Security updates for Thursday
Security updates have been issued by AlmaLinux (gstreamer1-plugins-bad-free, libtiff, libXfont2, nodejs:22, nodejs:24, and rest), Debian (expat and nss), Fedora (libssh, nginx, nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-headers-more, nginx-mod-modsecurity, nginx-mod-naxsi, nginx-mod-vts, nodejs24, perl-HTTP-Date, proftpd, squid, unbound, and wordpress), Oracle (c-ares, edk2, freerdp,…
Security updates were released on Thursday by multiple Linux distributions and software providers. These updates addressed vulnerabilities in various packages including gstreamer1-plugins-bad-free, libtiff, libXfont2, nodejs:22 and:24, and rest for AlmaLinux. Debian released updates for expat and nss, while Fedora updated libssh, nginx, and several other modules.
Oracle released updates for c-ares, edk2, freerdp, go-fdo-server, libreswan, mariadb-connector-c, and nginx. SUSE updated alloy, apache-commons-lang3, google-guice, maven, and apache-sshd. Ubuntu released updates for linux-nvidia, linux-nvidia-7.0, and linux-nvidia-6.17. The updates were aimed at improving the security and stability of the affected software.
Written by urgent.news from LWN's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
