Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 42 Apptainer Addresses Critical Denial of Service Vulnerability

Update to upstream 1.5.0, fix CVE-2026-32285 and CVE-2026-34986 Update to upstream 1.5.0-rc.2 Update to upstream 1.5.0-rc.1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-db5621b65e 2026-05-18 01:23:32.591522+00:00 -------------------------------------------------------------------------------- Name : apptainer Product : Fedora 42 Version : 1.5.0 Release : 1.fc42 URL : https://apptainer.org Summary : Application and environment virtualization formerly known as Singularity Description : Apptainer provides functionality to make portable containers that can be used across host environments. -------------------------------------------------------------------------------- Update Information: Update to upstream 1.5.0, fix CVE-2026-32285 and CVE-2026-34986 Update to upstream 1.5.0-rc.2 Update to upstream 1.5.0-rc.1 -------------------------------------------------------------------------------- ChangeLog: * Wed May 6 2026 Dave Dykstra - 1.5.0 - Update to upstream 1.5.0 * Tue Apr 14 2026 Dave Dykstra - 1.5.0~rc.2 - Update to upstream 1.5.0~rc.2 * Thu Mar 12 2026 Dave Dykstra - 1.5.0~rc.1 - Update to upstream 1.5.0~rc.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2447072 - apptainer-1.5.0-rc.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2447072 [ 2 ] Bug #2452369 - CVE-2026-32285 apptainer: github.com/buger/jsonparser: Denial of Service via malformed JSON input [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452369 [ 3 ] Bug #2455644 - CVE-2026-34986 apptainer: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2455644 [ 4 ] Bug #2467573 - apptainer-1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2467573 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-db5621b65e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update to Apptainer 1.5.0 addresses critical DoS issues from CVE-2026-32285 and CVE-2026-34986.. Fedora Apptainer Update Denial of Service. . Severity: Critical. LinuxSecurity.com Team

May 18, 2026 •Critical Fedora