OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

thunderbird security update

140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR...

ALSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

valkey security, bug fix, and enhancement update

8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...

OPENSUSE-SU-2026:11728-1 rpcbind-1.2.9-2.1 on GA media

These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89117

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description The heif region item add region inline mask data function in libheif/api/libheif/heif regions.cc accepts the mask data len parameter without verifying if it matches the byte count required by the...

PT-2026-89114

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description When WITH UNCOMPRESSED CODEC is enabled, the heif context add image tile function accepts a tile with component-plane dimensions that differ from the prototype image geometry. The ImageItem...

CVE-2026-73318: Incorrect Authorization

XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...

OPENSUSE-SU-2026:11727-1 rclone-1.75.1-1.1 on GA media

These are all security issues fixed in the rclone-1.75.1-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

VulnCheck KEV: CVE-2026-81963

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...

git-lfs security update

3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang...

skopeo security update

2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add test file installation to fix tier0 tests 2:1.22.2-3 - Rebuild for CVE-2026-27145...

Microsoft Windows Link Following Vulnerability

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...

APSB26-132 : Security updates available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-142 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution, security feature bypass, arbitrary file system read, and application denial-of-service. Adobe is not aware of any exploits in the wild for...

APSB26-131 : Security Updates Available for Adobe Illustrator

Adobe has released an update for Adobe Illustrator. This update resolves critical vulnerabilities that could result in memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

ALSA-2026:64770 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 153 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 153.0.8010.36 Linux 153.0.8010.36/.37 Windows/Mac contains a number of fixes and improvements -- a list of changes is...