Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released security and maintenance updates on July 24, 2026, targeting both the Fedora 43 and Fedora 44 distributions. The patch set closes seventeen documented vulnerabilities in dotnet8.0 and dotnet9.0, while also shipping python-black, python-lsp-black, and python-pytokens with fixes for CVE-2026-31900 and CVE-2026-32274. Mozilla Firefox moves to version 153.0 on Fedora 44, bringing new upstream features alongside temporary disables for the IPC forkserver and PGO optimization builds. Cryptlib advances to version 3.4.9.3 across both releases to prepare developers for upcoming algorithm deprecations in the forthcoming 3.5 release.

Fedora 43 Update: dotnet9.0-9.0.119-1.fc43
Fedora 43 Update: dotnet8.0-8.0.129-2.fc43
Fedora 43 Update: cryptlib-3.4.9.3-1.fc43
Fedora 44 Update: firefox-153.0-3.fc44
Fedora 44 Update: dotnet8.0-8.0.129-2.fc44
Fedora 44 Update: dotnet9.0-9.0.119-1.fc44
Fedora 44 Update: cryptlib-3.4.9.3-1.fc44
Fedora 44 Update: python-lsp-black-2.0.0-17.fc44
Fedora 44 Update: python-black-26.5.1-1.fc44
Fedora 44 Update: python-pytokens-0.4.1-4.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released a coordinated set of security advisories covering both Fedora 43 and Fedora 44 distributions. The updates upgrade core infrastructure and popular applications including the Linux kernel, Nginx web server stack, Chromium browser, libssh library, LLVM compiler tools, Fractal messaging client, Perl DBI and YAML::Syck packages, along with collectl system monitoring utilities. Each advisory contains patches for multiple actively exploited or high-risk vulnerabilities spanning memory corruption flaws, remote code execution pathways, denial-of-service conditions, and sensitive information exposure vectors.

Fedora 44 Update: kernel-7.1.4-204.fc44
Fedora 44 Update: llvm-22.1.8-4.fc44
Fedora 44 Update: fractal-14.1-1.fc44
Fedora 44 Update: srt-1.5.6-1.fc44
Fedora 44 Update: libssh-0.12.1-1.fc44
Fedora 44 Update: chromium-150.0.7871.128-1.fc44
Fedora 44 Update: nginx-mod-vts-0.2.4-13.fc44
Fedora 44 Update: perl-DBI-1.651-1.fc44
Fedora 44 Update: nginx-mod-headers-more-0.40-3.fc44
Fedora 44 Update: nginx-mod-js-challenge-0^20230517.gitda6852d-11.fc44
Fedora 44 Update: nginx-mod-naxsi-1.6-21.fc44
Fedora 44 Update: nginx-mod-fancyindex-0.6.0-8.fc44
Fedora 44 Update: nginx-mod-modsecurity-1.0.4-16.fc44
Fedora 44 Update: nginx-1.30.4-1.fc44
Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-13.fc44
Fedora 44 Update: perl-YAML-Syck-1.47-1.fc44
Fedora 44 Update: collectl-4.3.20.3-1.fc44
Fedora 43 Update: kernel-7.1.4-104.fc43
Fedora 43 Update: fractal-14.1-1.fc43
Fedora 43 Update: libssh-0.11.5-1.fc43
Fedora 43 Update: srt-1.5.6-1.fc43
Fedora 43 Update: chromium-150.0.7871.128-1.fc43
Fedora 43 Update: perl-DBI-1.651-1.fc43
Fedora 43 Update: perl-YAML-Syck-1.47-1.fc43
Fedora 43 Update: collectl-4.3.20.3-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

The Fedora Project released security updates for Fedora 43 and 44 addressing multiple vulnerabilities across nuclei, the Linux kernel, routinator dependencies, perl-Crypt-OpenSSL-X509, btrbk, and mupdf. The nuclei update to version 3.11.0 resolves over a dozen CVEs including cross-site scripting flaws and unauthorized command execution risks, while kernel releases fix critical issues in net/can and KVM subsystems alongside btrbk patches for CVE-2026-62943 and mupdf corrections for an out-of-bounds read disclosure. Updates to the rust-routinator ecosystem address path traversal vulnerabilities in rsync URI parsing, panics during AS number handling, and XML regression issues discovered through a security audit.

