Security updates for Monday
Security updates have been issued by AlmaLinux (firefox, ipa, kernel, libxml2, perl-DBI, python-cryptography, thunderbird, and unbound), Debian (chromium, evolution-data-server, exim4, ghostscript, incus, lemonldap-ng, libheif, nodejs, php8.4, ruby-oj, swift, and vlc), Fedora (chromium, cinnamon, cinnamon-desktop, cinnamon-session, cinnamon-settings-daemon, ckermit, dnf5, forgejo, goose,…
On Monday, various Linux distributions issued security updates across a wide range of packages.
AlmaLinux updated its versions of Firefox, IPA, the kernel, libxml2, perl-DBI, python-cryptography, Thunderbird, and unbound.
Debian updated chromium, Evolution Data Server, exim4, Ghostscript, Incus, LemonLDAP-ng, libheif, Node.js, php8.4, ruby-oj, Swift, and VLC.
Fedora updated chromium, Cinnamon, Cinnamon Desktop, Cinnamon Session, Cinnamon Settings Daemon, ckermit, DNF5, Forgejo, Goose, gssntlmssp, libheif, libpcap, librsvg2, mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good, mingw-python3, mongo-c-driver, muffin, Nemo, Nemo Extensions, Nextcloud, pgadmin4, PostgreSQL 16-PostGIS, PostgreSQL 17-PostGIS, PostgreSQL 18-PostGIS, rust-librsvg, rust-xml5ever, sipp, Suricata, Tesseract, and XReader.
Mageia updated Erlang, gpsd, libreswan, Python3, Python Pip, and udisks2.
Oracle updated abrt, buildah, cockpit-image-builder, corosync, IPA, the kernel, libxml2, openexr, perl-DBI, perl-DBI version 1.641, PostgreSQL, Thunderbird, unbound, and Yelp.
SUSE updated 389-ds, ansible-lint, CUPS, Firefox, Flatpak Builder, Forgejo Longterm, GDB, GIMP, Gitoxide, Glib2, GNOME Shell, Google Guest Agent, Google OSConfig Agent, Haveged, Helm, ImageMagick, KBD, libsoup, LibTPMS, OBS Service Cargo, OpenAI Codex, opensuse-signkey-cert, OSMO-IUH, Perl Mojolicious, Poppler, Python WebOb, Python WebOb-doc, Python 3.13-VLLM, Python 3.14, SDBootUtil, Suseconnect-ng, and SWTPM.
Ubuntu updated exim4, freerdp3, libvirt, libvirt-hwe, libwebsockets, LXC, pyjwt, and requests.
Written by urgent.news from LWN's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
