Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 36: git 2023-746c4aacce
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 37: git 2023-9718cc6113
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 37: nodejs 2022-1667f7b60a
November 2022 Security Updates https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/ ---- Update to 18.10.0 https://github.com/nodejs/node/…
Fedora 36: php 2022-1ecc10276e
**PHP version 8.1.12** (27 Oct 2022) **Core:** * Fixes segfault with Fiber on FreeBSD i386 architecture. (David Carlier) **Fileinfo:** * Fixed bug [GH-8805](ht…
Fedora 35: git 2022-53aadd995f
Upstream update including security & bug fixes as well as feature enhancements. From the upstream [release notes](https://github.com/git/git/raw/v2.38.1/Docume…
Fedora 35: php 2022-f2a5082860
**PHP version 8.0.25** (27 Oct 2022) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**) (cmb…
Fedora 36: git 2022-8b58806840
Upstream update including security & bug fixes as well as feature enhancements. From the upstream [release notes](https://github.com/git/git/raw/v2.38.1/Docume…
Fedora 35: dotnet3.1 2022-847c67b3cd
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This in…
Fedora 36: dotnet3.1 2022-980d492c98
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This in…
Fedora 35: scala 2022-07dd9375b2
Security fix for CVE-2022-36944. See https://github.com/scala/scala/releases/tag/v2.13.9 for other changes in scala 2.13.9.
Fedora 36: scala 2022-34acf878fb
Security fix for CVE-2022-36944. See https://github.com/scala/scala/releases/tag/v2.13.9 for other changes in scala 2.13.9.
Fedora 35: dotnet3.1 2022-cd37732349
This is the June 2022 monthly update for .NET Core 3.1. It updates the SDK to version 3.1.420 and Runtime to 3.1.26 It includes fixes for CVE-2022-30184 Upstre…
Fedora 36: dotnet3.1 2022-5508547b1e
This is the June 2022 monthly update for .NET Core 3.1. It updates the SDK to version 3.1.420 and Runtime to 3.1.26 It includes fixes for CVE-2022-30184 Upstre…
Fedora 35: containerd 2022-725ac93b48
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
Fedora 35: golang-x-sys 2022-725ac93b48
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
Fedora 35: python-jwt 2022-4ae9110f51
Update to 2.4.0 to address CVE-2022-29217. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24
Fedora 36: python-jwt 2022-3cf456dc20
Update to 2.4.0 to address CVE-2022-29217. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24
Fedora 35: rsyslog 2022-f796a28a
Rebase to 8.2204.0-1 Add patch resolving a potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA- ggw7-xr6h-mmr8
Fedora 36: rsyslog 2022-7988dad2
Rebase to 8.2204.0 Add patch to resolve potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
Fedora 35: ecdsautils 2022-bf586126
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 34: ecdsautils 2022-7704d5e8
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 36: ecdsautils 2022-111177a5
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 35: git 2022-3759ebab
Update to 2.35.3 ([release notes](https://github.com/git/git/raw/v2.35.3/Documen tation/RelNotes/2.35.3.txt)) This release addresses [CVE-2022-24765](https://b…
Fedora 36: git 2022-e99ae504
Update to 2.36.0 ([release notes](https://github.com/git/git/raw/v2.36.0/Documen tation/RelNotes/2.36.0.txt)) Among the changes, this release includes changes …