Major Linux Distributions Release Security Updates for October 29, 2026 — Software, open source and operating systems

AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, and SUSE have issued a wide range of security updates on October 28 and 29, 2026. The patches address vulnerabilities in critical components including kernels, web browsers like Firefox and Thunderbird, Java environments, and various system libraries across multiple enterprise and community-supported versions.

A significant wave of security advisories was released by major Linux distributions on October 28 and 29, 2026. AlmaLinux issued updates for its versions 8, 9, and 10, covering a broad spectrum of software including the kernel, kernel-rt, emacs, gcc-toolset-15-gcc, and multiple Java OpenJDK versions (17 and 25). Additional patches addressed vulnerabilities in webkit2gtk3, thunderbird, yggdrasil, and several X11 libraries such as libX11, libXi, libXrender, and libXtst. The distribution also updated authentication and security modules like mod_auth_openidc:2.3 and pki-deps:10.6.

Debian focused its efforts on stable and LTS releases, providing security fixes for chromium, firefox-esr, and openjdk-25. Fedora released updates for versions 43 and 44, targeting firefox, librabbitmq, libreswan, python-pillow, and unbound. Mageia addressed issues in version 10 with patches for fio, python3, and python-pip.

Oracle Linux saw extensive updates across its OL8, OL9, and OL10 branches. The advisories covered containerization tools like buildah, podman, and container-tools:ol8, alongside core applications such as emacs, libreoffice, and thunderbird. Significant attention was given to the kernel, various Pentaho reporting components, and a suite of X11 libraries including libX11, libXi, libXrender, and libXtst. Other updated packages included python-urllib3, yggdrasil, and several foundational libraries like libbase and libfonts.

Red Hat Enterprise Linux (RHEL) released numerous advisories for EL7, EL8, EL9, and EL10, including specific minor versions. The updates heavily targeted the kernel and kernel-rt packages across almost all supported branches. Web browsers firefox and thunderbird received patches for multiple RHEL versions. Other critical updates included goose, librsvg2, php:7.4, sudo, xorg-x11-server, and bundles of multiple packages.

SUSE distributed security fixes for both openSUSE Tumbleweed (TW) and SUSE Linux Enterprise (SLE) versions 15, 16, and micro 6.2. The updates addressed components such as alsa, chromedriver, coredns, curl, dpdk, nginx, and openai-codex for Tumbleweed. For SLE systems, patches were issued for ca-certificates-mozilla, cifs-utils, coreutils, cpupower, cyrus-sasl, docker, haproxy, kernel, mozilla-nss, MozillaFirefox, and perl-Cpanel-JSON-XS.

Sources: LWN.net.