Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 42: gitleaks Important Memory Leak Fix FEDORA-2025-94112c7319

fedora
Calendar Grey September 18, 2025
Dist Fedora Esm H88
Safeguard your systems with the new gitleaks release for Fedora 42, which tackles vital memory vulnerabilities efficiently.
Update to 8.28.0

Summary

Scan git repos (or files) for secrets using regex and entropy.

Update Information:

Update to 8.28.0

Topics%20covered

Topics Covered

security advisory fedora update important memory leak gitleaks

Change Log

* Tue Sep 9 2025 Packit - 8.28.0-1 - Update to 8.28.0 upstream release - Resolves: rhbz#2382198 * Tue Sep 9 2025 Mikel Olasagasti Uranga - 8.27.2-6 - Integrate Packit with Go Vendor Tools * Fri Aug 15 2025 Maxwell G - 8.27.2-5 - Rebuild for golang-1.25.0 * Fri Aug 15 2025 Maxwell G - 8.27.2-4 - Revert "Rebuild for golang-1.25.0" * Fri Aug 15 2025 Maxwell G - 8.27.2-3 - Rebuild for golang-1.25.0 * Wed Jul 23 2025 Fedora Release Engineering - 8.27.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

References


[ 1 ] Bug #2391627 - CVE-2025-58058 gitleaks: github.com/ulikunitz/xz leaks memory [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2391627 [ 2 ] Bug #2391658 - CVE-2025-58058 gitleaks: github.com/ulikunitz/xz leaks memory [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2391658

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-94112c7319' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: gitleaks
Product: Fedora 42
Version: 8.28.0
Release: 1.fc42
URL: https://github.com/gitleaks/gitleaks
Summary: Scan git repos (or files) for secrets using regex and entropy

Topics%20covered

Topics Covered

security advisory fedora update important memory leak gitleaks

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here