Back Linuxsecurity

Fedora 42: Fix for Tinyproxy High Integer Overflow CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 11, 2025

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk. Update Information : Add upstream patch to fix CVE-2025-63938.

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a

small network setting, where a larger proxy like Squid would either be too

resource intensive, or a security risk.

Add upstream patch to fix CVE-2025-63938.

* Tue Dec 2 2025 Carl George - 1.11.2-5 - Add upstream patch to fix CVE-2025-63938 * Fri Jul 25 2025 Fedora Release Engineering - 1.11.2-4 - Rebuilt for

[ 1 ] Bug #2417329 - CVE-2025-63938 tinyproxy: Tinyproxy integer overflow [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a177cf4e1e' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Updates Tinyproxy to Address Integer Overflow Vulnerability CVE-2025-63938 Fedora has released updates for tinyproxy to address a high integer overflow vulnerability identified as CVE-2025-63938. This vulnerability affects tinyproxy, a lightweight HTTP/SSL proxy daemon, which is commonly used in small network environments. The updates include an upstream patch to mitigate the risk associated with this vulnerability. 2 sources 24

Extracted Entities

CVEs (1)

CVE-2025-63938