Fedora 36: mingw-binutils 2022-19538a3732
Nov07
on November 7, 2022
at 4:07 pm
Posted In: Uncategorized
Backport fixes for CVE-2021-3826 and CVE-2022-38533.
Comment
Archive for Fedora Linux Distribution – Security Advisories
2161 results.
Fedora 36: ghc-cmark-gfm 2022-6bcee2cc93
Nov05
on November 5, 2022
at 1:38 pm
Posted In: Uncategorized
updates the C library to 0.29.0.gfm.6 which fixes CVE-2022-39209
Fedora 35: ghc-cmark-gfm 2022-f1aed93db8
Nov05
on November 5, 2022
at 1:16 pm
Posted In: Uncategorized
updates the C library to 0.29.0.gfm.6 which fixes CVE-2022-39209
Fedora 35: java-latest-openjdk 2022-ec7de69ceb
Nov05
on November 5, 2022
at 1:15 pm
Posted In: Uncategorized
# New in release OpenJDK 19.0.1 (2022-10-18) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes-19.0.1.html) * This update depends on [FEDORA-2022- 10bb6f119e](https://bodhi.fedoraproject.org/updates/FEDORA-2022-10bb6f119e) ## CVEs Fixed – CVE-2022-21618 – CVE-2022-21619 – CVE-2022-21624 –
Security fix for CVE-2022-3705 2139842 – vim upgrade broke :! for displaying terminal output
– Updated to 106.0.3 —- – New upstream version (106.0.1)
Fedora 36: java-11-openjdk 2022-d989953883
Nov03
on November 3, 2022
at 12:48 pm
Posted In: Uncategorized
# New in release OpenJDK 11.0.17 (2022-10-18) * [Release announcement](https://bit.ly/openjdk11017) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.html) ## Security Fixes – JDK-8282252: Improve BigInteger/Decimal validation – JDK-8285662: Better permission resolution – JDK-8286077, CVE-2022-21618: Wider
**PHP version 8.1.12** (27 Oct 2022) **Core:** * Fixes segfault with Fiber on FreeBSD i386 architecture. (David Carlier) **Fileinfo:** * Fixed bug [GH-8805](https://github.com/php/php-src/issues/8805) (finfo returns wrong mime type for woff/woff2 files). (Anatol) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**)
Fedora 36: java-17-openjdk 2022-f76014ae17
Nov03
on November 3, 2022
at 12:19 pm
Posted In: Uncategorized
# New in release OpenJDK 17.0.5 (2022-10-18) * [Release announcement](https://bit.ly/openjdk1705) * [Full release notes](https://builds.shipilev.net/backports-monitor/release-notes-17.0.5.html) ## Security Fixes – JDK-8282252: Improve BigInteger/Decimal validation – JDK-8285662: Better permission resolution – JDK-8286077, CVE-2022-21618: Wider
Upstream update including security & bug fixes as well as feature enhancements. From the upstream [release notes](https://github.com/git/git/raw/v2.38.1/Documen tation/RelNotes/2.30.6.txt): CVE-2022-39253 ————– When relying on the `–local` clone optimization, Git dereferences symbolic links in the source repository before creating hardlinks (or copies) of the dereferenced link in the
New upstream release fixing CVE-2022-3515
Security fix for CVE-2022-3602 and CVE-2022-3786
Security fix for CVE-2022-3602 and CVE-2022-3786
– url: use IDN decoded names for HSTS checks (CVE-2022-42916) – http_proxy: restore the protocol pointer on error (CVE-2022-42915) – netrc: replace fgets with Curl_get_line (CVE-2022-35260) – fix POST following PUT confusion (CVE-2022-32221)
Update to 2.28.1
Fedora 36: cacti-spine 2022-1a85254c11
Oct30
on October 30, 2022
at 5:15 pm
Posted In: Uncategorized
– Update to 1.2.22
– Update to 1.2.22
Fedora 36: mingw-expat 2022-d93b3bd8b9
Oct29
on October 29, 2022
at 4:25 pm
Posted In: Uncategorized
Update to 2.4.9, fixes CVE-2022-30674.
Fedora 35: mingw-expat 2022-c22feb71ba
Oct29
on October 29, 2022
at 4:09 pm
Posted In: Uncategorized
Update to 2.4.9, fixes CVE-2022-30674.
Update to 3.3.0.1 and CVE-2022-25844
This is the monthly .NET 6 update for September 2022. It updates the .NET SDK to 6.0.109 and Runtime to 6.0.9. This includes a fix for CVE-2022-38013
Update to version 4.16.6 – Security fixes for CVE-2022-3592 and CVE-2022-3437
– New version 4.4.3-P1 (rhbz#2132240) – Fix for CVE-2022-2928 (rhbz#2132429) – Fix for CVE-2022-2929 (rhbz#2132430)
This is the October 2022 release of .NET Core 3.1 This updates .NET Core 3.1 SDK to 3.1.424 and Runtime to 3.1.30. This includes fixes for CVE-2022-41032
added patches to fix CVE-2022-41751
Update to 2.10.3 * Fix CVE-2022-40303 * Fix CVE-2022-40304
– New upstream version (106.0.1)
Fedora 36: libmodsecurity 2022-afa1e7b6c4
Oct24
on October 24, 2022
at 10:54 am
Posted In: Uncategorized
Update to maintenance release 3.0.8
## CKEditor 4.20 New Features: * [#5084](https://github.com/ckeditor/ckeditor4/issues/5084): Added the [`config.t abletools_scopedHeaders`](https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITO R_config.html#cfg-tabletools_scopedHeaders) configuration option controlling the behaviour of table headers with and without the `[scope]` attribute. *
– [7.92](https://www.drupal.org/project/drupal/releases/7.92) – [7.91](https://www.drupal.org/project/drupal/releases/7.91) – [SA- CORE-2022-012 / CVE-2022-25275](https://www.drupal.org/sa-core-2022-012) – [7.90](https://www.drupal.org/project/drupal/releases/7.90) – [7.89](https://www.drupal.org/project/drupal/releases/7.89) –