RUSTSEC-2022-0011 Miscomputation when performing AES encryption in rust-crypto

The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...

ace-test-lib (0.1.0), ace_rust_demo (0.1.0) +503 more potentially affected by unknown CVE via rust-crypto (0.2.36)

rust-crypto CARGO version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - ace-test-lib 0.1.0 - acerustdemo 0.1.0 - aerospike =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.3.5, =0.9.0, =0.1.0, =0.1....

Miscomputation when performing AES encryption in rust-crypto

The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...

openSUSE 15 Security Update : rust (openSUSE-SU-2022:0491-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0491-1 advisory. - Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security...

openSUSE: Security Advisory for rust (openSUSE-SU-2022:0491-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

AZL-41314 CVE-2022-0632 affecting package rust for versions less than 1.75.0-1

NULL Pointer Dereference in Homebrew mruby prior to 3.2...

SUSE SLES15 Security Update : rust (SUSE-SU-2022:0491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0491-1 advisory. - Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust...

SUSE: Security Advisory (SUSE-SU-2022:0491-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0491-1 Security update for rust

This update for rust fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::removedirall bsc1194767...

OPENSUSE-SU-2022:0491-1 Security update for rust

This update for rust fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::removedirall bsc1194767...

Security update for rust (moderate)

openSUSE Security Update: Security update for rust Announcement ID: openSUSE-SU-2022:0491-1 Rating: moderate References: 1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 NVD : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 SUSE: 6.2...

enum_map macro can cause UB when `Enum` trait is incorrectly implemented

Affected versions of this crate did not properly check the length of an enum when using enummap! macro, trusting user-provided length. When the LENGTH in the Enum trait does not match the array length in the EnumArray trait, this can result in the initialization of the enum map with uninitialized...

abi_stable (>=0.4.0, <=0.8.4), acidalia (0.1.3) +1469 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0, <=0.7.2)

crossbeam-utils CARGO version =0.1.0, =0.4.0, =0.0.1, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.2, =0.3.0, =0.7.5, =0.8.1 - agilulf 0.1.0 - agilulfdriver 0.1.0 and more Source cves: CVE-2022-23639 Source advisory: OSV:GHSA-QC84-GQF4-9926...

abi_stable (>=0.4.0, <=0.8.4), acidalia (0.1.3) +1469 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0, <=0.7.2)

crossbeam-utils CARGO version =0.1.0, =0.4.0, =0.0.1, =0.1.1, =0.1.0, =0.1.1, =0.1.0, =0.1.2, =0.3.0, =0.7.5, =0.8.1 - agilulf 0.1.0 - agilulfdriver 0.1.0 and more Source cves: CVE-2022-23639 Source advisory: GHSA-QC84-GQF4-9926...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +34 more potentially affected by CVE-2022-23636 +1 more via wasmtime (>=0.7.0, <=0.33.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.40.1, =0.45.0, =0.1.0, =0.3.3, =0.8.0-alpha.2, =0.8.0-alpha.2, =0.1.1, =0.1.1, =0.1.2, =0.2.1, =0.9.0 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:GHSA-88XQ-W8CQ-XFG7...

CVE-2021-3648

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of CVE-2021-3530. Notes: All CVE users should reference CVE-2021-3530 instead of this candidate. All references and descriptions in this candidate have been removed to...

AZL-41096 CVE-2022-0614 affecting package rust for versions less than 1.75.0-1

Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-20...

DEBIAN-CVE-2022-23639

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...

CVE-2022-23639

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...