Lucene search
K

4 matches found

OSV
OSV
added 2026/03/20 7:16 a.m.2 views

DEBIAN-CVE-2026-33055

tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to correctly honor PAX size headers in the...

8.1CVSS5.4AI score0.00019EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/20 7:6 a.m.6 views

CVE-2026-33055

tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to correctly honor PAX size headers in the...

8.1CVSS7.3AI score0.00019EPSS
Exploits2References4Affected Software1
Debian CVE
Debian CVE
added 2026/03/20 7:6 a.m.3 views

CVE-2026-33055

tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to correctly honor PAX size headers in the...

8.1CVSS5.3AI score0.00019EPSS
Exploits1
Fedora
Fedora
added 2025/11/03 1:7 a.m.4 views

[SECURITY] Fedora 42 Update: rust-astral-tokio-tar-0.5.6-1.fc42

A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...

8.1CVSS7AI score0.00017EPSS
Exploits1
Rows per page
Query Builder