Chrome 154's September 29 desktop release includes thirty-two security fixes. Update through the supported endpoint channel and relaunch; both listed Windows/macOS builds are valid releases, and deployment assignment alone does not prove running browsers changed.
GluonTS before 0.17.0 can execute commands while loading an untrusted model directory. Update each notebook, worker image and relevant fork, restrict artifact provenance, and never load a suspect model merely to inspect its behavior.
Ubuntu 20.04 Pro updates cover AWS, Azure, Azure FDE and Intel IoTG 5.15 kernels. Preserve the installed flavor, prepare encrypted-boot or device recovery as appropriate, and complete module checks and the required reboot.
Older Ubuntu Azure and AWS-HWE kernels require release-specific Pro or Legacy Support access. Match image and metapackage versions separately, verify recovery and module readiness, then reboot; a targeted fix does not establish broad application support.
Ubuntu NVIDIA kernel updates cover standard, low-latency and page-size variants on specified releases. Install the matching kernel and reboot after module checks; this is not a standalone graphics-driver or CUDA compatibility update.
Ubuntu 24.04 Oracle-cloud 7.0 kernel updates include two KEV-listed vulnerabilities. Match the Oracle variant, update and reboot, and assess suspicious activity separately; the large CVE count does not establish every issue is reachable on one instance.
Ubuntu's GCP and OEM kernel updates cover distinct release, flavor and page-size combinations. Install the matching binaries, verify external modules and reboot with recovery access; switching flavors is a separate change, not a compatibility shortcut.
Ubuntu 22.04 and 24.04 AWS 6.8 kernel updates require matching image/metapackage variants, module readiness and a reboot. Update launch templates too; restarting an application or replacing a container does not change the host's running kernel.
RHEL 9 SAP Solutions cjose updates fix memory corruption during AES Key Wrap decryption of crafted JWEs. Update the actual consumer's runtime package; any interim algorithm rejection must occur before decryption and preserve legitimate authentication needs.
FreeRDP clients on specified RHEL 8.4 and 8.6 extended branches can crash or execute code when processing malicious TS Gateway responses. Update release-matched runtime RPMs and loaded libraries without mixing branch builds.
