Fedora — Cyber Attacks, Breaches & Threat Activity

Related Threat Clusters

• Fedora Skopeo Security Fix for CVE-2025-58189 and CVE-2025-61725

  Fedora has released security updates for the Skopeo command line utility addressing critical vulnerabilities CVE-2025-58189 and CVE-2025-61725. The updates were made available for Fedora 42 and Fedora 43, with the…

  2 articles · Updated November 13, 2025
• Critical Buffer Overflow Vulnerability in pyOpenSSL Requires Immediate Action

  A critical buffer overflow vulnerability (CVE-2026-27459) in pyOpenSSL was published on March 17, 2026. This vulnerability affects systems using pyOpenSSL and is linked to a DTLS cookie callback buffer overflow. The…

  3 articles · Updated March 27, 2026
• Critical CVE-2026-11332 Affects Fedora Ansible-Core Versions

  CVE-2026-11332, published on 2026-06-05, exposes a vulnerability in Ansible-Core that allows for argument injection during role installations, potentially leading to arbitrary code execution. This flaw affects Fedora 43…

  2 articles · Updated June 20, 2026
• Fedora Coturn Security Bypass Vulnerabilities Addressed in Recent Updates

  Fedora has issued critical security advisories for the Coturn TURN Server, addressing significant vulnerabilities that could allow bypass of security measures. Users of Fedora 42 and Fedora 43 are affected by these…

  2 articles · Updated March 5, 2026
• Critical XSS and Code Execution Vulnerabilities in Fedora Prometheus Update

  On July 2, 2026, Fedora released an update for Prometheus addressing multiple critical vulnerabilities. The update includes fixes for CVE-2026-40186, CVE-2026-44990, CVE-2026-41567, CVE-2026-53606, and CVE-2026-25681.…

  2 articles · Updated July 11, 2026
• Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

  Recent updates to RoundcubeMail for Fedora 43 and 44 revealed critical vulnerabilities, including SQL injection and cross-site scripting (XSS) issues. CVE-2026-48842 details a pre-auth SQL injection in the…

  2 articles · Updated June 4, 2026
• Critical Python Vulnerabilities Affect Multiple Versions

  Recent security updates for Python 3.10, 3.12, and 3.15 address critical vulnerabilities impacting various systems. Key vulnerabilities include CVE-2026-1502, which allows HTTP header injection, and CVE-2026-6100, which…

  11 articles · Updated April 20, 2026
• Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks

  A critical vulnerability in Linux KVM, named Januscape (CVE-2026-53359), has been discovered after lying dormant for 16 years. This flaw allows attackers with root access in a guest virtual machine to escape to the host…

  22 articles · Updated July 7, 2026
• 90-Day Vulnerability Disclosure Policy Declared Obsolete Due to AI Advancements

  The traditional 90-day vulnerability disclosure policy is deemed ineffective as AI accelerates bug detection and exploitation. Security expert Himanshu Anand highlights that AI tools can convert security patches into…

  2 articles · Updated May 12, 2026
• Fedora Caddy Security Updates Address Multiple CVEs

  On June 23, 2026, Fedora released critical security updates for Caddy, addressing 22 CVEs in Fedora 43 and 17 CVEs in Fedora 44. The vulnerabilities include privilege escalation, information disclosure, and denial of…

  2 articles · Updated July 2, 2026

Recent Intelligence Reports

• Fedora 43 mingw-glib2 Important Buffer Overflow Fix CVE-2026 — Linuxsecurity · July 17, 2026
• Fedora 44 minGW-GLib2 Critical Buffer Overflow Fix CVE-2026 — Linuxsecurity · July 17, 2026
• Fedora 44 FreeRDP Important DoS Information Disclosure Fix 2026 — Linuxsecurity · July 15, 2026
• Fedora 43 freerdp Critical Security Issues CVE-2026 — Linuxsecurity · July 15, 2026
• Fedora 43 Calibre Critical Arbitrary Code Execution CVE-2026 — Linuxsecurity · July 14, 2026
• Fedora 44 Calibre Significant Remedy for Code Execution 2026 — Linuxsecurity · July 14, 2026
• Fedora 44 perl-Crypt-DSA Important Key Flaw CVE-2026 — Linuxsecurity · July 12, 2026
• Fedora 43 tmux Update 3.7b Security Advisory FEDORA-2026 — Linuxsecurity · July 12, 2026

Related Entities