Red Hat
Red Hat AI Base Images 3.5.2 Updates the Gaudi Variant
Red Hat's AI Base Images 3.5.2 Gaudi update is distinct from the 3.4.3 advisory despite a shared repository name. Match the OpenShift AI stream and digest, then validate accelerator compatibility before rebuilding and redeploying workloads.
Red Hat AI Base Images 3.4.3 Fix Vulnerabilities Across Nine Variants
Red Hat AI Base Images 3.4.3 updates nine CPU and accelerator variants with differing component scope. Select the correct stream, architecture and digest, rebuild derived images, and redeploy workloads; changing a tag does not replace running containers.
Red Hat Updates cjose for CVE-2026-53938 Across RHEL 9 SAP Solutions Branches
RHEL 9 SAP Solutions cjose updates fix memory corruption during AES Key Wrap decryption of crafted JWEs. Update the actual consumer's runtime package; any interim algorithm rejection must occur before decryption and preserve legitimate authentication needs.
Red Hat Updates FreeRDP for CVE-2026-55193 Across RHEL 8.4 and 8.6 Extended Branches
FreeRDP clients on specified RHEL 8.4 and 8.6 extended branches can crash or execute code when processing malicious TS Gateway responses. Update release-matched runtime RPMs and loaded libraries without mixing branch builds.
Red Hat RRDtool Updates Fix RHEL 9 Memory-Safety Flaw
RRDtool's cache daemon can crash or execute code when a local attacker with socket access supplies an oversized CREATE request. Apply the entitled RHEL branch update, restart rrdcached, and verify dependent monitoring clients.
Red Hat Tesseract Update Fixes RHEL 9 Parsing Flaw
Red Hat's Tesseract update fixes a buffer-overflow risk in crafted trained-data model components. Update affected OCR workers and verify model provenance; the advisory does not establish that every ordinary scanned image triggers the flaw.
Red Hat Libreswan Update Fixes Four RHEL 8 Network Flaws
RHEL 8.8 Libreswan updates address denial of service and conditional RSA authentication risks. Match IKE mode, certificates and policy to the advisories, then update with a management path independent of the VPN tunnel.
Red Hat Updates Git LFS for Twelve RHEL 9 Vulnerabilities
RHEL 9.4 Update Services for SAP Solutions updates Git LFS and bundled dependencies. Inventory developer hosts and build runners, update the entitled package, and check separate binaries; replacing a Go compiler does not rebuild Git LFS.
Red Hat OpenShift 4.15.69 Addresses Seventeen Vulnerabilities
OpenShift 4.15.69 includes seventeen component fixes. Use the architecture-specific release image and supported cluster path, checking operators, capacity and disruption budgets; selecting an old release number is not an established rollback procedure.
Red Hat Unbound Updates Expand Across RHEL 7 and 8
Red Hat Unbound updates address DNSKEY-processing risks across RHEL 7 and 8 support streams, with different CVE coverage. Match each entitled package, preserve DNS continuity during restart, and test signed and unsigned lookups.