p PatchFirst

PatchFirst · Свежие уязвимости

Операционные системы: уязвимости стека · Страница 188

За последние 30 дней в Операционные системы опубликовано уязвимостей: 6545; в каталоге KEV: 5.

RSS ↗ JSON ↗
Фильтры уязвимостей
Операционные системы

Уязвимостей: 167144

  1. RLSA-2026:84796

    Высокий · CVSS 7.1Есть исправление

    Important: openexr security update

    OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing (CVE-2026-34544) * OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files (CVE-2026-59184) * OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read (CVE-2026-59189) * OpenEXR: OpenEXR: Denial of Servi

    openexrОперационные системы
    • Обновитесь до 0:3.1.10-8.el10_2.5
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. RLSA-2026:84795

    Средний · CVSS 6.5Есть исправление

    Important: librabbitmq security update

    The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    librabbitmqОперационные системы
    • Обновитесь до 0:0.14.0-3.el10_2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. RLSA-2026:84753

    Средний · CVSS 5.9Есть исправление

    Moderate: glibc security update

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt (CVE-2026-77117) * glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state (CVE-2026-80489) * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374) * glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration (CVE-202

    glibcОперационные системы
    • Обновитесь до 0:2.39-145.el10_2
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  4. RLSA-2026:84721

    Высокий · CVSS 8.1Есть исправление

    Important: wireshark security update

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886) * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880) * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919) * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879) * wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928) * wir

    wiresharkОперационные системы
    • Обновитесь до 1:4.4.2-10.el10_2.8
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. RLSA-2026:84591

    Высокий · CVSS 7.8Есть исправление

    Important: emacs security update

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992) * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References s

    emacsОперационные системы
    • Обновитесь до 1:29.4-14.el10_2.3
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. RLSA-2026:84587

    Высокий · CVSS 7.2Есть исправление

    Moderate: perl-URI security update

    This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732). Security Fix(es): * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    perl-uriОперационные системы
    • Обновитесь до 0:5.27-3.el10_2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. RLSA-2026:84578

    Высокий · CVSS 7.5Есть исправление

    Important: python3.14-urllib3 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the

    python3.14-urllib3Операционные системы
    • Обновитесь до 0:2.6.3-2.el10_2.6
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. RLSA-2026:84594

    Высокий · CVSS 7.3Есть исправление

    Moderate: environment-modules security update

    The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "module" utility, which interprets module files. Security Fix(es): * environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters (CVE-2026-85013) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, ref

    environment-modulesОперационные системы
    • Обновитесь до 0:5.3.0-2.el9_8.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  9. RLSA-2026:85814

    Высокий · CVSS 8.8Есть исправление

    Important: postgresql:18 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    pgaudit pgaudit pg_repack pg_repack postgis postgres-decoderbufs postgres-decoderbufs postgresqlОперационные системы Базы данных
    • Обновитесь до 0:1.5.3-1.module+el9.8.0+40158+490b3c67
    • Обновитесь до 0:1.5.3-1.module+el9.8.0+40213+f1e225a4
    • Обновитесь до 0:18.0-1.module+el9.8.0+40158+490b3c67
    • Обновитесь до 0:18.0-1.module+el9.8.0+40213+f1e225a4
    • Обновитесь до 0:18.6-1.module+el9.8.0+40321+a908ab5d
    • Обновитесь до 0:3.3.1-1.Final.module+el9.8.0+40158+490b3c67
    • Обновитесь до 0:3.3.1-1.Final.module+el9.8.0+40213+f1e225a4
    • Обновитесь до 0:3.6.1-4.module+el9.8.0+40321+a908ab5d
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. RLSA-2026:85791

    Высокий · CVSS 8.8Есть исправление

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    pgaudit pgaudit pg_repack pg_repack postgis postgres-decoderbufs postgres-decoderbufs postgresqlОперационные системы Базы данных
    • Обновитесь до 0:1.5.1-1.module+el9.8.0+40159+adcaa225
    • Обновитесь до 0:1.5.1-1.module+el9.8.0+40212+d6f50005
    • Обновитесь до 0:16.0-1.module+el9.8.0+40159+adcaa225
    • Обновитесь до 0:16.0-1.module+el9.8.0+40212+d6f50005
    • Обновитесь до 0:16.15-1.module+el9.8.0+40320+f6f9ed3c
    • Обновитесь до 0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225
    • Обновитесь до 0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005
    • Обновитесь до 0:3.5.3-6.module+el9.8.0+40320+f6f9ed3c
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. RLSA-2026:85245

    Высокий · CVSS 7.8Есть исправление

    Important: emacs security update

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    emacsОперационные системы
    • Обновитесь до 1:27.2-18.el9_8.3
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. RLSA-2026:85234

    Высокий · CVSS 7.5Есть исправление

    Important: resteasy security update

    RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    resteasyОперационные системы
    • Обновитесь до 0:3.0.26-20.el9_8.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  13. RLSA-2026:85231

    Высокий · CVSS 7.5Есть исправление

    Important: jackson-databind security update

    The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    jackson-databindОперационные системы
    • Обновитесь до 0:2.21.6-1.el9_8.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  14. RLSA-2026:85193

    Высокий · CVSS 7.8Есть исправление

    Important: xorg-x11-server-Xwayland security update

    Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinat

    xorg-x11-server-xwaylandОперационные системы
    • Обновитесь до 0:24.1.9-4.el9_8.4
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  15. RLSA-2026:84595

    Средний · CVSS 6.1Есть исправление

    Moderate: cockpit-files security update

    A filesystem browser for Cockpit Security Fix(es): * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste (CVE-2026-91202) * cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cockpit-filesОперационные системы
    • Обновитесь до 0:36.1-1.el9_8
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  16. RLSA-2026:84588

    Высокий · CVSS 7.2Есть исправление

    Moderate: perl-URI security update

    This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732). Security Fix(es): * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    perl-uriОперационные системы
    • Обновитесь до 0:5.09-3.el9_8.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  17. RLSA-2026:84583

    Критический · CVSS 9.6Есть исправление

    Critical: webkit2gtk3 security, bug fix, and enhancement update

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read (CVE-2026-87596) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-87500) * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE (CVE-2026-87654) * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621) * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnera

    webkit2gtk3Операционные системы
    • Обновитесь до 0:2.54.1-1.el9_8
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  18. RLSA-2026:84577

    Высокий · CVSS 7.5Есть исправление

    Important: python3.14-urllib3 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the

    python3.14-urllib3Операционные системы
    • Обновитесь до 0:2.6.3-2.el9_8.6
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  19. RLSA-2026:84574

    Высокий · CVSS 7.8Есть исправление

    Important: xorg-x11-server security update

    X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer over

    xorg-x11-serverОперационные системы
    • Обновитесь до 0:1.20.11-34.el9_8.5
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  20. RLSA-2026:84798

    Высокий · CVSS 7.5Есть исправление

    Important: pcs security update

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields (CVE-2026-82397) * python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding (CVE-2024-14029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    pcsОперационные системы
    • Обновитесь до 0:0.10.18-2.el8_10.10
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →