[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc42

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 42 Update: rust-reqsign-command-execute-tokio-2.0.1-1.fc42

Tokio-based command execution implementation for reqsign...

[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc43

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 43 Update: rust-reqsign-command-execute-tokio-2.0.1-1.fc43

Tokio-based command execution implementation for reqsign...

[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.0-1.fc43

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 43 Update: rust-reqsign-command-execute-tokio-2.0.0-1.fc43

Tokio-based command execution implementation for reqsign...

[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.0-1.fc42

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 42 Update: rust-reqsign-command-execute-tokio-2.0.0-1.fc42

Tokio-based command execution implementation for reqsign...

[SECURITY] Fedora 41 Update: rust-reqsign-file-read-tokio-2.0.0-1.fc41

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 41 Update: rust-reqsign-command-execute-tokio-2.0.0-1.fc41

Tokio-based command execution implementation for reqsign...

Fedora 42 : openapi-python-client / python-uv-build / ruff / etc (2025-a77c1f005b)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-a77c1f005b advisory. uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for...

Fedora: Security Advisory (FEDORA-2025-b3cc3be834)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-62518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability...

astral-tokio-tar Vulnerable to PAX Header Desynchronization

...

TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution

Cybersecurity researchers have disclosed details of a high-severity flaw impacting the popular async-tar Rust library and its forks, including tokio-tar, that could result in remote code execution under certain conditions. The vulnerability, tracked as CVE-2025-62518 CVSS score: 8.1, has been...

CVE-2025-62518

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

UBUNTU-CVE-2025-62518

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

CVE-2025-62518 astral-tokio-tar Vulnerable to PAX Header Desynchronization

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

EUVD-2025-35176

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

CVE-2025-62518 astral-tokio-tar Vulnerable to PAX Header Desynchronization

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...