Back Linuxsecurity

Fedora 43 vsftpd Critical Update CVE-2025-14242 - FEDORA-2026

Linuxsecurity •LinuxSecurity Advisories • January 23, 2026

vsftpd is a Very Secure FTP daemon. It was written completely from scratch. Update Information : Resolve CVE-2025-14242

vsftpd is a Very Secure FTP daemon. It was written completely from

Resolve CVE-2025-14242

* Wed Jan 14 2026 Tomas Korbar - 3.0.5-14 - Resolve CVE-2025-14242 * Thu Dec 18 2025 Fedor Vorobev - 3.0.5-13 - Add a tmpfiles.d config. (image mode support)

Fedora Update Notification FEDORA-2026-67442bdd84 2026-01-23 00:54:29.972515+00:00 Name : vsftpd Product : Fedora 43 Version : 3.0.5 Release : 14.fc43 URL : Summary : Very Secure Ftp Daemon Description : vsftpd is a Very Secure FTP daemon. It was written completely from scratch.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-67442bdd84' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical vsftpd Vulnerability CVE-2025-14242 Addressed in Fedora Updates Fedora has released updates to address the critical vulnerability CVE-2025-14242 in vsftpd, a secure FTP daemon. The updates were made available for both Fedora 42 and Fedora 43, with the patch being implemented on January 14, 2026, by Tomas Korbar. 2 sources 34

Extracted Entities

CVEs (1)

CVE-2025-14242