CVE-2022-27943

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new...

Internet Bug Bounty: Time-of-check to time-of-use vulnerability in the std::fs::remove_dir_all() function of the Rust standard library

The implementation of std::fs::removedirall in the Rust standard library is vulnerable to a time-of-check to time-of-use link replacement attack. This applies to all versions of Rust before 1.58.1. Vulnerability details The documentation of std::fs::removedirall guarantees that the function does...

PT-2022-18711

Name of the Vulnerable Software and Affected Versions GNU GCC version 11.2 Description The issue in libiberty/rust-demangle.c allows stack consumption in demangle const. This can be demonstrated using nm-new. Recommendations For GNU GCC version 11.2, update to a newer version that contains a fix...

Fedora: Security Advisory for rust-regex (FEDORA-2022-8436ac4c39)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-regex (FEDORA-2022-ceb3e03c5e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

diss (>=0.0.1, <=0.2.10), ea-command (>=0.1.0, <=0.2.1) +2 more potentially affected by unknown CVE via pty (>=0.1.6, <=0.2.2)

pty CARGO version =0.1.6, =0.0.1, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0015...

SUSE SLED15 / SLES15 Security Update : rust, rust1.58, rust1.59 (SUSE-SU-2022:0843-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0843-1 advisory. This update provides both rust1.58 and rust1.59. Changes in rust1.58: - Add recommends for GCC for installs to be able ...

CVE-2020-36318 affecting package rust 1.47.0-2

CVE-2020-36318 affecting package rust 1.47.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-21658 affecting package rust 1.47.0-3

CVE-2022-21658 affecting package rust 1.47.0-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-31162 affecting package rust 1.47.0-1

CVE-2021-31162 affecting package rust 1.47.0-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 35 Update: rust-regex-1.5.5-1.fc35

Implementation of regular expressions for Rust. This implementation uses fini te automata and guarantees linear time matching on all inputs...

[SECURITY] Fedora 34 Update: rust-regex-1.5.5-1.fc34

Implementation of regular expressions for Rust. This implementation uses fini te automata and guarantees linear time matching on all inputs...

openSUSE 15 Security Update : rust, rust1.58, rust1.59 (openSUSE-SU-2022:0843-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0843-1 advisory. - Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security...

SUSE: Security Advisory (SUSE-SU-2022:0843-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2022:0843-1 Security update for rust, rust1.58, rust1.59

This update for rust, rust1.58, rust1.59 fixes the following issues: This update provides both rust1.58 and rust1.59. Changes in rust1.58: - Add recommends for GCC for installs to be able to link. - Add suggests for lld/clang which are faster than gcc for linking to allow users choice on what the...

SUSE-SU-2022:0843-1 Security update for rust, rust1.58, rust1.59

This update for rust, rust1.58, rust1.59 fixes the following issues: This update provides both rust1.58 and rust1.59. Changes in rust1.58: - Add recommends for GCC for installs to be able to link. - Add suggests for lld/clang which are faster than gcc for linking to allow users choice on what the...

AZL-41766 CVE-2022-0890 affecting package rust for versions less than 1.75.0-1

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

Directory Traversal

Rust is vulnerable to directory traversal. The vulnerability exists due to a race condition which allows an attacker to access the file system of the application...

Rust's regex crate vulnerable to regular expression denial of service

This is a cross-post of the official security advisoryadvisory. The official advisory contains a signed version with our PGP key, as well. advisory: https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw The Rust Security Response WG was notified that the regex crate did not...

abi_stable_derive (>=0.7.0, <=0.8.4), abnf (>=0.10.0, <=0.11.3) +189 more potentially affected by CVE-2022-24713 via regex (>=1.0.2, <=1.5.4)

regex CARGO version =1.0.2, =0.7.0, =0.10.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.8.1, =0.59.1, =0.59.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2022-24713 Source advisory: GHSA-M5PQ-GVJ9-9VR8...