In a recent Linux security roundup, Ubuntu disclosed approximately 1,050 CVEs across its kernels, with particular emphasis on the critical CVE-2023-20585 vulnerability affecting AMD SEV-SNP technology, allowing local hypervisor attackers to corrupt confidential guest memory. Fedora also made headlines by bundling 247 security fixes in its Chromium 155 update, alongside other updates for Firefox and curl. Other distributions like AlmaLinux, Debian, and Red Hat released important fixes as well, focusing on vulnerabilities in packages like pcre2, Dovecot, and php8, indicating a widespread need for patching across various systems. Admins are advised to prioritize addressing remote code execution vulnerabilities and ensure proper updates and reboots following these patches to enhance system security
Linux Security Roundup: Ubuntu Ships 1,050-CVE Kernels, Fedora Packs 247 Chromium Fixes
Today's Linux security roundup spanned eight distros, with Ubuntu's kernel notices carrying a staggering 1,050 CVEs each and Fedora's Chromium bump bundling 247 fixes. Ubuntu's biggest priority is CVE-2023-20585, the AMD SEV-SNP hole that lets local hypervisor attackers corrupt confidential guest memory. Fedora's standout is Chromium 155, alongside Firefox 158.0 and a curl fix for a use-after-free that enables remote code execution over HTTP/2. Across AlmaLinux, Debian, RHEL, Rocky, SUSE, and Slackware, the real RCEs to patch first include pcre2, Dovecot, php8, and the expat integer overflow.
