Security Notices
NVIDIA NeMo Speech 3.0 Fixes Five Code Execution Flaws

NeMo Speech updates address five vulnerabilities across platforms. Inventory environments and external datasets, model configurations and serialized tokenizer inputs, update the runtime, and redeploy jobs or services still using the old environment.

Read this guide
Security Notices
NVIDIA Infrastructure Controller 2.0 Fixes Fourteen Flaws

NVIDIA Infrastructure Controller for Linux needs the supported controller update addressing fourteen vulnerabilities. Inventory the deployed release, update through NVIDIA's infra-controller repository, and confirm the replacement software is actually running.

Read this guide
Security Notices
Red Hat libarchive Update Fixes Two RHEL 10 Flaws

RHEL 10 libarchive fixes address separate tar PAX reading and ZIP-header writing paths. Apply the matching repository update, then check both archive-consuming and archive-creating tools that depend on the library.

Read this guide
Security Notices
Red Hat PostgreSQL 15 Update Addresses Nine RHEL 9 Flaws

The RHEL 9.6 EUS PostgreSQL update stays within the postgresql:15 module. Match the complete package set and plan around extensions, replication and recovery; this advisory does not require migration to another database major version.

Read this guide
Security Notices
Red Hat libxml2 Update Fixes an RHEL 8 Parsing Flaw

Crafted XML can trigger use-after-free and deny service in RHEL 8 libxml2 consumers. Apply the matching Red Hat package and ensure processes load it; an older upstream version does not imply the backport is missing.

Read this guide
Security Notices
Red Hat rsyslog Updates Fix an RHEL Denial of Service

A heap overflow in RainerScript replace() can disrupt rsyslog on affected RHEL streams. Preserve queued logs and configuration, update the branch-specific packages, and verify collection and forwarding under a logging-continuity plan.

Read this guide
Security Notices
OpenStack Octavia Fixes HAProxy Configuration Injection

An authenticated load-balancer owner can inject HAProxy configuration through Octavia's Amphora provider and reach root on the amphora. Check provider and branch, then verify the supported package contains both fixes; other provider drivers are outside this scope.

Read this guide
Networking
Thread Troubleshooting: Border Routers, Split Networks, and the New Thread Tools App

A Thread troubleshooting guide for smart homes, covering border routers, split networks, Matter controllers, Home Assistant, Thread Tools, and IPv6.

Read this guide
Security Notices
CISA Adds Zyxel GS1900 Command Execution Flaw to KEV

The exploited Zyxel GS1900 flaw lets an unauthenticated LAN attacker execute commands through a vulnerable CGI program. Restrict management access, preserve logs for triage, and install firmware matched to the exact switch model.

Read this guide
Security Notices
Ubuntu USN-8798-1 Fixes GStreamer Good Plugins Vulnerabilities

Crafted MRF or PNG content and RTP packets can trigger memory errors in GStreamer Good Plugins, causing crashes or possible code execution. Inventory consuming media and streaming applications, then apply the Ubuntu release-specific update.

Read this guide