In a recent Linux security roundup, eleven distributions released updates addressing numerous vulnerabilities, with SUSE's Firefox ESR update alone fixing 147 CVEs. Red Hat issued a critical firmware patch for edk2 on RHEL 10, while Debian's updates included a Telegram Desktop flaw that could allow account hijacking through crafted links. Other distributions, including Ubuntu and Oracle, also reported vulnerabilities related to curl and glibc, emphasizing the need for urgent patches for network-facing services. Overall, the updates highlight the ongoing necessity for vigilance and timely maintenance in Linux environments to ensure security
Linux Security Roundup: SUSE Firefox Ships 147 CVEs, RHEL Edits Critical Firmware Patch
Eleven Linux distros shipped security updates in today's roundup, and one SUSE Firefox ESR change alone absorbed a staggering 147 CVEs. Red Hat's scariest move was a Critical patch for edk2 firmware on RHEL 10, where a hole sits below the boot process. Debian included a Telegram Desktop flaw that lets an attacker steal session keys and hijack an account with a single crafted link. Across the board, the same curl and glibc flaws surfaced on Oracle and Ubuntu, so network-facing services are the priority here.
