Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 34: mingw-expat 2022-04f20699
Update to expat-2.4.6, see https://github.com/libexpat/libexpat/blob/R_2_4_6/expat/Changes for details.
Fedora 35: mingw-expat 2022-3d9d67f5
Update to expat-2.4.6, see https://github.com/libexpat/libexpat/blob/R_2_4_6/expat/Changes for details.
Fedora 34: dotnet6.0 2022-1fd0cea1
This is the February update for .NET 6. It updates the SDK to 6.0.102 and the Runtime to 6.0.2. Release Notes: https://github.com/dotnet/core/blob/main/release…
Fedora 35: php 2022-1596a2da
**PHP version 8.0.16** (17 Feb 2022) **Core:** * Fixed bug php#81430 (Attribute instantiation leaves dangling pointer). (beberlei) * Fixed bug [GH-7896](https:…
Mageia 2022-0055: firejail security upda
private-cwd leaks access to the entire filesystem References: - https://bugs.mageia.org/show_bug.cgi?id=30007 - https://github.com/netblue30/firejail/issues/47…
Fedora 35: keylime 2022-5770dad5
Update to keylime v6.3.0 Fixes the following security advisories: - https://github.com/keylime/keylime/security/advisories/GHSA-2m39-75g9-ff5r - https://github…
Fedora 34: keylime 2022-dbb27491
Update to keylime v6.3.0 Fixes the following security advisories: - https://github.com/keylime/keylime/security/advisories/GHSA-2m39-75g9-ff5r - https://github…
Fedora 34: flatpak 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 34: flatpak-builder 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak-builder 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak 2022-825ca6bf
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-216…
Fedora 35: python-kombu 2022-1dae0176
- kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 - celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
Fedora 35: python-celery 2022-1dae0176
- kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 - celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
Fedora 35: uriparser 2022-cfd00481
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
Fedora 35: mingw-uriparser 2022-cfd00481
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
Fedora 34: uriparser 2022-00a529a8
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
Fedora 35: roundcubemail 2022-d7347d94
This is the second service release to update the new stable version 1.5. It provides a bunch of small fixes and improvements to the OAuth feature as well as a …
Fedora 34: roundcubemail 2022-95d576ed
We just published a security update to the LTS version 1.4 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerability: * Cross-site scrip…
Fedora 35: mbedtls 2022-d01df883
- Update to 2.16.12 Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
Fedora 34: mbedtls 2022-87bc0d5b
- Update to 2.16.12 Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
Fedora 35: quaternion 2021-17a9cdcf
Update to version 0.0.95.1. Fixes security issue: https://github.com/quotient- im/Quaternion/issues/789
Fedora 34: quaternion 2021-e1572c9b
Update to version 0.0.95.1. Fixes security issue: https://github.com/quotient- im/Quaternion/issues/789
Top 3 SaaS Security Threats for 2022
With 2021 drawing to a close and many closing their plans and budgets for 2022, the time has come to do a brief wrap-up of the SaaS Security challenges on the …