Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 36: thunderbird 2022-a5d22b5dd8
Update to 91.10.0 See https://www.mozilla.org/en- US/security/advisories/mfsa2022-22/
Fedora 35: python-jwt 2022-4ae9110f51
Update to 2.4.0 to address CVE-2022-29217. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24
Fedora 36: python-jwt 2022-3cf456dc20
Update to 2.4.0 to address CVE-2022-29217. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24
Fedora 35: rsyslog 2022-f796a28a
Rebase to 8.2204.0-1 Add patch resolving a potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA- ggw7-xr6h-mmr8
Fedora 36: rsyslog 2022-7988dad2
Rebase to 8.2204.0 Add patch to resolve potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
Fedora 35: ecdsautils 2022-bf586126
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 34: ecdsautils 2022-7704d5e8
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 36: ecdsautils 2022-111177a5
Fixes CVE-2022-24884 (Improper Verification of ECDSA Signatures). In previous versions ecdsautils would erroneously accept all-zero signatures as valid. More i…
Fedora 34: ghc-cmark-gfm 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: ghc-hakyll 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: gitit 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc-citeproc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 35: ghc-cmark-gfm 2022-bc43bafc
Security fix for CVE-2022-24724 - 0.2.3 bundles the C cmark-gfm-0.29.0.gfm.3 library which fixes https://github.com/github/cmark- gfm/security/advisories/GHSA-…
Fedora 35: rust-regex 2022-8436ac4c
Update to version 1.5.5. This includes a fix for a denial-of-service vulnerability ([RUSTSEC-2022-0013](https://rustsec.org/advisories/RUSTSEC-2022-0013.html) …
Fedora 34: rust-regex 2022-ceb3e03c
Update to version 1.5.5. This includes a fix for a denial-of-service vulnerability ([RUSTSEC-2022-0013](https://rustsec.org/advisories/RUSTSEC-2022-0013.html) …
Fedora 34: rust-afterburn 2022-06569a0a
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…
Fedora 35: rust-afterburn 2022-1b76e3a1
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…
Fedora 35: keylime 2022-5770dad5
Update to keylime v6.3.0 Fixes the following security advisories: - https://github.com/keylime/keylime/security/advisories/GHSA-2m39-75g9-ff5r - https://github…
Fedora 34: keylime 2022-dbb27491
Update to keylime v6.3.0 Fixes the following security advisories: - https://github.com/keylime/keylime/security/advisories/GHSA-2m39-75g9-ff5r - https://github…
Fedora 34: flatpak 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 34: flatpak-builder 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak-builder 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …