Back Linuxsecurity

Fedora 43: Important Update for tinyproxy Integer Overflow Issue

Linuxsecurity •LinuxSecurity Advisories • December 4, 2025

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk. Update Information : Add upstream patch to fix CVE-2025-63938.

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a

small network setting, where a larger proxy like Squid would either be too

resource intensive, or a security risk.

Add upstream patch to fix CVE-2025-63938.

* Tue Dec 2 2025 Carl George - 1.11.2-5 - Add upstream patch to fix CVE-2025-63938

[ 1 ] Bug #2417330 - CVE-2025-63938 tinyproxy: Tinyproxy integer overflow [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-72fbf180c7' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Updates Tinyproxy to Address Integer Overflow Vulnerability CVE-2025-63938 Fedora has released updates for tinyproxy to address a high integer overflow vulnerability identified as CVE-2025-63938. This vulnerability affects tinyproxy, a lightweight HTTP/SSL proxy daemon, which is commonly used in small network environments. The updates include an upstream patch to mitigate the risk associated with this vulnerability. 2 sources 24

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2025-63938