Linux Security Roundup for Week 1, 2026

Security 10914 Published 2026-01-04 09:03 by Philipp Esselbach

News

Here is the first Linux security roundup of this year with updates for multiple Linux distributions, including Debian GNU/Linux, Fedora Linux, Rocky Linux, Slackware Linux, and SUSE Linux. These updates address various security vulnerabilities such as denial of service, remote code execution, crashes when processing crafted files, and buffer overflows. Specific packages receiving updates include Kodi, Python-Django, OpenJPEG2, ImageMagick, MediaWiki, golang packages, Ruby 3, gnupg2, libpcap, and others. Users are recommended to update their systems with the latest security patches to ensure protection and stability against potential threats.

Debian GNU/Linux

Several important updates have been released for various software packages in Debian 11 LTS, including Kodi to fix multiple security vulnerabilities and a heap buffer overflow issue. Additionally, security updates were released for Python-Django, OpenJPEG2, Osslsigncode, pdf-dompdf, MediaWiki, ImageMagick, net-snmp, Smb4k, and the GNU Image Manipulation Program (GIMP). These updates address issues such as denial of service, remote code execution, crashes when processing crafted files, and buffer overflows. The patches are available for users to update their systems and ensure they have the latest security fixes.

Fedora Linux

Several security updates have been released for Fedora Linux, including new versions of golang packages and opentofu. These updates affect various components, such as golang-github-evanw-esbuild, golang-github-alecthomas-chroma, and others on both Fedora 42 and Fedora 43. In addition to these updates, other security patches have been released for Fedora 42 and Fedora 43, addressing potential vulnerabilities in packages like webkitgtk, gh, direwolf, and usd. These updates aim to enhance the system's protection and stability by fixing various components of the Nginx web server and other affected packages.

Rocky Linux

There are two available security updates for Ruby on Rocky Linux systems. The first update, RLSA-2025:23063, specifically affects Rocky Linux 9 and addresses various vulnerabilities in the Ruby 3 version. This update is intended to improve the security of Rocky Linux systems running Ruby.

Slackware Linux

New packages are available for Slackware 15.0 and -current, including gnupg2, libpcap, and seamonkey. These updates address security issues such as CVE-2025-68973 and CVE-2025-68972 in gnupg2, along with various bugs and vulnerabilities in libpcap. The packages also include improvements for character encoding mapping and other fixes for the pcap_ether_aton() function. Installing these new packages is recommended to ensure system security.

SUSE Linux

SUSE Linux has received recent security and feature enhancements, including two moderate updates affecting Anubis version 1 and other packages. Several security updates have been released to address vulnerabilities in packages such as dpdk22, Trivy, and Podman. Additionally, openSUSE has released a security update for the Kepler package on Tumbleweed, addressing two vulnerabilities rated as moderate. Overall, these updates aim to fix potential security issues and enhance functionality across various SUSE Linux distributions.

Bazaar 0.7.2 released