CVE-2026-33055 affecting package rpm-ostree for versions less than 2024.4-10

CVE-2026-33055 affecting package rpm-ostree for versions less than 2024.4-10. A patched version of the package is available...

CVE-2026-33055 affecting package clamav for versions less than 1.5.2-2

CVE-2026-33055 affecting package clamav for versions less than 1.5.2-2. A patched version of the package is available...

CVE-2026-33055 affecting package rust for versions less than 1.90.0-7

CVE-2026-33055 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...

Medium: rust-cargo-c

Issue Overview: tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to correctly honor PAX size...

Amazon Linux 2023 : cargo-c (ALAS2023-2026-1566)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1566 advisory. tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As par...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2026-1568)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1568 advisory. A flaw in the gix-date library can generate invalid non-UTF8 strings, leading to undefined behavior when processed. The most likely impact from a successful attack is to data integrity, by the...

Medium: rust-below

Issue Overview: tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to correctly honor PAX size...

aati (>=0.10.2, <=0.11.3), ablavema (0.4.2) +1678 more potentially affected by CVE-2026-33055 via tar (>=0.2.14, <=0.4.40)

tar CARGO version =0.2.14, =0.10.2, =0.1.0, =0.1.2, =0.23.0, =0.23.0, =0.9.0, =0.2.5-rc.5, =1.2.0, =0.5.4-rc.1, =0.5.4-rc.1, =0.6.0, =0.4.0, =0.4.2 and more Source cves: CVE-2026-33055 Source advisory: OSV:GHSA-GCHP-Q4R4-X4FF...

aati (>=0.10.2, <=0.11.3), ablavema (0.4.2) +1678 more potentially affected by CVE-2026-33055 via tar (>=0.2.14, <=0.4.40)

tar CARGO version =0.2.14, =0.10.2, =0.1.0, =0.1.2, =0.23.0, =0.23.0, =0.9.0, =0.2.5-rc.5, =1.2.0, =0.5.4-rc.1, =0.5.4-rc.1, =0.6.0, =0.4.0, =0.4.2 and more Source cves: CVE-2026-33055 Source advisory: OSV:RUSTSEC-2026-0068...