Back Linuxsecurity

Fedora 43 python-scrapy Update DoS Vulnerability CVE-2025

Linuxsecurity •LinuxSecurity Advisories • June 23, 2026

* Sat Jun 13 2026 Filipe Rosset - 2.13.4-1 - Updated to latest 2.13.x series for F43

[ 1 ] Bug #2411735 - CVE-2025-6176 python-scrapy: Brotli decompression bomb DoS in scrapy/scrapy [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9a7f59fa7c' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 and 44 Python-Scrapy DoS Vulnerabilities Addressed Fedora has released updates for python-scrapy to address a denial-of-service (DoS) vulnerability identified as CVE-2025-6176. This vulnerability, known as a Brotli decompression bomb, affects versions of python-scrapy in Fedora 43 and 44. The updates were published on June 13, 2026, by Filipe Rosset, with Fedora 44 receiving version 2.14.2-1 and Fedora 43 receiving version 2.13.4-1. Users are advised to apply these updates using the 'dnf' update program to mitigate the risk of exploitation. The vulnerability was published on October 31, 2025, and could potentially allow attackers to exhaust system resources, leading to service disruption. Both Fedora versions are now patched, reducing the risk of exploitation. 2 sources 46

Extracted Entities

Fedora 43 python-scrapy Update DoS Vulnerability CVE-2025

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Vulnerabilities (1)