Linuxsecurity

Fedora 42 Restic Security Advisory CVE-2025

First seen 3 Dec 2025, 07:38 UTC • Linuxsecurity

•22.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Fedora has issued a security advisory for Restic version 0.18.1, addressing vulnerabilities that could affect users of the backup program. The advisory highlights the various backends supported by Restic for storing backups, including cloud services and local directories.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

13 entities, 12 inferred relationships (STIX 2.1).

Vulnerability (12)

CVE-2025-47906
CVE-2025-47910
CVE-2025-58185
CVE-2025-58189
CVE-2025-61723
CVE-2025-61725
CrossOriginProtection Bypass In Net/http
Excessive CPU Consumption In ParseAddress In Net/mail
Go Crypto/tls ALPN Negotiation Error Contains Attacker Controlled Information
Parsing DER Payload Can Cause Memory Exhaustion In Encoding/asn1
Quadratic Complexity When Parsing Some Invalid Inputs In Encoding/pem
Unexpected Paths Returned From LookPath In Os/exec

Affected Platform (1)

Fedora 42

Relationships

CVE-2025-47906 targets Fedora 42
CVE-2025-47910 targets Fedora 42
CVE-2025-58185 targets Fedora 42
CVE-2025-58189 targets Fedora 42
CVE-2025-61723 targets Fedora 42
CVE-2025-61725 targets Fedora 42
CrossOriginProtection Bypass In Net/http targets Fedora 42
Excessive CPU Consumption In ParseAddress In Net/mail targets Fedora 42
Go Crypto/tls ALPN Negotiation Error Contains Attacker Controlled Information targets Fedora 42
Parsing DER Payload Can Cause Memory Exhaustion In Encoding/asn1 targets Fedora 42
Quadratic Complexity When Parsing Some Invalid Inputs In Encoding/pem targets Fedora 42
Unexpected Paths Returned From LookPath In Os/exec targets Fedora 42

Continue Reading

Fedora Coturn Security Bypass Vulnerabilities Addressed in Recent Updates Fedora Python SciTokens Vulnerabilities Addressed in Recent Updates Critical Memory Issues in wget2 Affecting Fedora Users Fedora 41 and 42 Address sudo-rs Vulnerabilities CVE-2025-64170 and CVE-2025-64517 Critical Vulnerabilities in Rust Reqsign Affect Multiple Services Fedora 42 Security Fix for CVE-2025-62518 in Rust Libraries

Fedora 42 Restic Security Advisory CVE-2025

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading