Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 42: Resolved CVE-2025-54080 & CVE-2025-55304 SegFault Issues

fedora
Calendar Grey October 15, 2025
Dist Fedora Esm H88
Fedora 42 updates inih package to fix critical issues in exiv2 library addressing CVE-2025-54080 and CVE-2025-55304.
Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.

Summary

The inih package provides simple INI file parser which is only a couple of

pages of code, and it was designed to be small and simple, so it's good for

embedded systems.

Update Information:

Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.

Topics%20covered

Topics Covered

security advisory fedora CVE fix segmentation fault performance issue ini parser

Change Log

* Sun Sep 14 2025 Sandro Mani - 62-1 - Update to 62 * Sun Jul 27 2025 Sandro Mani - 61-1 - Update to 61 * Thu Jul 24 2025 Fedora Release Engineering - 60-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Tue Apr 15 2025 Sandro Mani - 60-1 - Update to 60 * Fri Apr 4 2025 Sandro Mani - 59-1 - Update to 59 * Sat Mar 22 2025 Sandro Mani - 58-4 - Add mingw packages

References


[ 1 ] Bug #2391818 - CVE-2025-54080 mingw-exiv2: Exiv2 Segmentation Faults [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2391818 [ 2 ] Bug #2391840 - CVE-2025-55304 mingw-exiv2: Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2391840

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-99df814c62' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: inih
Product: Fedora 42
Version: 62
Release: 1.fc42
URL: https://github.com/benhoyt/inih
Summary: Simple INI file parser library

Topics%20covered

Topics Covered

security advisory fedora CVE fix segmentation fault performance issue ini parser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here