Back Linuxsecurity

Fedora 42: Duc Critical Buffer Overflow Vulnerability CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 31, 2025

Duc is a collection of tools for indexing, inspecting and visualizing disk usage. Duc maintains a database of accumulated sizes of directories of the file system, and allows you to query this database with some tools, or create fancy graphs showing you where your bytes are. Update Information : Update to 1.4.6: fixes CVE-2025-13654

Duc is a collection of tools for indexing, inspecting and visualizing

disk usage. Duc maintains a database of accumulated sizes of directories

of the file system, and allows you to query this database with some tools,

or create fancy graphs showing you where your bytes are.

Update to 1.4.6: fixes CVE-2025-13654

* Wed Dec 17 2025 Jens Petersen - 1.4.6-1 - Update to 1.4.6: fixes CVE-2025-13654 * Wed Jul 23 2025 Fedora Release Engineering - 1.4.5-8 - Rebuilt for

[ 1 ] Bug #2423079 - CVE-2025-13654 duc: duc: Stack Buffer Overflow in buffer_get function [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-d73e0a567d' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in Duc Affects Fedora Users A critical buffer overflow vulnerability, identified as CVE-2025-13654, affects Duc, a tool for indexing and visualizing disk usage in Fedora. Users are advised to update to version 1.4.6 to mitigate this security risk. The vulnerability impacts Fedora 42 and 43 users who utilize Duc for disk management. 2 sources 46

Extracted Entities

CVEs (1)

CVE-2025-13654

Vulnerabilities (1)

Stack Buffer Overflow