Back Linuxsecurity

Fedora 44 Restic Important DoS & Access Issues Fix 2026

Linuxsecurity •LinuxSecurity Advisories • June 19, 2026

* Wed Jun 10 2026 Mikel Olasagasti Uranga - 0.19.0-1 - Update to 0.19.0 - Closes rhbz#2487290

[ 1 ] Bug #2455673 - CVE-2026-34986 restic: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all] [ 2 ] Bug #2464136 - CVE-2026-41179 restic: Rclone: Unauthenticated local command execution via exposed RC endpoint [fedora-all] [ 3 ] Bug #2464140 - CVE-2026-41176 restic: Rclone: Unauthorized access to administrative functions through unauthenticated Remote Control endpoint. [fedora-all] [ 4 ] Bug #2486238 - CVE-2026-45287 restic: OpenTelemetry-Go: Denial of Service due to file descriptor leak [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2290b9a9ad' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Restic and Singularity-CE Vulnerabilities Lead to Denial of Service Risks Recent updates for Fedora 43 and 44 address multiple vulnerabilities in Restic and Singularity-CE, including Denial of Service (DoS) issues and unauthorized access risks. The vulnerabilities, identified as CVE-2026-34986, CVE-2026-41179, and CVE-2026-41176, affect Fedora systems and allow attackers to exploit crafted JSON Web Encryption objects and unauthorized command execution. The updates were released on June 10, 2026, and are critical for users to apply to mitigate potential attacks. The vulnerabilities were reported to have been published between April 6 and April 23, 2026. Users are advised to upgrade to the latest versions using the provided commands to secure their systems against these threats. 20 sources 61

Extracted Entities

Fedora 44 Restic Important DoS & Access Issues Fix 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (4)

Tools (1)