Linuxsecurity

Fedora 42 Security Fix for CVE-2025-62518 in Rust Libraries

First seen 3 Nov 2025, 10:56 UTC • Linuxsecurity

•20.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Fedora 42 has released a security update addressing CVE-2025-62518, which affects the reqsign and rust-tikv-jemallocator libraries. The vulnerability involves a parser desynchronization issue when reading tar archives with mismatched size information in PAX/ustar headers. This fix is included in the updated packages for uv 0.9.5 and rust-astral-tokio-tar 0.5.6.

How this analysis works

Attack Flow

Continue Reading

Fedora Coturn Security Bypass Vulnerabilities Addressed in Recent Updates Fedora Python SciTokens Vulnerabilities Addressed in Recent Updates Critical Memory Issues in wget2 Affecting Fedora Users Fedora 41 and 42 Address sudo-rs Vulnerabilities CVE-2025-64170 and CVE-2025-64517 Fedora 42 Restic Security Advisory CVE-2025 Critical Vulnerabilities in Rust Reqsign Affect Multiple Services

Fedora 42 Security Fix for CVE-2025-62518 in Rust Libraries

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading