Linux & Operating Systems
Ubuntu USN-8729-3 Fixes Linux kernel Vulnerabilities
This update covers Ubuntu 22.04 GCP and Ubuntu 24.04 IBM and Xilinx kernel packages with separate fixed builds. Match release and flavor, prepare third-party modules, and complete the required reboot before closing the change.
Ubuntu USN-8761-3 Fixes Linux kernel (Azure) Vulnerabilities
Ubuntu 22.04 hosts using the Azure 6.8 kernel need the matching kernel update and a reboot. Record installed and running versions, prepare third-party module compatibility and recovery access, then verify the active kernel.
Ubuntu USN-8730-4 Fixes Linux kernel Vulnerability
This Ubuntu 22.04 kernel update requires a flavor-specific package, reboot and rebuilding third-party modules for the changed ABI. Record the running kernel, prepare recovery access and modules, then schedule the supported update.
Ubuntu USN-8792-1 Fixes Memcached Vulnerability
Incorrect ASCII-authentication handling can let a remote attacker crash Memcached. Match each instance to its Ubuntu release, apply the supported package update, and verify cache availability for the applications that depend on it.
Ubuntu USN-8791-1 Fixes Ghostscript Vulnerability
Documents containing crafted JPEG 2000 components can crash Ghostscript or permit code execution. Apply the package for the host's Ubuntu release and validate approved rendering or conversion jobs that process external documents.
Ubuntu USN-8787-1 Fixes libxml2 Vulnerabilities
Ubuntu libxml2 fixes cover XML-element processing and separate crashes through Python bindings. Inventory actual library and binding consumers, update the matching release packages, and verify the libraries active applications use.
Ubuntu USN-8786-1 Fixes rsyslog Vulnerability
Crafted network traffic can crash rsyslog during string replacement. Update collectors and forwarding hosts with the package for their Ubuntu release, coordinate the required restart, and confirm that log delivery resumes.
Red Hat libkcapi Update Addresses Three RHEL 10 Flaws
RHEL 10.0 EUS libkcapi fixes address repeated cipher initialization vectors and asynchronous error-handling failures. Match the installed package to Red Hat's update and validate the cryptographic workflows that use those operations.
Red Hat Corosync Update Protects RHEL 8.8 Clusters
A network-adjacent attacker can corrupt Corosync heap memory during fragmented multicast reassembly and disrupt cluster availability. Match the RHEL 8.8 SAP E4S or TUS package and validate cluster operation after the supported update.
Red Hat Fixes a Second libtiff Flaw on RHEL 8
Crafted PixarLog-compressed TIFFs can cause crashes or code execution in the affected libtiff decoding path. Match the RHEL 8.4 AUS or EUS Extension package, update, and validate the image-processing workflow.