Back Linuxsecurity

Fedora python-lsp-black Important Security Fix Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • July 24, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

lsp-black is a python-lsp-server plugin that adds support to black

autoformatter. This is forked from pyls-black to be compatible wth

community maintained language-server (python-lsp-server).

Upgrade to 26.5.1, solves serious vulnerabilities such as: CVE-2026-31900 CVE-2026-32274

* Tue Jul 14 2026 Benjamin A. Beasley - 2.0.0-17 - Fix compatibility with black≥26.5 (fixes RHBZ#2485891) * Tue Jul 14 2026 Benjamin A. Beasley - 2.0.0-16 - Patch for pkg_resources removal from setuptools * Tue Jul 14 2026 Tomáš Hrnčiar - 2.0.0-15 - Fix invalid extras in %pyproject_buildrequires -x * Tue Jun 16 2026 Python Maint - 2.0.0-14 - Rebuilt for Python 3.15

Fedora Update Notification FEDORA-2026-3805ba3721 2026-07-24 00:56:22.694785+00:00 Name : python-lsp-black Product : Fedora 44 Version : 2.0.0 Release : 17.fc44 URL : Summary : A python-lsp-server plugin that adds support to black autoformatter Description : lsp-black is a python-lsp-server plugin that adds support to black autoformatter. This is forked from pyls-black to be compatible wth community maintained language-server (python-lsp-server).

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3805ba3721' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE Fixes for Fedora Python Packages Released Fedora has issued important security updates for two Python packages: python-lsp-black and python-black, addressing serious vulnerabilities identified as CVE-2026-31900 and CVE-2026-32274. These vulnerabilities could lead to privilege escalation and system-wide damage if exploited. Users are advised to upgrade to the latest versions—python-lsp-black to 2.0.0-17 and python-black to 26.5.1. The vulnerabilities were published earlier this year, with CVE-2026-31900 having a proof of concept released in April 2026. The updates are available through the dnf package manager, and users are urged to apply them promptly to mitigate risks. Both packages are part of Fedora 44 and are critical for Python development environments. 2 sources 72

Extracted Entities

Fedora python-lsp-black Important Security Fix Advisory 2026

The full story

Extracted Entities

Companies (1)

CVEs (2)

Platforms (1)