Ubuntu's NVIDIA kernel update is distinct from NVIDIA BaseOS and includes two known-exploited CVEs. Match flavor and page-size variant, prepare driver and ABI checks, and complete the reboot with recovery access available.
Ubuntu Azure CVM kernel fixes include one known-exploited CVE, not a blanket exploitation finding for all five issues. Match the Ubuntu release and Azure FDE image, prepare recovery access, and reboot while assessing applicable triage requirements.
OpenShift Virtualization fixes replace specific console-plugin and kubemacpool images. Match stream, architecture and image digests, apply prerequisite errata, and verify component rollout; the Virtualization stream label alone does not prove the fixed artifacts are running.
The Ubuntu NVIDIA BaseOS kernel update includes two CVEs with known-exploitation entries. Match the kernel flavor, architecture and page-size variant, schedule the required reboot, and assess applicable triage requirements alongside the software update.
PostgreSQL 15 and 16 fixes span separate RHEL package streams. Stay on the supported installed major and module, match the full RPM, and prepare backup and replica recovery rather than treating upstream versions as interchangeable.
Tankuam Places password-recovery tokens could reset other users' accounts, including administrators. Kompini reports a service-side correction; obtain confirmation that your deployment is covered and review suspicious reset activity rather than seeking a downloadable patch.
Red Hat AI Base Images fixes span CPU and accelerator variants. Match architecture, accelerator stack and base digest, then rebuild and redeploy derived workload images; selecting a new base does not replace existing running images.
Erlang/OTP fixes affect separate ssl, asn1 and ssh applications. Inventory the runtime actually loaded by each service and update its supported branch; restricting TLS to 1.2 only addresses the TLS authentication issue temporarily.
OpenShift Builds maintenance updates apply to the installed Builds stream, not the cluster version alone. Record operator and runtime images and build strategies, apply the matching update, and confirm rollout before validation jobs.
Source-to-Image 1.6.4 updates build tooling for seven dependency vulnerabilities. Verify that build jobs use the new binaries or images; application images produced before the tooling update are separate artifacts and are not retroactively changed.
