Threats Tagged 'cve-2026-67326'

This vulnerability concerns multiple security issues fixed in the python313-GitPython-3.1.58-1.1 package on openSUSE Tumbleweed and related Red Hat Hardened Images RPMs. The issues are identified by CVE-2026-67322 and related CVEs, involving several CWE categories such as improper authentication and command injection. The update includes fixes in various LLVM and Clang related packages distributed by Red Hat. No known exploits are reported in the wild. The severity is assessed as medium.

GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged [core] section with hooksPath pointing to attacker-controlled directories, achieving remote code execution when git hooks are triggered.

This update includes the following RPMs: swift-lang: * swift-lang-6.3.3-0.1.1.hum1 (aarch64, x86_64) * swift-lang-runtime-6.3.3-0.1.1.hum1 (aarch64, x86_64) * swift-lang-6.3.3-0.1.1.hum1.src (src) Security Fix(es): swift-lang: * CVE-2026-43823

This update includes the following RPMs: llvm: * clang-22.1.8-4.1.hum1 (aarch64, x86_64) * clang-analyzer-22.1.8-4.1.hum1 (aarch64, x86_64) * clang-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * clang-libs-22.1.8-4.1.hum1 (aarch64, x86_64) * clang-resource-filesystem-22.1.8-4.1.hum1 (aarch64, x86_64) * clang-tools-extra-22.1.8-4.1.hum1 (aarch64, x86_64) * clang-tools-extra-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * compiler-rt-22.1.8-4.1.hum1 (aarch64, x86_64) * git-clang-format-22.1.8-4.1.hum1 (aarch64, x86_64) * libcxx-22.1.8-4.1.hum1 (aarch64, x86_64) * libcxx-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * libcxx-static-22.1.8-4.1.hum1 (aarch64, x86_64) * libcxxabi-22.1.8-4.1.hum1 (aarch64, x86_64) * libcxxabi-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * libcxxabi-static-22.1.8-4.1.hum1 (aarch64, x86_64) * libomp-22.1.8-4.1.hum1 (aarch64, x86_64) * libomp-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * lld-22.1.8-4.1.hum1 (aarch64, x86_64) * lld-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * lld-libs-22.1.8-4.1.hum1 (aarch64, x86_64) * lldb-22.1.8-4.1.hum1 (aarch64, x86_64) * lldb-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-bolt-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-cmake-utils-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-doc-22.1.8-4.1.hum1 (noarch) * llvm-filesystem-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-googletest-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-libs-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-libunwind-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-libunwind-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-libunwind-static-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-static-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-test-22.1.8-4.1.hum1 (aarch64, x86_64) * polly-22.1.8-4.1.hum1 (aarch64, x86_64) * polly-devel-22.1.8-4.1.hum1 (aarch64, x86_64) * python3-clang-22.1.8-4.1.hum1 (aarch64, x86_64) * python3-lit-22.1.8-4.1.hum1 (noarch) * python3-lldb-22.1.8-4.1.hum1 (aarch64, x86_64) * llvm-22.1.8-4.1.hum1.src (src)