Stay Secure with the Latest Linux Advisories

security advisoryfedoraremote execution

Fedora 44 qgis 3.44.8 Important Remote Exec Flaw Advisory 2026-8f09799b91

Update to qgis-3.44.8.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8f09799b91 2026-03-16 00:26:18.591059+00:00 -------------------------------------------------------------------------------- Name : qgis Product : Fedora 44 Version : 3.44.8 Release : 1.fc44 URL : http://www.qgis.org Summary : A user friendly Open Source Geographic Information System Description : Geographic Information System (GIS) manages, analyzes, and displays databases of geographic information. QGIS supports shape file viewing and editing, spatial data storage with PostgreSQL/PostGIS, projection on-the-fly, map composition, and a number of other features via a plugin interface. QGIS also supports display of various geo-referenced raster and Digital Elevation Model (DEM) formats including GeoTIFF, Arc/Info ASCII Grid, and USGS ASCII DEM. -------------------------------------------------------------------------------- Update Information: Update to qgis-3.44.8. -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 6 2026 Sandro Mani - 3.44.8-1 - Update to 3.44.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433154 - CVE-2026-24480 qgis: QGIS GitHub Actions workflow: Remote Code Execution and repository compromise via insecure `pull_request_target` configuration [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2433154 [ 2 ] Bug #2433156 - CVE-2026-24480 qgis: QGIS GitHub Actions workflow: Remote Code Execution and repository compromise via insecure `pull_request_target` configuration [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2433156 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8f09799b91' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update to QGIS 3.44.8 resolves significant remote execution vulnerabilities in Fedora ensuring enhanced security and stability for users. qgis updates, Fedora 44, remote execution, GIS software. . Severity: Important. LinuxSecurity.com Team

Mar 16, 2026 •Important Fedora