Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41: Significant Path Traversal Vulnerability CVE-2025-59825 Found

fedora
Calendar Grey October 3, 2025
Dist Fedora Esm H88
Critical security update for rust-astral-tokio-tar addressing CVE-2025-59825 on Fedora 41. Protect your system!
Security update for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv.

Summary

A Rust implementation of an async TAR file reader and writer. This

library does not currently handle compression, but it is abstract over

all I/O readers and writers. Additionally, great lengths are taken to

ensure that the entire contents are never required to be entirely

resident in memory all at once.

Update Information:

Security update for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv.

Topics%20covered

Topics Covered

security advisory fedora update important path traversal Rust application

Change Log

* Wed Sep 24 2025 Benjamin A. Beasley - 0.5.5-1 - Update to version 0.5.5; fixes RHBZ#2397644 - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv

References


[ 1 ] Bug #2397717 - CVE-2025-59825 uv: astral-tokio-tar path traversal [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2397717 [ 2 ] Bug #2397721 - CVE-2025-59825 rust-astral-tokio-tar: astral-tokio-tar path traversal [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2397721

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-414364f69d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: rust-astral-tokio-tar
Product: Fedora 41
Version: 0.5.5
Release: 1.fc41
URL: https://crates.io/crates/astral-tokio-tar
Summary: Rust implementation of an async TAR file reader and writer

Topics%20covered

Topics Covered

security advisory fedora update important path traversal Rust application

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here