Fedora 43 Update: nuclei-3.11.0-1.fc43
Fedora 43 Update: kernel-7.1.4-102.fc43
Fedora 43 Update: perl-Crypt-OpenSSL-X509-2.1.3-1.fc43
Fedora 43 Update: rust-syslog-7.0.0-2.fc43
Fedora 43 Update: rust-rpki-0.19.3-2.fc43
Fedora 43 Update: rust-fern-0.7.1-6.fc43
Fedora 43 Update: rust-routinator-0.15.2-1.fc43
Fedora 44 Update: kernel-7.1.4-202.fc44
Fedora 44 Update: btrbk-0.32.7-1.fc44
Fedora 44 Update: mupdf-1.27.2-2.fc44
Fedora 44 Update: nuclei-3.11.0-1.fc44
Fedora 44 Update: perl-Crypt-OpenSSL-X509-2.1.3-1.fc44
Fedora 44 Update: rust-rpki-0.19.3-2.fc44
Fedora 44 Update: rust-fern-0.7.1-6.fc44
Fedora 44 Update: rust-ifcfg-devname-1.1.1-5.fc44
Fedora 44 Update: rust-syslog-7.0.0-2.fc44
Fedora 44 Update: rust-routinator-0.15.2-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released a coordinated batch of security patches for versions 43 and 44 targeting widely deployed system libraries and networking utilities. The advisories resolve dozens of publicly tracked vulnerabilities across packages including OpenSSH, Wireshark, wget1, libseccomp, c-ares, and Python image processing tools. Each notice maps specific CVE identifiers to attack vectors like remote code execution, heap corruption, and denial-of-service triggers found in crafted network traffic or malformed files.

Fedora 43 Update: python-pillow-11.3.0-10.fc43
Fedora 43 Update: libseccomp-2.6.1-2.fc43
Fedora 43 Update: openssh-10.0p1-11.fc43
Fedora 43 Update: dnsx-1.3.0-1.fc43
Fedora 43 Update: freerdp-3.30.0-1.fc43
Fedora 43 Update: libtiff-4.7.2-1.fc43
Fedora 43 Update: mingw-python-pip-26.1.2-1.fc43
Fedora 43 Update: mingw-python-idna-3.18-1.fc43
Fedora 43 Update: c-ares-1.34.8-1.fc43
Fedora 44 Update: dnsx-1.3.0-1.fc44
Fedora 44 Update: libreswan-5.3.2-2.fc44
Fedora 44 Update: freerdp-3.30.0-1.fc44
Fedora 44 Update: wget1-1.25.0-4.fc44
Fedora 44 Update: wireshark-4.6.7-1.fc44
Fedora 44 Update: gpsd-3.27.5-5.fc44
Fedora 44 Update: mingw-python-pip-26.1.2-1.fc44
Fedora 44 Update: mingw-python-idna-3.18-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 administrators must install new security patches for python-asyncssh, libseccomp, and mbedtls. The python-asyncssh packages resolve CVE-2026-54590 and CVE-2026-54591, which allow unauthorized file modifications and arbitrary writes through SCP path traversal. Fedora 44 received a libseccomp upgrade to version 2.6.1 that enables Python bindings and fixes memory corruption bugs alongside flawed syscall filter merging logic. The mbedtls library advanced to version 3.6.7 to patch seventeen separate cryptographic flaws involving buffer overflows, parsing errors, and TLS negotiation failures.

Fedora 43 Update: python-asyncssh-2.23.1-1.fc43
Fedora 44 Update: libseccomp-2.6.1-2.fc44
Fedora 44 Update: python-asyncssh-2.24.0-1.fc44
Fedora 44 Update: mbedtls-3.6.7-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 received a batch of security patches on July 19, 2026, targeting seven development tools including Erlang, ANTLR4, OPAM, UV, Orjson, and Async-Zip. The Erlang update backports six distinct vulnerabilities spanning server-side request forgery, denial of service attacks, and TLS authentication bypasses from the newer OTP 27 release to the current 26.x branch. Developers using UV and its Rust dependencies should note the new release hardens zip parsing routines against differential attacks, while the Orjson update refreshes its PyO3 dependency to patch two separate Rust security advisories.

Fedora 43 Update: erlang-26.2.5.21-4.fc43
Fedora 43 Update: antlr4-project-4.13.2-14.fc43
Fedora 43 Update: opam-2.5.2-1.fc43
Fedora 43 Update: python-uv-build-0.11.28-1.fc43
Fedora 43 Update: uv-0.11.28-1.fc43
Fedora 43 Update: python-orjson-3.11.9-3.fc43
Fedora 43 Update: rust-astral_async_zip-0.0.20-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and 44 release security updates resolving multiple high-severity flaws in Chromium, Ruby, ProFTPD, and related tools. The Chromium update resolves fifteen CVEs ranging from use-after-free memory corruption to heap buffer overflows, while Ruby 3.4.10 and 4.0.6 address deserialization bypasses and IMAP command injection flaws. Additional patches fix ProFTPD stack buffer overflows, Django header injection, yq cross-site scripting, and libtiff processing errors that could lead to code execution.

