Linux Compatible - AlmaLinux (Page 125)

Tar security update for AlmaLinux

AlmaLinux 2607 Published 2026-01-06 08:53 by Philipp Esselbach 0

AlmaLinux has released a new security update for AlmaLinux 10, which includes a fix for a moderate-level vulnerability. The vulnerability affects the GNU tar program and allows for path traversal (CVE-2025-45582).

ALSA-2026:0002: tar security update (Moderate)

Container-tools, Grafana, Thunderbird, Opentelemetry updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-25 07:50 by Philipp Esselbach 0

AlmaLinux has released several security updates, including one for container-tools (ALSA-2025:23543), which addresses a vulnerability that could lead to a container escape or denial of service. Additionally, AlmaLinux has released updates for Grafana (ALSA-2025:23948) and opentelemetry-collector (ALSA-2025:23729), both of which are considered important security fixes. Mozilla Thunderbird is also receiving an update (ALSA-2025:23856) to address multiple security vulnerabilities, including memory safety bugs and privilege escalation issues.

ALSA-2025:23543: container-tools:rhel8 security update (Important)
ALSA-2025:23948: grafana security update (Moderate)
ALSA-2025:23856: thunderbird security update (Important)
ALSA-2025:23729: opentelemetry-collector security update (Important)

Skopeo, Binutils, Podman, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-24 08:15 by Philipp Esselbach 0

Binutils, CURL, Python, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-23 07:54 by Philipp Esselbach 0

Several security updates have been released for AlmaLinux 8, affecting various packages including binutils, curl, python39, webkit2gtk3, httpd:2.4, git-lfs, and openssh. These updates address multiple vulnerabilities with varying severity levels, ranging from moderate to important. The affected packages include binary utilities for object file manipulation (binutils), a library and utility for downloading files from servers (curl), the Python programming language (python39), a web rendering engine (webkit2gtk3), an HTTP server (httpd:2.4), a Git extension for large file storage (git-lfs), and an SSH protocol implementation (openssh).

ALSA-2025:23382: binutils security update (Moderate)
ALSA-2025:23383: curl security update (Moderate)
ALSA-2025:23530: python39:3.9 security update (Important)
ALSA-2025:23663: webkit2gtk3 security update (Important)
ALSA-2025:23732: httpd:2.4 security update (Important)
ALSA-2025:23745: git-lfs security update (Important)
ALSA-2025:23481: openssh security update (Moderate)

Keylime, Kernel, Tomcat, MySQL updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-18 07:07 by Philipp Esselbach 0

AlmaLinux has released several security updates for its users, including patches for Keylime, Kernel, Tomcat, and MySQL vulnerabilities. The updates address issues such as identity takeover via duplicate UUID registration (CVE-2025-13609) in Keylime, can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925), and unspecified vulnerabilities in MySQL and its components.

ALSA-2025:23210: keylime security update (Important)
ALSA-2025:22865: kernel security update (Moderate)
ALSA-2025:23049: tomcat security update (Important)
ALSA-2025:23111: mysql:8.4 security update (Moderate)

Grafana and Kernel updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-16 08:51 by Philipp Esselbach 0

AlmaLinux has released two security updates to address vulnerabilities in Grafana and the kernel packages. The first update, ALSA-2025:23087, fixes a moderate-level vulnerability in Grafana related to unbounded allocation when parsing GNU sparse maps (CVE-2025-58183). The second update, ALSA-2025:22395, addresses multiple moderate-level vulnerabilities in the kernel packages, including issues with ublk, nfsd, memory failure, and network interface drivers.

ALSA-2025:23087: grafana security update (Moderate)
ALSA-2025:22395: kernel security update (Moderate)

Wireshark, Firefox, MySQL, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-13 09:05 by Philipp Esselbach 0

Rocky Linux has released several security updates, including important updates for Wireshark and Firefox. Moderate updates have also been released for various MySQL versions, as well as Luksmeta, Grafana, and Libsoup3. In addition to these, important updates are available for Tomcat, while another update is necessary for the MySQL 8.4 version. A total of 11 security updates have been made available by Rocky Linux.

