Red Hat Security Advisory: linux-firmware security update

This Red Hat security advisory addresses issues with the linux-firmware package related to microcode updates for mitigating the Spectre CPU vulnerability (CVE-2017-5715). Red Hat found problems with the initially provided microcode update that could cause system instability and has reverted to a previously stable microcode version dated before January 3, 2018. Customers using Intel Skylake, Broadwell, and Haswell platforms are strongly advised to obtain updated microcode directly from their hardware vendors to ensure proper Spectre mitigation alongside updated Red Hat kernels.

• access.redhat.com/errata/RHSA-2018:0094 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
• access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0094.json (opens in a new tab)

• Red Hat Security Advisory: webkit2gtk3 security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: opentelemetry-collector security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: libxslt security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: expat security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: grafana security update from RHELLowVulnerability2025-10-21