The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade fcron | Dec 10, 2025 | Jan 21, 2005 |
| Gentoo Linux | — | Upgrade sys-process/fcron. | Oct 30, 2017 | Mar 1, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub