Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 25.04: USN-7486-1 critical: libfcgi arbitrary code execution

ubuntu
Calendar Grey May 6, 2025
Dist Ubuntu Esm H88
A vulnerability in FastCGI on Ubuntu poses risks of potential system crashes or the execution of arbitrary code. It's crucial to update the libfcgi package to mitigate this security issue.
FastCGI could be made to crash or execute arbitrary code.

Summary

FastCGI could be made to crash or execute arbitrary code.

Software Description:

- libfcgi: FastCGI bridge from CGI

Details:

It was discovered that FastCGI incorrectly handled certain inputs.

An attacker could possibly use this issue to cause a crash or

execute arbitrary code.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libfcgi0t64                     2.4.2-2.1ubuntu0.25.04.1

Ubuntu 24.10
  libfcgi0t64                     2.4.2-2.1ubuntu0.24.10.1

Ubuntu 24.04 LTS
  libfcgi0t64                     2.4.2-2.1ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libfcgi0ldbl                    2.4.2-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7486-1

CVE-2025-23016

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7486-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here