Back Linuxsecurity

Fedora 43 rply Update Fixes DoS Vulnerability in Crafted PLY Files

Linuxsecurity •LinuxSecurity Advisories • November 5, 2026

Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×

RPly is a library that lets applications read and write PLY files.

The PLY file format is widely used to store geometric information, such as 3D

models, but is general enough to be useful for other purposes.

RPly is easy to use, well documented, small, free, open-source, ANSI C,

efficient, and well tested. The highlights are:

* A callback mechanism that makes PLY file input straightforward;

* Support for the full range of numeric formats;

* Binary (big and little endian) and text modes are fully supported;

* Input and output are buffered for efficiency;

* Available under the MIT license for added freedom.

Fix for CVE-2026-115722

* Tue Oct 27 2026 Peter Lemenkov - 1.1.4-11 - Fix FTBFS with modern CMake * Tue Oct 27 2026 Peter Lemenkov - 1.1.4-10 - Fix for CVE-2026-115722 * Thu Jul 16 2026 Fedora Release Engineering - 1.1.4-9 - Rebuilt for * Fri Feb 13 2026 Cristian Le - 1.1.4-8 - Allow to build with CMake 4.0 (rhbz#2381410) * Sat Jan 17 2026 Fedora Release Engineering - 1.1.4-7 - Rebuilt for

[ 1 ] Bug #2562398 - CVE-2026-115722 rply: rply: Denial of service via crafted PLY file [fedora-43] [ 2 ] Bug #2562399 - CVE-2026-115722 rply: rply: Denial of service via crafted PLY file [fedora-44] [ 3 ] Bug #2562401 - CVE-2026-115722 rply: rply: Denial of service via crafted PLY file [fedora-rawhide]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5079b4320a' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 Update Addresses DoS Vulnerability in RPly Library A recent update to Fedora 43 has addressed a denial-of-service (DoS) vulnerability in the RPly library, which is used for reading and writing PLY files. This vulnerability, identified as CVE-2026-115722, allows attackers to exploit crafted PLY files to cause service disruptions. The flaw affects various setups and PHP versions, potentially impacting applications that rely on RPly for handling PLY files. The vulnerability was published on October 23, 2026, with a CVSS score of 6.9, indicating a medium severity level. Users are advised to update their systems using the 'dnf' update program to mitigate the risk. The update was released on November 5, 2026, coinciding with the publication of this advisory. 1 sources 51

Extracted Entities

Fedora 43 rply Update Fixes DoS Vulnerability in Crafted PLY Files

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)