Fedora 43 and 44 pcs Code Execution Vulnerabilities Addressed

Fedora has released important updates for its pcs-web-ui application to address vulnerabilities identified as CVE-2026-4800. These vulnerabilities allow arbitrary code execution via untrusted input in template imports. The updates were published on June 10, 2026, and affect users of Fedora 43 and 44. The issues were resolved in version 0.12.2-2, which was updated on May 15, 2026. Users are advised to apply the updates using the 'dnf' update program. The vulnerabilities were linked to bugs that caused crashes and improper ordering of resources in the application. The patches are crucial for maintaining system security and preventing potential exploitation.

Key Points: • Fedora 43 and 44 pcs applications received critical updates for CVE-2026-4800. • Arbitrary code execution vulnerabilities were fixed in version 0.12.2-2 released on May 15, 2026. • Users must update their systems using the 'dnf' command to mitigate risks.