Nice! That second one is just a repost of your first.

I wonder where the sources for this are? The hidden Margaritelli Twitter post?

Canonical and Red Hat have not only confirmed the vulnerability’s high severity but are also actively working on assessing its impact and developing patches.