Fedora 43 Update: chromium-150.0.7871.124-1.fc43
Fedora 43 Update: node-exporter-1.12.1-1.fc43
Fedora 43 Update: spoofdpi-1.5.3-2.fc43
Fedora 43 Update: yq-4.53.3-1.fc43
Fedora 43 Update: ruby-3.4.10-31.fc43
Fedora 43 Update: proftpd-1.3.9c-1.fc43
Fedora 43 Update: log4cxx-1.7.0-2.fc43
Fedora 44 Update: chromium-150.0.7871.124-1.fc44
Fedora 44 Update: python-django5-5.2.16-1.fc44
Fedora 44 Update: libtiff-4.7.2-1.fc44
Fedora 44 Update: ruby-4.0.6-36.fc44
Fedora 44 Update: spoofdpi-1.5.3-1.fc44
Fedora 44 Update: yq-4.53.3-1.fc44
Fedora 44 Update: proftpd-1.3.9c-1.fc44
Fedora 44 Update: python-libcst-1.8.6-4.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora administrators must apply immediate security patches across Fedora 43 and Fedora 44 distributions. The xrdp package resolves ten reported vulnerabilities and fixes a segmentation fault that occurred during TLS connections. Roundcube Webmail updates close multiple security gaps involving stored cross-site scripting, server-side request forgery, and infinite loop denial-of-service attacks. Additional updates for perl-Imager, python-bcrypt, python-tiktoken, and firefox address critical CVEs, memory leaks, and dependency compatibility issues.

Fedora 43 Update: perl-Imager-1.033-1.fc43
Fedora 43 Update: xrdp-0.10.6.1-1.fc43
Fedora 43 Update: python-bcrypt-4.3.0-14.fc43
Fedora 43 Update: roundcubemail-1.6.17-1.fc43
Fedora 43 Update: python-tiktoken-0.13.0-2.fc43
Fedora 44 Update: firefox-152.0.6-1.fc44
Fedora 44 Update: perl-Imager-1.033-1.fc44
Fedora 44 Update: xrdp-0.10.6.1-1.fc44
Fedora 44 Update: python-bcrypt-4.3.0-14.fc44
Fedora 44 Update: roundcubemail-1.7.2-1.fc44
Fedora 44 Update: python-tiktoken-0.13.0-2.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

New Fedora 43 and 44 security updates are available. The kernel updates repair a data fork mapping error and enable driver support for the Sony IMX471 camera sensor. Prometheus advances to version 3.13.1 to block a memory allocation flaw that triggered denial of service attacks through HTTP/3 trailers. FreeRDP upgrades to version 3.28.0 to patch three remote desktop protocol vulnerabilities that previously allowed information disclosure and arbitrary code execution.

Fedora 43 Update: kernel-7.1.3-101.fc43
Fedora 43 Update: prometheus-3.13.1-1.fc43
Fedora 44 Update: kernel-7.1.3-201.fc44
Fedora 44 Update: prometheus-3.13.1-1.fc44
Fedora 44 Update: freerdp-3.28.0-1.fc44
Fedora 43 Update: freerdp-3.28.0-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and 44 systems receive a calibre update that jumps to version 9.11.0 and closes an arbitrary code execution flaw triggered by malicious ebook files. Fedora 43 administrators must also install golang-github-openprinting-ipp-usb version 0.9.34 to block a denial of service attack targeting DNS SAN entries. The Fedora 44 breezy version control tool advances to release 3.3.21, which incorporates PyO3 0.29 to resolve Rust security issues and updates dulwich compatibility layers.

Fedora 43 Update: calibre-9.11.0-1.fc43
Fedora 43 Update: golang-github-openprinting-ipp-usb-0.9.34-1.fc43
Fedora 44 Update: calibre-9.11.0-1.fc44
Fedora 44 Update: breezy-3.3.21-2.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 includes security updates for the attr and acl packages to address critical vulnerabilities found in filesystem attribute and access control tools. The attr package advances to version 2.6.0 to fix CVE-2026-54371, a symlink traversal privilege escalation flaw affecting the getfattr utility. Fedora also updated the acl package to version 2.4.0 to resolve CVE-2026-54369 and CVE-2026-54370, which involve symlink traversal privilege escalation via libacl functions and a time-of-check-to-time-of-use vulnerability in getfacl and setfacl.

