Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Fedora 40: iniparser 2025-257f422587 Security Advisory Updates

fedora
Calendar Grey March 14, 2025
Scroller Fedora
Critical security advisory for Fedora 40 addressing heap overflow issue in iniparser library with the patch for CVE-2025-0633.
Patched libiniparser to fix CVE-2025-0633

Summary

iniParser is an ANSI C library to parse "INI-style" files, often used to

hold application configuration information.

Update Information:

Patched libiniparser to fix CVE-2025-0633

Topics%20covered

Topics Covered

security advisory software update Fedora heap overflow iniparser

Change Log

* Wed Feb 26 2025 David Cantrell - 4.1-17 - Patch for CVE-2025-0633 - Heap Overflow in iniparser.c (#2346474)

References


[ 1 ] Bug #2346474 - CVE-2025-0633 iniparser: Heap Overflow in iniparser.c https://bugzilla.redhat.com/show_bug.cgi?id=2346474

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-257f422587' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: iniparser
Product: Fedora 40
Version: 4.1
Release: 17.fc40
URL: https://github.com/ndevilla/iniparser
Summary: C library for parsing "INI-style" files

Topics%20covered

Topics Covered

security advisory software update Fedora heap overflow iniparser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.