Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora has released security updates for python-wsgidav version 4.3.5 targeting both Fedora 43 and Fedora 44. The new packages address two specific security flaws identified as CVE-2026-55509 and CVE-2026-55560. This Python-based WebDAV server provides SSL support, PAM authentication, and serves as a multi-threaded web server or WSGI middleware for virtual file systems and online document editing. Users can apply the patch using the command dnf upgrade --advisory FEDORA-2026-3808436c81 for Fedora 43 or dnf upgrade --advisory FEDORA-2026-348ad953b4 for Fedora 44.

Fedora 43 Update: python-wsgidav-4.3.5-1.fc43
Fedora 44 Update: python-wsgidav-4.3.5-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released security updates for Fedora 43 and Fedora 44 that update udisks2, pgadmin4, bird, and nghttp2 to address multiple vulnerabilities. The pgadmin4 update to version 9.17 patches four flaws including a remote code execution risk in the Import/Export Data tool and an OS command injection vector in the MASTER_PASSWORD_HOOK, while the bird update to 3.3.2 fixes a stack buffer overflow in the BGP Flowspec NLRI decoder. nghttp2 version 1.68.0-5 blocks HTTP request/response smuggling and response-queue poisoning caused by ambiguous HTTP/1.1 upgrade requests, which the bug tracker lists as CVE-2026-58055, and udisks2 advances to upstream release 2.11.2 for general enhancements. Users must run the appropriate dnf upgrade commands to install these packages and secure their environments against unauthenticated access, data manipulation, and potential information disclosure.

Fedora 43 Update: udisks2-2.11.2-1.fc43
Fedora 43 Update: pgadmin4-9.17-1.fc43
Fedora 43 Update: bird-3.3.2-1.fc43
Fedora 44 Update: nghttp2-1.68.0-5.fc44
Fedora 44 Update: pgadmin4-9.17-1.fc44
Fedora 44 Update: bird-3.3.2-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released a coordinated security update for Fedora 43 and Fedora 44, targeting foundational packages like the Linux kernel, Python 3.12, Erlang, and Perl 5.42.3. The release closes documented flaws across the ecosystem, including a kernel vulnerability tracked as CVE-2026-68480 and an SSL authentication bypass in Erlang flagged as CVE-2026-55953. RabbitMQ received eight distinct patches that eliminate cross-site scripting risks, unauthorized message routing, and credential exposure through outdated API endpoints. Users can install the corrected packages immediately through the dnf package manager by running the advisory-specific upgrade command listed in the notification.

Fedora 44 Update: udisks2-2.11.2-1.fc44
Fedora 44 Update: kernel-7.1.7-200.fc44
Fedora 44 Update: p11-kit-0.26.5-1.fc44
Fedora 44 Update: erlang-26.2.5.21-5.fc44
Fedora 44 Update: mingw-glib2-2.88.3-1.fc44
Fedora 43 Update: kernel-7.1.7-100.fc43
Fedora 43 Update: perl-PAR-Packer-1.064-5.fc43
Fedora 43 Update: polymake-4.15-6.fc43
Fedora 43 Update: perl-5.42.3-524.fc43
Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43
Fedora 43 Update: seamonkey-2.53.24-1.fc43
Fedora 43 Update: erlang-26.2.5.21-5.fc43
Fedora 43 Update: python3.12-3.12.13-6.fc43
Fedora 43 Update: rabbitmq-server-4.0.9-5.fc43
Fedora 43 Update: python-nh3-0.2.21-9.fc43
Fedora 43 Update: rust-ammonia-4.1.4-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 both received a broad security push this week, with advisories covering Chromium, Samba, PHP, Traffic Server, and the Linux kernel. The Chromium release alone ships 370 patched vulnerabilities, while server components like Samba and PHP address critical issues ranging from LDAP domain takeovers to out-of-bounds memory writes. Core system utilities including curl, coreutils, ABRT, and ImageMagick also received targeted fixes for authentication leaks, race conditions, and buffer overflows. Users can apply all approved patches immediately by running the standard DNF upgrade command with the corresponding Fedora advisory identifiers.

