Fedora 43: Critical Vulnerabilities in rust-reqsign Identified

Fedora 43: Critical Vulnerabilities in rust-reqsign Identified

First seen 10 Nov 2025, 11:58 UTC •Linuxsecurity •93% similarity •37.2

Article Content

Browse articles
ThreatCluster

Fedora 43 has reported critical vulnerabilities in the rust-reqsign library affecting HTTP request signing for major cloud services including AWS, Azure, and Google. The vulnerabilities include a critical signing issue and a denial-of-service threat linked to a Tokio-based file reader implementation. A patch release, Pydantic 2.12.4, has been issued to address these issues.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Fedora 43