p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 171

Vulnerabilities published for Operating systems in the last 30 days: 6852. Listed in the KEV catalogue: 4.

Filter vulnerabilities
Operating systems

Vulnerabilities: 160935

  1. ALSA-2026:86331

    Not ratedFix available

    Important: glycin-loaders security update

    Sandboxed and extendable image decoding. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Update to 1.0.1-1.el10_2.2
    Published Updated
  2. ALSA-2026:86203

    Not ratedFix available

    Important: go-toolset:rhel8 security, bug fix, and enhancement update

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug

    • Update to 1.26.1-1.module_el8.10.0+4307+6e4cbc60
    • Update to 1.26.10-1.module_el8.10.0+4307+6e4cbc60
    Published Updated
  3. ALSA-2026:86196

    Not ratedFix available

    Important: golang security, bug fix, and enhancement update

    The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Updat

    • Update to 1.26.10-1.el9_8
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →