stable

rust-astral-tokio-tar-0.5.6-1.el10_0 and uv-0.6.17-3.el10_0

FEDORA-EPEL-2025-439963506c created by music 6 months ago for Fedora EPEL 10.0

Security fix for CVE-2025-62518: update rust-astral-tokio-tar to 0.5.6 and rebuild uv.

rust-astral-tokio-tar 0.5.6

  • Fixed a parser desynchronization vulnerability when reading tar archives that contain mismatched size information in PAX/ustar headers.

    This vulnerability is being tracked as GHSA-j5gw-2vrg-8fgx and CVE-2025-62518.

This update's test gating status has been changed to 'waiting'.

6 months ago

This update's test gating status has been changed to 'ignored'.

6 months ago

This update has been submitted for testing by bodhi.

6 months ago

This update has been pushed to testing.

6 months ago

This update has been submitted for stable by bodhi.

6 months ago

This update has been pushed to stable.

6 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
low
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
6 months ago
in testing
6 months ago
in stable
6 months ago
approved
6 months ago
Builds
2
rust-astral-tokio-tar-0.5.6-1.el10_0
uv-0.6.17-3.el10_0
BZ#2405468 CVE-2025-62518 rust-astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization [epel-10]
0
0
BZ#2405469 CVE-2025-62518 uv: astral-tokio-tar Vulnerable to PAX Header Desynchronization [epel-10]
0
0
rust-astral-tokio-tar-0.5.6-1.el10_0
uv-0.6.17-3.el10_0

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 25.11.3 on bodhi-web-21-hcnm2.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •