Security Updates 5 90

Photon OS 5.0-90 Security Advisories

Advisory ID	Severity	Publish Date	Affected Packages	Fixed cves
PHSA-2026-5.0-90-0937	Important	2026-07-31	['mysql']	['CVE-2026-46862']
PHSA-2026-5.0-90-0936	Important	2026-07-31	['openssh']	['CVE-2026-59996', 'CVE-2026-59995', 'CVE-2026-60000', 'CVE-2026-59999', 'CVE-2026-59997', 'CVE-2026-60001', 'CVE-2026-55655']
PHSA-2026-5.0-90-0929	Critical	2026-07-24	['rubygem-concurrent-ruby']	['CVE-2026-54904', 'CVE-2026-54906']
PHSA-2026-5.0-90-0921	Critical	2026-07-10	['keepalived']	['CVE-2024-41184']
PHSA-2026-5.0-90-0914	Important	2026-07-03	['dnsmasq']	['CVE-2026-5172', 'CVE-2026-4890', 'CVE-2026-2291', 'CVE-2026-4892']
PHSA-2026-5.0-90-0904	Critical	2026-06-27	['linux-esx']	['CVE-2026-31700', 'CVE-2026-43303', 'CVE-2026-43116', 'CVE-2026-46208', 'CVE-2026-31715', 'CVE-2026-46125', 'CVE-2026-46190', 'CVE-2026-45991', 'CVE-2026-46180', 'CVE-2026-46191', 'CVE-2026-46110', 'CVE-2026-46052', 'CVE-2026-31712', 'CVE-2026-45996', 'CVE-2026-46195', 'CVE-2026-45999', 'CVE-2026-31709']
PHSA-2026-5.0-90-0874	Critical	2026-06-11	['libxslt', 'libxml2', 'openssl', 'gmp']	['CVE-2026-45445', 'CVE-2026-42764', 'CVE-2026-34183', 'CVE-2021-43618', 'CVE-2026-1757', 'CVE-2026-42770', 'CVE-2024-55549', 'CVE-2026-34181', 'CVE-2026-34182', 'CVE-2026-34180', 'CVE-2026-42765', 'CVE-2026-42767', 'CVE-2026-42768', 'CVE-2026-7383', 'CVE-2025-7424', 'CVE-2026-45446', 'CVE-2026-42769', 'CVE-2026-45447', 'CVE-2026-42766', 'CVE-2026-9076', 'CVE-2025-24855']
PHSA-2026-5.0-90-0870	Important	2026-06-08	['jq']	['CVE-2026-40164', 'CVE-2026-32316']
PHSA-2026-5.0-90-0869	Important	2026-06-08	['coredns']	['CVE-2026-26018', 'CVE-2025-58063', 'CVE-2025-47950']
PHSA-2026-5.0-90-0866	Important	2026-06-06	['dnsmasq']	['CVE-2023-50387', 'CVE-2023-50868']
PHSA-2026-5.0-90-0864	Critical	2026-06-04	['linux', 'linux-esx']	['CVE-2025-68251', 'CVE-2025-68359']
PHSA-2026-5.0-90-0862	Critical	2026-06-03	['unbound', 'linux-esx']	['CVE-2026-31711', 'CVE-2026-46056', 'CVE-2025-38627', 'CVE-2026-31407', 'CVE-2026-31598', 'CVE-2026-31629', 'CVE-2026-43080', 'CVE-2026-46119', 'CVE-2026-31626', 'CVE-2026-31697', 'CVE-2026-43112', 'CVE-2026-43093', 'CVE-2026-31637', 'CVE-2026-46099', 'CVE-2026-31587', 'CVE-2026-31578', 'CVE-2026-31676', 'CVE-2026-43052', 'CVE-2026-46123', 'CVE-2026-31630', 'CVE-2026-31686', 'CVE-2026-31702', 'CVE-2026-43071', 'CVE-2026-46037', 'CVE-2026-46062', 'CVE-2026-31673', 'CVE-2026-31532', 'CVE-2026-31580', 'CVE-2026-31607', 'CVE-2026-31581', 'CVE-2026-31488', 'CVE-2026-31597', 'CVE-2026-31622', 'CVE-2026-43076', 'CVE-2026-46133', 'CVE-2026-46043', 'CVE-2026-43110', 'CVE-2026-43114', 'CVE-2026-31699', 'CVE-2026-31586', 'CVE-2026-45834', 'CVE-2026-31696', 'CVE-2026-31627', 