Linuxsecurity Critical NSS Update for Fedora 43 and 44 Released
Article Content
- •Critical update for NSS version 3.124.0 released for Fedora 43 and 44.
- •The update removes the deprecated libcrmf component.
- •Users must apply the update using the 'dnf' command to maintain security.
On June 19, 2026, Fedora released a critical update for the Network Security Services (NSS) library, version 3.124.0, addressing vulnerabilities in Fedora 43 and 44. The update removes the deprecated libcrmf component, which is no longer in use. The update is essential for maintaining the security of applications relying on NSS for SSL/TLS and other security protocols. Users are advised to apply the update using the 'dnf' command. The updates were published as FEDORA-2026-1c873954fa for Fedora 43 and FEDORA-2026-5eeadd9b1b for Fedora 44. Both updates were initiated by Frantisek Krenzelok on June 1, 2026, but were officially announced on June 17 and June 19, respectively. This patch is crucial for ensuring the integrity and security of applications built on these platforms.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API… 
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…