[SECURITY] Fedora 43 Update: rust-tikv-jemallocator-0.6.1-1.fc43

A Rust allocator backed by jemalloc...

[SECURITY] Fedora 42 Update: rust-tikv-jemallocator-0.6.1-1.fc42

A Rust allocator backed by jemalloc...

Unbounded memory allocation based on untrusted length

Impact Untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source. When...

wee_alloc is Unmaintained

Two of the maintainers have indicated that the crate may not be maintained. The crate has open issues including memory leaks and may not be suitable for production use. It may be best to switch to the default Rust standard allocator on wasm32 targets. Last release seems to have been three years...