This week's Linux security updates include a staggering 611 CVEs addressed in a single kernel advisory from Debian, along with various patches from AlmaLinux, RHEL, Rocky, SUSE, and Fedora. Red Hat released 32 errata advisories, with one critical kernel fix for RHEL 9.4 and several important updates across other packages, while Fedora's updates addressed multiple vulnerabilities, including significant issues in libsoup3 and Pillow. AlmaLinux and SUSE also delivered important updates, with AlmaLinux focusing on a critical .NET advisory and SUSE closing 77 vulnerabilities in Firefox. Users are advised to apply specific advisory builds rather than blanket upgrades to ensure comprehensive patching and system security
Linux Security Roundup: 611 Kernel CVEs, Firefox 77 Flaws, and a Recurring Ghostscript Bug
Debian's kernel advisory alone carried 611 CVEs, the standout of today's security roundup across AlmaLinux, RHEL, Rocky, SUSE, and Fedora. Red Hat shipped 32 errata advisories with a single Critical hit, a kernel fix for RHEL 9.4 Update Services for SAP Solutions, while the rest leaned Important. Several problems resurface across vendors, most notably Ghostscript's stubborn .charkeys -dSAFER bypass and fixes for the eMudhra intermediate CA compromise. The practical takeaway is to install the specific advisory builds by version rather than letting a blanket upgrade take its chances.
