p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 51

Vulnerabilities published for Operating systems in the last 30 days: 6609. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 160207

  1. SUSE-SU-2026:24432-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16_update_8Operating systems
    • Update to 10-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2026:24430-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16_update_11Operating systems
    • Update to 9-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2026:4909-1

    Not ratedFix available

    Security update for squid

    This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). - CVE-2026-47729: out-of-bounds

    squid squid squid squid squid squid squid squidOperating systems
    • Update to 5.7-150400.3.41.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2026:4907-1

    Not ratedFix available

    Security update for openssh8.4

    This update for openssh8.4 fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). - CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). - CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). - CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). - CVE-2026-60001: sshd: honor th

    openssh8.4 openssh8.4Operating systems
    • Update to 8.4p1-8.30.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. SUSE-SU-2026:4904-1

    Not ratedFix available

    Security update for python, python-base, python-doc

    This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).

    python python-base python-doc python python-base python-docOperating systems Python
    • Update to 2.7.18-33.93.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2026:24374-1

    Not ratedFix available

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285283). - CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285135). Changes for google-osconfig-agent: - Update to version 20261015.00 * Add scalibr os benchmarks (#1044)

    google-osconfig-agentOperating systems
    • Update to 20261015.00-159998.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-116124

    Medium · CVSS 5.3EPSS 0.43%Public exploitNo fix published

    GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

    A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

    libgsf libgsf libgsf libgsf libgsf libgsf libgsf libgsf libgsf libgsf libgsf libgsfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →