84 matches found
[SECURITY] Fedora 43 Update: python-rignore-0.7.6-7.fc43
rignore is a Python module that provides a high-performance, Rust-powered file system traversal functionality. It wraps the Rust ignore crate using PyO3, offering an efficient way to walk through directories while respecting various ignore rules...
abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +634 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)
pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CHGR-C6PX-7XPP...
PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures
PyCFunction::newclosure and the temporary newclosurebound complement in the 0.21–0.22 series required the supplied closure to be Send + 'static but not Sync. The resulting PyCFunction is a Python callable that can be invoked from any Python thread, which means the closure may be called concurrent...
abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +634 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)
pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-36HH-V3QG-5JQ4...
GHSA-36HH-V3QG-5JQ4 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
PyO3 0.24.0 added optimized implementations of Iterator::nth and DoubleEndedIterator::nthback for the BoundListIterator and BoundTupleIterator types. These implementations computed the target index using unchecked usize addition index + n before bounds-checking against the sequence length, then...
abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +634 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)
pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0177...
arrow-pyarrow (>=55.2.0, <=59.0.0), ct-python (>=0.5.9, <=0.5.12) +3 more potentially affected by unknown CVE via pyo3 (>=0.24.2, <=0.28.3)
pyo3 CARGO version =0.24.2, =55.2.0, =0.5.9, =0.14.0, =0.14.0, =0.4.0, =0.8.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0176...
[SECURITY] Fedora 42 Update: maturin-1.9.6-4.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 43 Update: maturin-1.9.6-5.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 44 Update: maturin-1.9.6-5.fc44
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 43 Update: rust-pythonize-0.27.0-1.fc43
Serde Serializer & Deserializer from Rust Python, backed by PyO3...
[SECURITY] Fedora 42 Update: maturin-1.9.6-3.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 43 Update: maturin-1.9.6-4.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
EUVD-2021-1519
Malware in sbrugna...
EUVD-2024-2969
Malicious code in bioql PyPI...
[SECURITY] Fedora 43 Update: maturin-1.8.7-2.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 41 Update: maturin-1.8.7-2.fc41
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 42 Update: maturin-1.8.7-2.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
Linux Distros Unpatched Vulnerability : CVE-2024-9979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak...
