Back Linuxsecurity

Fedora 42 python-diskcache Important Arbitrary Code Exec CVE-2025

Linuxsecurity •LinuxSecurity Advisories • March 24, 2026

DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django. Update Information : Incorporate patch from Sam Doran to fix CVE-2025-69872

DiskCache is an Apache2 licensed disk and file backed cache library,

written in pure-Python, and compatible with Django.

Incorporate patch from Sam Doran to fix CVE-2025-69872

* Sun Mar 15 2026 Benson Muite - 5.6.4-12 - Incorporate patch from Sam Doran to fix CVE-2025-69872 * Sat Jan 17 2026 Fedora Release Engineering - 5.6.3-11 - Rebuilt for * Fri Sep 19 2025 Python Maint - 5.6.3-10 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Python Maint - 5.6.3-9 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering - 5.6.3-8 - Rebuilt for * Thu Jun 26 2025 Python Maint - 5.6.3-7 - Rebuilt for Python 3.14

[ 1 ] Bug #2439089 - CVE-2025-69872 python-diskcache: python-diskcache: Arbitrary code execution via insecure pickle deserialization [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9e5037f4e6' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaw in python-diskcache Affects Fedora Users A significant security vulnerability, CVE-2025-69872, has been identified in the python-diskcache library, which is utilized in Fedora systems. This flaw allows for arbitrary code execution via insecure pickle deserialization, posing a serious risk to users. The vulnerability was published on 2026-02-11, and a patch has been incorporated by developer Sam Doran as of March 15, 2026. Users are advised to update their systems to mitigate the risk of exploitation. The affected versions include python-diskcache prior to 5.6.4-12. Both Fedora 43 and Fedora 44 are impacted by this vulnerability. The update can be applied using the dnf package manager. Failure to update may leave systems vulnerable to potential attacks exploiting this flaw. 3 sources 58

Extracted Entities

CVEs (1)

CVE-2025-69872