Red Hat’s Critical advisory covers 32 CVEs and publishes new digests for the Developer Hub application, operator and operator bundle.

The public benchmark tests whether coding-agent and model combinations can move applications among Jakarta EE, Quarkus and Spring without losing working behavior.

Six days remain as of October 24 before the hosted deployment retires; Red Hat points organizations needing an on-premises option to Satellite documentation.

The validated architecture joins IBM’s sovereignty control plane and integrated infrastructure on Red Hat OpenShift, targeting regulated enterprises and service providers.

Clusters moving from a 4.21 multi-architecture payload should verify the payload type and avoid the affected 4.22.15–4.22.17 targets; the Machine Config Operator fix is present from 4.22.18 onward.

The partners say they will validate new MiniMax serving paths before weights arrive, then feed production lessons back into upstream vLLM.

The validation gives platform teams a common Kubernetes control plane for GPU-backed virtual machines and containerized AI workloads, but Red Hat still advises workload-specific testing.

The messaging specialist can now participate in multi-agent workflows while running against managed Red Hat AI Inference or self-managed OpenShift AI, RHEL AI and vLLM.

The Singapore centre will pair reusable architectures and upstream contributions with a government co-engineering project spanning AI, cloud-native systems and day-two operations.

The expanded Red Hat AI Factory architecture combines OpenShell runtime isolation, governed model access and Day 0 NVIDIA hardware enablement, but native OpenShell integration is still being built.

Red Hat limits its hardware-enablement delta to the kernel, QEMU and libvirt, with a planned transition back to mainline RHEL once the patches mature upstream.

The launch reaches beyond one serving engine, tying vLLM and llm-d inference to Hugging Face, TorchTitan, VeRL and Ray on the same open TPU foundation.

The new 26-billion-parameter checkpoint reads shared context once, answers multiple typed questions and adds object localization and tracking to the Decision 3.0 family.

The arrangement changes both the operating-system delivery path and how customers can procure Red Hat’s platform portfolio with Oracle cloud credits.

Red Hat has published updated images, but the linked 3.4 release notes still describe 3.4.4 and the advisory says upgrade documentation will be refreshed shortly.

An open pull request reports as much as 1.92× faster non-speculative decode on GB300 while narrowing where agent-assisted kernel code can run.

CVE-2026-99999 is rated Important by Red Hat, but the vendor’s active-exploit designation and lack of a listed fix make it an immediate OpenShift watch item.

The implementation supports tool calling and structured output, while vLLM reports a 2.71× batch-one decode speedup from seven model-specific changes.

Connectivity Link 1.5 adds tenant isolation, protocol negotiation, progressive tool discovery, audit telemetry and NeMo guardrails for agent tool traffic.

A merged model-integration patch and six new recipes put typed multimodal decisions behind vLLM’s System One API, although users need a nightly build for now.

An online-fitted estimator lets more speculative-decoding setups trim low-value draft tokens without retraining existing checkpoints.

The Kubernetes deployment adds API-key authentication, subscription-aware access and token quotas in front of vLLM and KServe model endpoints.

Ferrocene 26.05 supports a qualified RHIVOS 2 target now, with the full joint solution planned for the second half of 2027.

The first Quarkus 4 beta raises the Java baseline, refreshes the networking and persistence stack, and asks extension maintainers to move before a planned late-November final release.

A new OpenAI-compatible embeddings endpoint lets teams generate vectors, discover compatible models and keep retrieval and chat behind one managed project boundary.

Red Hat’s lifecycle record puts the 3.3 release past its full-support end date; customers should verify a supported channel and upgrade path rather than infer an undocumented next phase.

Apache Camel’s latest benchmark round adds discovery and validation support for Kamelets, lifting a local model’s pass rate from one task in 15 to 47 in 50.

A single Podman image packages offline recommendations, drift checks and must-gather analysis for restricted environments.

The Satellite-integrated service keeps system data local while combining fleet risk views, CVE prioritization and remediation paths.

CVE-2026-105192 has no published fix; operators using LMCache’s multiprocess mode should keep its ZeroMQ port off routable networks.

Operators should update current vLLM and Starlette deployments after an audit linked vLLM’s most severe finding to a vulnerability now listed as exploited in the wild.

Red Hat has packaged multicluster management, security, registry and storage tools as consumption-based marketplace offers for its managed OpenShift services.

IBM and Red Hat are opening a request-driven path for enterprises to obtain reviewed, backported fixes for older open source dependencies.

A distributed AxyomCore deployment pairs a central core in Fornebu with an autonomous edge core in Svalbard, using OpenShift as the common platform layer.

The October lifecycle transition narrows the kinds of fixes Red Hat will accept and gives platform teams a dated migration boundary.

The customer-managed release can keep code and inference inside approved environments, but buyers must supply the OpenShift capacity and a supported model.

The Technology Preview adds declarative sandbox lifecycles, warm pools and optional VM-level isolation, but keeps production support off the table.

Red Hat plans to make RHCOS 10 the default for new OpenShift installations in Q4, requiring early checks for privileged containers, UBI7 workloads and older x86 hardware.

The policy gives each GA build eight months of full support, four months of maintenance, and a version date that operators can use to calculate end of life.

The company says it will contribute Linux, Kubernetes, security and distributed-systems expertise while testing the project against its own internal agent deployments.

The storage vendor says OpenShift Virtualization customers can now use synchronous or asynchronous replication, failover and S3 backups without a separate DR product.

OpenShell and DOCA are coming to Red Hat AI Factory, while NVIDIA’s BlueField-based Sentry design adds an independent enforcement plane for agent workloads.

The extension accepts the July 2026 stateless protocol and legacy session-based clients on one endpoint, giving platform teams a staged migration path.

The enterprise installation runs as a tenant workload on customer-managed OpenShift clusters, with customers supplying the model endpoints and operational controls.

SCAP Security Guide 0.1.82 aligns the RHEL 10 profile with the official benchmark and makes it usable across OpenSCAP, Satellite and Red Hat Lightspeed.

The new Gumbel-max implementation embeds a detectable provenance signal during generation while preserving sampling behavior and speculative-decoding performance.

The certification opens the managed OpenShift service to higher-sensitivity CUI and unclassified national-security workloads in Microsoft Azure Government.

The integration targets teams moving virtual machines onto OpenShift Virtualization without creating a separate storage and operations silo.

The designation brings regular testing and bug-fix priority to RHEL, giving robotics teams a supported enterprise Linux target for ROS 2 development and deployment.

The open-source Lola module runs in Claude Code, Cursor and Gemini CLI, tying proposed attack scenarios to files and lines while keeping human review in the loop.