Linux Security Roundup for Week 47, 2025

Security 10911 Published 2025-11-23 09:21 by Philipp Esselbach

News

Several Linux distributions released security updates last week to address various vulnerabilities and patches for packages such as kernel, libssh, vim, and others. Distributions including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux have received these updates, with some affecting multiple versions of the operating system. The security issues addressed include arbitrary code execution, denial-of-service attacks, heap buffer over-reads, NULL pointer dereferences, and other types of vulnerabilities in software packages like Chromium, Firefox, Thunderbird, and more. These updates can be installed using package managers such as dnf for Fedora Linux or by applying a valid GPG key for some distributions.

AlmaLinux

AlmaLinux has released new updates with critical and important fixes to address various security vulnerabilities. The updates include moderate-severity patches for packages such as kernel, libssh, vim, xorg-x11-server, and others. Separate security updates have been issued for container-tools, pcs, idm:DL1, expat, kernel, and delve, addressing specific CVEs.

Debian GNU/Linux

Debian has released security updates to address vulnerabilities in various software packages, including Thunderbird, which could lead to arbitrary code execution. Other affected packages include mbedtls, libwebsockets, libssh, PDFMiner, Libsoup2.4, and Chromium, with issues such as denial-of-service, heap buffer over-reads, and NULL pointer dereferences. These vulnerabilities affect different versions of Debian GNU/Linux.

Fedora Linux

Security updates have been released for various versions of Fedora Linux, including versions 41, 42, and 43. The updates affect packages such as xmedcon, chromium, firefox, fvwm3, suricata, kubernetes, dovecot, cri-o, dotnet, and linux-firmware among others. These security patches address vulnerabilities in V8, unexpected paths returned from LookPath, and multiple other issues, and can be installed using the dnf command with a valid Fedora Project GPG key.

Oracle Linux

Oracle Linux has received several updates to its Unbreakable Enterprise kernel in versions 9 and 8. Additionally, there have been updates to other components such as PCP, .NET, and more. These updates include bug fixes and security patches, with one recent release addressing a type confusion vulnerability in lasso. Oracle has also released updates for various packages like Thunderbird, Expat, Rust-Toolkit, and Systemd, which includes an update to the Thunderbird browser on version 8 of Oracle Linux.

Red Hat Enterprise Linux

Red Hat has released several security updates for its enterprise Linux distributions to address various vulnerabilities in packages such as libtiff, kernel, and lasso. These updates are available for different versions of Red Hat Enterprise Linux (RHEL) and have been rated as having a critical or important security impact. The updated packages include kernel updates, Lasso security patches, Python updates, Java OpenJDK fixes, and many others.

Rocky Linux

Rocky Linux 8 has a critical security update available for the Lasso package. If not applied, this update affects the system's stability. Additionally, an important update is available for the expat package to address a security vulnerability on Rocky Linux 8. Several other updates are also available for various packages, including Thunderbird, Firefox, and Podman, affecting different versions of the operating system, including Rocky Linux 8 and 9.

Slackware Linux

Security updates have been released for popular packages in Slackware, including libarchive, OpenVPN, and GnuTLS. The libarchive update fixes buffer overrun issues in LHA and 7-Zip, while the OpenVPN update addresses a problem with HMAC-based protection against state exhaustion attacks. Additionally, the GnuTLS update patches a stack overwrite vulnerability reported by Aisle Research. These updates are available for Slackware 15.0 and -current users to ensure their systems remain secure.

SUSE Linux

Multiple security updates have been released for SUSE Linux to address potential vulnerabilities. The updates affect various packages, including OpenSSH, OpenSSL, libxml2, GIMP, Chromium, Firefox, and more. Some updates are classified as important or critical, while others are considered moderate. These updates aim to patch security issues in different components of the SUSE system.

Ubuntu Linux

Ubuntu has released several security notices to address vulnerabilities in various software packages, including Freeglut and FFmpeg. Updates have also been released for the Linux kernel, Lasso libraries, MySQL, ImageMagick, cups-filters, libcupsfilters, and other components. These updates aim to fix multiple vulnerabilities that could lead to denial-of-service or memory corruption attacks. The affected Ubuntu releases vary across each software package, with some updates affecting as many as 8 different versions of the operating system.

Blender, Ansible-Core, CURL, and more updates for SUSE

Chromium, Calibre, Kubernetes for Fedora 43