tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input con…
Exact source revision recorded 3 Nov 2026 01:05:03 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2025-26382
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Aug 29, 2025, 9:28:22 PM
dateUpdated: Sep 2, 2025, 2:08:42 PM
42 related source bulletins · separate from aliases
openSUSE-SU-2026:11028-1: librav1e0_8-0.8.1-2.1 on GA media
CVE-2025-58160
openSUSE-SU-2026:22075-1: Security update for agama
CVE-2025-58160 · CVE-2026-25541
openSUSE-SU-2026:21689-1: Security update for gstreamer-devtools
CVE-2025-4574 · CVE-2025-58160 · CVE-2026-25541 · CVE-2026-25727 · CVE-2026-72813 · CVE-2026-72814
openSUSE-SU-2026:11679-1: agama-24+0.a836cced5-54.1 on GA media
CVE-2025-58160 · CVE-2026-25541
openSUSE-SU-2025:15512-1: bpftop-0.7.1-1.1 on GA media
CVE-2025-58160
openSUSE-SU-2025:15540-1: rustup-1.28.2~0-2.1 on GA media
CVE-2025-58160
SUSE-SU-2026:22380-1: Security update for loupe
CVE-2025-58160
openSUSE-SU-2026:20180-1: Security update for python-maturin
CVE-2025-58160
openSUSE-SU-2025:15517-1: himmelblau-1.2.2+git.0.2d04bca-1.1 on GA media
CVE-2025-58160
openSUSE-SU-2025:20114-1: Security update for himmelblau
CVE-2025-58160 · CVE-2025-59044
openSUSE-SU-2025:15518-1: python311-maturin-1.9.4-1.1 on GA media
CVE-2025-58160
SUSE-SU-2026:20096-1: Security update for cargo-c
CVE-2024-12224 · CVE-2025-4574 · CVE-2025-58160
SUSE-SU-2025:3869-1: Security update for himmelblau
CVE-2025-58160
openSUSE-SU-2025:15519-1: python311-ruff-0.12.11-2.1 on GA media
CVE-2025-58160
openSUSE-SU-2026:22016-1: Security update for rustup
CVE-2024-12224 · CVE-2025-58160 · CVE-2026-25541 · CVE-2026-25727 · CVE-2026-41676 · CVE-2026-41677 · CVE-2026-41678 · CVE-2026-41681 · CVE-2026-41898 · CVE-2026-42327 · CVE-2026-44662 · CVE-2026-45784 · CVE-2026-93599 · CVE-2026-93600 · CVE-2026-93601 · CVE-2026-93602
SUSE-SU-2026:23567-1: Security update for rav1e
CVE-2025-58160
SUSE-SU-2026:20335-1: Security update for python-maturin
CVE-2025-58160
SUSE-SU-2026:23572-1: Security update for gstreamer-devtools
CVE-2025-4574 · CVE-2025-58160 · CVE-2026-25541 · CVE-2026-25727 · CVE-2026-72813 · CVE-2026-72814
SUSE-SU-2026:20077-1: Security update for python-uv
CVE-2025-58160 · CVE-2025-62518
SUSE-SU-2025:21158-1: Security update for himmelblau
CVE-2025-58160 · CVE-2025-59044
SUSE-SU-2026:23607-1: Security update for python-ruff
CVE-2025-58160
SUSE-FU-2026:20990-1: Feature update for himmelblau
CVE-2025-54882 · CVE-2025-58160 · CVE-2026-25727 · CVE-2026-31979
openSUSE-SU-2025:15551-1: cargo-c-0.10.3~git0.ee7d7ef-4.1 on GA media
CVE-2024-12224 · CVE-2025-4574 · CVE-2025-58160
SUSE-SU-2026:1361-1: Security update for himmelblau
CVE-2024-11738 · CVE-2025-53013 · CVE-2025-54882 · CVE-2025-58160 · CVE-2026-25727 · CVE-2026-31979 · CVE-2026-34397
SUSE-SU-2025:03082-1: Security update for python-maturin
CVE-2025-58160
openSUSE-SU-2026:21681-1: Security update for rav1e
CVE-2025-58160
SUSE-SU-2026:24236-1: Security update for agama
CVE-2025-58160 · CVE-2026-25541
SUSE-SU-2026:24014-1: Security update for rustup
CVE-2024-12224 · CVE-2025-58160 · CVE-2026-25541 · CVE-2026-25727 · CVE-2026-41676 · CVE-2026-41677 · CVE-2026-41678 · CVE-2026-41681 · CVE-2026-41898 · CVE-2026-42327 · CVE-2026-44662 · CVE-2026-45784 · CVE-2026-93599 · CVE-2026-93600 · CVE-2026-93601 · CVE-2026-93602
openSUSE-SU-2026:21134-1: Security update for glycin-loaders
CVE-2025-55159 · CVE-2025-58160
openSUSE-SU-2025-20114-1: Security update for himmelblau
CVE-2025-58160 · CVE-2025-59044
openSUSE-SU-2025:15514-1: python311-uv-0.8.14-2.1 on GA media
CVE-2025-58160
openSUSE-FU-2026:20453-1: Feature update for himmelblau
CVE-2025-54882 · CVE-2025-58160 · CVE-2026-25727 · CVE-2026-31979
SUSE-SU-2026:22302-1: Security update for glycin-loaders
CVE-2025-55159 · CVE-2025-58160
openSUSE-SU-2025:15550-1: cargo-audit-0.21.2~git0.18e58c2-2.1 on GA media
CVE-2024-12224 · CVE-2025-4574 · CVE-2025-58160
msrc_CVE-2025-58160: Tracing logging user input may result in poisoning logs with ANSI escape sequences
CVE-2025-58160
openSUSE-SU-2025:15552-1: cargo-packaging-1.3.0+0-2.1 on GA media
CVE-2025-58160
SUSE-SU-2025:4091-1: Security update for cargo-packaging, rust-bindgen
CVE-2025-58160
openSUSE-SU-2026:20026-1: Security update for python-uv
CVE-2025-58160 · CVE-2025-62518
openSUSE-SU-2026:21741-1: Security update for python-ruff
CVE-2025-58160
openSUSE-SU-2026:20060-1: Security update for cargo-c
CVE-2024-12224 · CVE-2025-4574 · CVE-2025-58160
openSUSE-SU-2026:21074-1: Security update for loupe
CVE-2025-58160
SUSE-SU-2026:20235-1: Security update for python-maturin
CVE-2025-58160
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON