update (Moderate)
ALSA-2025:21936: valkey security update (Important)

Systemd security update for AlmaLinux 9

AlmaLinux 2483 Published 2025-12-05 08:04 by Philipp Esselbach 0

A security update has been released for AlmaLinux 9 to address a moderate-level vulnerability. The issue affects systemd, a system and service manager for Linux, allowing a local attacker to crash an SUID program and gain read access to its core dump. This is due to a race condition in systemd-coredump, identified by CVE-2025-4598.

ALSA-2025:22660: systemd security update (Moderate)

LibXML2 and Expat updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-04 08:03 by Philipp Esselbach 0

The AlmaLinux Security team has issued two updates: one for libxml2, rated as Moderate (CVE-2025-9714), and another for expat, rated as Important (CVE-2025-59375). The libxml2 update fixes an infinite recursion issue in the exsltDynMapFunction function of libexslt. The expat update addresses a vulnerability that allows attackers to trigger large dynamic memory allocations through parsing small XML documents.

ALSA-2025:22376: libxml2 security update (Moderate)
ALSA-2025:22175: expat security update (Important)

Sssd, PCS, OpenSSL, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-12-02 07:39 by Philipp Esselbach 0

AlmaLinux has released several security updates. These updates include fixes for sssd, tigervnc, pcs, bind9.18, openssl, valkey, kernel, gimp, mingw-expat, cups, and libssh. The severity of the updates varies from moderate to important, indicating a range of potential risks if not addressed promptly. Users should review the available security updates and apply them as necessary to ensure the integrity and security of their AlmaLinux system.

ALSA-2025:20954: sssd security update (Important)
ALSA-2025:20958: tigervnc security update (Important)
ALSA-2025:20962: pcs security update (Important)
ALSA-2025:21111: bind9.18 security update (Important)
ALSA-2025:21255: openssl security update (Moderate)
ALSA-2025:21916: valkey security update (Important)
ALSA-2025:21926: kernel security update (Moderate)
ALSA-2025:21968: gimp security update (Important)
ALSA-2025:21974: mingw-expat security update (Important)
ALSA-2025:22063: cups security update (Moderate)
ALSA-2025:21977: libssh security update (Moderate)

Podman, Firefox, OpenSSH, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-26 08:54 by Philipp Esselbach 0

AlmaLinux 10.1 released

AlmaLinux 2483 Published 2025-11-25 08:57 by Philipp Esselbach 0

AlmaLinux 10.1, codenamed "Heliotrope Lion," has been released with several key updates. The new release includes full Btrfs support, allowing users to install it directly onto a Btrfs filesystem without additional configuration, as well as expanded hardware compatibility for older x86_64_v2 processors through an EPEL variant. AlmaLinux 10.1 also offers performance gains, improved virtualization capabilities, enhanced security features, and updated tools such as compilers, debuggers, and monitoring utilities. One notable difference between AlmaLinux 10.1 and its upstream source, RHEL, is that it continues to support older x86_64_v2 CPUs, providing an option for users who may still depend on or prefer the specific binaries from RHEL.

Container-Tools, PCS, IDM, Expat, Kernel, Delve updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-21 08:14 by Philipp Esselbach 0

AlmaLinux has released several security updates, including important fixes for container-tools (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881), pcs (CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919), idm:DL1 (CVE-2025-59088, CVE-2025-59089), and expat (CVE-2025-59375). Additionally, there are moderate updates for kernel-rt (CVE-2025-39718) and delve and golang (CVE-2025-58183).

ALSA-2025:21232: container-tools:rhel8 security update (Important)
ALSA-2025:19719: pcs security update (Important)
ALSA-2025:21140: idm:DL1 security update (Important)
ALSA-2025:21776: expat security update (Important)
ALSA-2025:21397: kernel-rt security update (Moderate)
ALSA-2025:21398: kernel security update (Moderate)
ALSA-2025:21815: delve and golang security update (Moderate)

Lasso, Kernel, LibTIFF, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-20 07:19 by Philipp Esselbach 0

AlmaLinux 9.7 released

AlmaLinux 2483 Published 2025-11-18 07:50 by Philipp Esselbach 0

AlmaLinux 9.7 has been released, bringing numerous updates focused on performance, developer tools, and security. This release includes improvements to system responsiveness through updated core libraries like Glibc and Annobin, as well as new compiler toolsets such as GCC Toolset 15 and LLVM Toolset 20.1.8. Networking support has also been enhanced with updates for NetworkManager, iproute, and ethtool, while security buffs will appreciate revised SELinux policies and newer versions of SSSD and Keylime. OpenSSL 3.5, which supports post-quantum cryptography, and various other components like Node.js, SWIG, PCP, and Grafana have also received notable updates.

