Linux Security Roundup for Week 44, 2025

Security 10901 Published 2025-11-02 07:50 by Philipp Esselbach

News

Here is a roundup of recent security updates that have been released for several Linux distributions, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux. These updates address vulnerabilities in various packages, such as libtiff, squid, kernel, Thunderbird, and others, to improve overall system security and protect against potential attacks. The affected distributions have released multiple security updates to resolve issues including CSV injection, XML XXE/XEE attacks, incorrect certificate validation, denial-of-service attacks, and more.

AlmaLinux

AlmaLinux has released several security updates to address vulnerabilities in various packages. The updates include fixes for libtiff, which addresses two important vulnerabilities (CVE-2025-8176 and CVE-2025-9900), a vulnerability in squid (CVE-2025-62168) classified as important, and issues with kernel and thunderbird. The libtiff update specifically resolves a Write-What-Where vulnerability (CVE-2025-9900). These updates are critical for guaranteeing the security of AlmaLinux systems.

Debian GNU/Linux

Multiple security updates have been released for Debian GNU/Linux, addressing various vulnerabilities in packages such as Request-Tracker, OpenJDK, Tika, Thunderbird, strongSwan, and more. These updates fix issues including CSV injection, XML XXE/XEE attacks, incorrect certificate validation, potential crashes, access to sensor information without user consent, and denial of service attacks. Other updated packages include OpenSSL, Ghostscript, Chromium, Squid, QEMU, PyPy3, MediaWiki, uBlock Origin, and Git, among others.

Fedora Linux

Fedora has released several security updates to address vulnerabilities in various packages, including Squid, Chromium, Unbound, PCRE2, Xen, QT5-QtBase, and others. The updates aim to fix multiple CVEs and improve overall system security. Additionally, Fedora Linux 43 has been officially released with new features, such as GNOME using Wayland only and updated fonts for Noto Color Emoji. Various packages have received updates, including git-lfs, Chromium, Qt6, FluidSynth, Openbao, and others, to fix security vulnerabilities and improve functionality.

Oracle Linux

Oracle has released security updates for its Linux platforms, including versions 8 and 9. The updates address vulnerabilities in various packages, such as Squid, Thunderbird, Java-21-OpenJDK, Unbreakable Enterprise Kernel, libtiff, kernel, and Oracle-AI Database Preinstall. By patching known vulnerabilities, these updates aim to enhance the security of Oracle Linux. Additionally, other updates have been released for Redis, EDIK2, and more, which include important or moderate severity security patches.

Red Hat Enterprise Linux

Red Hat has released several security updates for its Enterprise Linux versions, including 8.6, 8.8, 9.0, and 10, affecting various packages such as libssh, kernel, squid, webkit2gtk3, and jboss. The updates address security issues with a moderate to important impact on Red Hat products, including the OpenShift Container Platform and Firefox. The affected packages include webkit2gtk3, libtiff, squid, kernel, ansible, redis, firefox, and webkit2gtk4, among others. These updates aim to improve the security of Red Hat Enterprise Linux versions, protecting users from potential vulnerabilities and bugs.

Rocky Linux

Rocky Linux has released security updates to address vulnerabilities in various software packages. For Rocky Linux 10, an update fixes vulnerabilities in Thunderbird, while kernel security updates are available for both Rocky Linux 8 and 9. Additionally, an important security update is available for WebKitGTK3 on Rocky Linux 9. A separate update addresses potential security vulnerabilities in libtiff for Rocky Linux 8.

Slackware Linux

New updates are available for Slackware to address security issues in TigerVNC and Xorg-Server, including use-after-free vulnerabilities and a value overflow. The updated packages cover both Slackware 15.0 and -current versions. Additionally, new SeaMonkey packages have been released to fix security issues, upgrading the version from 2.53.21 to 2.53.22 for Slackware 15.0. These updates aim to improve security and stability in various applications on Slackware systems.

SUSE Linux

SUSE Linux has released various security updates to address vulnerabilities in multiple packages. The affected packages include CoreDNS, Thunderbird, CTDB, libpoppler-cpp2, Mozilla Firefox, Ollama, and others such as Kernel, Samba, Go, KRB5, Webkit2GTK3, Python-LDAP, FFmpeg, AWS-CLI, Chromium, and more. The updates aim to fix vulnerabilities ranging from moderate to important, indicating their level of severity. Some specific packages have received multiple security updates, including the Linux Kernel, which has seen various live patch releases for different Service Pack versions (SP).

Ubuntu Linux

Ubuntu has issued several security notices to address vulnerabilities affecting various packages and versions, including GStreamer Good Plugins, strongSwan, Ruby, and the Linux kernel. Additionally, updates have been released for X.Org X Server, AMD Microcode, GNU binutils, Netty, libyaml-syck-perl, libxml2, and Squid to address security issues. The vulnerabilities could cause crashes, denial of service, or allow attackers to obtain sensitive information or execute arbitrary code. Multiple kernel updates have been issued for various Ubuntu versions, including those related to Google Cloud Platform (GCP) systems and hardware enablement kernels.

Git security update for Debian ELTS

FlyOOBE 1.50 released