Security update for FastCGI SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:02372-1 Final 1 1 2025-07-18T12:47:08Z current 2025-07-18T12:47:08Z 2025-07-18T12:47:08Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for FastCGI This update for FastCGI fixes the following issues: - CVE-2025-23016: Fixed integer overflow in FastCGI fcgi2 library (bsc#1243325) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-2372,SUSE-SLE-Module-Development-Tools-15-SP6-2025-2372,SUSE-SLE-Module-Development-Tools-15-SP7-2025-2372,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2372,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2372,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2372,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2372,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2372,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2372,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2372,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2372,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2372,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2372,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2372,SUSE-Storage-7.1-2025-2372,openSUSE-SLE-15.6-2025-2372 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-202502372-1/ Link for SUSE-SU-2025:02372-1 https://lists.suse.com/pipermail/sle-updates/2025-July/040778.html E-Mail link for SUSE-SU-2025:02372-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1243325 SUSE Bug 1243325 https://www.suse.com/security/cve/CVE-2025-23016/ SUSE CVE CVE-2025-23016 page SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 openSUSE Leap 15.6 FastCGI-2.4.0-150000.4.3.1 FastCGI-devel-2.4.0-150000.4.3.1 libfcgi0-2.4.0-150000.4.3.1 perl-FastCGI-2.4.0-150000.4.3.1 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Enterprise Storage 7.1 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 FastCGI-devel-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libfcgi0-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 perl-FastCGI-2.4.0-150000.4.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 FastCGI-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 FastCGI-devel-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 libfcgi0-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 perl-FastCGI-2.4.0-150000.4.3.1 as a component of openSUSE Leap 15.6 FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c. CVE-2025-23016 SUSE Enterprise Storage 7.1:FastCGI-2.4.0-150000.4.3.1 SUSE Enterprise Storage 7.1:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Enterprise Storage 7.1:libfcgi0-2.4.0-150000.4.3.1 SUSE Enterprise Storage 7.1:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP4-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server 15 SP5-LTSS:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:perl-FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:FastCGI-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:FastCGI-devel-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:libfcgi0-2.4.0-150000.4.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:perl-FastCGI-2.4.0-150000.4.3.1 openSUSE Leap 15.6:FastCGI-2.4.0-150000.4.3.1 openSUSE Leap 15.6:FastCGI-devel-2.4.0-150000.4.3.1 openSUSE Leap 15.6:libfcgi0-2.4.0-150000.4.3.1 openSUSE Leap 15.6:perl-FastCGI-2.4.0-150000.4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-202502372-1/ https://www.suse.com/security/cve/CVE-2025-23016.html CVE-2025-23016 https://bugzilla.suse.com/1243325 SUSE Bug 1243325