Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 42: golang-github-tetratelabs-wazero Important Update CVE-2025-47906

fedora
Calendar Grey January 21, 2026
Dist Fedora Esm H88
Critical update for golang-github-tetratelabs-wazero 1.11.0 for Fedora 42 addressing CVE-2025-47906 security risk.
Update to 1.11.0 upstream release Resolves: rhbz#2413614

Summary

WebAssembly is a way to safely run code compiled in other languages. Runtimes

execute WebAssembly Modules (Wasm), which are most often binaries with a .wasm

extension.

wazero is a WebAssembly Core Specification 1.0 and 2.0 compliant runtime

written in Go. It has zero dependencies, and doesn't rely on CGO. This means

you can run applications in other languages and still keep cross compilation.

Update Information:

Update to 1.11.0 upstream release Resolves: rhbz#2413614

Topics%20covered

Topics Covered

security advisory fedora buffer overflow important information golang-github-tetratelabs-wazero

Change Log

* Mon Jan 12 2026 Packit - 1.11.0-1 - Update to 1.11.0 upstream release - Resolves: rhbz#2413614 * Fri Oct 10 2025 Alejandro Sez - 1.9.0-5 - rebuild * Fri Aug 15 2025 Maxwell G - 1.9.0-4 - Rebuild for golang-1.25.0

References


[ 1 ] Bug #2399457 - CVE-2025-47906 golang-github-tetratelabs-wazero: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399457 [ 2 ] Bug #2413614 - golang-github-tetratelabs-wazero-1.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2413614

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b793fa382f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: golang-github-tetratelabs-wazero
Product: Fedora 42
Version: 1.11.0
Release: 1.fc42
URL: https://github.com/wazero/wazero
Summary: Wazero: the zero dependency WebAssembly runtime for Go developers

Topics%20covered

Topics Covered

security advisory fedora buffer overflow important information golang-github-tetratelabs-wazero

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here