Physically-based material interchange specification for 3D rendering workflows.
Update Information:
New release version 1.39.5. See the change log.
* Mon Jun 15 2026 Luya Tshimbalanga
[ 1 ] Bug #2437393 - CVE-2025-68458 materialx: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2437393 [ 2 ] Bug #2437404 - CVE-2025-68157 materialx: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2437404 [ 3 ] Bug #2441663 - cmake module fails to import https://bugzilla.redhat.com/show_bug.cgi?id=2441663 [ 4 ] Bug #2459522 - materialx-1.39.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2459522
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d2806ddffc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
Get the latest Linux and open source security news straight to your inbox.