Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 42 tcpflow Critical TIM Element Out Of Bounds Write CVE-2026-25061

The update fixes CVS-2026-25061. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-2f6fa1b6a1 2026-04-04 01:02:26.879262+00:00 -------------------------------------------------------------------------------- Name : tcpflow Product : Fedora 42 Version : 1.6.2 Release : 0.1.8d47b53.fc42 URL : https://github.com/simsong/tcpflow Summary : Network traffic recorder Description : tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being transmitted. In contrast, tcpflow reconstructs the actual data streams and stores each flow in a separate file for later analysis. -------------------------------------------------------------------------------- Update Information: The update fixes CVS-2026-25061 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 26 2026 Terje Rsten - 1.6.2-0.1.8d47b53 - Update to 1.6.2 / 8d47b53 to fix CVE-2026-25061 * Sat Jan 17 2026 Fedora Release Engineering - 1.6.1-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering - 1.6.1-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2435430 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2435430 [ 2 ] Bug #2435431 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2435431 [ 3 ] Bug #2435432 - CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2435432 [ 4 ] Bug #2435433- CVE-2026-25061 tcpflow: tcpflow TIM Element OOB Write [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2435433 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2f6fa1b6a1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Critical tcpflow update for Fedora 42 resolves the out-of-bounds write issue (CVE-2026-25061) with recommended actions.. tcpflow Fedora update critical remote access outofbound. . Severity: Critical. LinuxSecurity.com Team

Apr 04, 2026 •Critical Fedora