Fedora 43 Update: attr-2.6.0-1.fc43
Fedora 43 Update: acl-2.4.0-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 44 and Fedora 43 receive security updates addressing multiple critical vulnerabilities across essential packages. The updates include significant fixes for OpenSSH (CVE-2026-55653 through CVE-2026-55655) and the System Security Services Daemon, which patches use-after-free crashes and path traversal flaws allowing Kerberos authentication bypass. Other major packages receive updates to address denial of service flaws in Python Pillow, command injection risks in JFrog CLI, and privilege escalation paths in attr and acl utilities. Additional advisories detail version updates for tmux, composer, prometheus, perl-HTML-Gumbo, and librabbitmq to resolve buffer overflows, path traversal issues, and information disclosure vulnerabilities.

Fedora 44 Update: tmux-3.7b-2.fc44
Fedora 44 Update: sssd-2.13.1-2.fc44
Fedora 44 Update: attr-2.6.0-1.fc44
Fedora 44 Update: acl-2.4.0-1.fc44
Fedora 44 Update: python-pillow-12.3.0-1.fc44
Fedora 44 Update: jfrog-cli-2.112.0-1.fc44
Fedora 44 Update: cjson-1.7.19-1.fc44
Fedora 44 Update: perl-HTML-Gumbo-0.19-1.fc44
Fedora 44 Update: prometheus-3.13.0-1.fc44
Fedora 44 Update: librabbitmq-0.17.0-1.fc44
Fedora 44 Update: composer-2.10.2-1.fc44
Fedora 44 Update: OpenImageIO-3.1.15.0-1.fc44
Fedora 43 Update: openssh-10.0p1-10.fc43
Fedora 43 Update: docker-compose-5.3.0-1.fc43
Fedora 43 Update: perl-HTML-Gumbo-0.19-1.fc43
Fedora 43 Update: prometheus-3.13.0-1.fc43
Fedora 43 Update: composer-2.10.2-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora distributed security advisories for versions 43 and 44, targeting vulnerabilities in core developer and system packages. The updates patch critical flaws in PHP versions 8.4 and 8.5, resolve a timing leak in the PAM authentication module, and fix a use-after-free issue in tmux. Additional corrections address heap overflows in perl-DBI, DNS query handling in c-ares, and memory corruption in xorg-x11-server-Xwayland.

Fedora 43 Update: k9s-0.51.0-2.fc43
Fedora 43 Update: kind-0.31.0-4.fc43
Fedora 43 Update: nmap-7.92-8.fc43
Fedora 43 Update: python-pendulum-3.2.0-1.fc43
Fedora 43 Update: php-8.4.23-1.fc43
Fedora 43 Update: tmux-3.7-3.fc43
Fedora 44 Update: perl-DBI-1.650-1.fc44
Fedora 44 Update: libXfont2-2.0.8-1.fc44
Fedora 44 Update: pam-1.7.2-2.fc44
Fedora 44 Update: xorg-x11-server-Xwayland-24.1.13-1.fc44
Fedora 44 Update: k9s-0.51.0-2.fc44
Fedora 44 Update: kind-0.31.0-4.fc44
Fedora 44 Update: c-ares-1.34.7-1.fc44
Fedora 44 Update: php-8.5.8-1.fc44
Fedora 44 Update: tmux-3.7-2.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and 44 deploy essential security patches addressing critical flaws across multiple packages. OpenSSH updates eliminate double-free errors, heap out-of-bounds reads, and man-in-the-middle attack vectors. The opkssh release mitigates denial-of-service risks and security bypasses, while perl-CSS-Minifier-XS corrects memory leaks. Updates for jiter, pendulum, and nh3 integrate PyO3 0.29 to resolve Rust security advisories, and the upower package addresses potential leaks and memory corruption risks.

