Linux & Operating Systems
Red Hat OpenShift 4.15.69 Addresses Seventeen Vulnerabilities
OpenShift 4.15.69 includes seventeen component fixes. Use the architecture-specific release image and supported cluster path, checking operators, capacity and disruption budgets; selecting an old release number is not an established rollback procedure.
Debian Updates Exim for SMTP Smuggling and Code Execution Flaws
Debian 13 Exim updates address SMTP smuggling and separate memory-safety flaws. Preserve configuration and queue state, update the mail transport, and test proxy, TLS and delivery paths; ordinary message delivery alone does not validate every boundary.
Red Hat Unbound Updates Expand Across RHEL 7 and 8
Red Hat Unbound updates address DNSKEY-processing risks across RHEL 7 and 8 support streams, with different CVE coverage. Match each entitled package, preserve DNS continuity during restart, and test signed and unsigned lookups.
Debian Updates Ruby Oj for Eleven Parser Vulnerabilities
Debian 13's Oj update addresses denial of service and memory disclosure in JSON parsing. Check whether each Ruby application loads Debian's package or a bundled gem, update the appropriate copy, and restart affected workers.
Debian Updates Lemonldap::NG for Three Access-Control Flaws
Debian 13 Lemonldap::NG updates address access-control, PKCE authorization and disclosure flaws. Update the supported trixie package, coordinate dependent SSO applications, and retain an administrative recovery route; the three issues have different prerequisites.
Ubuntu Updates AWS FIPS Kernels for Multiple Vulnerabilities
Ubuntu 24.04 AWS FIPS kernel updates require a reboot and ABI/module checks. Keep the supported FIPS flavor and repository, and verify compliance requirements separately from whether the package transaction succeeds.
Ubuntu Updates AWS and GCP Kernels for Three Vulnerabilities
Ubuntu 18.04 and 16.04 ESM cloud-kernel updates require exact AWS, GCP or GCP FIPS package matching. Stage the appropriate update, check external modules and recovery access, then reboot without substituting another kernel flavor.
Ubuntu Updates IBM Kernels for Multiple Vulnerabilities
Ubuntu 20.04 ESM IBM 5.15 kernel updates address twenty CVEs. Install the IBM-specific packages, reboot and verify modules and workloads; similarly numbered packages from another kernel flavor are not interchangeable.
Ubuntu Fixes Intel IoTG Kernel Vulnerability
Ubuntu 20.04 ESM Intel IoTG 5.15 kernels require stream-specific security packages and a reboot. Confirm repository access, device-driver compatibility and recovery arrangements; an updated package does not prove the machine boots the corrected kernel.
Ubuntu Fixes libpcap Instruction Validation Flaw
Ubuntu libpcap updates fix instruction validation that can crash applications processing crafted data. Update release-matched libraries, including embedded and container copies, then restart affected consumers as needed and check older-release ESM access.