Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 43: Fix for Critical World Writable Permissions in fluidsynth

Fix world writeable /run/lock/fluidsynth Update to 2.4.8. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-0ea3179bb0 2025-10-30 04:29:09.915489+00:00 -------------------------------------------------------------------------------- Name : fluidsynth Product : Fedora 43 Version : 2.4.8 Release : 2.fc43 URL : http://www.fluidsynth.org/ Summary : Real-time software synthesizer Description : FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI events from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a built-in command line shell. It can also play MIDI files (note: FluidSynth was previously called IIWU Synth). -------------------------------------------------------------------------------- Update Information: Fix world writeable /run/lock/fluidsynth Update to 2.4.8 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2025 Christoph Karl - 2.4.8-2 - Fix world writeable /run/lock/fluidsynth * Thu Oct 16 2025 Christoph Karl - 2.4.8-1 - Update to 2.4.8 - Fix world writeable /run/lock/fluidsynth -------------------------------------------------------------------------------- References: [ 1 ] Bug #2404360 - /run/lock/fluidsynth is world-writable https://bugzilla.redhat.com/show_bug.cgi?id=2404360 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0ea3179bb0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Addressing world writable permissions in fluidsynth on Fedora 43. Critical patch resolves security concerns effectively.. Fluidsynth fix, Fedora 43 security, world writable permission, software update, synthesizer software. . Severity: Critical. LinuxSecurity.com Team

Oct 30, 2025 •Critical Fedora