Alerts This Week
Warning Icon 1 717
Alerts This Week
Warning Icon 1 717

Fedora 41: inih Critical Performance Flaw CVE-2025-54080, CVE-2025-55304

fedora
Calendar Grey October 22, 2025
Dist Fedora Esm H88
Critical advisory for Fedora 41 addressing exiv2 performance issue and segmentation fault vulnerabilities. Immediate update recommended.
Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.

Summary

The inih package provides simple INI file parser which is only a couple of

pages of code, and it was designed to be small and simple, so it's good for

embedded systems.

Update Information:

Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.

Topics%20covered

Topics Covered

security advisory fedora critical segmentation fault performance issue exiv2

Change Log

* Sun Sep 14 2025 Sandro Mani - 62-1 - Update to 62 * Sun Jul 27 2025 Sandro Mani - 61-1 - Update to 61 * Thu Jul 24 2025 Fedora Release Engineering - 60-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Tue Apr 15 2025 Sandro Mani - 60-1 - Update to 60 * Fri Apr 4 2025 Sandro Mani - 59-1 - Update to 59 * Sat Mar 22 2025 Sandro Mani - 58-4 - Add mingw packages * Fri Jan 17 2025 Fedora Release Engineering - 58-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2391816 - CVE-2025-54080 mingw-exiv2: Exiv2 Segmentation Faults [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2391816 [ 2 ] Bug #2391837 - CVE-2025-55304 mingw-exiv2: Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2391837

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e5ab9a2288' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: inih
Product: Fedora 41
Version: 62
Release: 1.fc41
URL: https://github.com/benhoyt/inih
Summary: Simple INI file parser library

Topics%20covered

Topics Covered

security advisory fedora critical segmentation fault performance issue exiv2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here