Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: gum 2025-abcd1234efg critical: address CVE-2025-22873

fedora
Calendar Grey June 29, 2025
Dist Fedora Esm H88
Modify the gum utility in Fedora 41 to address CVE-2025-22872, improving both its security measures and overall stability for shell scripting applications.
Update to version 0.16.1 for various bugfixes

Summary

A tool for glamorous shell scripts. Leverage the power of Bubbles and Lip Gloss

in your scripts and aliases without writing any Go code!

Update Information:

Update to version 0.16.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html.

Topics%20covered

Topics Covered

security advisory fedora important bugfix web exploitation golang

Change Log

* Wed Jun 18 2025 Carl George - 0.16.1-1 - Update to version 0.16.1 rhbz#2369461 * Fri Apr 18 2025 Carl George - 0.16.0-1 - Update to version 0.16.0 rhbz#2351450 * Tue Feb 11 2025 Carl George - 0.15.2-1 - Update to version 0.15.2 rhbz#2337426 * Fri Jan 17 2025 Fedora Release Engineering - 0.14.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2360604 - CVE-2025-22872 gum: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2360604 [ 2 ] Bug #2369461 - gum-0.16.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2369461

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f8047140f4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gum
Product: Fedora 41
Version: 0.16.1
Release: 1.fc41
URL: https://github.com/charmbracelet/gum
Summary: Tool for glamorous shell scripts

Topics%20covered

Topics Covered

security advisory fedora important bugfix web exploitation golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here