CVE-2025-27512
1 advisory.
crates.io/zincati CVE-2025-27512: low 2.1, EPSS 0.19%
Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
Action: Upgrade zincati to 0.0.30 or later.
cargo update -p zincati --precise 0.0.30Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.24 | 0.0.30 | - |
Fixed versions
| 0.0.30 |
Sources
- osv: GHSA-w6fv-6gcc-x825
- nvd: CVE-2025-27512
- https://github.com/coreos/zincati/security/advisories/GHSA-w6fv-6gcc-x825
- https://github.com/coreos/zincati/commit/01d8e89f799e6ba21bdf7dc668abce23bd0d8f78
- https://github.com/coreos/zincati/commit/28a43aa2c1edda091ba659677d73c13e6e3ea99d
- https://github.com/coreos/zincati
- https://github.com/coreos/zincati/releases/tag/v0.0.24
- https://github.com/coreos/zincati/releases/tag/v0.0.30
CVE-2025-27512 · published · modified · JSON