RHSA-2026:4550

MEDIUM6.5

Red Hat Security Advisory: vsftpd security update

Published Mar 13, 2026

Modified 2 days ago

Fix available

Affected Packages

vsftpd

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:3.0.3-35.el8_6.1

vsftpd-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:3.0.3-35.el8_6.1

vsftpd-debugsource

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:3.0.3-35.el8_6.1

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:4550

REPORT

https://access.redhat.com/security/cve/CVE-2025-14242

ARTICLE

https://access.redhat.com/security/updates/classification/#moderate

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2419826

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2025-14242

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4550.json

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-14242

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2025-14242

Ecosystems

Red Hat rhel_aus 8.6 appstream Red Hat rhel_e4s 8.6 appstream Red Hat rhel_tus 8.6 appstream

Timeline

PublishedMar 13, 2026

ModifiedMar 13, 2026