Linux & Operating Systems
Ubuntu USN-8842-1 Updates NVIDIA Kernels for 18 Vulnerabilities
Ubuntu NVIDIA kernel updates cover standard, low-latency and page-size variants on specified releases. Install the matching kernel and reboot after module checks; this is not a standalone graphics-driver or CUDA compatibility update.
Ubuntu USN-8728-3 Updates the Oracle Kernel for 1,417 Vulnerabilities
Ubuntu 24.04 Oracle-cloud 7.0 kernel updates include two KEV-listed vulnerabilities. Match the Oracle variant, update and reboot, and assess suspicious activity separately; the large CVE count does not establish every issue is reachable on one instance.
Ubuntu USN-8816-2 Updates GCP and OEM Kernels for 101 Vulnerabilities
Ubuntu's GCP and OEM kernel updates cover distinct release, flavor and page-size combinations. Install the matching binaries, verify external modules and reboot with recovery access; switching flavors is a separate change, not a compatibility shortcut.
Ubuntu USN-8729-6 Updates AWS Kernels for 97 Vulnerabilities
Ubuntu 22.04 and 24.04 AWS 6.8 kernel updates require matching image/metapackage variants, module readiness and a reboot. Update launch templates too; restarting an application or replacing a container does not change the host's running kernel.
Red Hat Updates cjose for CVE-2026-53938 Across RHEL 9 SAP Solutions Branches
RHEL 9 SAP Solutions cjose updates fix memory corruption during AES Key Wrap decryption of crafted JWEs. Update the actual consumer's runtime package; any interim algorithm rejection must occur before decryption and preserve legitimate authentication needs.
Red Hat Updates FreeRDP for CVE-2026-55193 Across RHEL 8.4 and 8.6 Extended Branches
FreeRDP clients on specified RHEL 8.4 and 8.6 extended branches can crash or execute code when processing malicious TS Gateway responses. Update release-matched runtime RPMs and loaded libraries without mixing branch builds.
Debian Updates rsync for 33 Access, Disclosure, and Code-Execution Flaws
Debian 13 rsync updates address thirty-three access, disclosure and execution-related flaws. Inventory both transfer endpoints and scheduled jobs, coordinate restarts, and validate with disposable destinations rather than risking the only backup or live data.
Ubuntu USN-8487-2 Corrects the curl CVE-2026-8927 Fix
Ubuntu 14.04 Legacy Support corrects an incomplete curl fix involving retained proxy-authentication credentials. Update installed libcurl consumers as well as the command-line tool; the earlier advisory's package alone does not establish protection.
Debian Updates Dovecot for 25 Mail-Server Vulnerabilities
Debian 13 Dovecot updates address twenty-five flaws, including mailbox access-control bypass and malicious Sieve handling. Update affected components, coordinate mail-service restarts, and test both permitted and denied mailbox access with controlled accounts.
Debian Updates WordPress for XSS, Privilege Escalation, and RCE
Debian 13 WordPress updates address three core flaws, including a KEV-listed issue. Confirm the active site is Debian-managed, preserve matching database and files, and coordinate forensic review; core patching does not establish plugin or theme security.