Skip to content
Fedora 43 and 44 Python-Scrapy DoS Vulnerabilities Addressed

Fedora 43 and 44 Python-Scrapy DoS Vulnerabilities Addressed

First seen 23 Jun 2026, 02:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 24, 2026 at 02:01 UTC
  • •CVE-2025-6176 is a DoS vulnerability affecting python-scrapy in Fedora 43 and 44.
  • •Updates were released on June 13, 2026, to mitigate the risk of exploitation.
  • •Users are urged to apply the updates using the 'dnf' update program.

Fedora has released updates for python-scrapy to address a denial-of-service (DoS) vulnerability identified as CVE-2025-6176. This vulnerability, known as a Brotli decompression bomb, affects versions of python-scrapy in Fedora 43 and 44. The updates were published on June 13, 2026, by Filipe Rosset, with Fedora 44 receiving version 2.14.2-1 and Fedora 43 receiving version 2.13.4-1. Users are advised to apply these updates using the 'dnf' update program to mitigate the risk of exploitation. The vulnerability was published on October 31, 2025, and could potentially allow attackers to exhaust system resources, leading to service disruption. Both Fedora versions are now patched, reducing the risk of exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 90d ago How this analysis works

Timeline

2025-10-31
CVE-2025-6176 published
CVE-2025-6176 describes a Brotli decompression bomb DoS vulnerability in python-scrapy.
Linuxsecurity
2026-06-13
Fedora 44 python-scrapy updated
Fedora 44 received an update to version 2.14.2-1 to address CVE-2025-6176.
Linuxsecurity
2026-06-13
Fedora 43 python-scrapy updated
Fedora 43 was updated to version 2.13.4-1 to fix the same DoS vulnerability.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Fedora and CVE-2025-6176 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2