'CVE-2026-31576', 'CVE-2026-31449', 'CVE-2026-31611', 'CVE-2026-43113', 'CVE-2026-45844', 'CVE-2026-31588', 'CVE-2026-31500', 'CVE-2026-31613', 'CVE-2026-31489', 'CVE-2026-43501', 'CVE-2026-31708', 'CVE-2026-43117', 'CVE-2026-43350', 'CVE-2026-31685', 'CVE-2026-43111', 'CVE-2026-46233', 'CVE-2026-31705', 'CVE-2026-33278', 'CVE-2026-42960', 'CVE-2026-43075', 'CVE-2026-45835', 'CVE-2026-31612', 'CVE-2026-31716', 'CVE-2026-46047', 'CVE-2026-31698', 'CVE-2026-45836', 'CVE-2026-31694', 'CVE-2026-31583', 'CVE-2026-43099', 'CVE-2026-31602']
PHSA-2026-5.0-90-0860	Important	2026-05-30	['e2fsprogs']	['CVE-2022-1304']
PHSA-2026-5.0-90-0857	Critical	2026-05-27	['glibc', 'grub2']	['CVE-2026-5928', 'CVE-2025-54770', 'CVE-2026-5450']
PHSA-2026-5.0-90-0855	Critical	2026-05-22	['libxml2', 'rubygem-addressable', 'glibc', 'go', 'libvirt', 'glib', 'python3-idna', 'containerd', 'gtk3', 'docker']	['CVE-2023-5156', 'CVE-2024-40635', 'CVE-2026-35611', 'CVE-2026-4046', 'CVE-2024-52533', 'CVE-2025-32414', 'CVE-2024-33601', 'CVE-2023-3750', 'CVE-2025-49795', 'CVE-2025-14087', 'CVE-2026-34040', 'CVE-2026-0915', 'CVE-2026-27143', 'CVE-2024-2961', 'CVE-2025-32415', 'CVE-2025-49794', 'CVE-2026-33997', 'CVE-2025-4802', 'CVE-2025-15281', 'CVE-2024-33602', 'CVE-2023-6246', 'CVE-2025-49796', 'CVE-2026-4437', 'CVE-2026-0861', 'CVE-2023-4911', 'CVE-2025-8058', 'CVE-2025-13601', 'CVE-2024-3651', 'CVE-2026-27144', 'CVE-2024-33599', 'CVE-2023-6779', 'CVE-2025-6021', 'CVE-2024-6655']
PHSA-2026-5.0-90-0851	Important	2026-05-16	['libcap', 'libsoup']	['CVE-2025-11021', 'CVE-2023-2603', 'CVE-2025-4948', 'CVE-2025-32914', 'CVE-2025-32908', 'CVE-2025-12105']
PHSA-2026-5.0-90-0850	Important	2026-05-15	['chromium']	['CVE-2026-5281']
PHSA-2026-5.0-90-0849	Important	2026-05-14	['linux', 'linux-esx']	['CVE-2026-22985', 'CVE-2025-68306', 'CVE-2026-22986', 'CVE-2025-68305', 'CVE-2026-22993', 'CVE-2026-22981', 'CVE-2025-68293']
PHSA-2026-5.0-90-0848	Critical	2026-05-12	['gpsd']	['CVE-2025-67268', 'CVE-2025-67269']
PHSA-2026-5.0-90-0842	Critical	2026-05-07	['linux', 'linux-esx']	['CVE-2025-68351', 'CVE-2025-40254', 'CVE-2026-23093', 'CVE-2026-23268', 'CVE-2025-71089', 'CVE-2025-39871', 'CVE-2025-40248', 'CVE-2025-68255', 'CVE-2025-68254', 'CVE-2025-40257', 'CVE-2025-40276', 'CVE-2025-68349', 'CVE-2026-23204', 'CVE-2026-23066', 'CVE-2025-38718', 'CVE-2025-38704', 'CVE-2025-68724', 'CVE-2025-68749', 'CVE-2026-23011', 'CVE-2025-39863', 'CVE-2026-23227', 'CVE-2026-23073', 'CVE-2025-68263', 'CVE-2026-23001', 'CVE-2025-68362', 'CVE-2026-23004']
PHSA-2026-5.0-90-0830	Moderate	2026-04-23	['xz']	['CVE-2026-34743']
PHSA-2026-5.0-90-0798	Important	2026-03-27	['apache-tomcat10', 'apache-tomcat9']	['CVE-2026-24734']
PHSA-2026-5.0-90-0796	Important	2026-03-26	['binutils']	['CVE-2025-69649']
