Red Hat Security Advisory
Red Hat osbuild-composer Update Addresses Five RHEL 9 Flaws
The RHEL 9 osbuild-composer update includes server, core and worker packages. Keep them on the supported package set, schedule around queued image builds, and check the service and dependent build clients afterward.
Red Hat Firefox 140.16 Updates RHEL 9 and 10
The RHEL Firefox ESR update covers twenty-eight CVEs across supported RHEL 9 and 10 streams. Keep package suffixes distinct, include installed firefox-x11 components where applicable, and reopen browsers to validate the updated process.
Red Hat Redis Updates Address Four RHEL Vulnerabilities
Red Hat Redis fixes vary by RHEL minor release and module stream. Record the support repository and complete package build, then coordinate restart or cluster rollout; an abbreviated upstream Redis version does not establish patch status.
Red Hat GStreamer Base Update Fixes an RHEL 8 Media Flaw
Malicious OGG parsing can overflow the stack in affected GStreamer Base Plugins and execute code in the consuming application. Match the RHEL 8.4 support stream, update packages and dependent images, and validate approved media workflows.
Red Hat libsoup Update Fixes Two RHEL 9 Network Flaws
An unauthenticated WebSocket peer can exhaust memory or crash affected libsoup consumers on RHEL 9.2 SAP E4S. Identify application connections and compression use, update the supported package, and validate those WebSocket paths.
Red Hat libkcapi Update Addresses Three RHEL 10 Flaws
RHEL 10.0 EUS libkcapi fixes address repeated cipher initialization vectors and asynchronous error-handling failures. Match the installed package to Red Hat's update and validate the cryptographic workflows that use those operations.
Red Hat Corosync Update Protects RHEL 8.8 Clusters
A network-adjacent attacker can corrupt Corosync heap memory during fragmented multicast reassembly and disrupt cluster availability. Match the RHEL 8.8 SAP E4S or TUS package and validate cluster operation after the supported update.
Red Hat Fixes a Second libtiff Flaw on RHEL 8
Crafted PixarLog-compressed TIFFs can cause crashes or code execution in the affected libtiff decoding path. Match the RHEL 8.4 AUS or EUS Extension package, update, and validate the image-processing workflow.
Red Hat Quay 3.16.6 Addresses 42 Vulnerabilities
Quay 3.16.6 includes repository-mirror request validation and robot-token access fixes alongside dependency updates. Review the enabled features and global read-only superuser permissions, then update the supported 3.16 deployment and validate its workflows.
Red Hat Developer Hub 1.9.9 Addresses 30 Vulnerabilities
Developer Hub 1.9.9 addresses thirty CVEs across bundled dependencies, not one portal exploit. Match the supported 1.9 deployment to the advisory and verify the running release after updating, not merely a changed local image tag.