Fedora 43 and 44 Tor Updates Address Denial of Service Vulnerabilities

On May 15, 2026, Fedora released updates for Tor in versions 43 and 44 to address multiple denial of service vulnerabilities. These updates fix five CVEs: CVE-2026-44597, CVE-2026-44599, CVE-2026-44600, CVE-2026-44601, CVE-2026-44602, and CVE-2026-44603, all published on May 7, 2026. The vulnerabilities could allow attackers to exploit Tor's handling of CERT and BEGIN cells, potentially leading to client crashes or service disruptions. Affected systems include all Fedora installations running the Tor service. Users are advised to update their systems using the 'dnf' update program to mitigate these risks. The updates are critical for maintaining the integrity and availability of the Tor network.

Key Points: • Fedora released critical updates for Tor on May 15, 2026, addressing multiple CVEs. • The vulnerabilities could lead to denial of service attacks, impacting Tor users. • Users are urged to apply updates immediately to secure their systems.