Alerts This Week
Warning Icon 1 1,123
Alerts This Week
Warning Icon 1 1,123

Fedora 44 SentencePiece Important Memory Access Issue Fix CVE-2026-1260

fedora
Calendar Grey June 8, 2026
Dist Fedora Esm H88
Update to Fedora 44: sentencepiece addresses CVE-2026-1260 with significant security improvements.
Update to 0.2.1

Summary

The SentencePiece is an unsupervised text tokenizer for Neural Network-based

text generation.

It is an unsupervised text tokenizer and detokenizer mainly for

Neural Network-based text generation systems where the vocabulary size is

predetermined prior to the neural model training.

SentencePiece implements subword units and unigram language model with the

extension of direct training from raw sentences.

SentencePiece allows us to make a purely end-to-end system that does not

depend on language-specific pre/post-processing.

Update Information:

Update to 0.2.1

Change Log

* Tue May 19 2026 Peter Robinson - 0.2.1-1 - Update to 0.2.1 - Fixes CVE-2026-1260 (rhbz#2432139 rhbz#2432139) - Minor package updates for new rev

References


[ 1 ] Bug #2432139 - CVE-2026-1260 sentencepiece: Sentencepiece: Invalid memory access leading to potential arbitrary code execution via a crafted model file. [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2432139

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-314504fd18' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: sentencepiece
Product: Fedora 44
Version: 0.2.1
Release: 1.fc44
Summary: An unsupervised text tokenizer for Neural Network-based text generation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here