The latest Linux security updates highlight vulnerabilities across various distributions, with Brotli's critical CVE-2026-111497 being patched simultaneously in major distros like Fedora, Oracle, and Ubuntu. Grafana is also flagged as critical, particularly for RHEL 9, while kernel updates are crucial for fixing privilege escalation issues in AlmaLinux. Ubuntu's updates address Brotli and nginx vulnerabilities, with the latter allowing potential session forgery through SSL flaws. Users are advised to prioritize patching Brotli, Grafana, and kernel updates, followed by routine maintenance for other less critical packages

Linux Security Roundup: Grafana, Brotli, and Kernels Lead Linux Security Fixes

This morning's Linux security roundup shows the same vulnerabilities appearing across nearly every major distro, with Brotli's CVE-2026-111497 alone patching Fedora, Oracle, and all supported Ubuntu releases in one motion. Grafana is the standout Critical, flagged by Oracle, Red Hat, and AlmaLinux on RHEL 9 even though the same package gets a lower rating on other channels. Kernels need the real reboots, especially AlmaLinux's Dirty Frag "Fragnesia" privilege-escalation fixes, while SUSE's python-social-auth-core auth bypass is the flaw worth worrying about most. Patch Brotli, Grafana, and the kernels first, then handle the rest as housekeeping.

Linux Security Roundup: Grafana, Brotli, and Kernels Lead Linux Security Fixes @ Linux Compatible