Back Linuxsecurity

Fedora 42: Cloud SQL Proxy Security Fix RDY 2025

Linuxsecurity •LinuxSecurity Advisories • January 1, 2026

The Cloud SQL Proxy allows a user with the appropriate permissions to connect to a Second Generation Cloud SQL database without having to deal with IP whitelisting or SSL certificates manually. It works by opening unix/tcp sockets on the local machine and proxying connections to the associated Cloud SQL instances when the sockets are used. Update Information : Rebuilt for CVEs

The Cloud SQL Proxy allows a user with the appropriate permissions to connect

to a Second Generation Cloud SQL database without having to deal with IP

whitelisting or SSL certificates manually. It works by opening unix/tcp

sockets on the local machine and proxying connections to the associated

Cloud SQL instances when the sockets are used.

* Tue Dec 23 2025 W. Michael Petullo - 1.31.2-9 - Rebuilt for CVEs

[ 1 ] Bug #2398740 - CVE-2025-47910 golang-github-googlecloudplatform-cloudsql-proxy: CrossOriginProtection bypass in net/http [fedora-42] [ 2 ] Bug #2399418 - CVE-2025-47906 golang-github-googlecloudplatform-cloudsql-proxy: Unexpected paths returned from LookPath in os/exec [fedora-42] [ 3 ] Bug #2407942 - CVE-2025-58189 golang-github-googlecloudplatform-cloudsql-proxy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] [ 4 ] Bug #2409412 - CVE-2025-61723 golang-github-googlecloudplatform-cloudsql-proxy: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] [ 5 ] Bug #2410363 - CVE-2025-58185 golang-github-googlecloudplatform-cloudsql-proxy: Parsing DER payload c... Read the Full Advisory

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-582e97b7b4' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Cloud SQL Proxy Security Updates for 2025 Fedora has issued critical security updates for the Cloud SQL Proxy, which allows users to connect to Second Generation Cloud SQL databases without manual IP whitelisting or SSL certificate management. These updates address vulnerabilities identified in the software, affecting users who rely on this proxy for database connections. 2 sources 18

Extracted Entities

Fedora 42: Cloud SQL Proxy Security Fix RDY 2025

The full story

Extracted Entities

Companies (1)

CVEs (5)

Platforms (1)