Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 43 linux-sgx Critical Nodejs Update CVE-2026-23745

fedora
Calendar Grey February 14, 2026
Dist Fedora Esm H88
Update for linux-sgx on Fedora 43 addresses multiple security concerns impacting nodejs modules and pccs daemon.
Update nodejs modules used by pccs daemon for CVE-2026-23745, CVE-2026-23950, CVE-2026-24842, CVE-2025-13465, CVE-2025-15284

Summary

The Intel SGX SDK is a collection of APIs, libraries, documentations and

tools that allow software developers to create and debug Intel SGX

enabled applications in C/C++.

Update Information:

Update nodejs modules used by pccs daemon for CVE-2026-23745, CVE-2026-23950, CVE-2026-24842, CVE-2025-13465, CVE-2025-15284. Remove Fedora override of default pccs daemon port. Remove redundant dep on mpa_registration from pccs. Add system scriptlets for pccs server. Port to pycryptography & pyasn1. Fix tracebacks in keyring code.

Topics%20covered

Topics Covered

security advisory fedora nodejs linux-sgx cve-2026-23745 pccs daemon

Change Log

* Wed Feb 4 2026 Daniel P. Berrang - 2.26-33 - Fix pccsadmin 'cache' command help text * Wed Feb 4 2026 Daniel P. Berrang - 2.26-32 - Fix multiple nodejs CVEs in PCCS * Wed Feb 4 2026 Daniel P. Berrang - 2.26-31 - fix build for boost 1.90 update api breakage * Wed Feb 4 2026 Daniel P. Berrang - 2.26-29 - Fixes for GCC 16 build failures * Wed Feb 4 2026 Miro Hron\u010dok - 2.26-27 - sgx-pccs-admin: Migrate from deprecated pkg_resources to packaging * Wed Feb 4 2026 Daniel P. Berrang - 2.26-26 - Drop dep from pccs to mpa_registration * Wed Feb 4 2026 Daniel P. Berrang - 2.26-25 - Improve pycryptography port & drop pccs port number change * Wed Feb 4 2026 Daniel P. Berrang - 2.26-24 - Add sgx-common dep from pccs * Wed Feb 4 2026 Daniel P. Berrang - 2.26-23 - Make npm dep conditional for RHEL-9 * Wed Feb 4 2026 Daniel P. Berrang - 2.26-22 - Fix traceback when clearing keyring if none exists * Wed Feb 4 2026 Daniel P. Berrang - 2.26-21 - Drop sgx-mpa dep from sgx-pccs * Wed Feb 4 2026 Daniel P. Berrang - 2.26-20 - Port to pycryptography and pyasn1 and make keyring optional * Wed Feb 4 2026 Daniel P. Berrang - 2.26-19 - Add systemd & sysusers scriptlets for PCCS * Wed Feb 4 2026 Daniel P. Berrang - 2.26-18 - Enable pccsadmin everywhere * Wed Feb 4 2026 Yaakov Selkowitz - 2.26-17 - Use chrpath to remove RPATH * Wed Feb 4 2026 Daniel P. Berrang - 2.26-16 - Set execute on node_sqlite3.node for debuginfo * Wed Feb 4 2026 Daniel P. Berrang - 2.26-15 - Add patchelf as a build dep * Wed Feb 4 2026 Daniel P. Berrang - 2.26-14 - Purge nodejs sqlite3 rpath instead of disabling rpath checks * Wed Feb 4 2026 Daniel P. Berrang - 2.26-13 - Drop obsolete perl mangling cmd that is failing * Wed Feb 4 2026 Daniel P. Berrang - 2.26-12 - Re-add tinyxml2 bundling to be used in RHEL rebuilds * Wed Feb 4 2026 Daniel P. Berrang - 2.26-11 - Wildcard ignore more tarballs * Wed Feb 4 2026 Daniel P. Berrang - 2.26-10 - Stop using _sbindir for services * Wed Feb 4 2026 Daniel P. Berrang - 2.26-9 - Add newline in pccs.service * Wed Feb 4 2026 Vt Ondruch - 2.26-8 - Rebuild for nodejs-packaging * Wed Feb 4 2026 Vt Ondruch - 2.26-7 - Rebuild for nodejs-packaging * Wed Nov 12 2025 Vt Ondruch - 2.26-6 - Rebuild for nodejs-packaging

References

Fedora Update Notification FEDORA-2026-a84e0ad039 2026-02-14 01:08:36.223091+00:00
Name : linux-sgx Product : Fedora 43 Version : 2.26 Release : 34.fc43 URL : https://github.com/intel/confidential-computing.sgx Summary : Intel Linux SGX SDK and Platform Software Description : The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a84e0ad039' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: linux-sgx
Product: Fedora 43
Version: 2.26
Release: 34.fc43
URL: https://github.com/intel/confidential-computing.sgx
Summary: Intel Linux SGX SDK and Platform Software

Topics%20covered

Topics Covered

security advisory fedora nodejs linux-sgx cve-2026-23745 pccs daemon

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here