Linux distributions issue critical security updates for Unbound and Chromium

Multiple major Linux distributions, including Red Hat, AlmaLinux, Oracle Linux, Rocky Linux, SUSE, Fedora, Debian, and Ubuntu, have released a wave of critical security updates addressing widespread vulnerabilities.

The most urgent issue involves the Unbound DNS resolver, which received critical ratings due to vulnerabilities that could allow remote code execution (RCE) during CNAME synthesis and heap buffer overflows during DNSSEC and DNSKEY processing. These flaws pose significant risks to systems running DNSSEC resolvers.

Other major updates include a massive Chromium patch for Fedora addressing 58 CVEs, as well as security fixes for Firefox, Thunderbird, WebKitGTK, PostgreSQL, and various container tools like Podman and runc. Additionally, Red Hat issued critical updates for IPA identity management and the Ansible Automation Platform.