[SECURITY] Fedora 43 Update: emacs-30.2-11.fc43

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor...

[SECURITY] Fedora 43 Update: GitPython-3.1.61-1.fc43

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

ALSA-2026:64770 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...

ALSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

PT-2026-88102

Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description An improper link resolution before file access, known as link following, occurs within the Windows Update Stack. This issue allows an authorized attacker to elevate their...

OPENSUSE-SU-2026:11714-1 chromedriver-152.0.7977.82-1.1 on GA media

These are all security issues fixed in the chromedriver-152.0.7977.82-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-62652: Insertion of Sensitive Information Into Debugging Code

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

CVE-2026-73318: Incorrect Authorization

XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...

CVE-2026-62653: Out-of-bounds Write

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...

OPENSUSE-SU-2026:11727-1 rclone-1.75.1-1.1 on GA media

These are all security issues fixed in the rclone-1.75.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11722-1 perl-DBD-Pg-3.21.2-1.1 on GA media

These are all security issues fixed in the perl-DBD-Pg-3.21.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-88247

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

thunderbird security update

140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

VulnCheck KEV: CVE-2026-81963

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...

ALSA-2026:65116 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 mime: golang:...

skopeo security update

2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add test file installation to fix tier0 tests 2:1.22.2-3 - Rebuild for CVE-2026-27145...

OPENSUSE-SU-2026:11721-1 libmariadb-devel-3.4.9-2.1 on GA media

These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-87011

Name of the Vulnerable Software and Affected Versions Reyrolle 7SR5 versions prior to V2.70 Description Improper validation of input received via a proprietary communication protocol occurs when the device is in a special firmware-update mode. This flaw leads to a memory corruption condition, whi...