Security Notices

Security Notices
OpenStack Octavia Fixes HAProxy Configuration Injection
09/21/2026

An authenticated load-balancer owner can inject HAProxy configuration through Octavia's Amphora provider and reach root on the amphora. Check provider and branch, then verify the supported package contains both fixes; other provider drivers are outside this scope.

Read this guide
Security Notices
CISA Adds Zyxel GS1900 Command Execution Flaw to KEV
09/21/2026

The exploited Zyxel GS1900 flaw lets an unauthenticated LAN attacker execute commands through a vulnerable CGI program. Restrict management access, preserve logs for triage, and install firmware matched to the exact switch model.

Read this guide
Security Notices
Ubuntu USN-8798-1 Fixes GStreamer Good Plugins Vulnerabilities
09/21/2026

Crafted MRF or PNG content and RTP packets can trigger memory errors in GStreamer Good Plugins, causing crashes or possible code execution. Inventory consuming media and streaming applications, then apply the Ubuntu release-specific update.

Read this guide
Security Notices
Red Hat osbuild-composer Update Addresses Five RHEL 9 Flaws
09/21/2026

The RHEL 9 osbuild-composer update includes server, core and worker packages. Keep them on the supported package set, schedule around queued image builds, and check the service and dependent build clients afterward.

Read this guide
Security Notices
Red Hat Firefox 140.16 Updates RHEL 9 and 10
09/21/2026

The RHEL Firefox ESR update covers twenty-eight CVEs across supported RHEL 9 and 10 streams. Keep package suffixes distinct, include installed firefox-x11 components where applicable, and reopen browsers to validate the updated process.

Read this guide
Security Notices
Ubuntu USN-8797-1 Fixes GStreamer Base Plugins Vulnerability
09/21/2026

A crafted OGG file can crash applications using GStreamer Base Plugins or execute code with the application user's privileges. Match the Ubuntu release and installed binaries, then apply the supported release-specific package update.

Read this guide
Security Notices
Red Hat Redis Updates Address Four RHEL Vulnerabilities
09/21/2026

Red Hat Redis fixes vary by RHEL minor release and module stream. Record the support repository and complete package build, then coordinate restart or cluster rollout; an abbreviated upstream Redis version does not establish patch status.

Read this guide
Security Notices
Red Hat GStreamer Base Update Fixes an RHEL 8 Media Flaw
09/21/2026

Malicious OGG parsing can overflow the stack in affected GStreamer Base Plugins and execute code in the consuming application. Match the RHEL 8.4 support stream, update packages and dependent images, and validate approved media workflows.

Read this guide
Security Notices
Apache MINA Corrects an Incomplete Deserialization Fix
09/21/2026

MINA's announced deserialization fix missed the 2.0 and 2.1 maintenance branches. Verify the deployed artifact and use the corrected 2.0.31 or 2.1.15 release, reopening remediation records that relied on the earlier fix claim.

Read this guide
Security Notices
Apache Airflow 3.3.2 Fixes Authorization and Token Handling
09/21/2026

Airflow fixes separate asset-event disclosure, cookie/bearer identity confusion and logout token-revocation failures. Match each issue's version and permissions, update the deployment, and validate event visibility and authentication behavior with authorized test accounts.

Read this guide