CLEANSTART-2026-SN74254 Security fixes in postgresql 15.5-r0

Package postgresql version 15.5-r0 fixes 3 vulnerabilities: CVE-2023-5868, CVE-2023-5869, CVE-2023-5870...

CLEANSTART-2026-AW91084 Security fixes in curl 8.3.0-r0

Package curl version 8.3.0-r0 fixes 1 vulnerabilities: CVE-2023-38039...

CLEANSTART-2026-XA19321 Security fixes in istio-fips 1.30.0-r0

Package istio-fips version 1.30.0-r0 fixes 10 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2, CVE-2026-44903, CVE-2026-40179, CVE-2026-42154...

CLEANSTART-2026-AL02169 Security fixes in kube-vip 1.0.4-r0

Package kube-vip version 1.0.4-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

CLEANSTART-2026-VJ09611 Security fixes in druid-exporter-fips 0.8-r0

Package druid-exporter-fips version 0.8-r0 fixes 1 vulnerabilities: CVE-2025-47907...

CLEANSTART-2026-KH99344 Security fixes in jitsucom-jitsu 2.11.0-r0

Package jitsucom-jitsu version 2.11.0-r0 fixes 9 vulnerabilities: ghsa-mwv6-3258-q52c, ghsa-w37m-7fhw-fmv9, CVE-2025-30218, CVE-2025-49005, CVE-2025-65945...

CVE-2026-64469

A flaw was found in the Linux kernel's binder component. This vulnerability allows a local attacker to trigger a use-after-free error due to a race condition during specific thread and process operations. Successful exploitation could lead to arbitrary code execution, granting the attacker...

CVE-2026-17907

A flaw was found in Google Chrome's Network component. A remote attacker could exploit this side-channel information leakage vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to leak sensitive cross-origin data...

CVE-2026-17853

An inappropriate implementation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519472272...

CVE-2026-17808

An uninitialized use flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516778390...

CVE-2026-17975

An inappropriate implementation flaw was found in the IME component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519233776...

CVE-2026-17858

An uninitialized use flaw was found in the WebNN component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520191468...

CVE-2026-17865

An inappropriate implementation flaw was found in the Crypto component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520516655...

CVE-2026-67246

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

EUVD-2026-50963

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

CVE-2026-67246

CVE-2026-67246 is a path traversal vulnerability in the Wallpaper component of ADM. Authenticated users can supply a crafted wallpaper path input that is not sufficiently validated before file access, allowing access to or manipulation of files outside the intended wallpaper directory, constraine...

CVE-2026-67246

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

CVE-2026-64310

A flaw was found in the Linux kernel's crypto: ccp component. A local user, by triggering specific SEV Secure Encrypted Virtualization input/output control ioctl operations when SEV initialization fails and Kernel-based Virtual Machine KVM is actively running virtual machines, could cause the...

CVE-2026-64460

A flaw was found in the Linux kernel's PCI/IOV subsystem. When a PCI device fails to respond during a power state transition, the kernel's Virtual Function VF Resizable Base Address Register BAR restoration process can attempt to access memory outside of its allocated bounds. This out-of-bounds...

DEBIAN-CVE-2026-17995

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...