Fedora 43 Update: perl-CSS-Minifier-XS-0.15-1.fc43
Fedora 43 Update: opkssh-0.15.0-2.fc43
Fedora 43 Update: rust-jiter-0.16.0-1.fc43
Fedora 43 Update: python-jiter-0.16.0-1.fc43
Fedora 44 Update: openssh-10.2p1-12.fc44
Fedora 44 Update: upower-1.91.3-1.fc44
Fedora 44 Update: opkssh-0.15.0-2.fc44
Fedora 44 Update: perl-CSS-Minifier-XS-0.15-1.fc44
Fedora 44 Update: python-pendulum-3.2.0-1.fc44
Fedora 44 Update: python-nh3-0.3.6-1.fc44
Fedora 44 Update: rust-jiter-0.16.0-1.fc44
Fedora 44 Update: python-jiter-0.16.0-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and 44 shipped a wide range of security updates that patch critical vulnerabilities across the Linux kernel, Rust libraries, and system utilities. The Linux kernel received a 7.1.3 rebase to address CVE-2026-53359, while rust-quick-xml updated to version 0.41.0 to resolve two separate RustSec advisories. Container management tools like podman-tui and prometheus-podman-exporter received fixes for multiple SSH and cryptographic flaws, alongside security patches for ClamAV, HPLIP, and the MinGW expat XML parser.

Fedora 43 Update: sandogasa-0.15.3-2.fc43
Fedora 43 Update: rust-reqsign-aws-v4-3.0.1-2.fc43
Fedora 43 Update: rust-quick-xml-0.41.0-1.fc43
Fedora 43 Update: rust-inferno-0.12.6-3.fc43
Fedora 43 Update: rust-busd-0.5.0-3.fc43
Fedora 43 Update: rust-wayland-scanner-0.31.10-3.fc43
Fedora 43 Update: mingw-expat-2.8.2-1.fc43
Fedora 44 Update: sandogasa-0.15.3-2.fc44
Fedora 44 Update: rust-reqsign-aws-v4-3.0.1-2.fc44
Fedora 44 Update: rust-inferno-0.12.6-3.fc44
Fedora 44 Update: rust-gtk4-macros-0.11.4-2.fc44
Fedora 44 Update: rust-wayland-scanner-0.31.10-3.fc44
Fedora 44 Update: rust-busd-0.5.0-3.fc44
Fedora 44 Update: rust-quick-xml-0.41.0-1.fc44
Fedora 44 Update: rust-ashpd-0.13.12-2.fc44
Fedora 44 Update: mir-2.26.0-2.fc44
Fedora 44 Update: hplip-3.26.4-7.fc44
Fedora 44 Update: python-rpds-py-0.29.0-4.fc44
Fedora 44 Update: mingw-expat-2.8.2-1.fc44
Fedora 43 Update: kernel-headers-7.1.3-100.fc43
Fedora 43 Update: kernel-7.1.3-100.fc43
Fedora 43 Update: perl-Imager-1.032-1.fc43
Fedora 43 Update: clamav-1.4.5-1.fc43
Fedora 43 Update: hplip-3.26.4-7.fc43
Fedora 43 Update: librabbitmq-0.17.0-1.fc43
Fedora 43 Update: podman-tui-1.11.3-1.fc43
Fedora 43 Update: prometheus-podman-exporter-1.21.2-1.fc43
Fedora 44 Update: kernel-headers-7.1.3-200.fc44
Fedora 44 Update: kernel-7.1.3-200.fc44
Fedora 44 Update: perl-Imager-1.032-1.fc44
Fedora 44 Update: podman-tui-1.11.3-1.fc44
Fedora 44 Update: prometheus-podman-exporter-1.21.2-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and 44 received a coordinated batch of security updates targeting widely deployed packages including Chromium, Nextcloud, MariaDB, Jupyter Server, ClamAV, NSD, and Streamlink. The Chromium release alone resolves 433 distinct vulnerabilities, while Nextcloud addresses prototype pollution flaws in Axios and code injection risks embedded in Mermaid and Guzzle libraries. MariaDB patches fix critical issues spanning heap buffer overflows and authentication bypasses across the 10.11 and 11.8 release branches.

Fedora 44 Update: chromium-150.0.7871.46-1.fc44
Fedora 44 Update: clamav-1.4.5-1.fc44
Fedora 44 Update: perl-Crypt-ScryptKDF-0.011-1.fc44
Fedora 44 Update: nextcloud-33.0.6-1.fc44
Fedora 44 Update: mariadb10.11-10.11.18-2.fc44
Fedora 44 Update: python-jupyter-server-2.20.0-1.fc44
Fedora 44 Update: nsd-4.14.3-1.fc44
Fedora 44 Update: python-streamlink-8.4.0-1.fc44
Fedora 43 Update: chromium-150.0.7871.46-1.fc43
Fedora 43 Update: nextcloud-33.0.6-1.fc43
Fedora 43 Update: python-jupyter-server-2.20.0-1.fc43
Fedora 43 Update: mariadb11.8-11.8.8-1.fc43
Fedora 43 Update: python-streamlink-8.4.0-1.fc43
Fedora 43 Update: nsd-4.14.3-1.fc43