Linux Security Roundup: Go, OpenSSL, Chromium, and sudo-rs Patches Hit Major Distros
Today's Linux security roundup brings a sweeping wave of security updates that hit nearly every major distribution, targeting critical infrastructure libraries like Go, OpenSSL, and the Chromium browser family. Oracle and Red Hat shipped Go 1.26.7 to address six new CVEs, Fedora jumped OpenSSL to 3.5.8 resolving ten vulnerabilities, and Ubuntu patched a privilege escalation flaw in sudo-rs alongside a PAM account lockout bypass. AlmaLinux and Rocky Linux pushed extensive patches for Node.js and MySQL, while Debian's libdbi-perl update required a follow-up regression patch after breaking dependent test suites. Run your system updates immediately, as the Gentoo advisory covers 23 CVEs in browser engines and SUSE's python-sqlparse patches address dangerous SQL injection vectors.
Linux Security Roundup: Go, OpenSSL, Chromium, and sudo-rs Patches Hit Major Distros
The latest Linux security roundup highlights significant updates across major distributions, addressing vulnerabilities in critical libraries such as Go, OpenSSL, and Chromium. Oracle and Red Hat released Go 1.26.7, while Fedora upgraded OpenSSL to 3.5.8, fixing multiple CVEs. Notable patches included Ubuntu's resolution of a privilege escalation flaw in sudo-rs and various updates from AlmaLinux and Debian for other critical packages. Users are urged to promptly apply these updates, as they contain crucial security fixes that mitigate risks associated with memory corruption and denial-of-service vulnerabilities
