achill (fossdd) authored 1 week ago and Kevin Daudt committed 1 week ago

https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes

- CVE-2024-8176

CVE-2025-27516: Sandbox breakout through attr filter selecting format
method.

- https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
- https://raw.githubusercontent.com/pallets/jinja/refs/tags/3.1.6/CHANGES.rst

achill (fossdd) authored 1 month ago and Kevin Daudt committed 3 weeks ago

- CVE-2024-31068
- CVE-2024-36293
- CVE-2023-43758
- CVE-2024-39355
- CVE-2024-37020

https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/microcode-20250211/releasenote.md

and backport setup-firewall fixes

https://downloads.isc.org/isc/bind9/9.18.34/doc/arm/html/notes.html

achill (fossdd) authored 1 month ago and Natanael Copa committed 1 month ago

https://curl.se/ch/8.12.1.html

https://www.openwall.com/lists/musl/2025/02/13/1

https://github.com/openssl/openssl/releases/tag/openssl-3.1.8

- CVE-2024-13176

The 8.12.0 had regressions. Revert for now.
This reverts commit 6cf5a60d.

ref: !79456 (comment 479790)

achill (fossdd) authored 1 month ago and omni committed 1 month ago

Forum: https://forum.torproject.org/t/stable-release-0-4-8-14/17242
Changelog: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes