Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 43: Advisory on Critical Uncontrolled Recursion in rust-protobuf

fedora
Calendar Grey October 14, 2025
Dist Fedora Esm H88
Critical Rust Protobuf Support update for Fedora 43 addresses uncontrolled recursion issue, ensuring system security.
Update mirrorlist-server to version 3.0.8

Summary

Code supporting protobuf implementation. None of code in this crate is

public API.

Update Information:

Update mirrorlist-server to version 3.0.8. Update the maxminddb crate to version 0.26.0. Update the prometheus crate to version 0.14.0. Update the protobuf and protobuf-codegen crates to version 3.7.2. Initial packaging of the protobuf-parse and protobuf-support crates. This includes fixes for CVE-2025-53605 (Uncontrolled Recursion Vulnerability in the protobuf crate).

Topics%20covered

Topics Covered

security advisory fedora update important protobuf uncontrolled recursion

Change Log

* Tue Sep 30 2025 Fabio Valentini - 3.7.2-1 - Initial import (#2397167)

References


[ 1 ] Bug #2376751 - CVE-2025-53605 mirrorlist-server: Protobuf: Uncontrolled Recursion Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2376751 [ 2 ] Bug #2401160 - F43FailsToInstall: rust-prometheus+protobuf-codegen-pure-devel https://bugzilla.redhat.com/show_bug.cgi?id=2401160

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-9e77f6ddcb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: rust-protobuf-support
Product: Fedora 43
Version: 3.7.2
Release: 1.fc43
URL: https://crates.io/crates/protobuf-support
Summary: Code supporting protobuf implementation

Topics%20covered

Topics Covered

security advisory fedora update important protobuf uncontrolled recursion

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here