Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: python-openapi-core 2024-000a25f3fc Security Advisory Updates
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
Fedora 40: php-tcpdf 2024-27eafd0e65 Security Advisory Updates
Version 6.7.5 (2024-04-20) Update GitHub actions fix: CSV-2024-22640 (#712)
Fedora 40: abseil-cpp 2024-bb70b21754 Security Advisory Updates
Update to 20240116.2: fixes possible out-of-bounds string access as described in https://github.com/abseil/abseil-cpp/pull/1650.
Fedora 39: mbedtls 2024-666210bd74 Security Advisory Updates
Update to 2.28.8 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8
Fedora 38: dotnet7.0 2024-8fd3285bd9Security Advisory Updates
This is the March 2024 update for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release- notes/7.0/7.0.17/7.0.17.md
Fedora 38: syncthing 2024-b93312a597
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Fedora 39: syncthing 2024-c46536abe6
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Fedora 39: mbedtls 2024-bfd98be425
Update to 2.28.7 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.7 Security Advisories: https://mbed-tls.readthedocs.io/en/latest/securit…
Fedora 38: atril 2024-59a7d96d84
fix gcc14 build error and another epub crash use https://github.com/mate-desktop/atril/commit/479e927 use https://github.com/mate-desktop/atril/commit/d901a9d …
Mageia 2023-0240: cri-o security update
Denial of service due to memory or disk exhaustion. (CVE-2022-1708) References: - https://bugs.mageia.org/show_bug.cgi?id=30526 - https://github.com/cri-o/cri-…
Fedora 36: git 2023-003e7d2867
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Fedora 37: git 2023-d84a75ea52
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Fedora 38: git 2023-eaf1bdd5ae
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Fedora 36: git 2023-2b3acb6cfd
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
Fedora 37: git 2023-5b372318ff
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
Fedora 36: git 2023-746c4aacce
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 37: git 2023-9718cc6113
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 35: python-jwt 2022-4ae9110f51
Update to 2.4.0 to address CVE-2022-29217. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24
Fedora 36: python-jwt 2022-3cf456dc20
Update to 2.4.0 to address CVE-2022-29217. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24
Fedora 35: rsyslog 2022-f796a28a
Rebase to 8.2204.0-1 Add patch resolving a potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA- ggw7-xr6h-mmr8
Fedora 36: rsyslog 2022-7988dad2
Rebase to 8.2204.0 Add patch to resolve potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
Fedora 35: ecdsautils 2022-bf586126
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 34: ecdsautils 2022-7704d5e8
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 36: ecdsautils 2022-111177a5
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…