Security Notices
Red Hat JBoss EAP 8.1.8 Addresses 36 Vulnerabilities
JBoss EAP 8.1.8 addresses thirty-six CVEs across listed RHEL platforms. Back up applications, configuration and database settings, apply prerequisite errata, and use the supported EAP package set rather than replacing individual JARs.
ManageEngine ADSelfService Plus 7001 Fixes RCE and Authentication Bypass
ADSelfService Plus fixes separate Windows logon-client SYSTEM execution and unauthenticated REST API bypass. Update the server and verify vendor-supported GINA client rollout; a server build check alone does not establish that affected endpoints changed.
Red Hat coreutils Update Fixes an RHEL 8 sort Buffer Under-Read
A heap buffer under-read in coreutils sort key handling has limited confidentiality and availability impact. Apply the supported RHEL 8 package update and validate scripts that depend on sort output rather than assuming every utility is affected.
Ubuntu USN-8661-5 Fixes Linux kernel (Raspberry Pi) Vulnerabilities
Ubuntu 22.04 Raspberry Pi kernel fixes require the raspi image, matching metapackage and reboot. Keep their different version identifiers distinct, check external modules and peripherals, and arrange recovery access for the maintenance window.
Red Hat rhc-worker-playbook Update Fixes Five RHEL 10 Flaws
The RHEL 10.0 EUS rhc-worker-playbook update affects the yggdrasil worker that executes Ansible playbooks locally. Match the repository and coordinate the package change with management owners and pending jobs.
Ubuntu USN-8760-2 Fixes Linux kernel (NVIDIA) Vulnerabilities
Ubuntu's NVIDIA kernel update is distinct from NVIDIA BaseOS and includes two known-exploited CVEs. Match flavor and page-size variant, prepare driver and ABI checks, and complete the reboot with recovery access available.
Ubuntu USN-8801-1 Fixes Linux kernel (Azure CVM) Vulnerabilities
Ubuntu Azure CVM kernel fixes include one known-exploited CVE, not a blanket exploitation finding for all five issues. Match the Ubuntu release and Azure FDE image, prepare recovery access, and reboot while assessing applicable triage requirements.
Red Hat OpenShift Virtualization Updates Address Four Flaws
OpenShift Virtualization fixes replace specific console-plugin and kubemacpool images. Match stream, architecture and image digests, apply prerequisite errata, and verify component rollout; the Virtualization stream label alone does not prove the fixed artifacts are running.
Ubuntu USN-8800-1 Fixes Linux kernel (NVIDIA BaseOS) Vulnerabilities
The Ubuntu NVIDIA BaseOS kernel update includes two CVEs with known-exploitation entries. Match the kernel flavor, architecture and page-size variant, schedule the required reboot, and assess applicable triage requirements alongside the software update.
Red Hat PostgreSQL Updates Expand Across RHEL 8, 9, and 10
PostgreSQL 15 and 16 fixes span separate RHEL package streams. Stay on the supported installed major and module, match the full RPM, and prepare backup and replica recovery rather than treating upstream versions as interchangeable.