Between November 5 and 6, nine Linux distributions released critical security updates, particularly highlighting a major update to webkit2gtk3, which addressed over 300 CVEs affecting RHEL and AlmaLinux. Additionally, vulnerabilities in SUSE's rsyslog template handling and AlmaLinux's .NET 10 batch were noted, while Red Hat's OpenJDK 11 also received critical patches. Several updates contained minor issues, such as Ubuntu's self-reverting fixes that inadvertently disrupted functionalities in Jupyter and other applications. The recommendations for addressing these vulnerabilities include prioritizing patches with critical CVSS scores before addressing those ranked as important

Linux Security Roundup: WebKit, rsyslog, and .NET CVE Patches

Nine Linux distros shipped security updates between November 5 and 6, dominated by a Critical webkit2gtk3 roll-out that quietly absorbed 300+ CVEs across RHEL and AlmaLinux. Beyond the browser bugs, attackers could run code through SUSE's rsyslog template handling, AlmaLinux's 22-CVE .NET 10 batch, and Red Hat's OpenJDK 11 ELS bump. Several entries were more trouble than danger, including Ubuntu's self-reverting fixes that broke Jupyter and a setuid ntfs-3g flaw worth a closer look. Rank the pile by CVSS scores and patch the Criticals first before worrying about the Important long tail.

Linux Security Roundup: WebKit, rsyslog, and .NET CVE Patches @ Linux Compatible