FEDORA-2023-eaf1bdd5ae
Packages in this update:
git-2.40.1-1.fc38
Update description:
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007)
Refer to the release notes for 2.30.9 for details of each CVE as well as
the following security advisories from the git project:
https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx (CVE-2023-25652)
https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844 (CVE-2023-29007)
(At this time there is no upstream advisory for CVE-2023-25815. This
issue does not affect the Fedora packages as we do not use the runtime
prefix support.)
Release notes:
https://github.com/git/git/raw/v2.30.9/Documentation/RelNotes/2.30.9.txt
https://github.com/git/git/raw/v2.40.1/Documentation/RelNotes/2.40.1.txt
More Stories
tpm2-tools-5.7-1.fc40 tpm2-tss-4.1.0-1.fc40
FEDORA-2024-0c9d3b51d4 Packages in this update: tpm2-tools-5.7-1.fc40 tpm2-tss-4.1.0-1.fc40 Update description: tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Read More
tpm2-tools-5.5.1-1.fc39 tpm2-tss-4.0.2-1.fc39
FEDORA-2024-4512dc54af Packages in this update: tpm2-tools-5.5.1-1.fc39 tpm2-tss-4.0.2-1.fc39 Update description: tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Read More
tpm2-tools-5.5.1-1.fc38 tpm2-tss-4.0.2-1.fc38
FEDORA-2024-3265d70b61 Packages in this update: tpm2-tools-5.5.1-1.fc38 tpm2-tss-4.0.2-1.fc38 Update description: tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Read More
webkit2gtk4.0-2.44.1-1.fc40
FEDORA-2024-a1246372a4 Packages in this update: webkit2gtk4.0-2.44.1-1.fc40 Update description: Update to 2.44.1 Read More
CrushFTP VFS Sandbox Escape Vulnerability (CVE-2024-4040)
What is the vulnerability? A zero-day security vulnerability has been uncovered in an enterprise file-transfer software CrushFTP. The vulnerability tagged...
gdcm-3.0.23-5.fc39
FEDORA-2024-11821b16ac Packages in this update: gdcm-3.0.23-5.fc39 Update description: Security fixes TALOS-2024-1924, CVE-2024-22391: heap overflow TALOS-2024-1935, CVE-2024-22373: out-of-bounds write TALOS-2024-1944, CVE-2024-25569:...