Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 42 tcpflow Critical TIM Element Out Of Bounds Write CVE-2026-25061

fedora
Calendar Grey April 4, 2026
Dist Fedora Esm H88
Critical tcpflow update for Fedora 42 resolves the out-of-bounds write issue (CVE-2026-25061) with recommended actions.
The update fixes CVS-2026-25061

Summary

tcpflow is a program that captures data transmitted as part of TCP

connections (flows), and stores the data in a way that is convenient

for protocol analysis or debugging. A program like 'tcpdump' shows a

summary of packets seen on the wire, but usually doesn't store the

data that's actually being transmitted. In contrast, tcpflow

reconstructs the actual data streams and stores each flow in a

separate file for later analysis.

Update Information:

The update fixes CVS-2026-25061

Topics%20covered

Topics Covered

security advisory fedora critical remote access tcpflow outofbound

Change Log

* Thu Mar 26 2026 Terje Rsten - 1.6.2-0.1.8d47b53 - Update to 1.6.2 / 8d47b53 to fix CVE-2026-25061 * Sat Jan 17 2026 Fedora Release Engineering - 1.6.1-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering - 1.6.1-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

References


[ 1 ] Bug #2435430 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2435430 [ 2 ] Bug #2435431 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2435431 [ 3 ] Bug #2435432 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2435432 [ 4 ] Bug #2435433 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2435433

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2f6fa1b6a1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: tcpflow
Product: Fedora 42
Version: 1.6.2
Release: 0.1.8d47b53.fc42
URL: https://github.com/simsong/tcpflow
Summary: Network traffic recorder

Topics%20covered

Topics Covered

security advisory fedora critical remote access tcpflow outofbound

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here