CLSA-2025-1764720465 TuxCare security update for 38 packages (18 CVEs)

TuxCare rebuilt 38 packages to address 18 CVEs. Fixed in 9.0.50-tuxcare.2...

CVE-2024-5866

creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/133 2026-08-05 00:00:30+00:00| seen| https://t.me/purpleshift/133...

DEBIAN-CVE-2026-64563

In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter-p on table restart rhashtablewalkstartcheck has two restart paths when resuming a walk. When iter-walker.tbl is valid, it re-validates iter-p against the table and sets iter-p = NULL if the object is...

DEBIAN-CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

Photon OS 5.0: Nginx PHSA-2026-5.0-0935

An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0935. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

DEBIAN-CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

DEBIAN-CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...

UBUNTU-CVE-2026-61893

A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...

SUSE CVE-2026-49245

SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the inline query parameter on browsable-share file downloads and authenticated user-file downloads suppresses Content-Disposition: attachment, allowing an attacker-controlled HTML file stored in a share or home...

CLEANSTART-2026-XI89172 Security fixes in trust-manager-fips 0.21.1-r2

Package trust-manager-fips version 0.21.1-r2 fixes 31 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-OQ47178 Security fixes in kafka-fips 3.8.1-r9

Package kafka-fips version 3.8.1-r9 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-TB76607 Security fixes in step 0.28.7-r0

Package step version 0.28.7-r0 fixes 1 vulnerabilities: CVE-2025-62820...

CLEANSTART-2026-TR90585 Security fixes in terragrunt-fips 0.97.2-r3

Package terragrunt-fips version 0.97.2-r3 fixes 3 vulnerabilities: CVE-2026-34986, ghsa-xmrv-pmrh-hhx2, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-DZ22227 Security fixes in docker 18.09.8-r0

Package docker version 18.09.8-r0 fixes 1 vulnerabilities: CVE-2019-13509...

CLEANSTART-2026-JO67014 Security fixes in minio-operator 7.0.1-r5

Package minio-operator version 7.0.1-r5 fixes 4 vulnerabilities: CVE-2025-22868, ghsa-6v2p-p543-phr9, CVE-2025-15558, ghsa-p436-gjf2-799p...

CVE-2026-18019

creationtimestamp| type| source ---|---|--- 2026-07-30 05:46:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 11:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-18022

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

CVE-2016-3348

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:32+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:56+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:12+00:00| seen|...

CVE-2015-2552

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:20+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:09+00:00| seen|...

CVE-2022-1227

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:43+00:00| seen| https://t.me/CVEhub/9651 2026-07-30 00:01:13+00:00| seen| https://t.me/CVEhub/9651 2026-07-31 10:00:05+00:00| published-proof-of-concept| https://t.me/CVEhub/9651 2026-08-01 00:00:34+00:00| published-proof-of-concept|...