Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 43: Important Update for tinyproxy Integer Overflow Issue

fedora
Calendar Grey December 4, 2025
Dist Fedora Esm H88
Fedora 43 security advisory for tinyproxy addressing CVE-2025-63938 with upstream patch implementation.
Add upstream patch to fix CVE-2025-63938.

Summary

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a

small network setting, where a larger proxy like Squid would either be too

resource intensive, or a security risk.

Update Information:

Add upstream patch to fix CVE-2025-63938.

Topics%20covered

Topics Covered

security advisory fedora critical integer overflow tinyproxy cve-2025-63938

Change Log

* Tue Dec 2 2025 Carl George - 1.11.2-5 - Add upstream patch to fix CVE-2025-63938

References


[ 1 ] Bug #2417330 - CVE-2025-63938 tinyproxy: Tinyproxy integer overflow [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2417330

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-72fbf180c7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: tinyproxy
Product: Fedora 43
Version: 1.11.2
Release: 5.fc43
URL: https://tinyproxy.github.io/
Summary: A small, efficient HTTP/SSL proxy daemon

Topics%20covered

Topics Covered

security advisory fedora critical integer overflow tinyproxy cve-2025-63938

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here