{
  "cveId": "CVE-2025-58160",
  "url": "https://patchblox.com/security/cve/CVE-2025-58160",
  "summary": "CVE-2025-58160 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2025-58160, released August 29, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "rust-tracing-subscriber: tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information",
  "description": "tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.",
  "published": "2025-08-29T22:15:32Z",
  "severity": "moderate",
  "epss": 0.00341,
  "epssPercentile": 0.27779,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "agama",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "17\u002B699.92879916c-160000.13.1",
      "fix": "OPENSUSE-SU-2026:22075-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22075-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "agama",
      "release": "sles 16.0",
      "fixedVersion": "17\u002B699.92879916c-160000.13.1",
      "fix": "SUSE-SU-2026:24236-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-24236-1",
      "released": "2026-11-07T00:44:01Z"
    },
    {
      "platform": "linux",
      "product": "cargo-c",
      "release": "amzn 2023",
      "fixedVersion": "0.9.32-3.amzn2023.0.4",
      "fix": "ALAS2023-2025-1180",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1180",
      "released": "2025-09-10T05:42:00Z"
    },
    {
      "platform": "linux",
      "product": "cargo-c",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.10.15-160000.1.1",
      "fix": "OPENSUSE-SU-2026:20060-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20060-1",
      "released": "2026-01-19T10:42:10Z"
    },
    {
      "platform": "linux",
      "product": "cargo-c",
      "release": "sles 16.0",
      "fixedVersion": "0.10.15-160000.1.1",
      "fix": "SUSE-SU-2026:20096-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20096-1",
      "released": "2026-01-19T10:38:15Z"
    },
    {
      "platform": "linux",
      "product": "cargo-c-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "0.9.32-3.amzn2023.0.4",
      "fix": "ALAS2023-2025-1180",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1180",
      "released": "2025-09-10T05:42:00Z"
    },
    {
      "platform": "linux",
      "product": "cargo-packaging",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.3.0\u002B0-150600.3.3.1",
      "fix": "SUSE-SU-2025:4091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4091-1",
      "released": "2025-11-13T16:30:39Z"
    },
    {
      "platform": "linux",
      "product": "glycin-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.1.2-9.amzn2023",
      "fix": "ALAS2023-2025-1193",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1193",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "glycin-loaders",
      "release": "amzn 2023",
      "fixedVersion": "1.1.2-9.amzn2023",
      "fix": "ALAS2023-2025-1193",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1193",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "glycin-loaders",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.2.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21134-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21134-1",
      "released": "2026-06-20T18:27:34Z"
    },
    {
      "platform": "linux",
      "product": "glycin-loaders",
      "release": "sles 16.0",
      "fixedVersion": "1.2.1-160000.3.1",
      "fix": "SUSE-SU-2026:22302-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22302-1",
      "released": "2026-07-06T20:10:18Z"
    },
    {
      "platform": "linux",
      "product": "glycin-loaders-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.1.2-9.amzn2023",
      "fix": "ALAS2023-2025-1193",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1193",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "gstreamer-devtools",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.26.7-160000.2.1",
      "fix": "OPENSUSE-SU-2026:21689-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21689-1",
      "released": "2026-08-30T14:39:29Z"
    },
    {
      "platform": "linux",
      "product": "gstreamer-devtools",
      "release": "sles 16.0",
      "fixedVersion": "1.26.7-160000.2.1",
      "fix": "SUSE-SU-2026:23572-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23572-1",
      "released": "2026-08-30T14:39:08Z"
    },
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.3.8\u002Bgit0.dec3693-160000.1.1",
      "fix": "OPENSUSE-FU-2026:20453-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-fu-2026-20453-1",
      "released": "2026-04-01T09:26:05Z"
    },
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "sles 15.7",
      "fixedVersion": "2.3.9\u002Bgit0.a9fd29b-150700.3.15.1",
      "fix": "SUSE-SU-2026:1361-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1361-1",
      "released": "2026-04-15T14:14:00Z"
    },
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "sles 16.0",
      "fixedVersion": "2.3.8\u002Bgit0.dec3693-160000.1.1",
      "fix": "SUSE-FU-2026:20990-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2026-20990-1",
      "released": "2026-04-01T09:19:25Z"
    },
    {
      "platform": "linux",
      "product": "loupe",
      "release": "amzn 2023",
      "fixedVersion": "47.4-33.amzn2023",
