Critical CVE Fixes for perl-JavaScript-Minifier in Fedora 43 and 44

On June 29, 2026, two critical vulnerabilities, CVE-2026-56017 and CVE-2026-56018, were published affecting the perl-JavaScript-Minifier-XS package in Fedora 43 and Fedora 44. These vulnerabilities were addressed in version 0.16-1 of the package, which is now available for installation. The flaws could potentially allow for unauthorized access or exploitation of systems using these versions. Users are advised to upgrade their packages using the 'dnf' update program. The updates are crucial for maintaining the security of systems running Fedora. The vulnerabilities were reported and fixed by Jitka Plesnikova, ensuring that users are protected against potential threats. The updates can be installed with specific commands provided in the advisories.

Key Points: • CVE-2026-56017 and CVE-2026-56018 were published on June 29, 2026. • Fedora 43 and 44 are affected by these critical vulnerabilities. • Users are urged to upgrade to version 0.16-1 to mitigate risks.