Fedora 44 and 43 Sudo Vulnerabilities Enable Code Execution Risks

On June 4, 2026, Fedora released updates for versions 43 and 44 of the PHP Installer for Extensions (PIE) to address multiple vulnerabilities in the Sudo command. These vulnerabilities include arbitrary file deletion and elevated root code execution due to time-of-check to time-of-use (TOCTOU) issues. The updates fix security advisories identified as GHSA-h842-vjwg-pxxx, GHSA-pm6p-666q-hvj5, and others. Affected systems include Fedora 43 and 44 installations using PIE version 1.4.5. Users are advised to apply the updates promptly to mitigate risks. The vulnerabilities were confirmed by Remi Collet, the maintainer who issued the updates. The updates can be installed using the 'dnf' package manager. No active exploitation has been reported at this time.

Key Points: • Fedora released critical updates for PIE vulnerabilities affecting versions 43 and 44. • Vulnerabilities include arbitrary file deletion and elevated root code execution risks. • Users are urged to apply the updates immediately to mitigate potential threats.