Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 43: python-uv-build Important Buffer Overflow Fix CVE-2025-58160

fedora
Calendar Grey September 12, 2025
Dist Fedora Esm H88
Patch released for CVE-2025-58160 in Fedora 43 addressing vulnerabilities in python-uv-build linked to rust-tracing-subscriber version 0.3.20. Please upgrade immediately.
Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust- tracing-subscriber 0.3.20

Summary

This package is a slimmed down version of uv containing only the build

backend.

Update Information:

Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust- tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43 (previously a retired package).

Change Log

* Tue Sep 2 2025 Benjamin A. Beasley - 0.8.11-2 - Rebuilt with rust-tracing-subscriber-0.3.20 - Fixes CVE-2025-58160: fixes RHBZ#2392055, fixes RHBZ#2392012, fixes RHBZ#2391975

References


[ 1 ] Bug #2389401 - Review Request: rust-secret-service - Library to interface with Secret Service API https://bugzilla.redhat.com/show_bug.cgi?id=2389401 [ 2 ] Bug #2392998 - rust-secret-service-5.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2392998

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5acdf83593' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-uv-build
Product: Fedora 43
Version: 0.8.11
Release: 2.fc43
Summary: The uv build backend

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here