Linux & Operating Systems
Ubuntu USN-8798-1 Fixes GStreamer Good Plugins Vulnerabilities
Crafted MRF or PNG content and RTP packets can trigger memory errors in GStreamer Good Plugins, causing crashes or possible code execution. Inventory consuming media and streaming applications, then apply the Ubuntu release-specific update.
Red Hat osbuild-composer Update Addresses Five RHEL 9 Flaws
The RHEL 9 osbuild-composer update includes server, core and worker packages. Keep them on the supported package set, schedule around queued image builds, and check the service and dependent build clients afterward.
Red Hat Firefox 140.16 Updates RHEL 9 and 10
The RHEL Firefox ESR update covers twenty-eight CVEs across supported RHEL 9 and 10 streams. Keep package suffixes distinct, include installed firefox-x11 components where applicable, and reopen browsers to validate the updated process.
Ubuntu USN-8797-1 Fixes GStreamer Base Plugins Vulnerability
A crafted OGG file can crash applications using GStreamer Base Plugins or execute code with the application user's privileges. Match the Ubuntu release and installed binaries, then apply the supported release-specific package update.
Red Hat Redis Updates Address Four RHEL Vulnerabilities
Red Hat Redis fixes vary by RHEL minor release and module stream. Record the support repository and complete package build, then coordinate restart or cluster rollout; an abbreviated upstream Redis version does not establish patch status.
Red Hat GStreamer Base Update Fixes an RHEL 8 Media Flaw
Malicious OGG parsing can overflow the stack in affected GStreamer Base Plugins and execute code in the consuming application. Match the RHEL 8.4 support stream, update packages and dependent images, and validate approved media workflows.
Red Hat libsoup Update Fixes Two RHEL 9 Network Flaws
An unauthenticated WebSocket peer can exhaust memory or crash affected libsoup consumers on RHEL 9.2 SAP E4S. Identify application connections and compression use, update the supported package, and validate those WebSocket paths.
Ubuntu USN-8793-1 Fixes Linux kernel (Azure CVM) Vulnerabilities
Ubuntu 24.04 Azure CVM hosts using linux-azure-fde need the corresponding kernel fixes, not another Azure flavor's package. Prepare compatible modules and recovery access, then verify the running kernel after the required reboot.
Ubuntu USN-8668-2 Fixes Linux kernel (Raspberry Pi) Vulnerabilities
Ubuntu 22.04 Raspberry Pi systems need the linux-raspi update matched to their package, not hardware branding alone. Arrange remote recovery access, check third-party modules, and coordinate the required reboot with the device owner.
Ubuntu USN-8726-3 Fixes Linux kernel (IBM) Vulnerabilities
The Ubuntu 26.04 IBM kernel update is distinct from the Ubuntu 24.04 IBM package. Match the running linux-ibm release, check module compatibility and recovery access, and schedule the required reboot with workload owners.