Linux Security Roundup for Week 6, 2026

Security 10925 Published 2026-02-08 09:47 by Philipp Esselbach

News

Multiple security updates have been released last week for various Linux distributions, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux (RHEL), Rocky Linux, Slackware Linux, and Ubuntu Linux. These updates address vulnerabilities in packages such as kernel, iperf3, PHP, OpenJDK, OpenSSL, Python, NodeJS, PostgreSQL, and others, fixing issues like denial of service, heap buffer overflows, and information disclosure.

AlmaLinux

The AlmaLinux team has released several security updates to address various vulnerabilities in their operating system and related packages. These updates include fixes for issues such as denial of service, heap buffer overflows, and information disclosure in packages like kernel, iperf3, PHP, and others. In addition to these updates, AlmaLinux also issued three separate security updates addressing vulnerabilities in Wireshark, Util-Linux, and Golang-Github-Openprinting-IPP-USB. The AlmaLinux Security team has also released updates for the kernel, CURL, Brotli, and Python packages to address various security issues.

Debian GNU/Linux

Debian has released several security updates to address vulnerabilities in various packages, including ModSecurity, pyasn1, Python Tornado, Xrdp, ClamAV, Tomcat9, Thunderbird, and others. These updates aim to fix issues such as denial of service, remote code execution, and information disclosure. Multiple advisories have been released for Debian GNU/Linux 11 (Bullseye) LTS, covering vulnerabilities in packages like PHPUnit, Sudo, and Debian-Security-Support. Additionally, security updates have been issued for Debian GNU/Linux 12 (Bookworm) and 13 (Trixie), addressing issues in xrdp and Tomcat 9.

Fedora Linux

Fedora has received several security updates to address vulnerabilities in various packages, including Chromium (version 144.0.7559.109) which fixes CVE-2026-1504. Multiple updates have been released for OpenTTD, GIMP, and other packages like Xen, Rust, and python-jupytext. Additionally, Fedora has issued security updates for YarnPKG, PHP Unit, GnuPG, pgAdmin, and others to fix issues such as arbitrary code execution via unsafe deserialization of code coverage files. Security updates have also been released for OpenQA, pgAdmin4, and different versions of the PHPUnit package across various Fedora versions, including Fedora 42 and 43. Furthermore, updates have been made available for BIND and Open-VM-Tools to address vulnerabilities in bind-dyndb-ldap and bind-9.

Oracle Linux

Oracle has released several security updates to address vulnerabilities in various packages across different versions of Oracle Linux, including 10, 9, and 8. These updates affect packages such as Shim, Iperf3, OpenSSL, CURL, Kernel, Podman, v4l-Utils, Util-Linux, Python, NodeJS, and oVirt. The security updates aim to fix issues like denial of service, heap buffer overflows, and information disclosure, and also include bug fixes for various components on Oracle Linux 8, 9, and 10. Additionally, the latest advisories cover everything from kernel updates and core userland utilities to the oVirt stack, ensuring the stability and security of Oracle Linux distributions.

Red Hat Enterprise Linux

Red Hat Enterprise Linux (RHEL) users receive a series of security updates covering various core components, including the kernel, python3, urllib3, gnupg2, php, glib2, gpsd, and the real-time kernel. Multiple security updates have been released for RHEL, addressing vulnerabilities in packages such as GnuPG2, Fence-Agents, Util-Linux, Resource-Agents, OpenSSH, Go, Iperf3, JBoss, FontForge, Libsoup, Python, and others. These updates aim to fix issues like denial of service, heap buffer overflows, and information disclosure, with some vulnerabilities rated as Important or Moderate by Red Hat Product Security. The available updates are for various RHEL versions, including 7 Extended Lifecycle Support, RHEL 8, and RHEL 10.

Rocky Linux

Rocky Linux users receive multiple security updates to address vulnerabilities in various packages. The affected versions include Rocky Linux 10 and 8. Security updates are available for Iperf3, PostgreSQL, Kernel, Python 3.12, PHP, Wireshark, Util-Linux, CURL, NodeJS, Fence-Agents, Resource-Agents, Python3, FreeRDP, LibSoup3, FontForge, Brotli, and Firefox. The updates aim to fix issues like denial of service, heap buffer overflows, and information disclosure, with some vulnerabilities rated as Important or Moderate by Red Hat Product Security. These security updates are essential for maintaining the stability and security of Rocky Linux systems.

Slackware Linux

Slackware 15.0 users receive security updates for OpenSSL and p11-kit to address several vulnerabilities, including heap out-of-bounds write, unauthenticated/unencrypted trailing bytes, and null pointer dereference issues. These updates are essential for maintaining the stability and security of Slackware systems. The OpenSSL update fixes multiple vulnerabilities, ensuring the secure transmission of data over the internet and preventing potential exploits.

SUSE Linux

Several security updates have been issued for various packages on openSUSE Tumbleweed and other platforms. These updates include fixes for vulnerabilities in packages such as OpenSSL, FontForge, Chromium, Prometheus, and others. Multiple security updates are also available for different versions of SUSE Linux, addressing issues in glibc, Python-Django, Protobuf, libheif, and other software components. The updates cover various security announcements across both Tumbleweed and Backports SLE-15 SP6/7 platforms to ensure the stability and security of SUSE systems.

Ubuntu Linux

Ubuntu has released security updates to address vulnerabilities in various software packages. The updated packages include OpenJDK and its variants, CRaC JDK, Thunderbird, Inetutils, MySQL, Keystone Middleware, ImageMagick, Emacs, GitHub CLI, and Linux kernel versions among others. These updates fix issues that could allow attackers to steal sensitive information or execute arbitrary code, and also address system crashes. The security notices aim to protect Ubuntu users from potential threats by patching the vulnerabilities in these software packages.

Wine Staging 11.2 released