Recent Linux security updates across various distributions, including Debian, Fedora, Red Hat, Rocky Linux, Slackware, and SUSE, have released patches addressing critical vulnerabilities. Notable highlights include Debian's patch for the zlib library that addresses remote code execution risks, SUSE's Flatpak update fixing multiple sandbox escape vulnerabilities, and a Critical-rated update for Red Hat's OpenShift 4.22.22. Additionally, the updates include the removal of compromised trust material in the python-certifi package and a routine update from Mozilla for Thunderbird addressing 66 CVEs. Administrators are advised to prioritize these critical patches before tackling routine updates to ensure system security
Linux Security Roundup: zlib RCE, Flatpak Sandbox Escape and Critical OpenShift Patch
Today's security updates across Debian, Fedora, Red Hat, Rocky Linux, Slackware, and SUSE are mostly routine, but a few cross into serious territory that needs immediate attention. Debian's zlib patch closes a code-execution hole, SUSE's Flatpak update plugs eleven sandbox escapes, and Red Hat's OpenShift 4.22.22 update earns a Critical rating. A compromised eMudhra certificate threads through both Fedora and SUSE's python-certifi update, while Mozilla's Thunderbird ships a routine-but-expected 66-CVE cleanup. Patch the code-execution and trust-chain issues first, then work through the Rust crate refreshes and module rebuilds on Fedora and Rocky.
