Linux Compatible - AlmaLinux

LibreOffice, Node.js 24, Python 3.12, and Container Tools updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-17 06:22 by Philipp Esselbach 0

AlmaLinux released important security updates for versions 8 and 9. These errata address critical vulnerabilities across multiple software packages including LibreOffice, Node.js 24, Python 3.12, perl-XML-LibXML, cifs-utils, and container tools. The patches resolve issues such as arbitrary code execution in LibreOffice Calc, denial of service flaws in XML parsing and HTML processing, and privilege escalation risks in network sharing utilities.

ALSA-2026:36832: libreoffice security update (Important)
ALSA-2026:39553: perl-XML-LibXML security update (Important)
ALSA-2026:39576: cifs-utils security, bug fix, and enhancement update (Important)
ALSA-2026:39868: nodejs:24 security, bug fix, and enhancement update (Important)
ALSA-2026:39893: python3.12 security update (Important)
ALSA-2026:39878: perl-XML-LibXML security update (Important)
ALSA-2026:38504: container-tools:rhel8 security update (Important)

Kernel, PHP, Python, CUPS, and libxml2 updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-16 06:27 by Philipp Esselbach 0

Podman, Nginx, OpenEXR, Kernel, and Perl-DBI updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-15 05:59 by Philipp Esselbach 0

LibreOffice, Go, Podman, Tomcat, and the Linux Kernel updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-14 07:01 by Philipp Esselbach 0

Tomcat, Kernel, and GStreamer update for AlmaLinux

AlmaLinux 2606 Published 2026-07-11 07:16 by Philipp Esselbach 0

AlmaLinux released important security updates for versions 8, 9, and 10, addressing vulnerabilities in Apache Tomcat, the Linux kernel, and GStreamer media plugins. The AlmaLinux 8 errata fixes Apache Tomcat by patching a padding oracle vulnerability and a missing encryption bypass that could expose sensitive data. Kernel updates across AlmaLinux 9 and 10 resolve critical issues including KVM shadow paging use-after-free flaws and network scheduler errors, while separate GStreamer patches mitigate heap buffer overflows and denial of service risks in media processing components

ALSA-2026:37137: tomcat security, bug fix, and enhancement update (Important)
ALSA-2026:36956: kernel security update (Important)
ALSA-2026:36834: gstreamer1-plugins-bad-free security update (Important)
ALSA-2026:37129: gstreamer1-plugins-good security update (Important)
ALSA-2026:36957: kernel security update (Important)

Kernel Patches for GhostLock and Januscape Vulnerabilities, Plus Tomcat, nginx, GStreamer updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-10 07:43 by Philipp Esselbach 0

Kernel, Nginx, and PostgreSQL updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-09 07:41 by Philipp Esselbach 0

OpenTelemetry Collector, Real-Time Kernel, LibreOffice, and Container Tools updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-08 07:13 by Philipp Esselbach 0

Grafana, Kernel, and Node.js updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-07 07:34 by Philipp Esselbach 0

AlmaLinux issued important security errata for versions 8 and 10. Grafana and Grafana-PCP packages for AlmaLinux 8 address privilege escalation risks in the golang idna module, while Node.js 22 and 24 for AlmaLinux 10 patch dozens of vulnerabilities including cross-site scripting, denial of service, and authentication bypasses. The AlmaLinux 10 kernel update fixes multiple issues such as out-of-bounds reads and use-after-free flaws, and AlmaLinux requests community testing for patched kernels addressing the Januscape KVM escape vulnerability and the Bad Epoll local privilege escalation bug. Administrators should install the recommended kernel versions immediately to mitigate guest-to-host escape risks on x86 systems and ensure service stability across their infrastructure.

ALSA-2026:35830: grafana security update (Important)
ALSA-2026:35831: grafana-pcp security update (Important)
ALSA-2026:34911: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:35841: nodejs24 security, bug fix, and enhancement update (Important)
ALSA-2026:35842: nodejs22 security, bug fix, and enhancement update (Important)
Call for testing: patched kernels for two vulnerabilities (Januscape & Bad Epoll)

Ruby and Container-Tools updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-04 06:32 by Philipp Esselbach 0

AlmaLinux released three important security advisories for its version 8 operating system on July 3, 2026. The Ruby 2.5 and 3.3 updates patch three distinct vulnerabilities in the Net::IMAP library, specifically blocking IMAP command injection, preventing data leaks during man-in-the-middle attacks, and stopping denial of service exploits. Administrators running container tools will need to install a separate patch that fixes five issues in Go libraries related to certificate validation, TLS handling, and URL parsing, alongside resolving SELinux permission errors and leftover podman files.

ALSA-2026:33514: ruby:2.5 security update (Important)
ALSA-2026:33515: ruby:3.3 security update (Important)
ALSA-2026:33722: container-tools:rhel8 security, bug fix, and enhancement update (Important)

Kernel, Apache, PostgreSQL, PHP, MySQL, and Valkey updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-03 07:44 by Philipp Esselbach 0

HTTPd, PHP, Ruby, and Kernel updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-02 06:23 by Philipp Esselbach 0

AlmaLinux released a batch of security advisories on July 1, 2026, covering operating system versions 8, 9, and 10 with updates for Apache httpd, Ruby, PHP, MariaDB, giflib, rrdtool, and the Linux kernel. The httpd update for AlmaLinux 10 addresses seven vulnerabilities including CVE-2026-34356 and CVE-2026-34355, while the AlmaLinux 9 PHP patch resolves seven issues spanning remote code execution and cross-site scripting vectors like CVE-2026-6722 and CVE-2026-6735. Multiple CVEs targeting the Net::IMAP module affect Ruby installations across AlmaLinux 9 and 10, and a stack buffer overflow in rrdcached (CVE-2026-43958) prompts moderate-severity patches for rrdtool on all three distributions, alongside kernel memory safety corrections in AlmaLinux 8 and 9. The MariaDB update for AlmaLinux 8 mitigates arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) and includes a rebase to version 10.11.18.