Fedora 44 Update: libXfont2-2.0.9-1.fc44
Fedora 44 Update: samba-4.24.5-1.fc44
Fedora 44 Update: freeipa-4.13.2-1.fc44
Fedora 44 Update: chromium-151.0.7922.71-1.fc44
Fedora 44 Update: trafficserver-10.1.4-1.fc44
Fedora 44 Update: tcpreplay-4.6.0-2.fc44
Fedora 43 Update: kernel-7.1.6-101.fc43
Fedora 43 Update: chromium-151.0.7922.71-1.fc43
Fedora 43 Update: trafficserver-10.1.4-1.fc43
Fedora 43 Update: tcpreplay-4.6.0-2.fc43
Fedora 43 Update: ImageMagick-7.1.2.27-1.fc43
Fedora 43 Update: libXfont2-2.0.9-1.fc43
Fedora 43 Update: samba-4.23.10-1.fc43
Fedora 43 Update: freeipa-4.13.2-1.fc43
Fedora 43 Update: curl-8.15.0-8.fc43
Fedora 43 Update: coreutils-9.7-10.fc43
Fedora 43 Update: abrt-2.17.9-1.fc43
Fedora 43 Update: php-8.4.24-1.fc43
Fedora 44 Update: gstreamer1-plugins-bad-free-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-plugins-good-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-rtsp-server-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-plugin-libav-1.28.6-1.fc44
Fedora 44 Update: gst-editing-services-1.28.6-1.fc44
Fedora 44 Update: python-gstreamer1-1.28.6-1.fc44
Fedora 44 Update: gst-devtools-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-plugins-ugly-free-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-plugins-base-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-doc-1.28.6-1.fc44
Fedora 44 Update: gstreamer1-1.28.6-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora issued a coordinated set of security advisories for versions 43 and 44 that close active vulnerability gaps across essential system packages. The release updates open62541 to 1.5.6, pushes doctl to 1.164.0, ships Linux kernel 7.1.6 with upstream stability fixes, rebuilds Perl 5.42.3 dependencies, and resolves multiple flaw codes in ABRT, Coreutils, and related utilities. Each notification details specific CVE remediations that neutralize denial of service vectors, memory corruption flaws, file injection risks, and race conditions threatening system integrity.

Fedora 43 Update: open62541-1.5.6-1.fc43
Fedora 43 Update: doctl-1.164.0-1.fc43
Fedora 44 Update: kernel-7.1.6-201.fc44
Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44
Fedora 44 Update: polymake-4.15-11.fc44
Fedora 44 Update: perl-5.42.3-525.fc44
Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44
Fedora 44 Update: abrt-2.17.9-1.fc44
Fedora 44 Update: coreutils-9.10-5.fc44
Fedora 44 Update: open62541-1.5.6-1.fc44
Fedora 44 Update: doctl-1.164.0-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora issued five security advisories, delivering patches for borgbackup, seamonkey, nebula, and the ammonia package ecosystem across Fedora 43 and Fedora 44. Fedora 43 administrators need to upgrade borgbackup to version 1.4.5 to close CVE-2026-62268, while Fedora 44 users must install seamonkey version 2.53.24 to secure the internet suite against reported vulnerabilities. The nebula update pushes version 1.11.0 on Fedora 44 and blocks six CVEs involving SSH denial of service attacks, unauthorized command execution via discarded permissions, and ECDSA signature malleability in the overlay networking tool. A joint advisory for Fedora 44 updates rust-ammonia to version 4.1.4 and rebuilds python-nh3 to fix RUSTSEC-2026-0193 and RUSTSEC-2026-0213, ensuring proper HTML sanitization across both the Rust crate and Python bindings.

Fedora 43 Update: borgbackup-1.4.5-1.fc43
Fedora 44 Update: seamonkey-2.53.24-1.fc44
Fedora 44 Update: python-nh3-0.3.6-4.fc44
Fedora 44 Update: rust-ammonia-4.1.4-1.fc44
Fedora 44 Update: nebula-1.11.0-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora distributed security updates for goaccess, NSD, and BorgBackup across the Fedora 43 and 44 platforms. The goaccess release jumps to version 1.11, delivering a roughly 20 percent drop in memory consumption, a 35 percent parsing speed increase, and patches for heap overflows alongside visitor tracking inaccuracies. NSD advanced to version 4.15.0 with hardening against several critical vulnerabilities, including client certificate verification bypasses over TLS and multiple buffer overflow flaws triggered by malformed DNS records. BorgBackup received its 1.4.5 release specifically to resolve CVE-2026-62268 for the deduplicating backup utility.

