Fedora 43 and 44 Vulnerability in perl-URI IDNA Normalization

Fedora 43 and 44 face a significant vulnerability related to IDNA normalization in the perl-URI module, identified as CVE-2026-19953. This issue affects the handling of Unicode NFC normalization, leading to potential discrepancies in IDNA host encoding. The vulnerability was patched on August 21, 2026, by Jitka Plesnikova, with the release of perl-URI version 5.36-1. Users are advised to upgrade their systems using the 'dnf' update program to mitigate the risk. The flaw could allow for non-standard A-label emissions, which may impact interoperability with other clients. The updates are available for installation, and users should apply them promptly to ensure system security.

Key Points: • CVE-2026-19953 affects Fedora 43 and 44 due to IDNA normalization issues. • The vulnerability was patched on August 21, 2026, with perl-URI version 5.36-1. • Users must upgrade using 'dnf' to mitigate potential security risks.