Stay Secure with the Latest Linux Advisories

security advisoryfedoramedium

Fedora 43 Fractal Medium Stack Exhaustion Risk Resolution 2026-9630be304f

Fedora 43 has released an update for Fractal version 14.1, a Matrix messaging app for GNOME, addressing several vulnerabilities and improving functionality for group collaboration.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9630be304f 2026-07-23 01:01:59.493962+00:00 -------------------------------------------------------------------------------- Name : fractal Product : Fedora 43 Version : 14.1 Release : 1.fc43 URL : https://gitlab.gnome.org/World/fractal Summary : Matrix group messaging app Description : Fractal is a Matrix messaging app for GNOME written in Rust. Its interface is optimized for collaboration in large groups, such as free software projects. -------------------------------------------------------------------------------- Update Information: 14.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 20 2026 Gwyn Ciesla - 14.1-1 - 14.1 * Wed Jul 15 2026 Fedora Release Engineering - 14-0.beta.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 14-0.beta.1 - Rebuilt for openssl 4.0 * Wed Apr 1 2026 Gwyn Ciesla - 14-0.beta - 14 beta -------------------------------------------------------------------------------- References: [ 1 ] Bug #2420427 - CVE-2025-66622 fractal: matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2420427 [ 2 ] Bug #2423493 - fractal: webp crate may expose memory contents [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2423493 [ 3 ] Bug #2438128 - CVE-2026-25727 fractal: time affected by a stack exhaustion denial of service attack [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438128 [ 4 ] Bug #2502176 - fractal-14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2502176 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9630be304f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Explore the Fractal 14.1 update on Fedora 43 which addresses a stack exhaustion issue impacting messaging.. group messaging, Fedora security, Fractal app, medium severity, DoS risk. . Severity: Medium. LinuxSecurity.com Team

Jul 22, 2026 •Medium Fedora