Back Linuxsecurity

Fedora 43: ov 0.50.2 Critical Memory Exhaustion and Data Leak Alert

Linuxsecurity •LinuxSecurity Advisories • December 26, 2025

Feature-rich terminal-based text viewer. It is a so-called terminal pager. Update Information : Update to 0.50.2

Feature-rich terminal-based text viewer. It is a so-called terminal pager.

* Wed Dec 17 2025 Mikel Olasagasti Uranga - 0.50.2-1 - Update to 0.50.2 - Closes rhbz#2397069 * Fri Oct 10 2025 Maxwell G - 0.43.0-3 - Rebuild for golang 1.25.2 * Fri Oct 10 2025 Alejandro Sez - 0.43.0-2 - rebuild

[ 1 ] Bug #2408337 - CVE-2025-58189 ov: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2409810 - CVE-2025-61723 ov: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] [ 3 ] Bug #2410760 - CVE-2025-58185 ov: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] [ 4 ] Bug #2411656 - CVE-2025-58188 ov: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0d2748fa32' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 and 43: Critical Memory Exhaustion and Data Leak Fixed in ov 0.50.2 Fedora 42 and 43 have released updates to version 0.50.2 of the terminal-based text viewer 'ov' to address critical memory exhaustion and data leak vulnerabilities. The updates were initiated by Mikel Olasagasti Uranga on December 17, 2025, and close the issue referenced as rhbz#2397069. 2 sources 34

Extracted Entities

CVEs (4)

CVE-2025-58185 CVE-2025-58188 CVE-2025-58189 CVE-2025-61723