p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de la pila Sistemas operativos · Página 107

Vulnerabilidades publicadas para Sistemas operativos en los últimos 30 días: 6452. Incluidas en el catálogo KEV: 4.

Filtrar vulnerabilidades
Sistemas operativos

Vulnerabilidades: 160465

  1. ALSA-2026:87375

    Sin evaluarCorrección disponible

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) * kernel: inet: frags: strip GSO state from fragments before reassembly (CVE-2026-80590) * kernel: vfio/pci:

    • Actualiza a 4.18.0-553.177.1.el8_10
    Publicación Actualización
  2. ALSA-2026:87374

    Sin evaluarCorrección disponible

    Important: kernel-rt security update

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) * kernel: inet: frags: strip GSO state from fragments

    • Actualiza a 4.18.0-553.177.1.rt7.518.el8_10
    Publicación Actualización
  3. ALSA-2026:87151

    Sin evaluarCorrección disponible

    Important: php security update

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Actualiza a 8.0.30-8.el9_8.1
    Publicación Actualización
  4. ALSA-2026:87082

    Sin evaluarCorrección disponible

    Important: qt5-qtbase security update

    Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573) * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Actualiza a 5.15.9-11.el9_8.2
    Publicación Actualización
  5. ALSA-2026:87080

    Sin evaluarCorrección disponible

    Important: php:7.4 security update

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Out-of-bounds read via empty HTTP redirect Location header (CVE-2026-93682) * php: PHP: Archive entry injection via integer overflow in TAR parser (CVE-2026-6103) * php: PHP: Denial of Service via heap buffer overflow in SOAP client (CVE-2025-14181) * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: php: Credential disclosure via cross-origin HTTP redirects (CVE-2026-91766) * php: php: Information disclosure via crafted TLS server certificate (CVE-2026-91767) * php: p

    • Actualiza a 1.6.1-1.module_el8.10.0+3935+28808425
    • Actualiza a 1.6.1-1.module_el8.6.0+2750+78feabcb
    • Actualiza a 1.6.1-1.module_el8.6.0+3239+bedf0508
    • Actualiza a 5.1.18-1.module_el8.6.0+2750+78feabcb
    • Actualiza a 7.4.33-8.module_el8.10.0+4321+cf5fd4bb
    Publicación Actualización
  6. ALSA-2026:87079

    Sin evaluarCorrección disponible

    Important: php:8.3 security update

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Actualiza a 5.1.23-1.module_el9.6.0+151+5f31e576
    • Actualiza a 8.3.36-1.module_el9.8.0+330+fdc30075
    Publicación Actualización
  7. ALSA-2026:87073

    Sin evaluarCorrección disponible

    Important: php:8.2 security update

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Actualiza a 1.7.3-1.module_el8.10.0+3796+30ed3ef7
    • Actualiza a 5.1.23-1.module_el8.10.0+3796+30ed3ef7
    • Actualiza a 8.2.35-1.module_el8.10.0+4323+fc907035
    Publicación Actualización
  8. ALSA-2026:87072

    Sin evaluarCorrección disponible

    Important: php:8.2 security update

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Actualiza a 1.22.3-1.module_el9.4.0+65+49ff6472
    • Actualiza a 2.0.3-4.module_el9.4.0+65+49ff6472
    • Actualiza a 3.2.2-2.module_el9.4.0+65+49ff6472
    • Actualiza a 5.1.23-1.module_el9.4.0+65+49ff6472
    Publicación Actualización
  9. ALSA-2026:87071

    Sin evaluarCorrección disponible

    Important: php8.4 security update

    PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale reque

    • Actualiza a 8.4.27-1.el10_2
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →