Back Linuxsecurity

Fedora 42: Significant Memory Exhaustion Vulnerability in ipp

Linuxsecurity •LinuxSecurity Advisories • November 8, 2025

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Update Information : Rebuild with the latest golang in repos

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables

driverless support for USB devices capable of using IPP-over-USB protocol.

Rebuild with the latest golang in repos

* Fri Oct 31 2025 Zdenek Dohnal - 0.9.30-7 - Rebuild with the latest golang in repos * Fri Oct 10 2025 Maxwell G - 0.9.30-6 - Rebuild for golang 1.25.2 * Fri Aug 15 2025 Maxwell G - 0.9.30-5 - Rebuild for golang-1.25.0 * Thu Jul 24 2025 Fedora Release Engineering - 0.9.30-4 - Rebuilt for

[ 1 ] Bug #2407251 - CVE-2025-58185 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 [ 2 ] Bug #2407252 - CVE-2025-61723 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem [ 3 ] Bug #2407260 - CVE-2025-58189 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-d9921d4ed5' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fedora's IPP-over-USB Driver Multiple Fedora versions, including 41, 42, and 43, have been found to contain critical vulnerabilities in the golang-github-openprinting-ipp package, which supports driverless USB devices using the IPP-over-USB protocol. The vulnerabilities could lead to significant memory exhaustion and other security risks. Updates have been issued to rebuild the package with the latest golang version. 3 sources 43

Extracted Entities

Companies (1)

Fedora

CVEs (3)

CVE-2025-58185 CVE-2025-58189 CVE-2025-61723