Back Linuxsecurity

Fedora 41: fcgi 2.4.7 Critical CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 5, 2025

FastCGI is a language independent, scalable, open extension to CGI that provides high performance without the limitations of server specific APIs. Update Information : 2.4.7 release, fixes CVE-2025-23016

FastCGI is a language independent, scalable, open extension to CGI that

provides high performance without the limitations of server specific APIs.

2.4.7 release, fixes CVE-2025-23016

* Wed Nov 26 2025 Andrew Bauer - 2.4.7-1 - 2.4.7 release, fixes CVE-2025-23016 * Wed Jul 23 2025 Fedora Release Engineering - 2.4.6-2 - Rebuilt for * Sat May 31 2025 Andrew Bauer - 2.4.6-1 - 2.4.6 release - Upstream project moved to github with new author

[ 1 ] Bug #2417257 - fcgi-2.4.7 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-67511a59e3' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 41 and 43: Critical Update for FastCGI CVE-2025-23016 Fedora has released an update for FastCGI version 2.4.7 to address the critical vulnerability CVE-2025-23016. This vulnerability affects systems using FastCGI, which is an extension to CGI designed for high performance. The update was made available on November 26, 2025. 3 sources 34

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2025-23016