Bug 2425335 (CVE-2025-68920) - CVE-2025-68920 cKermit: From CVEorg collector
Summary: CVE-2025-68920 cKermit: From CVEorg collector
Keywords:
Status: CLOSED COMPLETED
Alias: CVE-2025-68920
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2425359 2425360 2425361 2425362 2425363
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-12-24 22:01 UTC by OSIDB Bzimport
Modified: 2026-09-29 20:02 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-09-29 20:02:31 UTC
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-12-24 22:01:31 UTC 
C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system.
Comment 2 Martin Jackson 2026-09-27 02:44:47 UTC 
Updates have now been issued that address this problem for all current releases of EPEL and Fedora. Should this bug be closed now?
Note You need to log in before you can comment on or make changes to this bug.