Linux Security Updates: Python Hits Hard, Tor Ships Without a CVE
Four distros pushed security patches this morning, with Python emerging as the clear target across Fedora's six interpreter releases and SUSE's batch of 20 advisories. Debian shipped two fixes for trixie, with Tor notably going out before a CVE was assigned while vips took a nine-CVE hit. Red Hat rolled out ten advisories for RHEL 8 through 10. Meanwhile, Ubuntu's Perl DBI fix stretches all the way back to the classic 14.04 LTS, requiring Ubuntu Pro for the oldest trees.
Linux Security Updates: Python Hits Hard, Tor Ships Without a CVE @ Linux Compatible
Linux Security Updates: Python Hits Hard, Tor Ships Without a CVE
This morning, multiple Linux distributions released security updates, with a significant focus on Python, which received numerous patches across Fedora and SUSE. Fedora issued updates for Python interpreters, addressing a recurring CVE related to a use-after-free vulnerability in SSLContext, while SUSE's updates targeted various Python packages, some of which had vulnerabilities dating back over a decade. Other distributions like Debian addressed security flaws in Tor and vips, with Tor shipping updates without an assigned CVE, and Red Hat rolled out ten advisories for critical software. Users are encouraged to apply these updates promptly, with detailed instructions provided for each distribution's package management system
