Red Hat Security Advisory

Security Notices
Red Hat Podman Update Addresses Eleven RHEL 10 Flaws

RHEL 10.2 Podman updates address archive-link file writes, incomplete Quadlet replacement and bundled Go flaws. Update the supported RPM, inspect effective unit settings, and assess which input paths the deployment exposes.

Read this guide
Security Notices
Red Hat JBoss EAP 8.1.8 Addresses 36 Vulnerabilities

JBoss EAP 8.1.8 addresses thirty-six CVEs across listed RHEL platforms. Back up applications, configuration and database settings, apply prerequisite errata, and use the supported EAP package set rather than replacing individual JARs.

Read this guide
Security Notices
Red Hat coreutils Update Fixes an RHEL 8 sort Buffer Under-Read

A heap buffer under-read in coreutils sort key handling has limited confidentiality and availability impact. Apply the supported RHEL 8 package update and validate scripts that depend on sort output rather than assuming every utility is affected.

Read this guide
Security Notices
Red Hat rhc-worker-playbook Update Fixes Five RHEL 10 Flaws

The RHEL 10.0 EUS rhc-worker-playbook update affects the yggdrasil worker that executes Ansible playbooks locally. Match the repository and coordinate the package change with management owners and pending jobs.

Read this guide
Security Notices
Red Hat OpenShift Virtualization Updates Address Four Flaws

OpenShift Virtualization fixes replace specific console-plugin and kubemacpool images. Match stream, architecture and image digests, apply prerequisite errata, and verify component rollout; the Virtualization stream label alone does not prove the fixed artifacts are running.

Read this guide
Security Notices
Red Hat PostgreSQL Updates Expand Across RHEL 8, 9, and 10

PostgreSQL 15 and 16 fixes span separate RHEL package streams. Stay on the supported installed major and module, match the full RPM, and prepare backup and replica recovery rather than treating upstream versions as interchangeable.

Read this guide
Security Notices
Red Hat AI Base Images 3.4.2 Address Eight Flaws

Red Hat AI Base Images fixes span CPU and accelerator variants. Match architecture, accelerator stack and base digest, then rebuild and redeploy derived workload images; selecting a new base does not replace existing running images.

Read this guide
Security Notices
Red Hat OpenShift Builds Updates Address Ten Flaws

OpenShift Builds maintenance updates apply to the installed Builds stream, not the cluster version alone. Record operator and runtime images and build strategies, apply the matching update, and confirm rollout before validation jobs.

Read this guide
Security Notices
Red Hat Source-to-Image 1.6.4 Addresses Seven Flaws

Source-to-Image 1.6.4 updates build tooling for seven dependency vulnerabilities. Verify that build jobs use the new binaries or images; application images produced before the tooling update are separate artifacts and are not retroactively changed.

Read this guide
Security Notices
Red Hat Kernel Updates Protect Extended-Support RHEL Streams

Extended-support RHEL kernel fixes require the matching package set and a reboot to take effect. Record installed and running versions, repository and architecture, then coordinate workload failover and recovery access before maintenance.

Read this guide