Security Notices

Security Notices
Ubuntu USN-8826-1 Fixes LXC Vulnerabilities
09/28/2026

Ubuntu LXC updates address logging-related disclosure and a separate authorization denial of service. Match binary packages and support entitlement to the release, then restart affected containers; the two issues do not share identical Ubuntu scope.

Read this guide
Security Notices
Red Hat RRDtool Updates Fix RHEL 9 Memory-Safety Flaw
09/27/2026

RRDtool's cache daemon can crash or execute code when a local attacker with socket access supplies an oversized CREATE request. Apply the entitled RHEL branch update, restart rrdcached, and verify dependent monitoring clients.

Read this guide
Security Notices
Red Hat Tesseract Update Fixes RHEL 9 Parsing Flaw
09/27/2026

Red Hat's Tesseract update fixes a buffer-overflow risk in crafted trained-data model components. Update affected OCR workers and verify model provenance; the advisory does not establish that every ordinary scanned image triggers the flaw.

Read this guide
Security Notices
Red Hat Libreswan Update Fixes Four RHEL 8 Network Flaws
09/27/2026

RHEL 8.8 Libreswan updates address denial of service and conditional RSA authentication risks. Match IKE mode, certificates and policy to the advisories, then update with a management path independent of the VPN tunnel.

Read this guide
Security Notices
Red Hat Updates Git LFS for Twelve RHEL 9 Vulnerabilities
09/27/2026

RHEL 9.4 Update Services for SAP Solutions updates Git LFS and bundled dependencies. Inventory developer hosts and build runners, update the entitled package, and check separate binaries; replacing a Go compiler does not rebuild Git LFS.

Read this guide
Security Notices
Red Hat OpenShift 4.15.69 Addresses Seventeen Vulnerabilities
09/27/2026

OpenShift 4.15.69 includes seventeen component fixes. Use the architecture-specific release image and supported cluster path, checking operators, capacity and disruption budgets; selecting an old release number is not an established rollback procedure.

Read this guide
Security Notices
ABB PCM600 Scheduler Service Requires Privilege-Escalation Workaround
09/27/2026

ABB PCM600 Scheduler has a local privilege-escalation flaw with a documented service-account workaround, not a fixed release. Coordinate changes with the engineering owner and preserve certificate validation; changing accounts does not repair the permission defect.

Read this guide
Security Notices
ABB PCM600 Hotfix Blocks Project-Import Path Traversal
09/27/2026

ABB PCM600 2.14 Hotfix 20260923 fixes project-archive path traversal using the importing user's permissions. Restrict untrusted imports while updating; this hotfix does not resolve the separate Scheduler privilege-escalation issue.

Read this guide
Security Notices
ABB AC500 V3 Firmware Fixes Web Visualization Denial of Service
09/27/2026

ABB AC500 V3 firmware 3.9.1 fixes denial of service in running web visualization servers. Coordinate controller maintenance with the process owner; updating Automation Builder alone does not prove the controller has received the firmware.

Read this guide
Security Notices
ABB Automation Builder 2.9.1 Fixes Project File Code Execution
09/27/2026

ABB Automation Builder 2.9.1 fixes project-file code execution involving print or printer-setting interaction. Update engineering workstations and restrict untrusted projects; obtain ABB clarification before relying on the incompletely documented local-access-only workaround.

Read this guide