Fedora 43 Update: goaccess-1.11-1.fc43
Fedora 43 Update: nsd-4.15.0-1.fc43
Fedora 44 Update: borgbackup-1.4.5-1.fc44
Fedora 44 Update: goaccess-1.11-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released a batch of security updates for both Fedora 43 and Fedora 44 to patch known vulnerabilities across several core packages. The Fedora 43 release rolls out fixes for rust-libgit2-sys, libgit2, Nextcloud, exim, GitPython, lemonldap-ng, PostgreSQL 16, and coturn, with the libgit2 and Nextcloud updates specifically targeting CVEs like CVE-2026-53583 through CVE-2026-53587. Fedora 44 recipients will receive patches for curl, gh, xen, lemonldap-ng, and coturn that close flaws ranging from SSH host validation bypasses and cookie injection attacks to out-of-bounds reads in the Xen hypervisor.

Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43
Fedora 43 Update: libgit2-1.9.6-1.fc43
Fedora 43 Update: nextcloud-34.0.2-1.fc43
Fedora 43 Update: exim-4.99.5-1.fc43
Fedora 43 Update: GitPython-3.1.55-1.fc43
Fedora 43 Update: lemonldap-ng-2.23.2-1.fc43
Fedora 43 Update: postgresql16-16.14-1.fc43
Fedora 43 Update: coturn-4.15.0-1.fc43
Fedora 44 Update: curl-8.18.0-8.fc44
Fedora 44 Update: gh-2.97.0-2.fc44
Fedora 44 Update: xen-4.21.2-1.fc44
Fedora 44 Update: lemonldap-ng-2.23.2-1.fc44
Fedora 44 Update: coturn-4.15.0-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

The Fedora Respins SIG released new bootable images on July 31 that bundle every package, kernel patch, and security fix since the April 28 base launch. Community packagers built these x86_64-only hybrid ISOs using automated pipelines, and they support both BIOS and UEFI systems without requiring manual system upgrades. Downloadable flavors range from GNOME Workstation at 2.7 GB down to the lightweight SOAS spin at 2.2 GB, giving users a faster alternative to running extended update cycles. The underlying Fedora 44 release also introduces GNOME 50, KDE Plasma 6.6 with an updated setup flow, default NTsync support for Wine and Steam, and MariaDB 11.8 as the new database standard.

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 44 administrators can now apply a batch of security patches, covering seven major system packages. The updates address critical vulnerabilities across fuse-overlayfs, Python 3.12, PHP 8.5.9, Nextcloud 34.0.2, Exim 4.99.5, PostgreSQL 16.14, and RabbitMQ Server 4.2.9 by patching privilege escalation risks, arbitrary code execution flaws, SQL injection vectors, and cross-site scripting issues. System operators can install the corrected versions through the dnf package manager using their respective advisory identifiers. These patches prevent potential system compromise and keep containerized environments, web servers, and database services running securely on Fedora 44.

Fedora 44 Update: fuse-overlayfs-1.17-1.fc44
Fedora 44 Update: python3.12-3.12.13-6.fc44
Fedora 44 Update: php-8.5.9-1.fc44
Fedora 44 Update: nextcloud-34.0.2-1.fc44
Fedora 44 Update: exim-4.99.5-1.fc44
Fedora 44 Update: postgresql16-16.14-1.fc44
Fedora 44 Update: rabbitmq-server-4.2.9-2.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

PHP's July 30 security release fixes three CVEs, including a SQL injection in PostgreSQL extensions and a stack overflow in Phar archives. Remi Collet published corresponding RPM packages for Fedora ≥42 and Enterprise Linux ≥8 on July 31, covering PHP 8.5.9, 8.4.24, 8.3.33, and 8.2.33. The updates are available via remi-modular repository or as parallel Software Collections installations. PHP 8.1 has reached end-of-life, so users should upgrade to at least 8.2.33 immediately.

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released security patches for versions 43 and 44 targeting unbound, dokuwiki, pack, nasm, valkey, lego, and libnbd to address over thirty confirmed CVEs. The vulnerabilities span denial of service attacks through DNS-over-QUIC pressure, remote code execution via TLS connection flaws in Valkey, cache poisoning exploits in Unbound, and privilege escalation risks within containerd used by Pack. System administrators can apply the fixes immediately by running the corresponding DNF advisory commands for each affected package. Delaying these installations leaves servers exposed to memory corruption, unauthorized command execution, and data integrity breaches that attackers could exploit without authentication.

