Linux Security Roundup for Week 50, 2025

Security 10910 Published 2025-12-14 09:11 by Philipp Esselbach

News

Several Linux distributions have received security updates over the past week to address various vulnerabilities in their packages. These updates aim to protect users from potential threats by fixing identified issues such as information disclosure, denial-of-service attacks, and arbitrary code execution. The affected distributions include AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux.

AlmaLinux

AlmaLinux has received several security updates addressing vulnerabilities in various packages. Three security updates have been released for AlmaLinux 8 and 9, which include a major update that fixes 15 issues in WebKitGTK3. Additionally, separate security updates have been made available for AlmaLinux 10 and 8 to address kernel vulnerabilities. Other notable updates include important security patches for Wireshark and Firefox, as well as moderate updates for MySQL versions, Luksmeta, Grafana, and Libsoup3.

Debian GNU/Linux

Several Debian packages, including libpng1.6, ffmpeg, LASSO library, and WordPress, have received security updates to address multiple vulnerabilities that could lead to information disclosure or denial of service. The updates fix issues such as out-of-bounds reads, heap corruption, buffer overflows, and cross-site scripting. Other affected packages include libsoup2.4, webkit2gtk, LibSSH, pdns-recursor, libsndfile, Firefox ESR, tzdata, Kernel, Thunderbird, and Chromium, with vulnerabilities that could result in sensitive system information exfiltration, denial-of-service attacks, or potentially arbitrary code execution. These security updates aim to protect Debian users from various threats by fixing the identified vulnerabilities.

Fedora Linux

Fedora has released several package updates to address security vulnerabilities across various versions of the operating system. The updates include changes to abrt, MinGW-LibPNG, lunasvg, python3, imhex, tinyproxy, and perl-CGI-Simple among others. Additionally, multiple Fedora versions have received security fixes for popular packages like httpd, wireshark, singularity-ce, brotli, and dr_libs. These updates aim to patch security vulnerabilities, with some also including upstream patches to address potential issues in these packages.

Oracle Linux

Oracle Linux has received several security updates across various versions. The updates include bug fixes and enhancements for nodejs24 on Oracle Linux 10, as well as RPM bug fixes. Additionally, the platform has seen patches for Ruby, libsoup3, Wireshark in Oracle Linux 10, and bug fix updates for PCP in Oracle Linux versions 8 and 9. Kernel security updates have also been released to address vulnerabilities in various components such as Tomcat, Firefox, MySQL, and more.

Red Hat Enterprise Linux

Red Hat has released several security updates for its Enterprise Linux versions. These updates address vulnerabilities in various packages, including the kernel, Webkit2GTK3, OpenSSL, GIMP, Ghostscript, Tomcat, Firefox, LibSSH, PostgreSQL, and others. The specific packages that have received updates vary depending on the version of Red Hat Enterprise Linux being used, with some updates available for RHEL 8, RHEL 10, or other versions. These security updates aim to improve the overall security of the system by addressing known vulnerabilities.

Rocky Linux

Rocky Linux users have several security update options available. Updates include fixes for various packages such as webkit2gtk3, Firefox, Tomcat, Wireshark, MySQL, libsoup3, and Grafana to address critical vulnerabilities. These updates affect multiple versions of Rocky Linux, including 8, 9, and 10. The security updates can be found on the CVE website with Common Vulnerability Scoring System (CVSS) base scores for each affected package.

Slackware Linux

Mozilla Firefox has released updated packages to address security issues in Slackware 15.0 and -current, which can be found on the official Mozilla website. These updates include both security fixes and improvements to ensure a safer browsing experience. Similarly, new Thunderbird packages are available for Slackware 15.0 and -current, version 140.6.0esr, aimed at addressing security issues with included security fixes and enhancements. Users of these operating systems can find the updated packages on the official Mozilla website or through the provided links.

SUSE Linux

Several security updates have been released for SUSE Linux, addressing vulnerabilities in various packages. These updates include fixes for gnutls, postgresql13, gimp, and other essential packages that are critical to patch. Additionally, updates are available for Go, Python, Fontforge, and more, while others target specific versions of PostgreSQL and Libpoppler. Overall, these security updates aim to address potential vulnerabilities in SUSE Linux, ensuring the system's integrity and stability.

Ubuntu Linux

Ubuntu has released several security updates to address vulnerabilities in its system. These updates include fixes for WebKitGTK, which could allow attackers to execute code or cause denial-of-service attacks, as well as Radare2, python-apt, and Netty, which had issues such as memory leaks and crashing when opening specially crafted files. In addition to these, Ubuntu has also released security notices for GNU binutils, libpng, Qt, and the Linux kernel, addressing various vulnerabilities in each of these packages. The updates also include fixes for the Linux kernel affecting Ubuntu LTS releases, including 18.04, 16.04, and 14.04, which corrected vulnerabilities in several subsystems.

Linux Kernel 6.19-rc1 released