Eight major Linux distributions have released security advisories addressing nearly 150 CVEs related to file parsers, browser engines, and cloud kernels, with notable impacts on GIMP, GStreamer, and Firefox ESR. AlmaLinux has issued numerous advisories, particularly targeting remote code execution vulnerabilities within GIMP's image handlers, while RHEL and Oracle's updates echo similar patches, including fixes for Grafana and Node.js. Meanwhile, Ubuntu's kernel updates require a reboot and can disrupt unsigned third-party modules, with all fixes provided in the Ubuntu Pro version. Users are advised to prioritize patching browser and identity service vulnerabilities before addressing parser-related issues to enhance system security
Linux Security Roundup: Eight Distros Patch 150+ CVEs Across Browsers, Parsers, and Kernels
Eight major Linux distributions shipped security advisories today, pushing nearly 150 CVEs across file parsers, browser engines, and cloud kernels. GIMP, GStreamer, and Firefox ESR take the heaviest blows, while RHEL and AlmaLinux mirror dozens of shared upstream patches for Grafana, Node.js, and Gegl. Ubuntu’s kernel notices demand a reboot and trigger an ABI change that breaks unsigned third-party modules, but every fix in that batch is locked behind Ubuntu Pro.
