Skip to content
Critical Bugfix for CVE-2026-25645 in Fedora Packages

Critical Bugfix for CVE-2026-25645 in Fedora Packages

First seen 24 May 2026, 07:33 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 25, 2026 at 07:32 UTC
  • •CVE-2026-25645 allows malicious file replacement via non-deterministic extraction.
  • •Fedora 43 users are urged to update python-requests and python-pulp-glue packages.
  • •The updates include fixes for malformed headers and authentication issues.

Fedora has released significant updates for the python-requests and python-pulp-glue packages to address CVE-2026-25645, which was published on 2026-03-25. This vulnerability allows the extraction of contents to a non-deterministic location, potentially enabling malicious file replacement. The updates include various bug fixes and improvements, particularly in handling malformed headers and authentication issues. Users of Fedora 43 are advised to upgrade their packages to mitigate risks associated with this vulnerability. The updates can be installed using the 'dnf' update program. The security advisory highlights the importance of addressing this issue promptly to maintain system integrity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 136d ago How this analysis works

Timeline

2026-03-25
CVE-2026-25645 published
The vulnerability was disclosed, allowing for potential malicious file replacement in certain applications.
Linuxsecurity
2026-05-24
Fedora releases updates for python packages
Significant updates were released for python-requests and python-pulp-glue to fix CVE-2026-25645 and other issues.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Fedora and CVE-2026-25645 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (2)

1 / 2