Linux & Operating Systems
Ubuntu GKE Kernel Update Fixes 101 Vulnerabilities
Ubuntu 26.04 GKE kernel packages address 101 vulnerabilities, but availability does not establish a Google-managed node-image rollout. Verify the actual node image and kernel variant, then coordinate supported upgrades without disabling workload safeguards.
Ubuntu FIPS Kernel Update Fixes Twenty Vulnerabilities
Ubuntu 22.04 FIPS kernel updates fix twenty vulnerabilities through fips-updates. Match binary image and metapackage versions separately, preserve boot recovery, and confirm certification requirements; security-updated FIPS packages are not interchangeable with exact certification artifacts.
Ubuntu Linux Kernel Update for Raspberry Pi Fixes Three Vulnerabilities
Ubuntu 18.04 ESM Raspberry Pi kernel updates address NFS, IPv6 and Netfilter flaws. Select matching binary packages, check external modules and reboot; this notice does not cover Raspberry Pi OS or every Ubuntu kernel.
Red Hat Updates Performance Co-Pilot on RHEL 8 for Four Vulnerabilities
Performance Co-Pilot updates for specific RHEL 8.4 and 8.6 extended branches address PMDA execution, privilege and pmproxy access risks. Match agent mode and entitled packages; pmcd rules alone do not secure the separate pmproxy path.
Red Hat JBoss Web Server 6.2.5 Addresses Thirteen Vulnerabilities
JBoss Web Server 6.2.5 fixes thirteen Tomcat-related issues across listed RHEL streams. Match full supported package builds and enabled authentication, connector and WebSocket features; upstream-looking version numbers alone do not identify Red Hat's backported fix level.
Red Hat Satellite 6.18.10 and 6.16.14 Address Critical Vulnerabilities
Red Hat Satellite updates address provisioning, authorization and execution risks across separate branches. Follow the branch-specific procedure and test token-bearing boot workflows; disabling token enforcement or checking only web login does not validate the update.
Red Hat Gatekeeper 3.20.1 Fixes Two High-Severity Vulnerabilities
Red Hat Gatekeeper 3.20.1 fixes two Go TLS denial-of-service flaws in listed Operator images, not every product-tree image. Match affected status and architecture, update through the supported path, and validate admission and audit behavior.
Red Hat AI Base Images 3.5.2 Updates the Gaudi Variant
Red Hat's AI Base Images 3.5.2 Gaudi update is distinct from the 3.4.3 advisory despite a shared repository name. Match the OpenShift AI stream and digest, then validate accelerator compatibility before rebuilding and redeploying workloads.
Red Hat AI Base Images 3.4.3 Fix Vulnerabilities Across Nine Variants
Red Hat AI Base Images 3.4.3 updates nine CPU and accelerator variants with differing component scope. Select the correct stream, architecture and digest, rebuild derived images, and redeploy workloads; changing a tag does not replace running containers.
Ubuntu USN-8863-1 Updates GStreamer Good Plugins for Four Vulnerabilities
Ubuntu GStreamer Good Plugins updates address FLAC, AVI and closed-caption disclosure or denial-of-service flaws. Match runtime binaries and release-specific security/ESM channels; the closed-caption issue does not cover every older release in the combined notice.
