Stay Secure with the Latest Linux Advisories

security advisoryfedoratracing

Fedora 41: Important Security Advisory for CVE-2025-58160 Released

Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-ff79e403f1 2025-09-11 01:18:51.472356+00:00 -------------------------------------------------------------------------------- Name : tuigreet Product : Fedora 41 Version : 0.9.1 Release : 4.fc41 URL : https://github.com/apognu/tuigreet Summary : Graphical console greeter for greetd Description : Graphical console greeter for greetd. -------------------------------------------------------------------------------- Update Information: Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Fabio Valentini - 0.9.1-4 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160 * Fri Jul 25 2025 Fedora Release Engineering - 0.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering - 0.9.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2366580 - CVE-2025-4574 tuigreet: crossbeam-channel Vulnerable to Double Free on Drop [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2366580 [ 2 ] Bug #2392054 - CVE-2025-58160 tuigreet: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392054 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-ff79e403f1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Update for tuigreet regarding CVE-2025-58160 now published in Fedora 41, targeting issues related to trace log contamination.. Fedora Tuigreet Security Rebuild CVE-2025-58160. . Severity: Important. LinuxSecurity.com Team

Sep 11, 2025 •Important Fedora