Security updates for Monday
Security updates have been issued by AlmaLinux (firefox, java-17-openjdk, kernel, kernel-rt, mariadb:10.5, podman, python-jwt, python27:2.7, python38:3.8 and python38-devel:3.8, python39:3.9 and python39-devel:3.9, ruby:2.5, ruby:2.7, thunderbird, util-linux, and virt:rhel and virt-devel:rhel), Debian (chromium, eog, imagemagick, python-aiohttp, thunderbird, and vim), Fedora (asciinema, atuin,…
On Monday, various Linux distributions have released security updates to address vulnerabilities in their software packages. AlmaLinux, Debian, Fedora, Oracle, Red Hat, Slackware, and SUSE have all released patches for a wide range of applications and operating system components.
AlmaLinux has updated Firefox, Java, the Linux kernel, and several other packages. Debian has issued updates for Chromium, EOG, ImageMagick, Python aiohttp, Thunderbird, and Vim. Fedora has released updates for Asciinema, Auitin, btrfs-backup-ng, Clevis, GCC, Janus, the Linux kernel, libheif, libreswan, Mingw-expat, MuPDF, Nautilus, Nicotine+, NTPD, OpenSCAP, Perl DBI, Python 3.12, retsnoop, Ruby, Rust cargo-deny, Cargo rpmstatus, Rust ctutils, Rust gst-plugin-reqwest, Rust rbspy, Rust resctl-bench, Rust rpkilinux, Rust sequoia-chameleon-gnupg, Rust sequoia-git, Rust sequoia-octopus-librnp, Rust webpki-root-certs, Rust webpki-roots, TPM2 TSS, and VHS.
Oracle has made updates available for .NET 8.0 and .NET 9.0, aspell, bind9.18, curl, httpd 2.4, Java 1.8.0, the Linux kernel, libXi, mod_auth_openidc 2.3, Node.js 24, Python Pillow, and Tomcat. Red Hat has released updates for libxml2. Slackware has provided updates for libarchive, while SUSE has issued patches for buildah, curl, Docker, gnutls, Node.js 22, and suseconnect-ng.
Written by urgent.news from LWN's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.