SB2025121858 - Fedora 42 update for rust-git-interactive-rebase-tool 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025121858

SB2025121858 - Fedora 42 update for rust-git-interactive-rebase-tool

Published: December 18, 2025

Security Bulletin ID SB2025121858
Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2024-12224)

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to an error within the UTS 46 specification when handling Punycode labels that do not produce any non-ASCII output. A remote attacker can construct a specially crafted hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.


2) Double free (CVE-ID: CVE-2025-4574)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the the internal `Channel` type's `Drop` method. A remote attacker can pass specially crafted data to the application, trigger a double free error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

References