PHSA-2026-5.0-90-0794	Important	2026-03-24	['libtiff']	['CVE-2025-61144']
PHSA-2026-5.0-90-0785	Moderate	2026-03-14	['vim']	['CVE-2026-25749']
PHSA-2026-5.0-90-0782	Important	2026-03-06	['libssh']	['BDSA-2026-1841', 'BDSA-2025-123931', 'BDSA-2026-1843']
PHSA-2026-5.0-90-0778	Important	2026-02-26	['dotnet-runtime']	['CVE-2026-21218']
PHSA-2026-5.0-90-0770	Important	2026-02-21	['linux', 'linux-esx']	['CVE-2026-23005', 'CVE-2026-23097', 'CVE-2026-23090', 'CVE-2026-23076', 'CVE-2026-23037', 'CVE-2026-23056', 'CVE-2026-23087', 'CVE-2026-23095', 'CVE-2026-23038', 'CVE-2026-23084', 'CVE-2026-23108', 'CVE-2026-22997', 'CVE-2026-23099', 'CVE-2026-23105', 'CVE-2026-23091', 'CVE-2025-71191', 'CVE-2025-71190', 'CVE-2026-23068', 'CVE-2026-23075', 'CVE-2025-71194', 'CVE-2026-23060', 'CVE-2026-23061', 'CVE-2025-71199', 'CVE-2026-23078', 'CVE-2026-23031', 'CVE-2026-23026', 'CVE-2026-23102', 'CVE-2025-71188', 'CVE-2026-23110', 'CVE-2025-71189', 'CVE-2026-23073', 'CVE-2025-71163', 'CVE-2026-23003', 'CVE-2026-23064', 'CVE-2026-23101', 'CVE-2026-23085', 'CVE-2025-71186', 'CVE-2026-23074', 'CVE-2026-23086', 'CVE-2026-23096', 'CVE-2026-23054', 'CVE-2026-23080', 'CVE-2026-23071', 'CVE-2025-71196', 'CVE-2026-23033', 'CVE-2026-23083', 'CVE-2026-23098', 'CVE-2026-23069', 'CVE-2026-23107', 'CVE-2026-23049', 'CVE-2026-23058', 'CVE-2025-71185', 'CVE-2026-23089', 'CVE-2026-23103']
PHSA-2026-5.0-90-0767	Low	2026-02-19	['glib']	['CVE-2026-1485']
PHSA-2026-5.0-90-0764	Important	2026-02-18	['libpng']	['CVE-2026-25646']
PHSA-2026-5.0-90-0763	Critical	2026-02-16	['go', 'python3-wheel', 'glib', 'python-wheel', 'openjdk21']	['CVE-2025-47906', 'CVE-2025-58188', 'CVE-2026-1484', 'CVE-2025-61725', 'CVE-2025-58189', 'CVE-2025-61727', 'CVE-2025-61728', 'CVE-2025-61724', 'CVE-2025-47912', 'CVE-2025-68121', 'CVE-2025-61730', 'CVE-2025-47907', 'CVE-2025-58185', 'CVE-2025-58183', 'CVE-2026-21932', 'CVE-2026-21945', 'CVE-2026-21933', 'CVE-2022-40898', 'CVE-2025-68119', 'CVE-2025-58186', 'CVE-2026-21925', 'CVE-2025-61723', 'CVE-2025-61729', 'CVE-2025-61726', 'CVE-2025-61731', 'CVE-2025-58187', 'CVE-2025-61732']
PHSA-2026-5.0-90-0762	Important	2026-02-13	['postgresql15', 'postgresql14', 'rubygem-faraday']	['BDSA-2026-1823', 'BDSA-2026-1776', 'BDSA-2026-1777', 'BDSA-2026-1825', 'CVE-2026-25765']
PHSA-2026-5.0-90-0761	Moderate	2026-02-12	['linux-esx']	['CVE-2026-22999']
PHSA-2026-5.0-90-0760	Important	2026-02-12	['linux-esx']	['CVE-2025-68353']
PHSA-2026-5.0-90-0756	Important	2026-02-06	['expat']	['CVE-2026-25210']
PHSA-2026-5.0-90-0755	Critical	2026-02-05	['nodejs', 'alsa-lib']	['CVE-2025-55132', 'CVE-2025-59465', 'CVE-2025-55131', 'CVE-2026-21637', 'CVE-2025-55130', 'CVE-2025-59466', 'CVE-2026-25068']