Kernel updates for AlmaLinux 9

AlmaLinux 2483 Published 2025-11-13 07:37 by Philipp Esselbach 0

A kernel security update has been released for AlmaLinux 9 to address three vulnerabilities: information leaks via transient execution on some AMD processors (CVE-2024-36350 and CVE-2024-36357), and a vulnerability in x86/vmscape (CVE-2025-40300).

ALSA-2025:19930: kernel security update (Moderate)

Kernel-RT and LibTIFF updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-12 07:51 by Philipp Esselbach 0

AlmaLinux has released two security updates: ALSA-2025:19932 for the kernel-rt package and ALSA-2025:20034 for libtiff. The kernel-rt update addresses three vulnerabilities, including one related to conditional IBPB mitigation (CVE-2025-40300) and another that fixes a zswap writeback race condition (CVE-2023-53178). In contrast, the libtiff update patches a single vulnerability known as LibTIFF Use-After-Free Vulnerability (CVE-2025-8176), which is classified as "Important."

ALSA-2025:19932: kernel-rt security update (Moderate)
ALSA-2025:20034: libtiff security update (Important)

Kernel, Xorg-X11-Server-Xwayland, Expat, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-11 08:11 by Philipp Esselbach 0

AlmaLinux has released several security updates to address vulnerabilities in various packages, including kernel, xorg-x11-server-Xwayland, expat, osbuild-composer, valkey, qt6-qtsvg, bind, and runc. The security fixes include patches for use-after-free vulnerabilities, integer overflow issues, and potential remote code execution (RCE) flaws. These updates are available for AlmaLinux 10 and 9, and users can find more information about the security issues and updated packages on the AlmaLinux errata website.

ALSA-2025:19469: kernel security update (Moderate)
ALSA-2025:19435: xorg-x11-server-Xwayland security update (Moderate)
ALSA-2025:19403: expat security update (Important)
ALSA-2025:19566: osbuild-composer security update (Moderate)
ALSA-2025:19675: valkey security update (Important)
ALSA-2025:19772: qt6-qtsvg security update (Important)
ALSA-2025:19912: bind security update (Important)
ALSA-2025:19927: runc security update (Important)

MaiaDB, LibSoup, SSSD, and more updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-08 07:51 by Philipp Esselbach 0

AlmaLinux has released several security updates for various packages. These include important updates for libsoup, bind9.16, tigervnc, mingw-libtiff, and redis, as well as moderate updates for mariadb, kernel, galera, xorg-x11-server-Xwayland, and kernel-rt. Additionally, there are two security updates for the kernel package.

ALSA-2025:19572: mariadb:10.5 security update (Moderate)
ALSA-2025:19714: libsoup security update (Important)
ALSA-2025:19610: sssd security update (Important)
ALSA-2025:19793: bind9.16 security update (Important)
ALSA-2025:19835: bind security update (Important)
ALSA-2025:19409: kernel security update (Moderate)
ALSA-2025:19489: tigervnc security update (Important)
ALSA-2025:19584: galera and mariadb security update (Moderate)
ALSA-2025:19909: tigervnc security update (Important)
ALSA-2025:19906: mingw-libtiff security update (Important)
ALSA-2025:19432: xorg-x11-server-Xwayland security update (Moderate)
ALSA-2025:19447: kernel security update (Moderate)
ALSA-2025:19440: kernel-rt security update (Moderate)
ALSA-2025:19345: redis:7 security update (Important)

PCS, SSSD, LibSoup updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-06 07:39 by Philipp Esselbach 0

Three important security updates are available for Rocky Linux 8. The first update affects the PCS package, addressing vulnerabilities that can be found on a detailed severity rating page. A second update is available for SSSD, with similar information about vulnerability severity ratings. A third update is also available for the libsoup package, which impacts Rocky Linux 8 users and provides access to CVSS base scores for each identified issue.

RLSA-2025:19719: Important: pcs security update
RLSA-2025:19610: Important: sssd security update
RLSA-2025:19714: Important: libsoup security update

.NET and Webkit2GTK3 updates for AlmaLinux

AlmaLinux 2483 Published 2025-11-04 06:24 by Philipp Esselbach 0

Several security updates have been announced for AlmaLinux systems, including .NET framework updates and a WebKitGTK update. The .NET security updates address vulnerabilities in versions 8.0 and 9.0, which may lead to information disclosure, security feature bypass, or denial of service (CVE-2025-55248, CVE-2025-55315, CVE-2025-55247). These updates are available for AlmaLinux versions 8, 9, and 10.

ALSA-2025:18151: .NET 9.0 security update (Important)
ALSA-2025:18150: .NET 9.0 security update (Important)
ALSA-2025:18070: webkit2gtk3 security update (Important)
ALSA-2025:18153: .NET 9.0 security update (Important)
ALSA-2025:18152: .NET 8.0 security update (Important)