Linux & Operating Systems
Red Hat rhc-worker-playbook Update Fixes Five RHEL 10 Flaws
The RHEL 10.0 EUS rhc-worker-playbook update affects the yggdrasil worker that executes Ansible playbooks locally. Match the repository and coordinate the package change with management owners and pending jobs.
Ubuntu USN-8760-2 Fixes Linux kernel (NVIDIA) Vulnerabilities
Ubuntu's NVIDIA kernel update is distinct from NVIDIA BaseOS and includes two known-exploited CVEs. Match flavor and page-size variant, prepare driver and ABI checks, and complete the reboot with recovery access available.
Ubuntu USN-8801-1 Fixes Linux kernel (Azure CVM) Vulnerabilities
Ubuntu Azure CVM kernel fixes include one known-exploited CVE, not a blanket exploitation finding for all five issues. Match the Ubuntu release and Azure FDE image, prepare recovery access, and reboot while assessing applicable triage requirements.
Red Hat OpenShift Virtualization Updates Address Four Flaws
OpenShift Virtualization fixes replace specific console-plugin and kubemacpool images. Match stream, architecture and image digests, apply prerequisite errata, and verify component rollout; the Virtualization stream label alone does not prove the fixed artifacts are running.
Ubuntu USN-8800-1 Fixes Linux kernel (NVIDIA BaseOS) Vulnerabilities
The Ubuntu NVIDIA BaseOS kernel update includes two CVEs with known-exploitation entries. Match the kernel flavor, architecture and page-size variant, schedule the required reboot, and assess applicable triage requirements alongside the software update.
Red Hat PostgreSQL Updates Expand Across RHEL 8, 9, and 10
PostgreSQL 15 and 16 fixes span separate RHEL package streams. Stay on the supported installed major and module, match the full RPM, and prepare backup and replica recovery rather than treating upstream versions as interchangeable.
Red Hat AI Base Images 3.4.2 Address Eight Flaws
Red Hat AI Base Images fixes span CPU and accelerator variants. Match architecture, accelerator stack and base digest, then rebuild and redeploy derived workload images; selecting a new base does not replace existing running images.
Red Hat OpenShift Builds Updates Address Ten Flaws
OpenShift Builds maintenance updates apply to the installed Builds stream, not the cluster version alone. Record operator and runtime images and build strategies, apply the matching update, and confirm rollout before validation jobs.
Red Hat Source-to-Image 1.6.4 Addresses Seven Flaws
Source-to-Image 1.6.4 updates build tooling for seven dependency vulnerabilities. Verify that build jobs use the new binaries or images; application images produced before the tooling update are separate artifacts and are not retroactively changed.
Red Hat Kernel Updates Protect Extended-Support RHEL Streams
Extended-support RHEL kernel fixes require the matching package set and a reboot to take effect. Record installed and running versions, repository and architecture, then coordinate workload failover and recovery access before maintenance.