ALSA-2025:23142: wireshark security update (Important)
ALSA-2025:23034: firefox security update (Important)
ALSA-2025:23109: mysql security update (Moderate)
ALSA-2025:23134: mysql:8.0 security update (Moderate)
ALSA-2025:23137: mysql:8.4 security update (Moderate)
ALSA-2025:23086: luksmeta security update (Moderate)
ALSA-2025:23128: firefox security update (Important)
ALSA-2025:23048: tomcat security update (Important)
ALSA-2025:23088: grafana security update (Moderate)
ALSA-2025:23139: libsoup3 security update (Moderate)
ALSA-2025:23083: wireshark security update (Important)
ALSA-2025:23035: firefox security update (Important)
ALSA-2025:23008: mysql8.4 security update (Moderate)

Kernel and Abrt updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-11 09:00 by Philipp Esselbach 0

There are two separate security updates for AlmaLinux: one for AlmaLinux 10 (ALSA-2025:22854) and another for AlmaLinux 8 (ALSA-2025:22760). The kernel package in AlmaLinux 10 has been updated to fix several vulnerabilities, including oops due to an uninitialized variable and possible UAFs. Meanwhile, the abrt security update for AlmaLinux 8 fixes a command-injection vulnerability that could lead to local privilege escalation.

ALSA-2025:22854: kernel security update (Moderate)
ALSA-2025:22760: abrt security update (Important)

Webkit2GTK3 and Kernel updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-10 08:27 by Philipp Esselbach 0

Three security updates have been released for AlmaLinux 8 and 9, addressing vulnerabilities in WebKitGTK3 and the Linux kernel. The first update (ALSA-2025:22790) fixes 15 issues in WebKitGTK3, including potential DoS attacks, memory corruption, and information disclosure. The second and third updates (ALSA-2025:22405 and ALSA-2025:22800) address vulnerabilities in the Linux kernel, including potential crashes, DoS attacks, and information disclosure

ALSA-2025:22790: webkit2gtk3 security update (Important)
ALSA-2025:22405: kernel security update (Moderate)
ALSA-2025:22789: webkit2gtk3 security update (Important)
ALSA-2025:22800: kernel-rt security update (Moderate)
ALSA-2025:22801: kernel security update (Moderate)

Go-Toolset, GIMP, Firefox, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-06 08:23 by Philipp Esselbach 0

AlmaLinux has released several security updates. These updates include patches for various packages, such as go-toolset, GIMP, Firefox, kernel-rt, and others. The severity of the updates ranges from moderate to important, with some addressing critical vulnerabilities in applications like pcs, kea, buildah, ipa, and valkey.

ALSA-2025:22668: go-toolset:rhel8 security update (Moderate)
ALSA-2025:22417: gimp:2.8 security update (Important)
ALSA-2025:22363: firefox security update (Important)
ALSA-2025:22387: kernel-rt security update (Moderate)
ALSA-2025:22388: kernel security update (Moderate)
ALSA-2025:21931: kernel security update (Moderate)
ALSA-2025:21036: pcs security update (Important)
ALSA-2025:21038: kea security update (Important)
ALSA-2025:22012: buildah security update (Important)
ALSA-2025:22361: qt6-qtquick3d security update (Moderate)
ALSA-2025:20994: ipa security update (Important)
ALSA-2025:22394: qt6-qtsvg security update (Moderate)
ALSA-2025:21936: valkey security update (Important)

Systemd security update for AlmaLinux 9

AlmaLinux 2607 Published 2025-12-05 08:04 by Philipp Esselbach 0

A security update has been released for AlmaLinux 9 to address a moderate-level vulnerability. The issue affects systemd, a system and service manager for Linux, allowing a local attacker to crash an SUID program and gain read access to its core dump. This is due to a race condition in systemd-coredump, identified by CVE-2025-4598.

ALSA-2025:22660: systemd security update (Moderate)

LibXML2 and Expat updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-04 08:03 by Philipp Esselbach 0

The AlmaLinux Security team has issued two updates: one for libxml2, rated as Moderate (CVE-2025-9714), and another for expat, rated as Important (CVE-2025-59375). The libxml2 update fixes an infinite recursion issue in the exsltDynMapFunction function of libexslt. The expat update addresses a vulnerability that allows attackers to trigger large dynamic memory allocations through parsing small XML documents.

ALSA-2025:22376: libxml2 security update (Moderate)
ALSA-2025:22175: expat security update (Important)

Sssd, PCS, OpenSSL, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-12-02 07:39 by Philipp Esselbach 0

AlmaLinux has released several security updates. These updates include fixes for sssd, tigervnc, pcs, bind9.18, openssl, valkey, kernel, gimp, mingw-expat, cups, and libssh. The severity of the updates varies from moderate to important, indicating a range of potential risks if not addressed promptly. Users should review the available security updates and apply them as necessary to ensure the integrity and security of their AlmaLinux system.

