This week, seven Linux distributions released security updates, with SUSE leading the pack with a Critical patch for WebKit2GTK3 that included 233 CVEs. Following SUSE, Debian and Ubuntu also deployed updates, with Debian's Firefox ESR patch addressing 59 CVEs and Ubuntu's curl and Bind updates addressing numerous vulnerabilities, including serious issues like remote code execution. Fedora focused on Exim, which received critical fixes related to arbitrary code execution and SMTP smuggling, while Red Hat, AlmaLinux, and Rocky Linux issued various kernel and package updates, emphasizing the importance of addressing remote-facing vulnerabilities promptly. Notably, Slackware issued a simpler update for libarchive, while practical advice across distributions highlighted prioritizing patches based on the nature of the vulnerabilities rather than solely on their severity ratings

Linux Security Roundup: WebKit2GTK3 Leads 233-CVE Pile Across 7 Distro Patches

Seven Linux distros rolled out security updates this week, led by SUSE's Critical WebKit2GTK3 patch packing 233 CVEs and pushing the package to 2.54.1. Debian and Ubuntu came hot on the heels of that haul, with Firefox ESR absorbing 59 CVEs and curl plus Bind stacking up 27 and 24 respectively. Exim tops Fedora's October 15 batch with RCE and SMTP smuggling fixes, while Red Hat, AlmaLinux, and Rocky round out a heavy round of kernel, domain-controller, and package patches. The practical advice is to patch the remote-facing stack first, curl, Bind, and exim before everything else—rather than reacting to severity badges alone.

Linux Security Roundup: WebKit2GTK3 Leads 233-CVE Pile Across 7 Distro Patches @ Linux Compatible