Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 40: iniparser 2025-257f422587 Security Advisory Updates

fedora
Calendar Grey March 14, 2025
Dist Fedora Esm H88
Critical security advisory for Fedora 40 addressing heap overflow issue in iniparser library with the patch for CVE-2025-0633.
Patched libiniparser to fix CVE-2025-0633

Summary

iniParser is an ANSI C library to parse "INI-style" files, often used to

hold application configuration information.

Update Information:

Patched libiniparser to fix CVE-2025-0633

Change Log

* Wed Feb 26 2025 David Cantrell - 4.1-17 - Patch for CVE-2025-0633 - Heap Overflow in iniparser.c (#2346474)

References


[ 1 ] Bug #2346474 - CVE-2025-0633 iniparser: Heap Overflow in iniparser.c https://bugzilla.redhat.com/show_bug.cgi?id=2346474

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-257f422587' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: iniparser
Product: Fedora 40
Version: 4.1
Release: 17.fc40
Summary: C library for parsing "INI-style" files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here