80 matches found
RUSTSEC-2025-0020 Risk of buffer overflow in `PyString::from_object`
PyString::fromobject took &str arguments and forwarded them directly to the Python C API without checking for terminating nul bytes. This could lead the Python interpreter to read beyond the end of the &str data and potentially leak contents of the out-of-bounds read by raising a Python exception...
GHSA-VXCF-C7MX-PG53 Build corruption when using `PYO3_CONFIG_FILE` environment variable
In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...
Build corruption when using `PYO3_CONFIG_FILE` environment variable
In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...
PT-2024-40490 · Pypi · Pyo3
Name of the Vulnerable Software and Affected Versions: PyO3 versions 0.23.0 through 0.23.2 Description: The issue arises from a regression in the PYO3 CONFIG FILE environment variable, which is used to configure builds. This regression causes PyO3 to fail to reconfigure and recompile when the...
RUSTSEC-2024-0409 Build corruption when using `PYO3_CONFIG_FILE` environment variable
In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...
Fedora 41 : rust-pyo3 / rust-pyo3-build-config / rust-pyo3-ffi / etc (2024-21666fa7f2)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-21666fa7f2 advisory. Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378. Tenable has extracted the preceding description block...
[SECURITY] Fedora 41 Update: rust-pyo3-ffi-0.22.4-1.fc41
Python-API bindings for the PyO3 ecosystem...
[SECURITY] Fedora 41 Update: rust-pyo3-build-config-0.22.4-1.fc41
Build configuration for the PyO3 ecosystem...
[SECURITY] Fedora 41 Update: rust-pyo3-macros-0.22.4-1.fc41
Proc macros for PyO3 package...
[SECURITY] Fedora 41 Update: rust-pyo3-macros-backend-0.22.4-1.fc41
Code generation for PyO3 package...
[SECURITY] Fedora 41 Update: rust-pyo3-0.22.4-1.fc41
Bindings to Python interpreter...
[SECURITY] Fedora 40 Update: rust-pyo3-ffi-0.22.4-1.fc40
Python-API bindings for the PyO3 ecosystem...
[SECURITY] Fedora 40 Update: rust-pyo3-macros-0.22.4-1.fc40
Proc macros for PyO3 package...
[SECURITY] Fedora 40 Update: rust-pyo3-macros-backend-0.22.4-1.fc40
Code generation for PyO3 package...
[SECURITY] Fedora 40 Update: rust-pyo3-build-config-0.22.4-1.fc40
Build configuration for the PyO3 ecosystem...
[SECURITY] Fedora 40 Update: rust-pyo3-0.22.4-1.fc40
Bindings to Python interpreter...
[SECURITY] Fedora 39 Update: rust-pyo3-macros-0.22.4-1.fc39
Proc macros for PyO3 package...
[SECURITY] Fedora 39 Update: rust-pyo3-macros-backend-0.22.4-1.fc39
Code generation for PyO3 package...