Extended-support RHEL kernel fixes require the matching package set and a reboot to take effect. Record installed and running versions, repository and architecture, then coordinate workload failover and recovery access before maintenance.
Arista reports active exploitation of the VeloCloud Orchestrator flaw and says hosted services were patched. On-premises operators should restrict management access, preserve evidence and obtain the branch-specific fix, including guidance where no fix is listed.
Two libsoup WebSocket flaws can deny service on the listed RHEL 8 support streams. Apply the matching library package and ensure long-running HTTP and WebSocket applications load it; package inventory alone does not establish activation.
Crafted OGG media can overflow GStreamer Base Plugins and execute code in the consuming application. Match RHEL 7 ELS or the listed RHEL 8.6 support stream, update plugins, and restart affected media processes as appropriate.
OpenShift updates span separate cluster releases, images, RPMs and CNF IBU content. Record channel, architecture and installed extras, follow the supported update path, and verify each component; a minor-version label alone is not a fixed release.
Redis 6.2 fixes for RHEL 9.2 and 9.4 SAP-support streams address code-execution flaws. Match the full RPM and repository, then plan replication and persistence during rollout; separate Redis 7 module builds are not interchangeable.
Malformed state cookies can deny service in Apache mod_auth_openidc without authentication. Match the RHEL module stream and full package release, apply its update, and validate the identity-provider flow; module names and software versions differ.
A malicious link can expose information from an authenticated SAP Fiori Launchpad session without the attacker having an account. Record SAP_UI and SAP_BASIS levels, then obtain the applicable correction and prerequisites through authorized SAP support.
A crafted EXR file can trigger a heap out-of-bounds write in OpenEXR's exrmultiview. Identify RHEL 10 image-processing pipelines, update the matching package family, and restrict untrusted inputs while the change is pending.
Trace a UniFi client flow through routing policy, forwarding state, observed egress and replies. Compare failure and recovery behavior without treating a routing-table entry as packet-path proof.
