Linuxsecurity Fedora Rustls-WebPKI Update Addresses Multiple Vulnerabilities
Article Content
- •Fedora updates rust-rustls-webpki to version 0.103.13 for security fixes.
- •Multiple RUSTSEC vulnerabilities addressed, including RUSTSEC-2026-0098 and RUSTSEC-2026-0104.
- •Users must upgrade to maintain secure Web PKI X.509 certificate verification.
On May 1, 2026, Fedora released updates for the rust-rustls-webpki package, addressing multiple vulnerabilities. The updates include version 0.103.13, which fixes RUSTSEC-2026-0098, RUSTSEC-2026-0099, and RUSTSEC-2026-0104. The updates are applicable to Fedora 42 and Fedora 44 systems. The vulnerabilities pertain to Web PKI X.509 certificate verification, which is critical for secure communications. Users are advised to upgrade to the latest version using the 'dnf' update program. The updates were released by Fabio Valentini, with the latest version being 0.103.13. The updates are crucial for maintaining the integrity of certificate verification processes. Failure to apply these updates may leave systems vulnerable to potential exploitation. The updates can be installed using specific commands provided in the notifications.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Fedora in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API… 
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…