ALSA-2026:34109: httpd security, bug fix, and enhancement update (Important)
ALSA-2026:33565: ruby security update (Important)
ALSA-2026:33731: rrdtool security update (Moderate)
ALSA-2026:33502: giflib security update (Important)
ALSA-2026:33540: ruby4.0 security update (Important)
ALSA-2026:33464: mariadb:10.11 security, bug fix, and enhancement update (Important)
ALSA-2026:33503: giflib security update (Important)
ALSA-2026:34155: rrdtool security update (Moderate)
ALSA-2026:33743: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:33577: ruby:4.0 security update (Important)
ALSA-2026:33449: php security update (Important)
ALSA-2026:33501: giflib security update (Important)
ALSA-2026:33285: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:33512: ruby security update (Important)
ALSA-2026:34156: rrdtool security update (Moderate)

Glibc, MariaDB, Kernel, Thunderbird, and Perl updates for AlmaLinux

AlmaLinux 2606 Published 2026-07-01 07:08 by Philipp Esselbach 0

TigerVNC, Go, Perl IO-Compress, runc, Archive::Tar, urllib3, and git-lfs updates for AlmaLinux

AlmaLinux 2606 Published 2026-06-30 07:34 by Philipp Esselbach 0

Golang and Linux Kernel updates for AlmaLinux 10

AlmaLinux 2606 Published 2026-06-28 07:00 by Philipp Esselbach 0

AlmaLinux issued two security errata for version 10 targeting the golang compiler and the base Linux kernel. The golang update holds a moderate severity rating, patches a net/textproto input injection flaw, and upgrades the toolchain to version 1.26.4. The kernel update carries an important severity rating and resolves nine separate vulnerabilities spanning network protocols, storage controllers, RDMA drivers, and KVM virtualization.

ALSA-2026:29980: golang security, bug fix, and enhancement update (Moderate)
ALSA-2026:30129: kernel security, bug fix, and enhancement update (Important)

Libpng, Nginx, Thunderbird, and Kernel updates for AlmaLinux

AlmaLinux 2606 Published 2026-06-27 06:40 by Philipp Esselbach 0

AlmaLinux released security updates for versions 8, 9, and 10, addressing moderate and important severity flaws across several core packages. The patches fix use-after-free memory errors in libpng, arbitrary code execution risks in nginx and opencryptoki, and multiple sandbox escape vulnerabilities in Thunderbird.

ALSA-2026:29898: libpng security update (Moderate)
ALSA-2026:28244: libpng15 security update (Moderate)
ALSA-2026:29874: nginx security update (Important)
ALSA-2026:28256: opencryptoki security update (Moderate)
ALSA-2026:29940: thunderbird security update (Important)
ALSA-2026:27288: kernel security, bug fix, and enhancement update (Important)

Nginx, Python, PostgreSQL, and Core System updates for AlmaLinux

AlmaLinux 2606 Published 2026-06-26 06:45 by Philipp Esselbach 0

PostgreSQL, TigerVNC Patches, Python 3.14 updates for AlmaLinux

AlmaLinux 2606 Published 2026-06-25 06:22 by Philipp Esselbach 0

AlmaLinux shipped new security patches yesterday. The updates covers versions 8 through 10, and PostgreSQL and TigerVNC take the front seat with important-rated fixes that plug credential recovery leaks before knocking out denial-of-service bugs. Admins will also find moderate to low severity tweaks for Python 3.14, Vim, libpng, and a handful of system libraries aimed at shutting down buffer overflows and command injection flaws.

ALSA-2026:28143: postgresql:16 security update (Important)
ALSA-2026:28208: postgresql:13 security update (Important)
ALSA-2026:28553: vim security update (Moderate)
ALSA-2026:19342: tigervnc security update (Important)
ALSA-2026:28210: vim security update (Moderate)
ALSA-2026:28234: libxml2 security update (Low)
ALSA-2026:28233: libpng security update (Moderate)
ALSA-2026:28235: libtasn1 security update (Low)
ALSA-2026:28236: libsolv security update (Moderate)
ALSA-2026:28581: python3.14 security, bug fix, and enhancement update (Important)
ALSA-2026:28584: libxslt security update (Moderate)

Firefox, Kernel, PostgreSQL, Redis and Corosync updates for AlmaLinux

AlmaLinux 2606 Published 2026-06-24 07:04 by Philipp Esselbach 0

Kernel and 389 Directory Server updates for AlmaLinux

AlmaLinux 2606 Published 2026-06-23 06:31 by Philipp Esselbach 0

AlmaLinux version 8 recently released an important security advisory that covers three major system packages. The initial update targets the 389 Directory Server to patch a remote denial of service flaw that threatens to drain CPU and memory resources. Two subsequent notices address overlapping vulnerabilities across both the standard kernel and the real time variant, resolving use after free bugs and network driver race conditions.

ALSA-2026:26459: 389-ds:1.4 security update (Important)
ALSA-2026:27353: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:27354: kernel-rt security, bug fix, and enhancement update (Important)