Back Linuxsecurity

Fedora 44 Singularity-CE Upgrade Critical Issues 2026

Linuxsecurity •LinuxSecurity Advisories • June 19, 2026

* Wed Jun 10 2026 David Trudgian - 4.4.2-1 - Upgrade to 4.4.2 upstream version. - Fix rhbz#2453093 - Fix rhbz#2458933 - Fix rhbz#2455674 - Fix CVE-2026-47215

[ 1 ] Bug #2453093 - CVE-2026-33748 singularity-ce: BuildKit: Unauthorized file access via Git URL fragment subdir components [fedora-all] [ 2 ] Bug #2455674 - CVE-2026-34986 singularity-ce: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all] [ 3 ] Bug #2458933 - CVE-2026-39984 singularity-ce: improper certificate validation in verifier [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-63ae478575' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Restic and Singularity-CE Vulnerabilities Lead to Denial of Service Risks Recent updates for Fedora 43 and 44 address multiple vulnerabilities in Restic and Singularity-CE, including Denial of Service (DoS) issues and unauthorized access risks. The vulnerabilities, identified as CVE-2026-34986, CVE-2026-41179, and CVE-2026-41176, affect Fedora systems and allow attackers to exploit crafted JSON Web Encryption objects and unauthorized command execution. The updates were released on June 10, 2026, and are critical for users to apply to mitigate potential attacks. The vulnerabilities were reported to have been published between April 6 and April 23, 2026. Users are advised to upgrade to the latest versions using the provided commands to secure their systems against these threats. 20 sources 61

Extracted Entities

Companies (1)

Fedora

CVEs (4)

CVE-2026-33748 CVE-2026-34986 CVE-2026-39984 CVE-2026-47215