Nine Linux distributions released significant security updates recently, with Debian's 6.12 kernel absorbing over 500 CVEs and SUSE integrating 237 CVEs into a single webkit2gtk3 package. A trust-store purge was implemented across Fedora, RHEL, and Rocky due to the emSign Root CS CA G3 signing compromised certificates, while PHP vulnerabilities also affected multiple distributions. Oracle's .NET advisories were highlighted as critical for managed-code users, alongside a pair of PHP RCE flaws that appeared across Fedora, SUSE, and Oracle. Administrators are advised to prioritize patches for the trust-store and .NET before addressing the remaining updates to ensure system security
Linux Security Roundup: Debian Kernel Pulls 500 CVEs, SUSE Packs 237 Into One Browser Library
Nine Linux distributions shipped security updates today, with Debian handing its 6.12 kernel more than 500 CVEs and SUSE folding 237 into a single webkit2gtk3 release. A trust-store purge landed across Fedora, RHEL and Rocky after emSign Root CS CA G3 was found signing compromised certificates. The same pair of PHP RCE flaws (CVE-2026-109618 and CVE-2026-109619) turned up in Fedora, SUSE and Oracle, while Oracle's eight Critical .NET advisories are the top priority for managed-code users. Patch the trust-store cut and .NET first, then clear the rest before your next maintenance window.
