The latest Linux Security Roundup highlights significant vulnerabilities, with Red Hat issuing 180 advisories affecting RHEL versions 7 through 10, including a critical pre-boot remote code execution (RCE) in the edk2 PXE driver. Pillow, the Python imaging library, is also in the spotlight due to 39 new CVEs reported on SUSE, alongside critical ratings on RHEL. Other notable issues include recurring vulnerabilities in AMD SEV-SNP and a range of updates across various distributions to address security risks in image processing and system libraries. Users are advised to prioritize patches for the edk2 RCE and Pillow vulnerabilities, as well as monitor updates for legacy systems like Ubuntu 14.04, which continues to receive patches for older security issues

Linux Security Roundup: 180 RHEL Advisories, edk2 Pre-Boot RCE, and a Pillow Hit

Red Hat led today's roundup with 180 advisories across RHEL 7 through 10, though the 131 Important ratings reflect broad channel coverage more than that many distinct flaws. The standout threat is a pre-boot RCE in the edk2 PXE driver (CVE-2026-97631), tagged Critical on AlmaLinux, Oracle, and Rocky Linux 10. Pillow drew the biggest single library hit with 39 CVEs on SUSE plus three Criticals on RHEL, while a recurring AMD SEV-SNP hole keeps getting re-published under fresh Ubuntu kernel releases. If you run RHEL 9 or 10, nearly everything applies in one pass, and Ubuntu is still patching its 2014-era 14.04 LTS release.

Linux Security Roundup: 180 RHEL Advisories, edk2 Pre-Boot RCE, and a Pillow Hit @ Linux Compatible