Fedora 43 Update: unbound-1.25.2-1.fc43
Fedora 43 Update: dokuwiki-20250514b-4.fc43
Fedora 43 Update: pack-0.40.8-1.fc43
Fedora 43 Update: nasm-2.16.03-5.fc43
Fedora 43 Update: valkey-8.1.9-1.fc43
Fedora 43 Update: lego-5.3.1-2.fc43
Fedora 43 Update: libnbd-1.24.3-1.fc43
Fedora 44 Update: dokuwiki-20250514b-6.fc44
Fedora 44 Update: pack-0.40.8-1.fc44
Fedora 44 Update: valkey-9.0.5-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Red Hat has split Fedora’s top community leadership position into two dedicated roles, with Shaun McCance inheriting the traditional Fedora Community Architect seat and Justin Wheeler moving into a newly created AI Alignment Community Architect position. The transition runs through the Fedora Linux 45 release in October 2026, giving McCance time to take over event logistics, budget stewardship, and Fedora Council representation while Wheeler focuses on aligning default AI services with the project’s four founding principles.

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora pushed a large batch of security patches to both Fedora 43 and Fedora 44. The release tackles serious flaws across WordPress 6.9.5, Node.js 24, Nginx 1.30.4, Unbound, ProFTPD, Squid, libssh, and Perl-HTTP-Date. System administrators gain fixes for remote code execution risks in the WordPress REST API, heap buffer overflows in Unbound, denial of service threats inside Node.js undici libraries, and cache poisoning flaws across several network services.

Fedora 44 Update: libssh-0.12.2-1.fc44
Fedora 44 Update: unbound-1.25.2-1.fc44
Fedora 44 Update: proftpd-1.3.9c-3.fc44
Fedora 44 Update: squid-7.6-1.fc44
Fedora 44 Update: nodejs24-24.18.0-1.fc44
Fedora 44 Update: wordpress-6.9.5-1.fc44
Fedora 43 Update: proftpd-1.3.9c-3.fc43
Fedora 43 Update: wordpress-6.9.5-1.fc43
Fedora 43 Update: nginx-mod-fancyindex-0.6.0-8.fc43
Fedora 43 Update: nginx-mod-vts-0.2.4-13.fc43
Fedora 43 Update: nginx-mod-modsecurity-1.0.4-16.fc43
Fedora 43 Update: nginx-mod-brotli-1.0.0~rc-13.fc43
Fedora 43 Update: nginx-1.30.4-1.fc43
Fedora 43 Update: nginx-mod-naxsi-1.6-21.fc43
Fedora 43 Update: nginx-mod-headers-more-0.40-3.fc43
Fedora 43 Update: perl-HTTP-Date-6.08-1.fc43

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released a batch of security patches for versions 43 and 44 on July 29, 2026. The update addresses critical flaws in five packages: Chromium, restic, kronosnet, btrbk, and gpsd. System administrators should apply these fixes to resolve sandbox escapes, command injection risks, memory corruption bugs, and multiple cryptographic vulnerabilities tracked under specific CVE identifiers. Users can install the patches by running dnf upgrade --advisory [update-ID] from their terminal.

Fedora 43 Update: chromium-150.0.7871.186-1.fc43
Fedora 43 Update: restic-0.19.1-1.fc43
Fedora 43 Update: kronosnet-1.35-1.fc43
Fedora 43 Update: btrbk-0.32.7-1.fc43
Fedora 43 Update: gpsd-3.26.1-7.fc43
Fedora 44 Update: chromium-150.0.7871.186-1.fc44
Fedora 44 Update: kronosnet-1.35-1.fc44
Fedora 44 Update: restic-0.19.1-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora administrators should apply new security advisories for versions 43 and 44 that address critical flaws across three packages: perl-Mojolicious, rpm, and opkssh. The perl-Mojolicious update to version 9.48 resolves a BREACH attack vulnerability where CSRF tokens were previously exposed through compression oracle techniques, now masking tokens with fresh random values per request. Meanwhile, the rpm rebase to version 6.0.2 patches two distinct issues including a heap buffer overflow in NDB slot table parsing and a command injection flaw within rpmuncompress triggered by unescaped archive directory names. Finally, opkssh moves to version 0.16.0 with an upgraded openpubkey dependency that fixes GQ-commitment PK Token weaknesses affecting GitLab-CI workflows, though current opkssh usage does not reach the vulnerable code path.

