Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Fedora 41: vgrep Important Buffer Overflow Advisory 2025-87154673fe

fedora
Calendar Grey November 1, 2025
Dist Fedora Esm H88
Critical rebuild for vgrep in Fedora 41 addressing buffer overflow risk. Essential update for system security.
Rebuild for CVE-2025-47906

Summary

vgrep is a pager for grep, git-grep, ripgrep and similar grep implementations,

and allows for opening the indexed file locations in a user-specified editor

such as vim or emacs. vgrep is inspired by the ancient cgvg scripts but

extended to perform further operations such as listing statistics of files and

directory trees or showing the context lines before and after the matches.

Update Information:

Rebuild for CVE-2025-47906. https://pkg.go.dev/vuln/GO-2025-3956

Topics%20covered

Topics Covered

security advisory fedora buffer overflow important cve-2025-47906 vgrep

Change Log

* Thu Oct 23 2025 Carl George - 2.8.0-4 - Rebuild for CVE-2025-47906 * Sun Jan 19 2025 Fedora Release Engineering - 2.8.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2399300 - CVE-2025-47906 vgrep: Unexpected paths returned from LookPath in os/exec [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399300

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-87154673fe' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: vgrep
Product: Fedora 41
Version: 2.8.0
Release: 4.fc41
URL: https://github.com/vrothberg/vgrep
Summary: User-friendly pager for grep

Topics%20covered

Topics Covered

security advisory fedora buffer overflow important cve-2025-47906 vgrep

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here