Linuxsecurity Critical Key Flaw in Fedora's perl-Crypt-DSA Affects Key Generation
Article Content
- •CVE-2026-14570 exposes private key generation flaws in Fedora's perl-Crypt-DSA.
- •Attackers can recover private keys after generating hundreds of signatures due to modulo bias.
- •Users must generate new keys immediately as existing keys are considered compromised.
A significant cryptographic vulnerability (CVE-2026-14570) has been identified in the perl-Crypt-DSA package affecting Fedora 43 and 44. The flaw, known as modulo bias, compromises private key generation, allowing attackers to recover private keys after generating hundreds of signatures. Users are advised to consider their keys compromised and to generate new ones immediately. The flaw was addressed in updates released on July 3, 2026, by Paul Howarth and Yaakov Selkowitz. The vulnerability is critical due to the potential for complete private key compromise, impacting systems that rely on this cryptographic library. The flaw was published on July 5, 2026, and is applicable to Fedora systems using the affected versions of perl-Crypt-DSA.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Fedora and CVE-2026-14570 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include… 
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…