Red Hat
Red Hat libsoup Updates Expand Across RHEL 8
Two libsoup WebSocket flaws can deny service on the listed RHEL 8 support streams. Apply the matching library package and ensure long-running HTTP and WebSocket applications load it; package inventory alone does not establish activation.
Red Hat GStreamer Base Updates Fix RHEL 7 and 8 Flaws
Crafted OGG media can overflow GStreamer Base Plugins and execute code in the consuming application. Match RHEL 7 ELS or the listed RHEL 8.6 support stream, update plugins, and restart affected media processes as appropriate.
Red Hat OpenShift 4.20–4.22 Updates Address Multiple Flaws
OpenShift updates span separate cluster releases, images, RPMs and CNF IBU content. Record channel, architecture and installed extras, follow the supported update path, and verify each component; a minor-version label alone is not a fixed release.
Red Hat Redis Updates Fix Two RHEL 9 Flaws
Redis 6.2 fixes for RHEL 9.2 and 9.4 SAP-support streams address code-execution flaws. Match the full RPM and repository, then plan replication and persistence during rollout; separate Redis 7 module builds are not interchangeable.
Red Hat mod_auth_openidc Updates Protect Extended-Support RHEL
Malformed state cookies can deny service in Apache mod_auth_openidc without authentication. Match the RHEL module stream and full package release, apply its update, and validate the identity-provider flow; module names and software versions differ.
Red Hat OpenEXR Update Fixes an RHEL 10 Memory Flaw
A crafted EXR file can trigger a heap out-of-bounds write in OpenEXR's exrmultiview. Identify RHEL 10 image-processing pipelines, update the matching package family, and restrict untrusted inputs while the change is pending.
Red Hat libarchive Update Fixes Two RHEL 10 Flaws
RHEL 10 libarchive fixes address separate tar PAX reading and ZIP-header writing paths. Apply the matching repository update, then check both archive-consuming and archive-creating tools that depend on the library.
Red Hat PostgreSQL 15 Update Addresses Nine RHEL 9 Flaws
The RHEL 9.6 EUS PostgreSQL update stays within the postgresql:15 module. Match the complete package set and plan around extensions, replication and recovery; this advisory does not require migration to another database major version.
Red Hat libxml2 Update Fixes an RHEL 8 Parsing Flaw
Crafted XML can trigger use-after-free and deny service in RHEL 8 libxml2 consumers. Apply the matching Red Hat package and ensure processes load it; an older upstream version does not imply the backport is missing.
Red Hat rsyslog Updates Fix an RHEL Denial of Service
A heap overflow in RainerScript replace() can disrupt rsyslog on affected RHEL streams. Preserve queued logs and configuration, update the branch-specific packages, and verify collection and forwarding under a logging-continuity plan.