Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-4432

Fixed in a distro release EPSS 1%CVSS 5.3

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 2**32 packets sent or received.

Published 2025-05-09 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Satellite 6, Red Hat Trusted Artifact Signer, Red Hat Trusted Profile Analyzer

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/briansmith/ringno fix
crates.ioring0.17.12
crates.ioring0.17.13

Distro releases

ReleasePackageFixed in
Chainguardatuin18.4.0-r1
Chainguardbuck220251101-r0
Chainguardcargo-audit0.21.2-r4
Chainguardcargo-audit0.21.2-r1
Chainguardcargo-audit-doc0.21.2-r4
Chainguardchaos-tproxyno fix
Chainguarddeno2.2.3-r1
Chainguardfnm1.38.1-r2
Chainguardkdash0.6.2-r1
Chainguardkdash0.6.2-r4
Chainguardlibwasmtime32.0.0-r1
Chainguardlibwasmtime30.0.2-r1
Chainguardlinkerd-extension-init0.1.2-r31
Chainguardlinkerd2-proxy2.285.0-r1
Chainguardlychee0.18.1-r1
Chainguardlychee0.18.1-r5
Chainguardntpd-rs1.5.0-r1
Chainguardntpd-rs1.5.0-r3
Chainguardnushell0.102.0-r1
Chainguardnushell-plugins0.102.0-r1
Chainguardoranda0.6.5-r6
Chainguardoranda0.6.5-r3
Chainguardparseable1.7.3-r1
Chainguardpgcatno fix
Chainguardpixi0.42.1-r1
Chainguardpixi-compat0.42.1-r1
Chainguardpy3-supported-uv-build0.6.6-r1
Chainguardpy3.10-uv-build0.6.6-r1
Chainguardpy3.10-uv-build-bin0.6.6-r1
Chainguardpy3.11-uv-build0.6.6-r1
Chainguardpy3.11-uv-build-bin0.6.6-r1
Chainguardpy3.12-uv-build0.6.6-r1
Chainguardpy3.12-uv-build-bin0.6.6-r1
Chainguardpy3.13-uv-build0.6.6-r1
Chainguardpy3.13-uv-build-bin0.6.6-r1
Chainguardqdrant1.13.4-r1
Chainguardqdrant-oci-compat1.13.4-r1
Chainguardqdrant-oci-entrypoint1.13.4-r1
Chainguardrustls-ffi0.14.1-r4
Chainguardrustls-ffi-dev0.14.1-r4
Chainguardrustup1.28.1-r1
Chainguardrye0.44.0-r1
Chainguardrye0.44.0-r3
Chainguardsamply0.13.1-r4
Chainguardsamply0.13.1-r1
Chainguardsccache0.10.0-r1
Chainguardsccache0.10.0-r4
Chainguardsdp-identity-serviceno fix
Chainguardsdp-identity-service1.4.0-r0
Chainguardsdp-k8s-injector1.4.0-r0
Chainguardsdp-k8s-injectorno fix
Chainguardshadowsocks-rust1.22.0-r2
Chainguardshadowsocks-rust-sslocal1.22.0-r2
Chainguardshadowsocks-rust-ssmanager1.22.0-r2
Chainguardshadowsocks-rust-ssserver1.22.0-r2
Chainguardshadowsocks-rust-ssservice1.22.0-r2
Chainguardshadowsocks-rust-ssurl1.22.0-r2
Chainguardsqlx0.8.5-r3
Chainguardsqlx0.8.5-r2
Chainguardtealdeer1.7.1-r3
Chainguarduv0.6.6-r1
Chainguardwadm0.21.0-r0
Chainguardwash0.39.0-r3
Chainguardwash0.39.0-r1
Chainguardwasm-pack0.13.1-r2
Chainguardwasmcloud1.6.2-r1
Chainguardwasmtime30.0.2-r1
Chainguardwasmtime32.0.0-r1
Chainguardwasmtime-dev30.0.2-r1
Chainguardwasmtime-dev32.0.0-r1
Chainguardxh0.24.1-r1
Chainguardxh0.24.0-r1
