RHEL 10.2 Podman updates address archive-link file writes, incomplete Quadlet replacement and bundled Go flaws. Update the supported RPM, inspect effective unit settings, and assess which input paths the deployment exposes.
BIG-IP APM OAuth Authorization Server configurations face an exploited unauthenticated code-execution flaw. Preserve evidence, obtain F5's supported mitigation and hotfix, and keep forensic triage separate from successful patch installation.
Unsupported KarelIPS has an unauthenticated blind SQL-injection flaw with no fixed release identified. Restrict exposure, preserve relevant evidence and plan retirement or replacement; compensating controls do not repair the defect.
Ubuntu 22.04 and 24.04 Oracle 6.8 kernel updates require matching release and page-size variants. Install the appropriate image packages, reboot, and verify required modules, storage and networking.
Ubuntu 24.04 Azure 7.0 kernels need release-specific security packages, a reboot and module validation. Listed CVEs appear in CISA KEV; do not substitute the similarly numbered Ubuntu 26.04 build.
Ubuntu 26.04 Azure and Oracle kernel updates include CVEs listed in CISA KEV. Match the installed kernel family, update its packages and reboot; known exploitation does not establish compromise of every host.
This kernel fix covers specified Ubuntu AWS, AWS FIPS and NVIDIA Tegra IGX flavors, not every kernel. Match release, entitlement and external modules, then install the corresponding image and metapackage and schedule the reboot.
Ubuntu 22.04 and 24.04 low-latency kernel updates require a reboot and third-party module checks. Match the installed kernel flavor and binary packages, then verify timing-sensitive workloads on the updated kernel.
Ubuntu 22.04 Azure CVM hosts require the Jammy Azure FDE kernel update, not newer releases' 7.0 images. Confirm the running flavor, complete module and ABI checks, and reboot with recovery access available.
An authenticated Mattermost user can submit an unbounded bulk-reactions post-ID array and overload the database. Update the installed maintenance stream, prepare database recovery, and verify every application node leaves the affected range.
