Linux Security Roundup for Week 35, 2025

Security 10907 Published 2025-08-31 08:43 by Philipp Esselbach

News

Here is a roundup of last week's security updates for various packages, including kernel, Firefox, Thunderbird, and PostgreSQL. These updates aim to fix issues such as memory leaks, denial-of-service attacks, arbitrary code execution, and use-after-free flaws to ensure system stability and prevent potential security risks. The distributions include AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux.

AlmaLinux

AlmaLinux has released security updates to address vulnerabilities in various packages, including kernel, firefox, aide, and mod_http2. The updates target memory leaks, denial-of-service attacks, and sandbox escapes for AlmaLinux users. Additionally, separate updates have been issued for AlmaLinux 8, covering packages such as Mozilla Thunderbird, fence-agents, kernel-rt, Firefox, python-cryptography, and aide. The security patches tackle multiple vulnerabilities across different packages, including PostgreSQL, Thunderbird, and Python, to ensure the stability of the system.

Debian GNU/Linux

Debian has released security updates to address vulnerabilities in various packages, including Thunderbird, iperf3, Unbound, Firebird, FFmpeg, luajit, Node-Cipher-Base, Chromium, UDisks2, GoLang-Github-Gin-Contrib-Cores, LibXML2, Node.js, OpenSSH, mbedtls, Firefox, and Apache. The updates aim to fix issues such as arbitrary code execution, heap buffer overflows, shell code injection, denial of service attacks, and use-after-free flaws. Debian 11 (Bullseye) LTS, Debian 12 (Bookworm), and Debian 13 (Trixie) are among the distributions that have received these security updates. Users are advised to update their systems to ensure they have the latest patches and prevent potential security risks.

Fedora Linux

Multiple security updates have been released for Fedora Linux, addressing issues in various packages. Python 3.13 has received an update to fix a significant issue with the SSL module and infinite loop when parsing a tarfile. Additionally, updates are available for Chromium, libtiff, Keylime-Agent-Rust, mod_auth_openidc, Firefox, and other packages, including fixes for vulnerabilities in these applications. These updates aim to improve the security of Fedora 41 and 42 distributions by addressing potential threats and bugs in various software packages.

Oracle Linux

Oracle has released several security updates and bug fixes for its Linux distributions, including Oracle Linux 7, 8, 9, and 10. The updates address various vulnerabilities affecting packages such as Apache Tomcat, glibc, libxml2, Firefox, AIDE, kernel components, Python, mod_http2, Thunderbird, PostgreSQL, and more. Some specific updates include fixes for denial-of-service attacks, heap-use-after-free issues, improper output neutralization in the aide package, and untrusted input from clients in the mod_http2 module. The updates are intended to improve the security and stability of Oracle Linux systems, particularly for administrators who have not yet applied previous patches or upgrades.

Red Hat Enterprise Linux

Red Hat has released several security updates to address vulnerabilities in various packages. The affected packages include squid, webkit2gtk3, firefox, kernel components, aide, gdk-pixbuf2, kpatch-patch, ansible, thunderbird, and mod_http2 among others. These updates have been rated by Red Hat Product Security as having a security impact ranging from Moderate to Important, with some providing additional details through CVSS base scores. Red Hat Product Security has received critical security updates for multiple versions of RHEL, including 7, 8, and 9, to ensure system stability and security.

Slackware Linux

A security issue has been fixed in the udisks2 packages for Slackware 15.0 and -current. This fix prevents an attacker from causing the UDisks daemon to crash or performing a local privilege escalation by accessing files owned by privileged users. The update is intended to enhance system security on these versions of Slackware. Users are advised to consider installing this updated version of udisks2 for improved protection.

udisks2 (SSA:2025-242-01)

SUSE Linux

Several security updates have been released for various SUSE Linux packages, including the Linux Kernel, proftpd, PувавсяAM, cmake3, FFmpeg, Python, Tomcat, Kubernetes, and more. These updates aim to protect users against potential security threats by addressing vulnerabilities ranging from low to important severity. Multiple packages, such as v2ray-core, PostgreSQL, Tomcat, and Git, have received significant or important updates to fix security issues. The updates can be accessed through the provided links for each package, ensuring that SUSE Linux systems remain secure and up-to-date.

Ubuntu Linux

Multiple security issues have been discovered in various packages, including Nginx, Linux kernel, Binutils, GStreamer, OpenLDAP, and Python, which affect different Ubuntu releases. The vulnerabilities include incorrect memory handling by the ngx_mail_smtp_module module in Nginx, use-after-free issues in the Linux kernel, and flaws in HID and media drivers subsystems. Ubuntu Security Notices have been issued to address these security issues, with updates available for various Ubuntu releases, including 14.04 LTS, 22.04 LTS, 24.04 LTS, and 25.04. The updates are intended to prevent the transmission of sensitive information over the network during SMTP authentication and fix other potential exploits.