128 matches found
[SECURITY] Fedora 42 Update: yarnpkg-1.22.22-18.fc42
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 43 Update: yarnpkg-1.22.22-18.fc43
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 42 Update: yarnpkg-1.22.22-17.fc42
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 44 Update: yarnpkg-1.22.22-17.fc44
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 43 Update: uv-0.9.30-2.fc43
An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...
[SECURITY] Fedora 42 Update: yarnpkg-1.22.22-16.fc42
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 43 Update: yarnpkg-1.22.22-16.fc43
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 42 Update: composer-2.9.3-1.fc42
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fixed a potential double-free in drmschedjobaddresvdependencies. When adding dependencies using drmschedjobadddependency, the function consumes the fence reference both in success and failure cases. In the latter case,...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fixed a deadlock in drmschedentitykilljobscb The Mesa issue mentioned above identified a possible deadlock scenario: 1231.611031 Possible interrupt-unsafe locking scenario: 1231.611033 CPU0 CPU1 1231.611034 ---- ----...
[SECURITY] Fedora 42 Update: yarnpkg-1.22.22-14.fc42
Fast, reliable, and secure dependency management...
[SECURITY] Fedora 43 Update: yarnpkg-1.22.22-14.fc43
Fast, reliable, and secure dependency management...
Exploring the SECURITY.Md in the Dependency Chain: Preliminary Analysis of the PyPI Ecosystem
Security policies, such as SECURITY.md files, are now common in open-source projects. They help guide responsible vulnerability reporting and build trust among users and contributors. Despite their growing use, it is still unclear how these policies influence the structure and evolution of softwa...
Spring gRPC Next Steps for 1.0.0
This is a new blog post in the Road to GA series, this time updating everyone on the plans to integrate Spring gRPC with Spring Boot 4. The original plan was to move the autoconfiguration from Spring gRPC into Spring Boot in time for the 4.0 release. Unfortunately we haven't been able to find the...
CVE-2025-40096 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...
[SECURITY] Fedora 43 Update: yarnpkg-1.22.22-12.fc43
Fast, reliable, and secure dependency management...
The Geomys Standard of Care
One of the most impactful effects of professionalizing open source maintenance is that as professionals we can invest into upholding a set of standards that make our projects safer and more reliable. The same commitments and overhead that are often objected to when required of volunteers should b...
New Home for Spring Integration AWS
The Spring Integration for AWS was always an independent Spring Integration extension project with its own plans and release cycles. The consumption of this single jar library has always added a complexity from the dependency management perspective. It depends not only on Spring Integration modul...
PT-2025-44386
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/sched subsystem related to dependency management. Specifically, a potential double free can occur in the drm sched job add resv dependencies...
