[SECURITY] Fedora 43 Update: GitPython-3.1.61-1.fc43

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

CVE-2026-62652: Insertion of Sensitive Information Into Debugging Code

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

PT-2026-87011

Name of the Vulnerable Software and Affected Versions Reyrolle 7SR5 versions prior to V2.70 Description Improper validation of input received via a proprietary communication protocol occurs when the device is in a special firmware-update mode. This flaw leads to a memory corruption condition, whi...

PT-2026-95572

This update for kernel-livepatch-MICRO-6-0 Update 29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

PT-2026-88102

Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description An improper link resolution before file access, known as link following, occurs within the Windows Update Stack. This issue allows an authorized attacker to elevate their...

VulnCheck KEV: CVE-2026-81963

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...

thunderbird security update

140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR...

PT-2026-89117

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description The heif region item add region inline mask data function in libheif/api/libheif/heif regions.cc accepts the mask data len parameter without verifying if it matches the byte count required by the...

OPENSUSE-SU-2026:11722-1 perl-DBD-Pg-3.21.2-1.1 on GA media

These are all security issues fixed in the perl-DBD-Pg-3.21.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11726-1 python313-pypdf-6.16.2-3.1 on GA media

These are all security issues fixed in the python313-pypdf-6.16.2-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-88247

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

OPENSUSE-SU-2026:11718-1 helm-4.2.4-3.1 on GA media

These are all security issues fixed in the helm-4.2.4-3.1 package on the GA media of openSUSE Tumbleweed...

skopeo security update

2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add test file installation to fix tier0 tests 2:1.22.2-3 - Rebuild for CVE-2026-27145...

OPENSUSE-SU-2026:11728-1 rpcbind-1.2.9-2.1 on GA media

These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89114

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description When WITH UNCOMPRESSED CODEC is enabled, the heif context add image tile function accepts a tile with component-plane dimensions that differ from the prototype image geometry. The ImageItem...

OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

git-lfs security update

3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-62653: Out-of-bounds Write

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...