Back Linuxsecurity

Fedora 44 mir Security Advisory Quick-XML Sandogasa Update 2026

Linuxsecurity •LinuxSecurity Advisories • July 6, 2026

Update quick-xml for two security advisories, rebuild dependents, and update sandogasa to the latest sandogasa v0.15.3 ebranch base-distro guard — resolve/file-requests now know EPEL must not replace RHEL/CentOS Stream packages: deps present in the base at a too-old version are blocked with clear options (alternate package via --override, or lower the requirement) instead of becoming CANTFIX branch requests; file-requests re-checks the base before filing New sandogasa-sourcehut crate — sr.ht GraphQL client; sandogasa-report gains a Sourcehut section (patches, tickets, commits split yours vs third-party, git_emails attribution) ebranch check-crate — human report on stderr alongside --koji/--copr machine output, so build scripts stay pipeable dbranch rebuild — creates debian/gbp.conf when the Debian branch has none and handles the modern single-line salsa...

* Fri Jul 3 2026 Michel Lind - 2.26.0-2 - Rebuild for rust-quick-xml 0.41.0

[ 1 ] Bug #2494601 - rust-quick-xml-0.41.0 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b25dca4806' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for Fedora's Quick-XML and Related Packages On July 3, 2026, Fedora released multiple critical security updates addressing vulnerabilities in the quick-xml library and associated packages across Fedora 43 and 44. These updates include patches for rust-quick-xml, rust-wayland-scanner, rust-ashpd, rust-inferno, and rust-busd, which could potentially allow attackers to exploit outdated dependencies. The updates are aimed at preventing issues related to dependency management and ensuring compatibility with the latest versions of quick-xml. Users are advised to upgrade their systems using the 'dnf' package manager to mitigate risks. The vulnerabilities were identified in the context of Fedora's ongoing efforts to maintain security and stability across its distributions. The updates are available for immediate installation, and users are encouraged to act promptly to secure their systems. 13 sources 74

Extracted Entities

Domains (1)

sr.ht