ALSA-2025:20954: sssd security update (Important)
ALSA-2025:20958: tigervnc security update (Important)
ALSA-2025:20962: pcs security update (Important)
ALSA-2025:21111: bind9.18 security update (Important)
ALSA-2025:21255: openssl security update (Moderate)
ALSA-2025:21916: valkey security update (Important)
ALSA-2025:21926: kernel security update (Moderate)
ALSA-2025:21968: gimp security update (Important)
ALSA-2025:21974: mingw-expat security update (Important)
ALSA-2025:22063: cups security update (Moderate)
ALSA-2025:21977: libssh security update (Moderate)

Podman, Firefox, OpenSSH, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-11-26 08:54 by Philipp Esselbach 0

AlmaLinux 10.1 released

AlmaLinux 2607 Published 2025-11-25 08:57 by Philipp Esselbach 0

AlmaLinux 10.1, codenamed "Heliotrope Lion," has been released with several key updates. The new release includes full Btrfs support, allowing users to install it directly onto a Btrfs filesystem without additional configuration, as well as expanded hardware compatibility for older x86_64_v2 processors through an EPEL variant. AlmaLinux 10.1 also offers performance gains, improved virtualization capabilities, enhanced security features, and updated tools such as compilers, debuggers, and monitoring utilities. One notable difference between AlmaLinux 10.1 and its upstream source, RHEL, is that it continues to support older x86_64_v2 CPUs, providing an option for users who may still depend on or prefer the specific binaries from RHEL.

Container-Tools, PCS, IDM, Expat, Kernel, Delve updates for AlmaLinux

AlmaLinux 2607 Published 2025-11-21 08:14 by Philipp Esselbach 0

AlmaLinux has released several security updates, including important fixes for container-tools (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881), pcs (CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919), idm:DL1 (CVE-2025-59088, CVE-2025-59089), and expat (CVE-2025-59375). Additionally, there are moderate updates for kernel-rt (CVE-2025-39718) and delve and golang (CVE-2025-58183).

ALSA-2025:21232: container-tools:rhel8 security update (Important)
ALSA-2025:19719: pcs security update (Important)
ALSA-2025:21140: idm:DL1 security update (Important)
ALSA-2025:21776: expat security update (Important)
ALSA-2025:21397: kernel-rt security update (Moderate)
ALSA-2025:21398: kernel security update (Moderate)
ALSA-2025:21815: delve and golang security update (Moderate)

Lasso, Kernel, LibTIFF, and more updates for AlmaLinux

AlmaLinux 2607 Published 2025-11-20 07:19 by Philipp Esselbach 0

AlmaLinux 9.7 released

AlmaLinux 2607 Published 2025-11-18 07:50 by Philipp Esselbach 0

AlmaLinux 9.7 has been released, bringing numerous updates focused on performance, developer tools, and security. This release includes improvements to system responsiveness through updated core libraries like Glibc and Annobin, as well as new compiler toolsets such as GCC Toolset 15 and LLVM Toolset 20.1.8. Networking support has also been enhanced with updates for NetworkManager, iproute, and ethtool, while security buffs will appreciate revised SELinux policies and newer versions of SSSD and Keylime. OpenSSL 3.5, which supports post-quantum cryptography, and various other components like Node.js, SWIG, PCP, and Grafana have also received notable updates.

Kernel updates for AlmaLinux 9

AlmaLinux 2607 Published 2025-11-13 07:37 by Philipp Esselbach 0

A kernel security update has been released for AlmaLinux 9 to address three vulnerabilities: information leaks via transient execution on some AMD processors (CVE-2024-36350 and CVE-2024-36357), and a vulnerability in x86/vmscape (CVE-2025-40300).

ALSA-2025:19930: kernel security update (Moderate)

Kernel-RT and LibTIFF updates for AlmaLinux

AlmaLinux 2607 Published 2025-11-12 07:51 by Philipp Esselbach 0

AlmaLinux has released two security updates: ALSA-2025:19932 for the kernel-rt package and ALSA-2025:20034 for libtiff. The kernel-rt update addresses three vulnerabilities, including one related to conditional IBPB mitigation (CVE-2025-40300) and another that fixes a zswap writeback race condition (CVE-2023-53178). In contrast, the libtiff update patches a single vulnerability known as LibTIFF Use-After-Free Vulnerability (CVE-2025-8176), which is classified as "Important."

ALSA-2025:19932: kernel-rt security update (Moderate)
ALSA-2025:20034: libtiff security update (Important)