Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

Fedora 43: chezmoi Critical Update for Memory Exhaustion Issues

fedora
Calendar Grey January 14, 2026
Dist Fedora Esm H88
Critical update for chezmoi on Fedora 43 resolves multiple issues affecting security and memory management.
Update to 2.69.0

Summary

Manage your dotfiles across multiple diverse machines, securely.

Update Information:

Update to 2.69.0

Topics%20covered

Topics Covered

security advisory fedora critical memory exhaustion persistence issue chezmoi

Change Log

* Mon Jan 5 2026 Packit - 2.69.0-1 - Update to 2.69.0 upstream release - Resolves: rhbz#2427071

References


[ 1 ] Bug #2409601 - CVE-2025-61723 chezmoi: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409601 [ 2 ] Bug #2410552 - CVE-2025-58185 chezmoi: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410552 [ 3 ] Bug #2411450 - CVE-2025-58188 chezmoi: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411450 [ 4 ] Bug #2412669 - CVE-2025-58183 chezmoi: Unbounded allocation when parsing GNU sparse map [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2412669 [ 5 ] Bug #2420608 - CVE-2025-47913 chezmoi: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2420608

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-004192d79d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chezmoi
Product: Fedora 43
Version: 2.69.0
Release: 1.fc43
URL: https://github.com/twpayne/chezmoi
Summary: Manage your dotfiles across multiple diverse machines

Topics%20covered

Topics Covered

security advisory fedora critical memory exhaustion persistence issue chezmoi

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here