A significant wave of security updates was released for various Linux distributions, including Ubuntu, Red Hat, Oracle, SUSE, and Qubes, with the most critical update addressing a Xen flaw (XSA-523) in Qubes OS that allows a malicious qube to access memory in other qubes and dom0. Notably, the updates also include critical patches for the Pillow image library, which faced vulnerabilities that could lead to remote code execution, and several updates for the curl library addressing multiple CVEs. The kernel updates were prominent in Ubuntu and Red Hat releases, with numerous advisories covering different kernel versions and addressing various security issues. Users are urged to prioritize patching the Qubes flaw, update Pillow and curl, and ensure their systems are running the latest kernel versions to maintain security

Linux Security Roundup: Qubes Xen Flaw, Ubuntu and Red Hat Patches

A wave of security updates swept Linux distros, with Ubuntu, Red Hat, Oracle, SUSE, Qubes, and several others pushing patches. The most alarming is Qubes QSB-121, which fixes a Xen flaw (XSA-523) that lets a malicious qube read and write arbitrary memory in other qubes and dom0. Images and HTTP libraries recur throughout the batch, featuring critical Pillow fixes across Oracle and SUSE alongside 31 new CVEs for curl, while kernels dominate the Ubuntu, Oracle, and Red Hat releases. Patch Pillow, update curl, don't skip the kernel bumps, and prioritize the Qubes fix since most of this reaches you through your distro's normal patching.

Linux Security Roundup: Qubes Xen Flaw, Ubuntu and Red Hat Patches @ Linux Compatible