Back Linuxsecurity

Fedora 44 python-mistune Critical Arbitrary Code Exec Fix 2026

Linuxsecurity •LinuxSecurity Advisories • June 28, 2026

* Thu Jun 18 2026 Miro Hrončok - 3.2.1-1 - Update to 3.2.1 - Security fix for CVE-2026-44898 - Fixes: rhbz#2424578 - Fixes: rhbz#2489782 * Thu Jun 4 2026 Python Maint - 3.1.3-7 - Rebuilt for Python 3.15

[ 1 ] Bug #2424578 - python-mistune-3.2.1 is available [ 2 ] Bug #2489782 - CVE-2026-44898 python-mistune: Mistune: Arbitrary code execution via HTML injection in table of contents rendering [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3b027683d8' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Security Updates for Fedora Address Critical Vulnerabilities Fedora has released important updates addressing vulnerabilities in the ldns and python-mistune packages. The ldns library update (CVE-2026-10846), published on June 10, 2026, resolves a significant issue affecting low-level DNS operations. Additionally, python-mistune received a critical update (CVE-2026-44898) on June 18, 2026, which fixes an arbitrary code execution vulnerability due to HTML injection in table of contents rendering. Users of Fedora 43 and 44 are advised to apply these updates promptly to mitigate potential exploitation risks. Both vulnerabilities have been acknowledged by the Fedora community, emphasizing the importance of maintaining updated systems. The updates can be installed using the dnf package manager, with specific advisories provided for each CVE. 3 sources 58

Extracted Entities

Fedora 44 python-mistune Critical Arbitrary Code Exec Fix 2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Tools (1)