Linux & Operating Systems
Red Hat Fixes Dogtag PKI Profile Import Code Execution on RHEL 8
Red Hat fixed Dogtag PKI profile-import code execution on RHEL 8. Restrict CA admins, update pki-core, review imports, and retain evidence.
Red Hat Fixes Sudo Time-Window Authorization Bypass on RHEL 8–10
Red Hat expanded its sudo time-window authorization-bypass fix across RHEL 8–10. Audit timed rules, update each branch, validate, and retain evidence.
Red Hat Updates the RHEL 10.0 EUS Kernel for 19 Vulnerabilities
Red Hat's RHEL 10.0 EUS kernel update fixes 19 flaws. Match entitled streams, install the fixed kernel, reboot, validate, and retain evidence.
Red Hat FreeRDP Update Fixes Critical CVE-2026-91949 on RHEL 10
FreeRDP's server-side flaw can permit a disabled RDSTLS transport before authentication. Red Hat excludes outbound-only client use from that attack path; match the RHEL 10.2 package and verify the server's transport policy.
Red Hat Ruby Update Fixes CVE-2026-80212 on RHEL 10
Crafted or spoofed DNS responses can exhaust memory in Ruby's resolv library. Red Hat's RHEL 10.2 update requires matching the packaged runtime and checking affected applications, not assuming separately installed Rubies are fixed.
Red Hat Updates GNU Awk on RHEL 8 for Two Vulnerabilities
Red Hat's RHEL 8.10 EUS GNU Awk update addresses use-after-free and integer-overflow flaws that can disrupt processing. Match the gawk RPM to the correct repository and check dependent scripts using trusted inputs.
Red Hat Releases RHEL 10 Kernel Live Patches for Three Vulnerabilities
RHEL 10.2 livepatch modules address three RDMA and IPv6 flaws on specified kernels. Match the running kernel and architecture, verify the module is loaded and enabled, and retain native-kernel update plans; livepatch rollback requires a reboot.
Red Hat Hardened Images Updates Address 24 Vulnerabilities
Ten Red Hat Hardened Images advisories list fixed RPMs across seven component families, not deployable image digests. Match component and branch, update or rebuild the relevant image, and separately verify the resulting deployment digest.
Red Hat Updates Ghostscript on RHEL 9 for CVE-2026-39919
Ghostscript on RHEL 9.8 EUS can corrupt heap memory and potentially execute code while processing a crafted PDF containing malformed JPEG 2000 data. Update affected libgs binaries through the matching supported channel; severity does not establish exploitation.
Ubuntu Kernel Updates Fix Three Vulnerabilities on Trusty and Xenial
Ubuntu 14.04 and 16.04 kernel updates address NFS, IPv6 and Netfilter flaws in specified legacy streams. Match release, kernel flavour and repository entitlement, preserve recovery access before rebooting, and keep supported-platform migration on the agenda.