Linux Security Roundup for Week 4, 2026

Security 10920 Published 2026-01-25 09:43 by Philipp Esselbach

News

Several Linux distributions have received security updates over the past week, including AlmaLinux, Debian GNU/Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux, which have released security updates to address various vulnerabilities across their packages. The updates fix critical problems in kernel components, PostgreSQL, libsoup, buildah, podman, and other packages, as well as moderate-level issues in PostgreSQL 15 and 16. The affected distributions include different versions of each distribution, with some requiring immediate attention due to the severity of the vulnerabilities. The security updates aim to protect users from potential denial-of-service attacks, arbitrary code execution, and unauthorized access to sensitive data by patching vulnerabilities in various packages.

AlmaLinux

AlmaLinux has released several security updates to address various vulnerabilities across its packages. The updates include patches for PostgreSQL 15 and 16, which fix moderate-level issues, as well as significant security updates for libsoup, buildah, podman, and kernel components to address critical problems. In addition to these updates, the AlmaLinux Security team has sent out important security fixes for other packages like jmc, gpsd-minimal, kernel-rt, kernel, net-snmp, brotli, and container-tools. These updates aim to protect users from potential DoS attacks and arbitrary code execution.

Debian GNU/Linux

Debian has released security updates to fix vulnerabilities in several packages. The updates address issues in gpsd, a package that tracks GNSS or AIS receivers connected to a computer, as well as other packages such as Thunderbird and Log4j2. In addition, Debian has issued multiple security advisories for various versions of its distribution, including fixes for vulnerabilities in Python-Keystonemiddleware, Modsecurity-CRS, inetutils, Chromium, Python-Urllib3, and more. These updates are designed to address a range of potential security risks, including denial-of-service attacks and unauthorized access to sensitive data.

Fedora Linux

Fedora Linux has released several security updates for various packages across different versions, including Fedora 42 and 43. The updates cover a range of software such as Python-Biopython, FreeRDP, CEF, Libcap, Golang Wazero, MinGW, MariaDB, RPKI-Client, Hcloud, Rclone, and Rust. These patches aim to fix vulnerabilities and prevent potential security issues in Fedora Linux systems. The updates are available for both Fedora 42 and 43, with some packages also receiving version upgrades as part of the patching process.

Oracle Linux

Oracle has released several security updates for its Linux operating system, addressing vulnerabilities in various packages such as Firefox, gnupg2, libpq, and the Unbreakable Enterprise kernel. These updates are aimed at improving the overall security of Oracle Linux systems. In addition to security fixes, there have been bug fix updates available for various packages across different versions of Oracle Linux, including bootc, image-builder, osbuild, and pykickstart. The company has also released important security updates for specific packages like java-21-openjdk on Oracle Linux 9 and 10, which is a critical update that requires immediate attention.

Red Hat Enterprise Linux

Red Hat has released several security updates for various packages, including kernel, Cryostat, net-snmp, and others, which are available for different versions of Red Hat Enterprise Linux. Multiple security updates address vulnerabilities in packages like net-snmp, kernel, poppler, and gpsd with some updates rated as Important and others as Moderate. Various other packages, such as libsoup3, libpq, brotli, and Thunderbird, have also received security updates to fix vulnerabilities with an Important or Moderate security impact. The updates are available for different versions of Red Hat Enterprise Linux, including RHEL 8 and RHEL 9.

Rocky Linux

Several security updates are available for Rocky Linux, affecting various packages such as container-tools, gnupg2, gpsd-minimal, transfig, net-snmp, and kernel. These updates address vulnerabilities in different versions of Rocky Linux, including 8, 9, and 10. Users are advised to check the CVE list for specific details on each vulnerability. The available security fixes include both important security updates and bug fixes, making it essential for users to keep their systems up to date.

Slackware Linux

New bind packages have been released for Slackware 15.0 and -current to address security concerns. The update corrects a vulnerability that allowed malicious records to trigger an assertion failure, as detailed on the ISC Knowledge Base. This issue was related to malformed BRID and HHIT records.

bind (SSA:2026-021-01)

SUSE Linux

Multiple security updates have been released for various components on SUSE Linux, including FreeRDP, Docker, Go-Sandxmpp, and Kernel. Some of these updates address critical threats and vulnerabilities in packages such as Chromium, Mozilla Thunderbird, and multiple versions of SUSE Linux Enterprise 15 SP4 and SP5. In addition to the security updates for individual packages, several updates have been released for important components like Python, Corepack, and openCryptoki. These updates aim to patch vulnerabilities and ensure system security on SUSE Linux.

Ubuntu Linux

Ubuntu has released several security updates to address various vulnerabilities affecting different packages. These packages include Snowflake, Telegraf, Avahi, Apache HTTP Server, Dungeon Crawl Stone Soup, iperf3, GLib, OpenCC, libxml2, and Pyasn1. The updates aim to fix issues such as incorrect handling of Lua bytecode in Dungeon Crawl Stone Soup and vulnerabilities that can lead to denial-of-service attacks or information disclosure. The affected packages range from popular software like Apache HTTP Server to specific game applications like Dungeon Crawl Stone Soup.

GIMP 3.0.8 released