Security Notices

Security Notices
Red Hat AI Base Images 3.5.2 Updates the Gaudi Variant
10/01/2026

Red Hat's AI Base Images 3.5.2 Gaudi update is distinct from the 3.4.3 advisory despite a shared repository name. Match the OpenShift AI stream and digest, then validate accelerator compatibility before rebuilding and redeploying workloads.

Read this guide
Security Notices
AWS Powertools for Lambda Fixes Data-Masking Fail-Open
10/01/2026

Amazon Web Services (AWS) issued 2026-123-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
Red Hat AI Base Images 3.4.3 Fix Vulnerabilities Across Nine Variants
10/01/2026

Red Hat AI Base Images 3.4.3 updates nine CPU and accelerator variants with differing component scope. Select the correct stream, architecture and digest, rebuild derived images, and redeploy workloads; changing a tag does not replace running containers.

Read this guide
Security Notices
AWS Updates Amazon Ion Python for Recursion Denial of Service
10/01/2026

Amazon Web Services (AWS) issued 2026-122-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
AWS Fixes Diff-Scan Argument Injection in security-agent-mcp-server
10/01/2026

AWS security-agent-mcp-server can interpret crafted Git references as command options, modifying files outside the repository. Update the server actually launched by the MCP client to 0.2.0 or later; trusted repositories and isolation do not replace the fix.

Read this guide
Security Notices
Ubuntu USN-8863-1 Updates GStreamer Good Plugins for Four Vulnerabilities
10/01/2026

Ubuntu GStreamer Good Plugins updates address FLAC, AVI and closed-caption disclosure or denial-of-service flaws. Match runtime binaries and release-specific security/ESM channels; the closed-caption issue does not cover every older release in the combined notice.

Read this guide
Security Notices
AWS EFS CSI Driver 3.5.0 Fixes Mount Option Injection
10/01/2026

Amazon Web Services (AWS) issued 2026-120-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
Ubuntu USN-8862-1 Fixes libXpm Vulnerability
10/01/2026

Ubuntu libXpm updates address resource exhaustion from zero-dimension XPM images. Update installed runtime and utility binaries for the matching release, assess bundled copies separately, and avoid expanding the stated local denial-of-service risk into code execution.

Read this guide
Security Notices
Ubuntu USN-8861-1 Fixes OpenSSL Vulnerabilities
10/01/2026

Ubuntu 26.04 OpenSSL updates fix QUIC CPU and packet-buffer memory exhaustion. Update the relevant libraries and complete Canonical's required reboot; ordinary TLS service presence does not establish that the affected QUIC paths are enabled.

Read this guide
Security Notices
Apache HTTP Server 2.4.69 Fixes Twenty Vulnerabilities
10/01/2026

Apache HTTP Server 2.4.69 fixes twenty module- and configuration-dependent flaws. Inventory enabled CGI, WebDAV, HTTP/2, proxy and authentication paths, then use upstream or distribution fixes; a distribution's base version alone is not a patch verdict.

Read this guide