[SECURITY] Fedora 40 Update: rust-zlib-rs-0.4.0-1.fc40

A memory-safe zlib implementation written in rust...

[SECURITY] Fedora 40 Update: rust-rustls-0.23.17-1.fc40

Rustls is a modern TLS library written in Rust...

[SECURITY] Fedora 41 Update: rust-zlib-rs-0.4.0-1.fc41

A memory-safe zlib implementation written in rust...

[SECURITY] Fedora 41 Update: rust-rustls-0.23.17-1.fc41

Rustls is a modern TLS library written in Rust...

Fedora 41 : rust-rustls / rust-zlib-rs (2024-41e6e2fc74)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-41e6e2fc74 advisory. - Update the rustls crate to version 0.23.17. - Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 stack...

Fedora: Security Advisory (FEDORA-2024-632b468c59)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-32468

Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...

CVE-2024-32468 Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator

Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...

CVE-2024-32468 Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator

Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...

CVE-2024-32468

Deno (Rust-based runtime) with deno_doc HTML generator vulnerabilities: XSS in generated search_index.js where innerHTML is used on unsanitized HTML, and XSS via un sanitized property, method, and enum names. This affects the deno_doc component and could enable Self-XSS when using deno doc --html...

RUSTSEC-2024-0448 `parse_arguments` reads a caller-supplied pointer as a slice

parsearguments is safe. It takes arguments: const AnyObject and argc, and calls slice::fromrawpartsarguments, argc as usize. It does not check that arguments is non-null and aligned, or that argc elements are initialized. Safe Rust can pass a null pointer or a length past the allocation. The...

SurrealDB has an Uncaught Exception Sorting Tables by Random Order

Sorting table records using an ORDER BY clause with the rand function as sorting mechanism could cause a panic due to relying on a comparison function that did not implement total order. This event resulted in a panic due to a recent change in Rust 1.81. Impact A client that is authorized to run...

WS-2023-0045

The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It suffers the same class of failure as the code it was layering over: TOCTOU race conditions, with the ability to cause arbitrary paths to be deleted by substituting...

airframe_recovery_bundle (>=1.0.0, <=1.0.2), cryptoballot (>=0.2.0, <=0.3.1) +9 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.5.0)

sharks CARGO version =0.3.3, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.2 - tsafe-collab 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-JP37-5QHW-MFFW...

airframe_recovery_bundle (>=1.0.0, <=1.0.2), cryptoballot (>=0.2.0, <=0.3.1) +9 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.5.0)

sharks CARGO version =0.3.3, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.2 - tsafe-collab 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0398...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys-cdylib (>=0.3.0, <=0.3.1) potentially affected by unknown CVE via libz-rs-sys (>=0.1.1, <=0.3.1)

libz-rs-sys CARGO version =0.1.1, =1.0.29, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

Fedora 41 : rust (2024-3534c44ef9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3534c44ef9 advisory. Automatic update for rust-1.77.2-1.fc41. Changelog Tue Apr 9 2024 Josh Stone - 1.77.2-1 - Update to 1.77.2; Fixes RHBZ2274248 CVE-2024-24576 Tenable has...

A Bootiful Podcast: engineer, CTO, teacher, and pilot Ken Sipe

Hi, Spring fans, JVM enjoyers, and cloud natives! Have I got a treat for you today! We're going to be talking to my longtime pal Ken Sipe. groovy java kotlin go rust spring jvm...