Linux & Operating Systems
Red Hat Quay 3.16.6 Addresses 42 Vulnerabilities
Quay 3.16.6 includes repository-mirror request validation and robot-token access fixes alongside dependency updates. Review the enabled features and global read-only superuser permissions, then update the supported 3.16 deployment and validate its workflows.
Red Hat Developer Hub 1.9.9 Addresses 30 Vulnerabilities
Developer Hub 1.9.9 addresses thirty CVEs across bundled dependencies, not one portal exploit. Match the supported 1.9 deployment to the advisory and verify the running release after updating, not merely a changed local image tag.
Red Hat OpenSSH Updates Protect RHEL 8 and 10
RHEL OpenSSH updates address different sets of SFTP, tunnel, client and agent flaws. Match the system's branch and components, preserve recovery access, and validate remote workflows; an installed SSH server alone does not establish every exposure.
Red Hat GStreamer Updates Expand Across RHEL 8
Red Hat expanded supported GStreamer Good Plugins security coverage. Match entitled branches, apply fixed packages, validate services, and retain evidence.
Red Hat Perl DBI Update Fixes RHEL 8 SQL Handling Flaw
Crafted numeric placeholders in untrusted statements can corrupt memory in Perl DBI preprocessing. Match the RHEL 8 module context, apply the supported package update, and validate the database operations that depend on it.
Red Hat Updates Unbound Resolver on RHEL 8
Reduced UDP source-port unpredictability in RHEL 8 Unbound can enable DNS cache poisoning. Update the affected resolver package and validate name resolution and configured security controls for applications that depend on it.
Red Hat Updates APR-util on RHEL 8 for Four Vulnerabilities
RHEL 8 APR-util fixes cover password-validation timing, XML recursion and malformed Redis or memcached responses. Identify which functions applications use, install the supported package, and validate those dependent workflows.
Red Hat Rust Updates Fix Git Repository Handling on RHEL 9
A malicious Git server can crash affected libgit2 clients in the RHEL 9 Rust toolchain. Match the RHEL 9.4 SAP E4S or 9.6 EUS package and validate the dependent repository workflow after updating.
Red Hat Fixes Two libvirt Flaws on RHEL 7 ELS
Red Hat fixes two High libvirt flaws on RHEL 7 ELS. Confirm entitlement and package NVR, update, validate virtualization workflows, and retain evidence.
Red Hat ABRT Fixes Expand to RHEL 7 ELS
ABRT updates address symlink-based file overwrites across specified RHEL 7 and 8 support streams; only the RHEL 8 notices also cover journal injection. Match the advisory, preserve crash evidence, and validate reporting after updating.