Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2023-0137: vim security update
"rvim" can execute a shell through :diffpatch. References: - https://bugs.mageia.org/show_bug.cgi?id=31766 - https://github.com/vim/vim/commit/23a971da506249fc…
Fedora 37: amanda 2023-e295804b3d
Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes. https://github.com/zmanda/amanda/releases/tag/ta…
Fedora 36: amanda 2023-1293196f34
Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes. https://github.com/zmanda/amanda/releases/tag/ta…
Fedora 37: stargz-snapshotter 2023-ee472c698c
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 which con…
Fedora 37: libmemcached-awesome 2023-c9bbaadcbf
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection o…
Fedora 36: libmemcached-awesome 2023-7da1639d3f
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection o…
Mageia 2023-0090: chromium-browser-stable security update
High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30 High CVE-2023-1214: Type Confusion in V8. Reported b…
Fedora 38: stargz-snapshotter 2023-62ce942e75
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 so this r…
Fedora 36: usd 2023-ac5e1832f9
Rebuilt with fix for null pointer dereference in stb_image (https://github.com/nothings/stb/issues/1452).
Fedora 36: git 2023-2b3acb6cfd
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
Fedora 37: git 2023-5b372318ff
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
Fedora 37: syncthing 2023-70eb8ba61e
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of gola…
Fedora 36: syncthing 2023-6d71ff268e
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of gola…
Mageia 2023-0021: vim security update
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. (CVE-2023-0049) References: - https://bugs.mageia.org/show_bug.cgi?id=31422
Fedora 36: git 2023-746c4aacce
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 37: git 2023-9718cc6113
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 36: mbedtls 2023-3c4a525dcc
- Update to 2.28.2 Release notes: https://github.com/Mbed- TLS/mbedtls/releases/tag/v2.28.2
Fedora 37: mbedtls 2023-7456a62f60
- Update to 2.28.2 Release notes: https://github.com/Mbed- TLS/mbedtls/releases/tag/v2.28.2
Open Source Ransomware Toolkit Cryptonite Turns Into Accidental Wiper Malware
A version of an open source ransomware toolkit calledCryptonitehas been observed in the wild with wiper capabilities due to its "weak architecture and programm…
Fedora 37: nodejs 2022-1667f7b60a
November 2022 Security Updates https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/ ---- Update to 18.10.0 https://github.com/nodejs/node/…
Fedora 36: php 2022-1ecc10276e
**PHP version 8.1.12** (27 Oct 2022) **Core:** * Fixes segfault with Fiber on FreeBSD i386 architecture. (David Carlier) **Fileinfo:** * Fixed bug [GH-8805](ht…
Fedora 35: git 2022-53aadd995f
Upstream update including security & bug fixes as well as feature enhancements. From the upstream [release notes](https://github.com/git/git/raw/v2.38.1/Docume…
Fedora 35: php 2022-f2a5082860
**PHP version 8.0.25** (27 Oct 2022) **GD:** * Fixed bug php#81739: OOB read due to insufficient input validation in imageloadfont(). (**CVE-2022-31630**) (cmb…
Sigstore Reaches GA For Working To Secure The Open-Source Software Supply Chain
Sigstore that is backed by Google, Red Hat, GitHub, and other prominent organizations with an aim to secure the open-source software supply chain has reached g…