Azure Linux 3.0 Security Update: librsvg2 (CVE-2022-23639)

The version of librsvg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23639 advisory. - crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for...

CVE-2022-23639 affecting package rust for versions less than crossbeam_utils-0.8.7

CVE-2022-23639 affecting package rust for versions less than crossbeamutils-0.8.7. A patched version of the package is available...

CVE-2022-23639 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2022-23639 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23639 affecting package librsvg2 for versions less than 2.58.1-1

CVE-2022-23639 affecting package librsvg2 for versions less than 2.58.1-1. An upgraded version of the package is available that resolves this issue...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +5191 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0, <=0.7.2)

crossbeam-utils CARGO version =0.1.0, =0.2.0, =0.5.3, =0.4.0, =0.2.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-23639 Source advisory: OSV:GHSA-QC84-GQF4-9926...

AZL-41454 CVE-2022-23639 affecting package librsvg2 for versions less than 2.58.1-1

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...

CVE-2022-23639

The CVE-2022-23639 issue affects crossbeam-utils prior to 0.8.7, where alignment of {i,u}64 was assumed to match Atomic{I,U}64. On some 32-bit targets, {i,u}64 alignment can be smaller than Atomic{I,U}64, leading to unaligned memory accesses and data races when using fetch_* with AtomicCell. 32-b...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +5191 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0, <=0.7.2)

crossbeam-utils CARGO version =0.1.0, =0.2.0, =0.5.3, =0.4.0, =0.2.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-23639 Source advisory: OSV:RUSTSEC-2022-0041...