      "fix": "ALAS2023-2025-1192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1192",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "loupe",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "48.2-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21074-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21074-1",
      "released": "2026-06-28T08:41:36Z"
    },
    {
      "platform": "linux",
      "product": "loupe",
      "release": "sles 16.0",
      "fixedVersion": "48.2-160000.1.1",
      "fix": "SUSE-SU-2026:22380-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22380-1",
      "released": "2026-06-28T08:44:40Z"
    },
    {
      "platform": "linux",
      "product": "loupe-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "47.4-33.amzn2023",
      "fix": "ALAS2023-2025-1192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1192",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "loupe-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "47.4-33.amzn2023",
      "fix": "ALAS2023-2025-1192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1192",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "python-maturin",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.4.0-150600.3.9.1",
      "fix": "SUSE-SU-2025:03082-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03082-1",
      "released": "2025-09-05T08:27:38Z"
    },
    {
      "platform": "linux",
      "product": "python-maturin",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.8.7-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20180-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20180-1",
      "released": "2026-02-05T20:51:59Z"
    },
    {
      "platform": "linux",
      "product": "python-maturin",
      "release": "sles 16.0",
      "fixedVersion": "1.8.7-160000.3.1",
      "fix": "SUSE-SU-2026:20335-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20335-1",
      "released": "2026-02-05T20:51:34Z"
    },
    {
      "platform": "linux",
      "product": "python-ruff",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.11.13-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21741-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21741-1",
      "released": "2026-09-02T14:12:56Z"
    },
    {
      "platform": "linux",
      "product": "python-ruff",
      "release": "sles 16.0",
      "fixedVersion": "0.11.13-160000.3.1",
      "fix": "SUSE-SU-2026:23607-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23607-1",
      "released": "2026-09-02T14:09:09Z"
    },
    {
      "platform": "linux",
      "product": "python-uv",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.7.18-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20026-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20026-1",
      "released": "2026-01-13T12:48:04Z"
    },
    {
      "platform": "linux",
      "product": "python-uv",
      "release": "sles 16.0",
      "fixedVersion": "0.7.18-160000.3.1",
      "fix": "SUSE-SU-2026:20077-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20077-1",
      "released": "2026-01-13T12:49:17Z"
    },
    {
      "platform": "linux",
      "product": "rav1e",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.8.1-160000.2.1",
      "fix": "OPENSUSE-SU-2026:21681-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21681-1",
      "released": "2026-08-30T14:37:24Z"
    },
    {
      "platform": "linux",
      "product": "rav1e",
      "release": "sles 16.0",
      "fixedVersion": "0.8.1-160000.2.1",
      "fix": "SUSE-SU-2026:23567-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23567-1",
      "released": "2026-08-30T14:36:32Z"
    },
    {
      "platform": "linux",
      "product": "rust-bindgen",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.72.0-150600.13.3.1",
      "fix": "SUSE-SU-2025:4091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4091-1",
      "released": "2025-11-13T16:30:39Z"
    },
    {
      "platform": "linux",
      "product": "rust-cargo-c-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "0.9.32-3.amzn2023.0.4",
      "fix": "ALAS2023-2025-1180",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1180",
      "released": "2025-09-10T05:42:00Z"
    },
    {
      "platform": "linux",
      "product": "rust-tracing-subscriber",
      "release": "Debian 14",
      "fixedVersion": "0.3.20-1",
      "fix": "DEBIAN-CVE-2025-58160",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-58160",
      "released": "2025-08-29T22:15:32Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.29.1~0-160000.1.1",
      "fix": "OPENSUSE-SU-2026:22016-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22016-1",
      "released": "2026-10-02T19:31:21Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "sles 15.6",
      "fixedVersion": "1.28.2~0-150600.10.13.1",
      "fix": "SUSE-SU-2026:2832-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2832-1",
      "released": "2026-07-09T19:02:14Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "sles 15.7",
      "fixedVersion": "1.28.2~0-150600.10.13.1",
      "fix": "SUSE-SU-2026:2832-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2832-1",
      "released": "2026-07-09T19:02:14Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "sles 16.0",
      "fixedVersion": "1.29.1~0-160000.1.1",
      "fix": "SUSE-SU-2026:24014-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-24014-1",
      "released": "2026-10-02T19:21:30Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}