Fedora Caddy Security Updates Address Multiple CVEs

On June 23, 2026, Fedora released critical security updates for Caddy, addressing 22 CVEs in Fedora 43 and 17 CVEs in Fedora 44. The vulnerabilities include privilege escalation, information disclosure, and denial of service. Key CVEs include CVE-2026-27585, CVE-2026-30851, and CVE-2026-40097, which affect both Caddy and its vendored libraries. The updates were backported from upstream fixes and involve updates to various dependencies. Users are advised to apply the updates using the 'dnf' package manager. The vulnerabilities could lead to significant security risks if left unpatched. The updates are crucial for maintaining the integrity and security of systems running Fedora with Caddy.

Key Points: • Fedora released updates for Caddy addressing 22 CVEs in version 43 and 17 in version 44. • Critical vulnerabilities include privilege escalation and denial of service risks. • Users should apply updates immediately using the 'dnf' package manager.