PHSA-2026-5.0-90-0752	Important	2026-02-06	['linux-esx']	['CVE-2026-23010']
PHSA-2026-5.0-90-0747	Critical	2026-01-29	['openssl']	['CVE-2025-15467', 'CVE-2025-68160', 'CVE-2025-15468', 'CVE-2025-69419', 'CVE-2026-22795', 'CVE-2025-69420', 'CVE-2025-69418', 'CVE-2025-69421', 'CVE-2026-22796', 'CVE-2025-15469', 'CVE-2025-66199']
PHSA-2026-5.0-90-0742	Important	2026-01-19	['grub2']	['CVE-2025-61662']
PHSA-2026-5.0-90-0741	Important	2026-01-16	['linux-esx']	['CVE-2025-68783', 'CVE-2025-71149', 'CVE-2025-71120', 'CVE-2025-71127', 'CVE-2025-68817', 'CVE-2025-71150', 'CVE-2025-68325', 'CVE-2025-68776', 'CVE-2025-68369', 'CVE-2025-68813', 'CVE-2025-71147', 'CVE-2025-68803', 'CVE-2025-71116', 'CVE-2025-68806', 'CVE-2025-68799', 'CVE-2025-71154']
PHSA-2026-5.0-90-0737	Important	2026-01-13	['libtasn1']	['CVE-2025-13151']
PHSA-2026-5.0-90-0732	Critical	2026-01-08	['capstone']	['CVE-2025-67873', 'CVE-2025-68114']
PHSA-2025-5.0-90-0665	Important	2025-10-31	['libtiff']	['CVE-2025-9900']
PHSA-2025-5.0-90-0663	Important	2025-10-30	['binutils']	['CVE-2022-47673', 'CVE-2025-5244', 'CVE-2023-1579', 'CVE-2022-44840', 'CVE-2025-0840', 'CVE-2025-5245', 'CVE-2022-47695', 'CVE-2025-7546', 'CVE-2022-45703', 'CVE-2022-47696']
PHSA-2025-5.0-90-0656	Critical	2025-10-24	['abseil-cpp']	['CVE-2025-0838']
PHSA-2025-5.0-90-0648	Important	2025-10-21	['krb5']	['CVE-2025-24528']
PHSA-2025-5.0-90-0579	Critical	2025-08-08	['iperf', 'libtiff']	['CVE-2025-8177', 'CVE-2025-8176', 'CVE-2025-54349']
PHSA-2025-5.0-90-0498	Important	2025-04-07	['iperf']	['CVE-2024-53580']
PHSA-2025-5.0-90-0488	Important	2025-03-24	['elfutils']	['CVE-2025-1372']
PHSA-2025-5.0-90-0480	Important	2025-02-27	['iniparser']	['CVE-2025-0633']
PHSA-2025-5.0-90-0477	Important	2025-02-19	['grub2']	['CVE-2025-0624', 'CVE-2024-45782', 'CVE-2024-56737', 'CVE-2025-0678', 'CVE-2025-0689', 'CVE-2025-1125']
PHSA-2024-5.0-90-0355	Critical	2024-08-26	['krb5']	['CVE-2024-37371', 'CVE-2024-37370']
PHSA-2024-5.0-90-0354	Important	2024-08-24	['libtiff']	['CVE-2024-7006']
PHSA-2024-5.0-90-0300	Important	2024-06-21	['libndp']	['CVE-2024-5564']
PHSA-2024-5.0-90-0284	Important	2024-06-05	['krb5']	['CVE-2024-26461']
PHSA-2024-5.0-90-0213	Important	2024-02-20	['libuv']	['CVE-2024-24806']
PHSA-2024-5.0-90-0196	Important	2024-01-30	['libtiff']	['CVE-2023-52356', 'CVE-2023-52355']
PHSA-2023-5.0-90-0112	Important	2023-10-11	['libX11']	['CVE-2023-43787']
PHSA-2023-5.0-90-0087	Important	2023-09-06	['binutils']	['CVE-2023-25584']
PHSA-2023-5.0-90-0029	Important	2023-06-16	['libX11']	['CVE-2023-3138']
PHSA-2023-5.0-90-0010	Critical	2023-05-23	['libtar']	['CVE-2021-33644', 'CVE-2021-33645', 'CVE-2021-33643', 'CVE-2021-33646']
PHSA-2023-5.0-90-0009	Critical	2023-05-22	['influxdb']	['CVE-2022-36640']