Stay Secure with the Latest Linux Advisories

security advisoryFedorapatch

Fedora 41: zsync 2025-8365ba2261 critical: pointer arithmetic risk

fix zlib source path in patch file. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-8365ba2261 2025-05-23 03:55:25.327005+00:00 -------------------------------------------------------------------------------- Name : zsync Product : Fedora 41 Version : 0.6.2 Release : 3.fc41 URL : http://zsync.moria.org.uk/ Summary : a file transfer program using the same algorithm as rsync over HTTP Description : zsync is a file transfer program. It allows you to download a file from a remote server, where you have a copy of an older version of the file on your computer already. zsync downloads only the new parts of the file. It uses the same algorithm as rsync. However, where rsync is designed for synchronising data from one computer to another within an organisation, zsync is designed for file distribution, with one file on a server to be distributed to thousands of downloaders. zsync requires no special server software - just a web server to host the files - and imposes no extra load on the server, making it ideal for large scale file distribution. -------------------------------------------------------------------------------- Update Information: fix zlib source path in patch file -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2025 Tobias Girstmair - 0.6.2-3 - fix zlib source path in patch file * Thu May 15 2025 Tobias Girstmair - 0.6.2-2 - include a patch for CVE-2016-9840 (RHBZ#2366435) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2366424 - CVE-2025-4638 zsync: Improper Pointer Arithmetic in pcl [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2366424 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2025-8365ba2261' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Enhancement for zsync in Fedora 41 to rectify zlib source directory, optimize data transfer effectiveness, and ensure system reliability.. zsync file transfer, Fedora update, file synchronization, cyber risk management. . Severity: Critical. LinuxSecurity.com Team

May 23, 2025 •Critical Fedora