Chainguardzed0.178.5-r0
Chainguardzizmor1.5.1-r0
Chainguardzola0.20.0-r1
Chainguardzola0.20.0-r3
Chainguardztunnel-1.241.24.6-r0
Chainguardztunnel-1.24-compat1.24.6-r0
Chainguardztunnel-1.251.25.2-r1
Chainguardztunnel-1.25-compat1.25.2-r1
Chainguardztunnel-fips-1.241.24.5-r1
Chainguardztunnel-fips-1.24-compat1.24.5-r1
Chainguardztunnel-fips-1.251.25.2-r1
Chainguardztunnel-fips-1.25-compat1.25.2-r1
Debian 12rust-ringno fix
Debian 13rust-ring0.17.14-1
Debian 14rust-ring0.17.14-1
Ubuntu 22.04 LTSrust-ringno fix
Ubuntu 24.04 LTSrust-ringno fix
Ubuntu 25.10rust-ringno fix
Ubuntu 26.04 LTSrust-ringno fix
Ubuntu 26.10rust-ringno fix
Wolfiatuin18.4.0-r1
Wolfibuck220251101-r0
Wolficargo-audit0.21.2-r4
Wolficargo-audit0.21.2-r1
Wolficargo-audit-doc0.21.2-r4
Wolfideno2.2.3-r1
Wolfikdash0.6.2-r4
Wolfikdash0.6.2-r1
Wolfilibwasmtime32.0.0-r1
Wolfilibwasmtime30.0.2-r1
Wolfilinkerd-extension-init0.1.2-r31
Wolfilinkerd2-proxy2.285.0-r1
Wolfilychee0.18.1-r5
Wolfilychee0.18.1-r1
Wolfintpd-rs1.5.0-r3
Wolfintpd-rs1.5.0-r1
Wolfinushell0.102.0-r1
Wolfinushell-plugins0.102.0-r1
Wolfioranda0.6.5-r6
Wolfioranda0.6.5-r3
Wolfiparseable1.7.3-r1
Wolfipgcatno fix
Wolfipixi0.42.1-r1
Wolfipixi-compat0.42.1-r1
Wolfipy3-supported-uv-build0.6.6-r1
Wolfipy3.10-uv-build0.6.6-r1
Wolfipy3.10-uv-build-bin0.6.6-r1
Wolfipy3.11-uv-build0.6.6-r1
Wolfipy3.11-uv-build-bin0.6.6-r1
Wolfipy3.12-uv-build0.6.6-r1
Wolfipy3.12-uv-build-bin0.6.6-r1
Wolfipy3.13-uv-build0.6.6-r1
Wolfipy3.13-uv-build-bin0.6.6-r1
Wolfiqdrant1.13.4-r1
Wolfiqdrant-oci-compat1.13.4-r1
Wolfiqdrant-oci-entrypoint1.13.4-r1
Wolfirustls-ffi0.14.1-r4
Wolfirustls-ffi-dev0.14.1-r4
Wolfirustup1.28.1-r1
Wolfirye0.44.0-r3
Wolfirye0.44.0-r1
Wolfisamply0.13.1-r1
Wolfisamply0.13.1-r4
Wolfisccache0.10.0-r1
Wolfisccache0.10.0-r4
Wolfisdp-identity-serviceno fix
Wolfisdp-identity-service1.4.0-r0
Wolfisdp-k8s-injectorno fix
Wolfisdp-k8s-injector1.4.0-r0
Wolfishadowsocks-rust1.22.0-r2
Wolfishadowsocks-rust-sslocal1.22.0-r2
Wolfishadowsocks-rust-ssmanager1.22.0-r2
Wolfishadowsocks-rust-ssserver1.22.0-r2
Wolfishadowsocks-rust-ssservice1.22.0-r2
Wolfishadowsocks-rust-ssurl1.22.0-r2
Wolfisqlx0.8.5-r2
Wolfisqlx0.8.5-r3
Wolfitealdeer1.7.1-r3
Wolfiuv0.6.6-r1
Wolfiwadm0.21.0-r0
Wolfiwash0.39.0-r3
Wolfiwash0.39.0-r1
Wolfiwasm-pack0.13.1-r2
Wolfiwasmcloud1.6.2-r1
Wolfiwasmtime30.0.2-r1
Wolfiwasmtime32.0.0-r1
Wolfiwasmtime-dev32.0.0-r1
Wolfiwasmtime-dev30.0.2-r1
Wolfixh0.24.1-r1
Wolfixh0.24.0-r1
Wolfized0.178.5-r0
Wolfizizmor1.5.1-r0
Wolfizola0.20.0-r3
Wolfizola0.20.0-r1
Wolfiztunnel-1.241.24.6-r0
Wolfiztunnel-1.24-compat1.24.6-r0
Wolfiztunnel-1.251.25.2-r1
Wolfiztunnel-1.25-compat1.25.2-r1
openSUSE Tumbleweedgovulncheck-vulndb0.0.20250515T200012-1.1