Nine major Linux distributions have released security updates, with significant kernel patches addressing over 1,100 CVEs in Oracle's Unbreakable Enterprise kernel and around 950 in Ubuntu's NVIDIA kernel. Notable recurring vulnerabilities include a Python certificate verification bypass and an OpenSSL DTLS stale-buffer fix, among others. Critical patches also include two updates from SUSE that fix 246 vulnerabilities in Chromium and a significant buffer overflow in fetchmail that could allow remote code execution. Users are advised to perform their usual updates and reboot their systems to ensure the new kernel patches take effect, as they remain unpatched until a restart occurs

Linux Security Roundup: Nine Distros Ship Kernel Patches With 1,100+ CVEs

Nine major Linux distributions, AlmaLinux, Debian, Fedora, Oracle Linux, Red Hat, Rocky Linux, Slackware, SUSE, and Ubuntu, shipped security updates today. The headline stories are kernel roll-ups that close more than 1,100 CVEs in Oracle's Unbreakable Enterprise kernel and roughly 950 in Ubuntu's NVIDIA kernel. A set of recurring flaws forces attention too, including a Python certificate verification bypass, an OpenSSL DTLS stale-buffer fix, and glibc updates landing across AlmaLinux, Oracle, and Rocky. SUSE's pair of Chromium fixes at 246 CVEs each and a 9.2-rated fetchmail NTLM buffer overflow top the list, and the practical takeaway is the same everywhere: run your normal update and reboot, since kernel patches don't take effect until you restart.

Linux Security Roundup: Nine Distros Ship Kernel Patches With 1,100+ CVEs @ Linux Compatible