Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 42: rustup Major Dependency Conflict CVE-2025-58161

fedora
Calendar Grey September 11, 2025
Dist Fedora Esm H88
Handle Rust setups in Fedora 42 using rustup upgrade to address CVE-2025-58160 severe log contamination problem.
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.

Summary

Manage multiple rust installations with ease.

Update Information:

Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.

Topics%20covered

Topics Covered

security advisory fedora critical DoS rustup tracing log pollution

Change Log

* Tue Sep 2 2025 Fabio Valentini - 1.28.2-6 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160

References


[ 1 ] Bug #2392009 - CVE-2025-58160 rustup: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392009 [ 2 ] Bug #2392049 - CVE-2025-58160 rustup: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392049

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-434186060b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rustup
Product: Fedora 42
Version: 1.28.2
Release: 6.fc42
URL: https://github.com/rust-lang/rustup
Summary: Manage multiple rust installations with ease

Topics%20covered

Topics Covered

security advisory fedora critical DoS rustup tracing log pollution

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here