achill (fossdd) authored 1 month ago and Natanael Copa committed 1 month ago

https://curl.se/ch/8.12.1.html

https://www.openwall.com/lists/musl/2025/02/13/1

https://github.com/openssl/openssl/releases/tag/openssl-3.1.8

- CVE-2024-13176

The 8.12.0 release had various regressions. Revert til 8.12.1 is out.
This reverts commit 36dea765.

ref: !79456 (comment 479790)

https://curl.se/ch/8.12.0.html

https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-33

- CVE-2024-12705
- CVE-2024-11187

https://perldoc.perl.org/5.38.3/perl5383delta#DESCRIPTION

Daniel Néri authored 2 months ago and Natanael Copa committed 2 months ago

- https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.6.txt
- https://github.com/git/git/security/advisories/GHSA-hmg8-h7qf-7cxr
- https://github.com/git/git/security/advisories/GHSA-r5ph-xg7q-xfrp

Fixes the following CVEs:
- CVE-2024-12084
- CVE-2024-12085
- CVE-2024-12086
- CVE-2024-12087
- CVE-2024-12088
- CVE-2024-12747

Also backport fixes for a regression and a use-after-free.

ref: https://github.com/RsyncProject/rsync/blob/master/NEWS.md#news-for-rsync-340-15-jan-2025
ref: https://github.com/RsyncProject/rsync/issues/702
ref: https://github.com/RsyncProject/rsync/issues/704
(cherry picked from commit 10532b77)

https://github.com/asterisk/asterisk/security/advisories/GHSA-33x6-fj46-6rfh

achill (fossdd) authored 2 months ago and Kevin Daudt committed 2 months ago

https://github.com/redis/redis/releases/tag/7.2.6

https://github.com/redis/redis/releases/tag/7.2.7

- CVE-2024-46981
- CVE-2024-51741

The following certs are restored:

- Entrust.net Premium 2048 Secure Server CA
- Entrust Root Certification Authority
- AffirmTrust Commercial
- AffirmTrust Networking
- AffirmTrust Premium
- AffirmTrust Premium ECC
- Entrust Root Certification Authority - G2
- Entrust Root Certification Authority - EC
- GLOBALTRUST 2020

ref: alpine/ca-certificates#6
fixes: alpine/aports#16812
(cherry picked from commit 6629b908)

achill (fossdd) authored 3 months ago and Natanael Copa committed 2 months ago

https://curl.se/ch/8.11.1.html

- CVE-2024-11053

Celeste authored 1 year ago and Natanael Copa committed 2 months ago

(cherry picked from commit 86a4a4cc)

Kevin Daudt authored 1 year ago and Natanael Copa committed 2 months ago

Required for PSL support for curl.

(cherry picked from commit 3f1ce2f8)