9467 matches found
MAL-2025-1383 Malicious code in rust-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f080c05d4a8b07c42704d1ef9fb6f6d30d4128e3f5976f6645a3b8858cb10580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rust-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f080c05d4a8b07c42704d1ef9fb6f6d30d4128e3f5976f6645a3b8858cb10580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2025-24898
rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...
CVE-2025-24903
libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, any contact may forge a sync message, impersonating another device of the local user...
Uncaught Panic in ORML Rewards Pallet
Summary A vulnerability in the addshare function of the Rewards pallet part of the ORML repository can lead to an uncaught Rust panic when handling user-provided input exceeding the u128 range. Affected Components - ORML Rewards pallet rewards/src/lib.rs - Any Substrate-based chain using ORML...
GHSA-5V93-9MQW-P9MH Uncaught Panic in ORML Rewards Pallet
Summary A vulnerability in the addshare function of the Rewards pallet part of the ORML repository can lead to an uncaught Rust panic when handling user-provided input exceeding the u128 range. Affected Components - ORML Rewards pallet rewards/src/lib.rs - Any Substrate-based chain using ORML...
OESA-2025-1120 three-eight-nine-ds-base security update
389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into th...
rust-toolset:rhel8 bug fix and enhancement update
An update is available for rust, module.rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc,...
CVE-2025-24903
libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, any contact may forge a sync message, impersonating another device of the local user...
CVE-2025-24903 libsignal-service-rs Doesn't Check Origin of Sync Messages
libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, any contact may forge a sync message, impersonating another device of the local user...
CVE-2025-24903
The CVE-2025-24903 entry concerns libsignal-service-rs, a Rust implementation of the Signal service client. Before commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, any contact could forge a sync message by impersonating another device of the local user because the origin of sync messages was not ...
[SECURITY] Fedora 40 Update: rust-tealdeer-1.7.1-3.fc40
Fetch and show tldr help pages for many CLI commands. Full featured offline client with caching support...
[SECURITY] Fedora 40 Update: rust-sequoia-sqv-1.2.1-6.fc40
A simple OpenPGP signature verification program...
[SECURITY] Fedora 40 Update: rust-snphost-0.5.0-3.fc40
Administrative utility for AMD SEV-SNP...
[SECURITY] Fedora 40 Update: rust-sevctl-0.6.0-4.fc40
Administrative utility for AMD SEV...
[SECURITY] Fedora 40 Update: rust-sequoia-policy-config-0.7.0-3.fc40
Configure Sequoia using a configuration file...
[SECURITY] Fedora 40 Update: rustup-1.27.1-6.fc40
Manage multiple rust installations with ease...
[SECURITY] Fedora 40 Update: rust-sequoia-keyring-linter-1.0.1-10.fc40
A linter for keyrings...