Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Fedora 42 dropbear 2025.88 critical: command injection issue

fedora
Calendar Grey May 23, 2025
Dist Fedora Esm H88
Update dropbear to version 2025.88 on Fedora 42 to rectify a severe command injection vulnerability.
Upgrade to 2025.88 (rhbz#2364905)

Summary

Dropbear is a relatively small SSH server and client. It's particularly useful

for "embedded"-type Linux (or other Unix) systems, such as wireless routers.

Update Information:

Upgrade to 2025.88 (rhbz#2364905)

Topics%20covered

Topics Covered

security advisory Fedora upgrade command injection dropbear embedded systems

Change Log

* Thu May 15 2025 Federico Pellegrin - 2025.88-1 - Upgrade to 2025.88 (rhbz#2364905) * Sat Feb 1 2025 Björn Esser - 2024.86-3 - Add explicit BR: libxcrypt-devel

References


[ 1 ] Bug #2364905 - CVE-2025-47203 dropbear: command injection via an untrusted hostname argument [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2364905

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-86022c9c44' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dropbear
Product: Fedora 42
Version: 2025.88
Release: 1.fc42
URL: https://matt.ucc.asn.au/dropbear/dropbear.html
Summary: Lightweight SSH server and client

Topics%20covered

Topics Covered

security advisory Fedora upgrade command injection dropbear embedded systems

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here