Red Hat
Red Hat OpenSSH Updates Protect RHEL 8 and 10
RHEL OpenSSH updates address different sets of SFTP, tunnel, client and agent flaws. Match the system's branch and components, preserve recovery access, and validate remote workflows; an installed SSH server alone does not establish every exposure.
Red Hat GStreamer Updates Expand Across RHEL 8
Red Hat expanded supported GStreamer Good Plugins security coverage. Match entitled branches, apply fixed packages, validate services, and retain evidence.
Red Hat Perl DBI Update Fixes RHEL 8 SQL Handling Flaw
Crafted numeric placeholders in untrusted statements can corrupt memory in Perl DBI preprocessing. Match the RHEL 8 module context, apply the supported package update, and validate the database operations that depend on it.
Red Hat Updates Unbound Resolver on RHEL 8
Reduced UDP source-port unpredictability in RHEL 8 Unbound can enable DNS cache poisoning. Update the affected resolver package and validate name resolution and configured security controls for applications that depend on it.
Red Hat Updates APR-util on RHEL 8 for Four Vulnerabilities
RHEL 8 APR-util fixes cover password-validation timing, XML recursion and malformed Redis or memcached responses. Identify which functions applications use, install the supported package, and validate those dependent workflows.
Red Hat Rust Updates Fix Git Repository Handling on RHEL 9
A malicious Git server can crash affected libgit2 clients in the RHEL 9 Rust toolchain. Match the RHEL 9.4 SAP E4S or 9.6 EUS package and validate the dependent repository workflow after updating.
Red Hat Fixes Two libvirt Flaws on RHEL 7 ELS
Red Hat fixes two High libvirt flaws on RHEL 7 ELS. Confirm entitlement and package NVR, update, validate virtualization workflows, and retain evidence.
Red Hat ABRT Fixes Expand to RHEL 7 ELS
ABRT updates address symlink-based file overwrites across specified RHEL 7 and 8 support streams; only the RHEL 8 notices also cover journal injection. Match the advisory, preserve crash evidence, and validate reporting after updating.
Red Hat libtiff Update Blocks Crafted-TIFF Code Execution on RHEL 8
Red Hat fixes a crafted-TIFF code-execution flaw in RHEL 8 libtiff. Find tiffcrop and untrusted-image paths, update, validate, and retain evidence.
Red Hat Fixes sg3_utils udev Injection in RHEL 10.0 EUS
A crafted physical SCSI or USB device can influence a udev removal command through sg3_utils property injection. Restrict untrusted devices, apply the RHEL 10.0 EUS update, and validate normal discovery and removal.