Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
More information is available at https://www.cve.org/CVERecord?id=CVE-2026-33056. This flaw is fixed in version 0.4.45 of the tar crate. Updates for rust-tar-0.4.45 are in testing for all Fedora and EPEL branches, and buildroot overrides are active. However, since bpfman uses vendored Rust crate dependencies, its maintainers would need to fix this separately within the package’s dependency bundle.
Scratch build with the bumped version here https://koji.fedoraproject.org/koji/taskinfo?taskID=143600888, I'll update the repo after the build succeeds
Done, I'll wait for this to build https://koji.fedoraproject.org/koji/taskinfo?taskID=143601434 and then submit a package update for the latest build, + other f branches, tanks Ben!
FEDORA-2026-ae0b7bdc90 (bpfman-0.5.4-7.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-ae0b7bdc90
FEDORA-2026-ae0b7bdc90 (bpfman-0.5.4-7.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-2fc36ddefe (bpfman-0.5.4-7.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-2fc36ddefe
FEDORA-2026-d62d7fe77e (bpfman-0.5.4-5.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-d62d7fe77e
FEDORA-2026-b4d393799a (bpfman-0.5.4-6.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2026-b4d393799a
FEDORA-2026-b4d393799a has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-b4d393799a` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-b4d393799a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-d62d7fe77e has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-d62d7fe77e` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-d62d7fe77e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-2fc36ddefe has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-2fc36ddefe` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-2fc36ddefe See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.