Linux Security Roundup for Week 43, 2025

Security 10903 Published 2025-10-26 07:49 by Philipp Esselbach

News

Multiple Linux distributions have released security updates over the past week, addressing vulnerabilities in various packages such as kernels, web browsers, and software libraries. The updates cover different Linux versions, including AlmaLinux 10 and 9, Debian GNU/Linux 9 to 13, Fedora 41, 42, and 43, Oracle Linux 7 to 10, Red Hat Enterprise Linux 8 to 10, Rocky Linux 8, Slackware Linux, and Ubuntu Linux. These vulnerabilities could lead to security issues such as Denial of Service (DoS), remote code execution, or other threats if not patched. The updates aim to provide improved security and stability for users of these Linux distributions and their associated products.

AlmaLinux

AlmaLinux has released several security updates for various packages, including kernel-rt, perl-JSON-XS, libssh, .NET 8.0, and Firefox to address vulnerabilities such as memory safety bugs and buffer overflows. Additionally, the AlmaLinux team has released important updates for Mozilla Thunderbird and the kernel on AlmaLinux 10. An important update was also made available for FreeIPA on AlmaLinux 9. Furthermore, a security update was released for AlmaLinux 9 to address vulnerabilities in WebKitGTK, including potential crashes and unauthorized access to sensor information.

Debian GNU/Linux

Multiple security updates have been released for various packages on Debian systems, including ImageMagick to address an integer overflow vulnerability, Nginx to fix memory termination and HTTP request smuggling issues, and Chromium, Python-Internetarchive, Tryton-Sao, and BIND to address several vulnerabilities. Additional updates were released for other packages such as Gegl, Raptor2, GIMP, OpenJDK 21, xrdp, icedtea-web, and node-form-data, each addressing specific security issues. These advisories cover Debian GNU/Linux versions 11 (LTS), 12 (Bookworm), 13 (Trixie), and Extended LTS versions 9 (Stretch) and 10 (Buster). The vulnerabilities addressed in these updates could result in Denial of Service (DoS), remote code execution, or other security issues if not patched.

Fedora Linux

Fedora 42 has received updates for several packages to address security vulnerabilities, including Mbed TLS version 3.6.5, Chromium version 141.0.7390.107, and Python, which fix unspecified issues and high-severity CVEs. Fedora 41 has also received multiple updates, including ones for MinGW-exiv2, inih, mod_http2, Samba, Wireshark, Moodle, and QT5-QTSVG, which address vulnerabilities such as reflected DOM XSS and possible bypass of MFA. Additionally, Fedora 41 and Fedora 42 have received a Samba update addressing security vulnerabilities CVE-2025-9640 and CVE-2025-10230, while Fedora has introduced new version 4 of Wireshark. Multiple versions of Fedora, including Fedora 41, Fedora 42, and Fedora 43, have received updates for various packages such as Chromium and golang-github-facebook-time to address security vulnerabilities.

Oracle Linux

Oracle has released multiple updates for its Linux distributions, including versions 7, 8, 9, and 10. These updates address security issues, with some rated as important or moderate, across various packages such as HTTPD, Microcode_CTL, Samba, and more. Additionally, Oracle has also released updates specifically for Thunderbird and kernels in Oracle Linux 10, 9, and 7 to address security patches and bugs. The updates also include bug fixes for kernel and kexec-tools in Oracle Linux 8.

Red Hat Enterprise Linux

Several security updates have been released for Red Hat Enterprise Linux (RHEL) to address vulnerabilities and prevent potential attacks. The updates cover various packages, including kernel, Firefox, libssh, and others, and are available for different versions of RHEL, including 8, 9, and 10. In addition to security updates, some releases also include bug fixes and enhancements for products like OpenShift Container Platform and Red Hat Ansible Automation Platform. The updates aim to provide improved security and stability for users of RHEL and its associated products.

Rocky Linux

A Thunderbird update is available for Rocky Linux 8, which addresses several security concerns. This update affects the operating system and is considered important due to its impact on security. The update resolves seven security vulnerabilities, including memory safety bugs and cross-process information leaks. Users are advised to apply this update to protect their system from potential threats.

RLSA-2025:18983: Important: thunderbird security update

Slackware Linux

Two security updates are available for Slackware: one for the Bind package and another for OpenSSL. The Bind update addresses several vulnerabilities, including DNSSEC validation failures, spoofing attacks, and cache poisoning issues. Meanwhile, the OpenSSL update fixes a moderate severity issue that allows an attacker to potentially overread or overwrite data by up to 8 bytes. Both updates are aimed at ensuring the security of Slackware systems and can be installed to mitigate potential threats.

Ubuntu Linux

Ubuntu has released security notices to address vulnerabilities affecting various packages, including Samba, the Linux kernel, GStreamer Base Plugins, and Python LDAP. These updates are designed to fix issues in different versions of the Linux kernel, such as Oracle, Real-time, Azure, and AWS versions. Multiple Ubuntu Security Notices have been released to address vulnerabilities in the Linux kernel and other software packages, affecting various Ubuntu releases and cloud systems like Oracle Cloud and Amazon Web Services (AWS). The notices also addressed a vulnerability in Go Cryptography that could allow an attacker to bypass authorization mechanisms during SSH operations.