a/kernel-firmware-20220413_8a2d811-noarch-1.txz

a/sysvinit-3.03-x86_64-1.txz

d/git-2.35.3-x86_64-1.txz
This update fixes a security issue where a Git worktree created by another
user might be able to execute arbitrary code.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24765
(* Security fix *)

l/libaio-0.3.113-x86_64-1.txz

l/tevent-0.12.0-x86_64-1.txz

n/php-7.4.29-x86_64-1.txz

extra/php81/php81-8.1.5-x86_64-1.txz

a/xz-5.2.5-x86_64-4.txz
This update fixes a security issue:
xzgrep applied to a crafted file name with two or more newlines can no
longer overwrite an arbitrary, attacker-selected file.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271
(* Security fix *)