CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3

CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3. A patched version of the package is available...

CVE-2026-25727 affecting package azl-compliance for versions less than 1.0.2-3

CVE-2026-25727 affecting package azl-compliance for versions less than 1.0.2-3. A patched version of the package is available...

AZL-76821 CVE-2026-25727 affecting package azl-compliance for versions less than 1.0.2-3

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

CBL Mariner 2.0 Security Update: azl-compliance / rust (CVE-2025-4574)

The version of azl-compliance / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4574 advisory. - In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition...

Azure Linux 3.0 Security Update: azl-compliance / rust (CVE-2025-4574)

The version of azl-compliance / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4574 advisory. - In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition...

CVE-2025-4574 affecting package azl-compliance for versions less than 1.0.2-2

CVE-2025-4574 affecting package azl-compliance for versions less than 1.0.2-2. A patched version of the package is available...

AZL-61848 CVE-2025-4574 affecting package azl-compliance for versions less than 1.0.2-2

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...