Back Linuxsecurity

Fedora 43: Cloud SQL Proxy Critical Security Notices for 2025

Linuxsecurity •LinuxSecurity Advisories • January 1, 2026

The Cloud SQL Proxy allows a user with the appropriate permissions to connect to a Second Generation Cloud SQL database without having to deal with IP whitelisting or SSL certificates manually. It works by opening unix/tcp sockets on the local machine and proxying connections to the associated Cloud SQL instances when the sockets are used. Update Information : Rebuilt for CVEs

The Cloud SQL Proxy allows a user with the appropriate permissions to connect

to a Second Generation Cloud SQL database without having to deal with IP

whitelisting or SSL certificates manually. It works by opening unix/tcp

sockets on the local machine and proxying connections to the associated

Cloud SQL instances when the sockets are used.

* Tue Dec 23 2025 W. Michael Petullo - 1.31.2-11 - Rebuilt for CVEs

[ 1 ] Bug #2408217 - CVE-2025-58189 golang-github-googlecloudplatform-cloudsql-proxy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2409687 - CVE-2025-61723 golang-github-googlecloudplatform-cloudsql-proxy: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] [ 3 ] Bug #2410640 - CVE-2025-58185 golang-github-googlecloudplatform-cloudsql-proxy: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] [ 4 ] Bug #2411536 - CVE-2025-58188 golang-github-googlecloudplatform-cloudsql-proxy: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5906618a59' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Cloud SQL Proxy Security Updates for 2025 Fedora has issued critical security updates for the Cloud SQL Proxy, which allows users to connect to Second Generation Cloud SQL databases without manual IP whitelisting or SSL certificate management. These updates address vulnerabilities identified in the software, affecting users who rely on this proxy for database connections. 2 sources 18

Extracted Entities

CVEs (4)

CVE-2025-58185 CVE-2025-58188 CVE-2025-58189 CVE-2025-61723

Platforms (1)

Fedora 43