Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 43 Taskwarrior Critical CVE Fix Denial of Service 2026-eb2fc8e93d

Update to new release, includes updated dependencies that fix for a number of CVEs. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-eb2fc8e93d 2026-03-13 01:17:50.866519+00:00 -------------------------------------------------------------------------------- Name : task Product : Fedora 43 Version : 3.4.2 Release : 3.fc43 URL : https://taskwarrior.org Summary : Taskwarrior - a command-line TODO list manager Description : Taskwarrior is a command-line TODO list manager. It is flexible, fast, efficient, unobtrusive, does its job then gets out of your way. Taskwarrior scales to fit your workflow. Use it as a simple app that captures tasks, shows you the list, and removes tasks from that list. Leverage its capabilities though, and it becomes a sophisticated data query tool that can help you stay organized, and get through your work. -------------------------------------------------------------------------------- Update Information: Update to new release, includes updated dependencies that fix for a number of CVEs -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 4 2026 Ankur Sinha (Ankur Sinha Gmail) - 3.4.2-3 - fix: remove Cargo.lock (fixes rh#2438090, rh#2438156 rh#2444169, rh#2444179, rh#2444189) * Wed Mar 4 2026 Ankur Sinha (Ankur Sinha Gmail) - 3.4.2-2 - fix: regenerate with updated vendored crates (fixes rh#2438090, rh#2438156 rh#2444169, rh#2444179, rh#2444189) * Wed Mar 4 2026 Ankur Sinha (Ankur Sinha Gmail) - 3.4.2-1 - feat: update to 3.4.2 (fixes rh#2405583) * Sat Jan 17 2026 Fedora Release Engineering - 3.4.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2438090 - CVE-2026-25727 task: time affected by a stack exhaustion denial of service attack [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2438090 [ 2 ] Bug #2438156 - CVE-2026-25727 task: time affected by a stack exhaustion denial of service attack [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438156 [ 3 ] Bug #2444169 - CVE-2026-3338 task: AWS-LC: Signature bypass due to improper validation in PKCS7_verify() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444169 [ 4 ] Bug #2444179 - CVE-2026-3337 task: AWS-LC: Information disclosure via timing discrepancy in AES-CCM decryption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444179 [ 5 ] Bug #2444189 - CVE-2026-3336 task: aws-lc: Certificate validation bypass via improper handling of PKCS7 objects [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444189 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-eb2fc8e93d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update for Fedora 43 includes Taskwarrior fixes for multipleissues to enhance security and functionality.. Fedora 43 Taskwarrior Update CVE fixes DOS. . Severity: Critical. LinuxSecurity.com Team

Mar 13, 2026 •Critical Fedora