Back Linuxsecurity

Fedora 44 rest Library Moderate Random Number Issue CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 11, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This library was designed to make it easier to access web services that

claim to be "RESTful". A RESTful service should have urls that represent

remote objects, which methods can then be called on. The majority of services

don't actually adhere to this strict definition. Instead, their RESTful end

point usually has an API that is just simpler to use compared to other types

of APIs they may support (XML-RPC, for instance). It is this kind of API that

this library is attempting to support.

Fix for

* Wed Aug 26 2026 Adrian Vovk - 0.10.2-9 - Fix CVE-2026-16615 * Mon Mar 2 2026 Jan Grulich - 0.10.2-8 - Packit: drop upstream_project_url and rely on release-monitoring only * Wed Feb 25 2026 Jan Grulich - 0.10.2-7 - Packit: drop fast_forward_merge_into as current stable branches diverge * Tue Feb 24 2026 Jan Grulich - 0.10.2-6 - Onboard to Packit for stable Fedora branches

[ 1 ] Bug #2506177 - CVE-2026-16615 rest: weak random number generation in PKCE implementation [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-df38653cf2' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Moderate Random Number Generation Issue in Fedora REST Library A moderate vulnerability (CVE-2026-16615) has been identified in the Fedora REST library, affecting versions prior to 0.10.2-9. The flaw involves weak random number generation in the PKCE implementation, which could lead to security issues. The vulnerability was published on July 22, 2026, and is now addressed in the latest updates. Users are urged to upgrade their systems using the 'dnf' update program to mitigate potential risks. The advisory applies to all Fedora systems utilizing this library. No active exploitation has been reported as of now, but the issue has been acknowledged by the Fedora project. 2 sources 46

Extracted Entities

CVEs (1)

CVE-2026-16615

Platforms (1)

Linux