Stay Secure with the Latest Linux Advisories

security advisoryfedorafile overwrite

Fedora 42: Critical Security Update for linenoise CVE-2025-9810 Issue

CVE-2025-9810. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-b83972992e 2025-09-15 00:46:54.505247+00:00 -------------------------------------------------------------------------------- Name : linenoise Product : Fedora 42 Version : 1.0 Release : 12.20200312git97d2850.fc42 URL : https://github.com/antirez/linenoise Summary : Minimal replacement for readline Description : Linenoise is a replacement for the readline line-editing library with the goal of being smaller. -------------------------------------------------------------------------------- Update Information: CVE-2025-9810 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 5 2025 Garry T. Williams 1.0-12.20200312git97d2850 - Fix CVE-2025-9810 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2392589 - CVE-2025-9810 linenoise: TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392589 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b83972992e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora Security Update Alert concerning CVE-2025-9810 for linenoise, resolving a critical file overwrite vulnerability in updates.. Fedora linenoise update security flaw file overwrite. . Severity: Critical. LinuxSecurity.com Team

Sep 15, 2025 •Critical Fedora