Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 34: ghc-cmark-gfm 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: ghc-hakyll 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: gitit 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc-citeproc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: dotnet3.1 2022-d28042f5
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.…
Fedora 35: dotnet3.1 2022-5ecee47a
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.…
Fedora 34: openvpn 2022-7d46acce
This is a maintenance release of OpenVPN 2.5 with a security fix when used in server mode ([CVE-2022-0547](https://community.openvpn.net/openvpn/wiki/CVE-2022-…
Fedora 35: dotnet6.0 2022-61d40280
This is the March 2022 update for .NET 6: SDK 6.0.103 and Runtime 6.0.3 Release notes: - SDK: https://github.com/dotnet/core/blob/main/release- notes/6.0/6.0.3…
Fedora 35: ghc-cmark-gfm 2022-bc43bafc
Security fix for CVE-2022-24724 - 0.2.3 bundles the C cmark-gfm-0.29.0.gfm.3 library which fixes https://github.com/github/cmark- gfm/security/advisories/GHSA-…
Fedora 35: containerd 2022-230f2b02
Update to 1.6.1 (rhbz#2060228). Mitigates CVE-2022-23648. Release Notes: https://github.com/containerd/containerd/releases/tag/v1.6.1
Fedora 35: openvpn 2022-a9bd1709
This is a maintenance release of OpenVPN 2.5 with a security fix when used in server mode ([CVE-2022-0547](https://community.openvpn.net/openvpn/wiki/CVE-2022-…
Fedora 35: radare2 2022-7db9e7bb
Bugfix release. fixes CVE-2022-0518 2055256, 2055130 - https://github.com/radare org/radare2/commit/9650e3c352f675687bf6c6f65ff2c4a3d0e288fa fixes CVE-2022-051…
Fedora 34: dotnet6.0 2022-1fd0cea1
This is the February update for .NET 6. It updates the SDK to 6.0.102 and the Runtime to 6.0.2. Release Notes: https://github.com/dotnet/core/blob/main/release…
Fedora 34: flatpak 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 34: flatpak-builder 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak-builder 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak 2022-825ca6bf
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-216…
Fedora 35: roundcubemail 2022-d7347d94
This is the second service release to update the new stable version 1.5. It provides a bunch of small fixes and improvements to the OAuth feature as well as a …
Fedora 34: roundcubemail 2022-95d576ed
We just published a security update to the LTS version 1.4 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerability: * Cross-site scrip…
Fedora 35: stargz-snapshotter 2021-6dc68dbe
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Fedora 34: stargz-snapshotter 2021-d250fc26
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Fedora 33: rust-coreos-installer 2021-449a2bda
[New upstream release](https://github.com/coreos/coreos- installer/releases/tag/v0.10.1) fixing CVE-2021-20319.