p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 101

Vulnerabilities published for Operating systems in the last 30 days: 6432. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 160404

  1. CVE-2026-50106

    Medium · CVSS 6.5EPSS 0.21%Fix available

    Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.

    When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor who can deliver one forged NXDOMAIN response for a name inside the island, with the NSEC/SOA RRSIG 'SignerName' set to the insecure parent, tricks Unbound's validator to use the root trust anchor instead, and consecutively the insecure parent, thus causing that record to be treated as insecure and denying existence for records in the trust island.

    unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unboundOperating systems
    • Update to 1.26.2
    • Update to 1.26.2-0+deb13u1
    • Update to 1.26.2-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2026-35501

    Low · CVSS 3.7EPSS 0.11%Fix available

    Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.

    When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor with a forged NSEC reply with the SOA bit cleared can trick Unbound to treat the configured trust island as insecure. This happens because the DNSSEC validator in Unbound accepts and caches the NSEC insecure response bypassing the RRSIG validation that the validator was supposed to do. The acceptance of the NSEC record at the trust anchor apex was allowed due to and old fix for type DS and NSEC quer

    unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unboundOperating systems
    • Update to 1.26.2
    • Update to 1.26.2-0+deb13u1
    • Update to 1.26.2-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  3. SUSE-SU-2026:24368-1

    Not ratedFix available

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). - CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaus

    libsoupOperating systems
    • Update to 3.4.2-159998.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-109125

    Medium · CVSS 5.3EPSS 0.17%Fix available

    Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'

    In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but its TXID does not match any pending query, Unbound counts the packet as an unwanted reply. When the accumulated count reaches the configured threshold, Unbound clears the worker's RRset cache and message cache. This cache clear action does not destroy the current upstream UDP pending query. Therefore, an external observer can distinguish whether a

    unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unboundOperating systems
    • Update to 1.26.2
    • Update to 1.26.2-0+deb13u1
    • Update to 1.26.2-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  5. SUSE-SU-2026:4811-1

    Not ratedFix available

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).

    openssh openssh openssh openssh openssh-askpass-gnome openssh openssh-askpass-gnome openssh openssh-askpass-gnome openssh openssh-askpass-gnome opensshOperating systems Network services
    • Update to 8.4p1-150300.3.68.1
    • Update to 8.4p1-150300.3.68.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. SUSE-SU-2026:24267-1

    Not ratedFix available

    Security update for python-soupsieve

    This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFIER` / `VALUE` selector sub-patterns can lead to a DoS (bsc#1281120).

    python-soupsieve python-soupsieveOperating systems
    • Update to 2.6-160000.5.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. SUSE-SU-2026:4810-1

    Not ratedFix available

    Security update for python-oauthlib

    This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527).

    python-oauthlib python-oauthlibOperating systems
    • Update to 3.2.2-150400.12.10.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. SUSE-SU-2026:4809-1

    Not ratedFix available

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). - CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). - CV

    python311 python311-core python311 python311-core python311-documentation python311 python311-core python311-documentation python311 python311-core python311-documentation python311Operating systems
    • Update to 3.11.17-150400.9.105.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. SUSE-SU-2026:4806-1

    Not ratedFix available

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. - CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. - CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. - CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. - CVE-2026-109709: Information disclosu

    mozillafirefox mozillafirefoxOperating systems
    • Update to 153.5.0-118.16.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. SUSE-SU-2026:4805-1

    Not ratedFix available

    Security update for perl-DBI

    This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). - CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056).

    perl-dbiOperating systems
    • Update to 1.647.0-150600.12.26.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. SUSE-SU-2026:4804-1

    Not ratedFix available

    Security update for pgvector

    This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: - Updated to version 0.8.7

    pgvector postgresql16-pgvector postgresql17-pgvector postgresql18-pgvector pgvector postgresql16-pgvector postgresql17-pgvector postgresql18-pgvector pgvector postgresql16-pgvector postgresql17-pgvector postgresql18-pgvectorOperating systems
    • Update to 0.8.7-150600.13.12.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. SUSE-SU-2026:4803-1

    Not ratedFix available

    Security update for cups-filters

    This update for cups-filters fixes the following issue: - CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291).

    cups-filters cups-filters cups-filters cups-filters cups-filters cups-filters cups-filters cups-filters cups-filters cups-filters cups-filtersOperating systems
    • Update to 1.25.0-150200.3.34.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. SUSE-SU-2026:4802-1

    Not ratedFix available

    Security update for cyrus-sasl

    This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687).

    cyrus-sasl cyrus-sasl cyrus-sasl cyrus-sasl-bdb cyrus-sasl-saslauthd cyrus-sasl-saslauthd-bdb cyrus-sasl cyrus-sasl-bdb cyrus-sasl-saslauthd cyrus-sasl-saslauthd-bdb cyrus-sasl cyrus-sasl-bdbOperating systems
    • Update to 2.1.27-150300.4.9.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. SUSE-SU-2026:4801-1

    Not ratedFix available

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: - version update to 1.6.59 (jsc#PED-16190): * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files.

    libpng16Operating systems
    • Update to 1.6.59-15.27.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. SUSE-SU-2026:4799-1

    Not ratedFix available

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). - CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). - CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). - CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something else that is

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.0.9-150400.6.122.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. SUSE-SU-2026:4798-1

    Not ratedFix available

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). - CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker-controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). - CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-

    busybox busybox busybox busyboxOperating systems
    • Update to 1.35.0-150400.3.23.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →