Tankuam Places password-recovery tokens could reset other users' accounts, including administrators. Kompini reports a service-side correction; obtain confirmation that your deployment is covered and review suspicious reset activity rather than seeking a downloadable patch.
Red Hat AI Base Images fixes span CPU and accelerator variants. Match architecture, accelerator stack and base digest, then rebuild and redeploy derived workload images; selecting a new base does not replace existing running images.
Erlang/OTP fixes affect separate ssl, asn1 and ssh applications. Inventory the runtime actually loaded by each service and update its supported branch; restricting TLS to 1.2 only addresses the TLS authentication issue temporarily.
OpenShift Builds maintenance updates apply to the installed Builds stream, not the cluster version alone. Record operator and runtime images and build strategies, apply the matching update, and confirm rollout before validation jobs.
Source-to-Image 1.6.4 updates build tooling for seven dependency vulnerabilities. Verify that build jobs use the new binaries or images; application images produced before the tooling update are separate artifacts and are not retroactively changed.
Extended-support RHEL kernel fixes require the matching package set and a reboot to take effect. Record installed and running versions, repository and architecture, then coordinate workload failover and recovery access before maintenance.
Arista reports active exploitation of the VeloCloud Orchestrator flaw and says hosted services were patched. On-premises operators should restrict management access, preserve evidence and obtain the branch-specific fix, including guidance where no fix is listed.
Two libsoup WebSocket flaws can deny service on the listed RHEL 8 support streams. Apply the matching library package and ensure long-running HTTP and WebSocket applications load it; package inventory alone does not establish activation.
Crafted OGG media can overflow GStreamer Base Plugins and execute code in the consuming application. Match RHEL 7 ELS or the listed RHEL 8.6 support stream, update plugins, and restart affected media processes as appropriate.
OpenShift updates span separate cluster releases, images, RPMs and CNF IBU content. Record channel, architecture and installed extras, follow the supported update path, and verify each component; a minor-version label alone is not a fixed release.
