Fedora alert FEDORA-2026-ec8baadd48 (munge)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: munge-0.5.18-1.fc43 | |
| Date: | Thu, 26 Feb 2026 01:11:58 +0000 | |
| Message-ID: | <20260226011158.6EFC87649A@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ec8baadd48 2026-02-26 01:08:36.076651+00:00 -------------------------------------------------------------------------------- Name : munge Product : Fedora 43 Version : 0.5.18 Release : 1.fc43 URL : https://dun.github.io/munge/ Summary : Enables uid & gid authentication across a host cluster Description : MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods. -------------------------------------------------------------------------------- Update Information: Update to 0.5.18, resolve CVE-2026-25506 -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 13 2026 Michal Schmidt <mschmidt@redhat.com> - 0.5.18-1 - Update to 0.5.18 * Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.16-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2414773 - munge-0.5.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2414773 [ 2 ] Bug #2438833 - CVE-2026-25506 munge: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438833 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ec8baadd48' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new