Fedora 43 Update: perl-Mojolicious-9.48-1.fc43
Fedora 43 Update: rpm-6.0.2-1.fc43
Fedora 43 Update: opkssh-0.16.0-1.fc43
Fedora 44 Update: opkssh-0.16.0-1.fc44
Fedora 44 Update: perl-Mojolicious-9.48-1.fc44
Fedora 44 Update: rpm-6.0.2-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 received a batch of security advisories covering core packages like systemd, skopeo, trafficserver, libgit2, lego, and libwebsockets to address multiple vulnerabilities across the distributions. The updates resolve specific security flaws, including the Go stdlib crypto/x509 denial-of-service flaw in skopeo that golang-1.25.12 resolves, HTTP/2 stalled flow-control problems in trafficserver linked to CVE-2026-59173, and an SSH protocol handler resource consumption vulnerability in libwebsockets labeled CVE-2026-10650. Fedora 44 users must update rust-libgit2-sys and the underlying libgit2 library to version 1.9.6 to patch five distinct security issues ranging from CVE-2026-53583 through CVE-2026-53587, while the lego package upgrade to version 5.3.1 fixes an off-path DNS poisoning vulnerability described by CVE-2026-10846.

Fedora 43 Update: systemd-258.10-1.fc43
Fedora 43 Update: skopeo-1.22.2-2.fc43
Fedora 43 Update: trafficserver-10.1.3-1.fc43
Fedora 43 Update: libwebsockets-4.5.8-2.fc43
Fedora 44 Update: systemd-259.8-1.fc44
Fedora 44 Update: rust-libgit2-sys-0.18.7-1.fc44
Fedora 44 Update: libgit2-1.9.6-1.fc44
Fedora 44 Update: lego-5.3.1-2.fc44
Fedora 44 Update: trafficserver-10.1.3-1.fc44
Fedora 44 Update: libwebsockets-4.5.8-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora released a batch of security patches on July 26, 2026, targeting both Fedora 43 and Fedora 44 distributions. The advisories address multiple critical vulnerabilities across core applications like Firefox, the Moby container engine, xrdp remote desktop server, Libreswan VPN daemon, PAM authentication modules, and WebKitGTK rendering libraries. Attackers could exploit these flaws to trigger denial-of-service crashes, bypass authentication through timing side-channels, or leak sensitive data via buffer overflows and unvalidated input parsing.

Fedora 43 Update: firefox-153.0-3.fc43
Fedora 43 Update: google-osconfig-agent-20260717.00-1.fc43
Fedora 43 Update: moby-engine-29.6.2-1.fc43
Fedora 43 Update: xrdp-0.10.6.1-3.fc43
Fedora 43 Update: libreswan-5.3.2-2.fc43
Fedora 43 Update: webkitgtk-2.52.5-1.fc43
Fedora 43 Update: python-idna-3.18-1.fc43
Fedora 43 Update: p11-kit-0.26.4-1.fc43
Fedora 43 Update: pam-1.7.1-5.fc43
Fedora 44 Update: GitPython-3.1.55-1.fc44
Fedora 44 Update: google-osconfig-agent-20260717.00-1.fc44
Fedora 44 Update: xrdp-0.10.6.1-3.fc44
Fedora 44 Update: moby-engine-29.6.2-1.fc44

Fedora Linux 9487 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 received a batch of security updates targeting critical vulnerabilities across key system components including Chromium, Django, .NET Runtime, Skopeo, Netatalk, Mbed TLS, MuPDF, SSSD, and Wget. The patches resolve numerous Common Vulnerabilities and Exposures (CVEs), ranging from buffer overflows and use-after-free errors to privilege escalation flaws in the System Security Services Daemon and authentication bypasses within Netatalk's Apple Filing Protocol server. Notable fixes address severe issues such as arbitrary code execution risks in Wget via crafted HTML attributes, denial-of-service conditions caused by excessive DNS SAN processing in Skopeo, and potential Kerberos authentication bypasses due to path traversal attacks in SSSD's Group Policy Object cache.

Fedora 43 Update: chromium-150.0.7871.181-1.fc43
Fedora 43 Update: python-django5-5.2.16-1.fc43
Fedora 43 Update: dotnet10.0-10.0.110-1.fc43
Fedora 43 Update: mupdf-1.27.2-2.fc43
Fedora 43 Update: sssd-2.12.0-3.fc43
Fedora 43 Update: wget1-1.25.0-3.fc43
Fedora 43 Update: mbedtls-3.6.7-1.fc43
Fedora 44 Update: chromium-150.0.7871.181-1.fc44
Fedora 44 Update: dotnet10.0-10.0.110-1.fc44
Fedora 44 Update: skopeo-1.22.2-2.fc44
Fedora 44 Update: netatalk-4.5.1-1.fc44