[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-62518
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 22 08:15:51 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
66c34bc0 by Salvatore Bonaccorso at 2025-10-22T09:14:40+02:00
Add Debian bug reference for CVE-2025-62518
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -44,7 +44,7 @@ CVE-2025-62588 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virt
CVE-2025-62587 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
- virtualbox <unfixed> (bug #1118542)
CVE-2025-62518 (astral-tokio-tar is a tar archive reading/writing library for async Ru ...)
- - rust-astral-tokio-tar <unfixed>
+ - rust-astral-tokio-tar <unfixed> (bug #1118562)
NOTE: https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-j5gw-2vrg-8fgx
NOTE: https://github.com/astral-sh/tokio-tar/commit/22b3f884adb7a2adf1d3a8d03469533f5cbc8318 (v0.5.6)
NOTE: https://edera.dev/stories/tarmageddon
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66c34bc0430dd4069338d17544c68c1900c6e493
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66c34bc0430dd4069338d17544c68c1900c6e493
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251022/aa9c6164/attachment.htm>
More information about the debian-security-tracker-commits
mailing list