A massive pile of security updates for Saturday
Security updates have been issued by AlmaLinux (.NET 10.0,.NET 11.0,.NET 8.0,.NET 9.0, aspell, bind, bind9.18, container-tools:1.0,…
Why am I seeing this Ranked on source trust — LWN
It ranks mainly on source trust: LWN is the most reliable outlet we track on this subject, and is the only one on the story so far.
Single-sourced. No second organisation has confirmed it yet.
Link-outLink-out, because only one organisation carries it and no first-party source is on it. Link-out means we point at the publisher and say nothing of our own.
| Factor | Weight | Score | Contribution | Where it came from |
|---|---|---|---|---|
| Corroboration | 0.35 | 0.39 | +0.135 27% | 1 independent org on the story. Tier-3 aggregators never corroborate — they can show something is circulating, never that it is true. |
| Source trustleads | 0.25 | 0.85 | +0.212 43% | LWN is the highest-trust source on this story. Trust is taken from the best source, not averaged. |
| Pickup rate | 0.20 | 0.00 | +0.000 0% | One counted organisation, so there is no spread to measure — nothing has picked this up to set a rate. |
| Freshness | 0.20 | 0.76 | +0.152 30% | Halves every 10 hours from the newest item on the story. This is the only factor that rewards a story for nothing more than being recent. |
Corroboration counts distinct organisations, once each, and only from tiers 1 and 2. Freshness halves every 10 hours, so this ranking is a snapshot and will differ at the next build.
Roberto Guido and Virginia Foti · CC0 · Wikimedia Commons · illustrativeAlmaLinux, Debian, Fedora, Mageia, Red Hat, SUSE, and Ubuntu have all released security updates. The affected software spans multiple categories including programming language runtimes, web servers, container tools, cryptographic libraries, and system utilities. Notable packages include .NET versions 8.0 through 11.0, curl, bind, Firefox, Chromium, and the Linux kernel.
Fedora's update list is particularly extensive, covering development tools like GCC and Rust components, database software such as MongoDB drivers, and numerous Python packages including Django 5 and 6. Security-focused applications like KeePassXC and OpenBao are included alongside media processing tools like ImageMagick and Ghostscript.
Debian's updates address communication software including Thunderbird and Dovecot, along with cryptographic libraries and development tools. SUSE includes container runtimes and orchestration-related packages, while Ubuntu's update focuses on the Brotli compression library. Administrators should review affected systems and apply updates relevant to their deployments.
What happened
Security updates have been issued by AlmaLinux (.NET 10.0,.NET 11.0,.NET 8.0,.NET 9.0, aspell, bind, bind9.18, container-tools:1.0, container-tools:rhel8, curl, dogtag-pki, ignition, java-21-openjdk, python-pillow, tomcat, and virt:rhel, virt-devel:rhel), Debian (antiword, cyrus-sasl2, dovecot, dpdk, nss, python-git, and thunderbird), Fedora (7zip, aegisub, aom, apptainer, arm-none-eabi-binutils-cs, assimp, avr-binutils, baresip, barman, bind9-next, btrfs-backup-ng, chezmoi, chromium, cifs-utils, clevis-pin-trustee, composer, containerd, curl, docker-buildx, dotnet10.0, evolution, evolution-data-server, evolution-ews, exim, fips-provider, firefox, flare-im, forgejo, freeipa, freerdp, gcc, gegl04, ghostscript, GitPython, glib-networking,…
How this story arrived
Ordered by when each source was first observed, which is what the velocity figure is computed from. Publishers backdate; observed order does not.
- 01 Lwn first seen A massive pile of security updates for Saturday
Overclock clusters coverage from independent sources and grades it automatically. The figures above are computed, not editorial. This page summarises and links to reporting by the outlets named — follow the links for the original work.