Stay Secure with the Latest Linux Advisories

security advisoryfedoranodejs

Fedora 43 linux-sgx Critical Nodejs Update CVE-2026-23745

Update nodejs modules used by pccs daemon for CVE-2026-23745, CVE-2026-23950, CVE-2026-24842, CVE-2025-13465, CVE-2025-15284. Remove Fedora override of default pccs daemon port. Remove redundant dep on mpa_registration from pccs. Add system scriptlets for pccs server.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-a84e0ad039 2026-02-14 01:08:36.223091+00:00 -------------------------------------------------------------------------------- Name : linux-sgx Product : Fedora 43 Version : 2.26 Release : 34.fc43 URL : https://github.com/intel/confidential-computing.sgx Summary : Intel Linux SGX SDK and Platform Software Description : The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. -------------------------------------------------------------------------------- Update Information: Update nodejs modules used by pccs daemon for CVE-2026-23745, CVE-2026-23950, CVE-2026-24842, CVE-2025-13465, CVE-2025-15284. Remove Fedora override of default pccs daemon port. Remove redundant dep on mpa_registration from pccs. Add system scriptlets for pccs server. Port to pycryptography & pyasn1. Fix tracebacks in keyring code. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 4 2026 Daniel P. Berrang - 2.26-33 - Fix pccsadmin 'cache' command help text * Wed Feb 4 2026 Daniel P. Berrang - 2.26-32 - Fix multiple nodejs CVEs in PCCS * Wed Feb 4 2026 Daniel P. Berrang - 2.26-31 - fix build for boost 1.90 update api breakage * Wed Feb 4 2026 Daniel P. Berrang - 2.26-29 - Fixes for GCC 16 build failures * Wed Feb 4 2026 Miro Hron\u010dok - 2.26-27 - sgx-pccs-admin: Migrate from deprecated pkg_resources to packaging * Wed Feb 4 2026 Daniel P. Berrang - 2.26-26 - Drop dep from pccs to mpa_registration * Wed Feb 4 2026 Daniel P. Berrang -2.26-25 - Improve pycryptography port & drop pccs port number change * Wed Feb 4 2026 Daniel P. Berrang - 2.26-24 - Add sgx-common dep from pccs * Wed Feb 4 2026 Daniel P. Berrang - 2.26-23 - Make npm dep conditional for RHEL-9 * Wed Feb 4 2026 Daniel P. Berrang - 2.26-22 - Fix traceback when clearing keyring if none exists * Wed Feb 4 2026 Daniel P. Berrang - 2.26-21 - Drop sgx-mpa dep from sgx-pccs * Wed Feb 4 2026 Daniel P. Berrang - 2.26-20 - Port to pycryptography and pyasn1 and make keyring optional * Wed Feb 4 2026 Daniel P. Berrang - 2.26-19 - Add systemd & sysusers scriptlets for PCCS * Wed Feb 4 2026 Daniel P. Berrang - 2.26-18 - Enable pccsadmin everywhere * Wed Feb 4 2026 Yaakov Selkowitz - 2.26-17 - Use chrpath to remove RPATH * Wed Feb 4 2026 Daniel P. Berrang - 2.26-16 - Set execute on node_sqlite3.node for debuginfo * Wed Feb 4 2026 Daniel P. Berrang - 2.26-15 - Add patchelf as a build dep * Wed Feb 4 2026 Daniel P. Berrang - 2.26-14 - Purge nodejs sqlite3 rpath instead of disabling rpath checks * Wed Feb 4 2026 Daniel P. Berrang - 2.26-13 - Drop obsolete perl mangling cmd that is failing * Wed Feb 4 2026 Daniel P. Berrang - 2.26-12 - Re-add tinyxml2 bundling to be used in RHEL rebuilds * Wed Feb 4 2026 Daniel P. Berrang - 2.26-11 - Wildcard ignore more tarballs * Wed Feb 4 2026 Daniel P. Berrang - 2.26-10 - Stop using _sbindir for services * Wed Feb 4 2026 Daniel P. Berrang - 2.26-9 - Add newline in pccs.service * Wed Feb 4 2026 Vt Ondruch - 2.26-8 - Rebuild for nodejs-packaging * Wed Feb 4 2026 Vt Ondruch - 2.26-7 - Rebuild for nodejs-packaging * Wed Nov 12 2025 Vt Ondruch - 2.26-6 - Rebuild for nodejs-packaging -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a84e0ad039' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update for linux-sgx on Fedora 43 addresses multiple security concerns impacting nodejs modules and pccs daemon.. linux-sgx security patch,nodejs module update,Fedora 43 security,Intel SGX SDK,security advisories. . Severity: Critical. LinuxSecurity.com Team

Feb 14, 2026 •Critical Fedora