19 matches found
`zvariant_derive` is unmaintained
The zvariantderive crate is no longer maintained as a standalone crate. Its derive macros are provided by zbus starting with version 6.0.0. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format...
RUSTSEC-2026-0370 `zvariant` is unmaintained
The zvariant crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its wire module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to...
RUSTSEC-2026-0372 `zvariant_derive` is unmaintained
The zvariantderive crate is no longer maintained as a standalone crate. Its derive macros are provided by zbus starting with version 6.0.0. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format...
RUSTSEC-2026-0371 `zbus_names` is unmaintained
The zbusnames crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its names module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus name types...
`zbus_names` is unmaintained
The zbusnames crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its names module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus name types...
`zvariant` is unmaintained
The zvariant crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its wire module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to...
PT-2026-125047
The zvariant derive crate is no longer maintained as a standalone crate. Its derive macros are provided by zbus starting with version 6.0.0. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format...
PT-2026-125045
The zvariant crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its wire module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to...
PT-2026-125046
The zbus names crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its names module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus name types...
CVE-2026-18418
The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...
CVE-2026-18418 Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name
The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...
CVE-2026-18418 Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name
The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...
CVE-2026-18418
The zbus proxy agent IPC backend in Zephyr (specifically zbus_proxy_agent_ipc.c) is vulnerable to an out-of-bounds read when logging rejected inter-domain frames. The vulnerability occurs because the channel_name[] array in struct zbus_proxy_msg may lack NUL-termination, and the logging logic use...
EUVD-2026-97104
The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...
CVE-2026-18418 Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name
The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...
PT-2026-110218
The zbus proxy agent IPC backend in subsys/zbus/proxy agent/zbus proxy agent ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbus proxy msg carries a fixed-size channel name array as its last member, and nothing in the transport...
CVE-2026-18418: Out-of-bounds Read
The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...
PT-2026-83844
Subject::new for owner in the zbus polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit...
