Red Hat fixes two High libvirt flaws on RHEL 7 ELS. Confirm entitlement and package NVR, update, validate virtualization workflows, and retain evidence.
ABRT updates address symlink-based file overwrites across specified RHEL 7 and 8 support streams; only the RHEL 8 notices also cover journal injection. Match the advisory, preserve crash evidence, and validate reporting after updating.
Red Hat fixes a crafted-TIFF code-execution flaw in RHEL 8 libtiff. Find tiffcrop and untrusted-image paths, update, validate, and retain evidence.
A crafted physical SCSI or USB device can influence a udev removal command through sg3_utils property injection. Restrict untrusted devices, apply the RHEL 10.0 EUS update, and validate normal discovery and removal.
The rhc updates cover different Go-library flaws across RHEL 8 and 9 support streams. Match the client and daemon to their own advisory and package, then verify the system-management connection to Red Hat services.
The RHEL 6 ELS Extension Vim update addresses thirteen vulnerabilities. Confirm repository entitlement and the installed package build, then validate editor, automation and recovery workflows after applying the supported update.
Red Hat fixes three dracut network-boot flaws on RHEL 8.4 and 8.6 extended support. Match entitled streams, update, validate boot, and retain evidence.
A malicious repository-controlled .nvmrc can make vulnerable nvm read outside its alias directory and disclose local files. Update the active nvm installation and review developer, CI and shell-hook workflows that process untrusted repositories.
Debian DLA-4789-1 fixes 12 libde265 CVEs and two additional flaws. Find H.265 decoding paths, update Debian 12, restart, validate, and retain evidence.
ZTE SmartLife fixes cover registration email ownership, password reset, account enumeration and a hardcoded key. Update the affected release through ZTE and review registration, reset and account-management activity for unexpected changes.
