RUSTSEC-2025-0020 Risk of buffer overflow in `PyString::from_object`

PyString::fromobject took &str arguments and forwarded them directly to the Python C API without checking for terminating nul bytes. This could lead the Python interpreter to read beyond the end of the &str data and potentially leak contents of the out-of-bounds read by raising a Python exception...

GHSA-VXCF-C7MX-PG53 Build corruption when using `PYO3_CONFIG_FILE` environment variable

In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...

Build corruption when using `PYO3_CONFIG_FILE` environment variable

In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...

PT-2024-40490 · Pypi · Pyo3

Name of the Vulnerable Software and Affected Versions: PyO3 versions 0.23.0 through 0.23.2 Description: The issue arises from a regression in the PYO3 CONFIG FILE environment variable, which is used to configure builds. This regression causes PyO3 to fail to reconfigure and recompile when the...

RUSTSEC-2024-0409 Build corruption when using `PYO3_CONFIG_FILE` environment variable

In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...

Fedora 41 : rust-pyo3 / rust-pyo3-build-config / rust-pyo3-ffi / etc (2024-21666fa7f2)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-21666fa7f2 advisory. Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378. Tenable has extracted the preceding description block...

[SECURITY] Fedora 41 Update: rust-pyo3-ffi-0.22.4-1.fc41

Python-API bindings for the PyO3 ecosystem...

[SECURITY] Fedora 41 Update: rust-pyo3-build-config-0.22.4-1.fc41

Build configuration for the PyO3 ecosystem...

[SECURITY] Fedora 41 Update: rust-pyo3-macros-0.22.4-1.fc41

Proc macros for PyO3 package...

[SECURITY] Fedora 41 Update: rust-pyo3-macros-backend-0.22.4-1.fc41

Code generation for PyO3 package...

[SECURITY] Fedora 41 Update: rust-pyo3-0.22.4-1.fc41

Bindings to Python interpreter...

[SECURITY] Fedora 40 Update: rust-pyo3-macros-0.22.4-1.fc40

Proc macros for PyO3 package...

[SECURITY] Fedora 40 Update: rust-pyo3-macros-backend-0.22.4-1.fc40

Code generation for PyO3 package...

[SECURITY] Fedora 40 Update: rust-pyo3-build-config-0.22.4-1.fc40

Build configuration for the PyO3 ecosystem...

[SECURITY] Fedora 40 Update: rust-pyo3-ffi-0.22.4-1.fc40

Python-API bindings for the PyO3 ecosystem...

[SECURITY] Fedora 40 Update: rust-pyo3-0.22.4-1.fc40

Bindings to Python interpreter...

[SECURITY] Fedora 39 Update: rust-pyo3-macros-0.22.4-1.fc39

Proc macros for PyO3 package...

[SECURITY] Fedora 39 Update: rust-pyo3-macros-backend-0.22.4-1.fc39

Code generation for PyO3 package...

[SECURITY] Fedora 39 Update: rust-pyo3-build-config-0.22.4-1.fc39

Build configuration for the PyO3 ecosystem...

[SECURITY] Fedora 39 Update: rust-pyo3-0.22.4-1.fc39

Bindings to Python interpreter...