achill (fossdd) authored 1 month ago and Natanael Copa committed 1 month ago

https://curl.se/ch/8.12.1.html

https://www.openwall.com/lists/musl/2025/02/13/1

https://github.com/openssl/openssl/releases/tag/openssl-3.1.8

- CVE-2024-13176

The 8.12.0 had regressions. Revert for now.
This reverts commit 6cf5a60d.

ref: !79456 (comment 479790)

achill (fossdd) authored 1 month ago and omni committed 1 month ago

Forum: https://forum.torproject.org/t/stable-release-0-4-8-14/17242
Changelog: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes

https://curl.se/ch/8.12.0.html

https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-33

- CVE-2024-12705
- CVE-2024-11187

Daniel Néri authored 2 months ago and Natanael Copa committed 2 months ago

- https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.40.4.txt
- https://github.com/git/git/security/advisories/GHSA-hmg8-h7qf-7cxr
- https://github.com/git/git/security/advisories/GHSA-r5ph-xg7q-xfrp

Fixes the following CVEs:
- CVE-2024-12084
- CVE-2024-12085
- CVE-2024-12086
- CVE-2024-12087
- CVE-2024-12088
- CVE-2024-12747

Also backport fixes for a regression and a use-after-free.

ref: https://github.com/RsyncProject/rsync/blob/master/NEWS.md#news-for-rsync-340-15-jan-2025
ref: https://github.com/RsyncProject/rsync/issues/702
ref: https://github.com/RsyncProject/rsync/issues/704
(cherry picked from commit 10532b77)
(cherry picked from commit 3a66ced6)