Ubuntu 26.04 Azure and Oracle kernel updates include CVEs listed in CISA KEV. Match the installed kernel family, update its packages and reboot; known exploitation does not establish compromise of every host.
Ubuntu 22.04 and 24.04 low-latency kernel updates require a reboot and third-party module checks. Match the installed kernel flavor and binary packages, then verify timing-sensitive workloads on the updated kernel.
This kernel fix covers specified Ubuntu AWS, AWS FIPS and NVIDIA Tegra IGX flavors, not every kernel. Match release, entitlement and external modules, then install the corresponding image and metapackage and schedule the reboot.
Ubuntu 22.04 Azure CVM hosts require the Jammy Azure FDE kernel update, not newer releases' 7.0 images. Confirm the running flavor, complete module and ABI checks, and reboot with recovery access available.
An authenticated Mattermost user can submit an unbounded bulk-reactions post-ID array and overload the database. Update the installed maintenance stream, prepare database recovery, and verify every application node leaves the affected range.
JBoss EAP 8.1.8 addresses thirty-six CVEs across listed RHEL platforms. Back up applications, configuration and database settings, apply prerequisite errata, and use the supported EAP package set rather than replacing individual JARs.
ADSelfService Plus fixes separate Windows logon-client SYSTEM execution and unauthenticated REST API bypass. Update the server and verify vendor-supported GINA client rollout; a server build check alone does not establish that affected endpoints changed.
A heap buffer under-read in coreutils sort key handling has limited confidentiality and availability impact. Apply the supported RHEL 8 package update and validate scripts that depend on sort output rather than assuming every utility is affected.
Ubuntu 22.04 Raspberry Pi kernel fixes require the raspi image, matching metapackage and reboot. Keep their different version identifiers distinct, check external modules and peripherals, and arrange recovery access for the maintenance window.
The RHEL 10.0 EUS rhc-worker-playbook update affects the yggdrasil worker that executes Ansible playbooks locally. Match the repository and coordinate the package change with management owners and pending jobs.
