Stay Secure with the Latest Linux Advisories

security advisorysecurity issueFedora

Fedora 35 Ignition 2.14.0 Security Advisory: Enhancements and Fixes

New upstream release for v2.14.0. See release notes at [NEWS]().. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-393948cc9e 2022-05-26 01:33:55.873845 --------------------------------------------------------------------------------Name : ignition Product : Fedora 35 Version : 2.14.0 Release : 1.fc35 URL : https://github.com/coreos/ignition Summary : First boot installer and configuration tool Description : Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration. --------------------------------------------------------------------------------Update Information: New upstream release for v2.14.0. See release notes at [NEWS](). --------------------------------------------------------------------------------ChangeLog: * Mon May 16 2022 Steven Presti - 2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service --------------------------------------------------------------------------------References: [ 1 ] Bug #2082422 - CVE-2022-1706 ignition: configs are accessible from unprivileged containers in VMs running on VMware products [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2082422 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-393948cc9e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The latest Ignition upgrade for Fedora 35 improves boot setup functionalities and resolves various security vulnerabilities.. Fedora Update, Ignition Tool, Configuration Management, Security Fixes. . Severity: Critical. LinuxSecurity.com Team

May 25, 2022 •Critical Fedora