Redis 6.2 fixes for RHEL 9.2 and 9.4 SAP-support streams address code-execution flaws. Match the full RPM and repository, then plan replication and persistence during rollout; separate Redis 7 module builds are not interchangeable.
Malformed state cookies can deny service in Apache mod_auth_openidc without authentication. Match the RHEL module stream and full package release, apply its update, and validate the identity-provider flow; module names and software versions differ.
A malicious link can expose information from an authenticated SAP Fiori Launchpad session without the attacker having an account. Record SAP_UI and SAP_BASIS levels, then obtain the applicable correction and prerequisites through authorized SAP support.
A crafted EXR file can trigger a heap out-of-bounds write in OpenEXR's exrmultiview. Identify RHEL 10 image-processing pipelines, update the matching package family, and restrict untrusted inputs while the change is pending.
NVIDIA Infrastructure Controller for Linux needs the supported controller update addressing fourteen vulnerabilities. Inventory the deployed release, update through NVIDIA's infra-controller repository, and confirm the replacement software is actually running.
NeMo Speech updates address five vulnerabilities across platforms. Inventory environments and external datasets, model configurations and serialized tokenizer inputs, update the runtime, and redeploy jobs or services still using the old environment.
RHEL 10 libarchive fixes address separate tar PAX reading and ZIP-header writing paths. Apply the matching repository update, then check both archive-consuming and archive-creating tools that depend on the library.
The RHEL 9.6 EUS PostgreSQL update stays within the postgresql:15 module. Match the complete package set and plan around extensions, replication and recovery; this advisory does not require migration to another database major version.
Crafted XML can trigger use-after-free and deny service in RHEL 8 libxml2 consumers. Apply the matching Red Hat package and ensure processes load it; an older upstream version does not imply the backport is missing.
A heap overflow in RainerScript replace() can disrupt rsyslog on affected RHEL streams. Preserve queued logs and configuration, update the branch-specific packages, and verify collection and forwarding under a logging-continuity plan.
