SUSE-SU-2018:3357-1 Security update for rust

This update for rust fixes the following issues: - CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution This patch consists of requiring --plugin-path to be passed whenever --plugin is passed Note that rustdoc plugins will be removed entirely...

Updated rust packages fix security vulnerability

Updated rust packages fix security vulnerability The Rust Programming Language Standard Library before version 1.29.1 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in the standard library that can result in buffer overflow. This attack appear to be exploitable via...

MGASA-2018-0407 Updated rust packages fix security vulnerability

Updated rust packages fix security vulnerability The Rust Programming Language Standard Library before version 1.29.1 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in the standard library that can result in buffer overflow. This attack appear to be exploitable via...

Fedora 27 : rust (2018-69cce46328)

Security fix for buffer overflow in str::repeat Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

DEBIAN-CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

Integer overflow

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

CVE-2018-1000810 affects the Rust standard library up to version 1.29.0 (including 1.28.0, 1.27.x, etc.), caused by a CWE-680 integer overflow to buffer overflow in the internal handling of str::repeat. The vulnerability could lead to a buffer overflow and is fixed in 1.29.1. Affected products re...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

Fedora Update for rust FEDORA-2018-0071ad34f4

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rust FEDORA-2018-69cce46328

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: rust-1.29.1-2.fc29

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

[SECURITY] Fedora 27 Update: rust-1.29.1-2.fc27

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

acto-rs (>=0.2.9 <=0.3.7), alumina (>=0.1.0 <=0.1.1) +378 more potentially affected by CVE-2018-25023 via smallvec (>=0.1.8 <=0.5.1)

smallvec CARGO version =0.1.8, =0.2.9, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =1.0.0, =1.1.0 - approveapi =0.1.0 and more Source cves: CVE-2018-25023 Source advisory: OSV:RUSTSEC-2018-0018...

OpenDataSH_twitter_notifier (>=0.1.0 <=0.1.2), aa2 (>=0.9.0 <=0.9.1) +436 more potentially affected by CVE-2018-20993 via yaml-rust (>=0.2.2 <=0.3.5)

yaml-rust CARGO version =0.2.2, =0.1.0, =0.9.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0, =1.0.0, =0.0.2, =0.0.1, =0.0.2 and more Source cves: CVE-2018-20993 Source advisory: OSV:RUSTSEC-2018-0006...

BeerHolderBot (>=0.3.5 <=0.3.8), BiliupApi (>=0.1.0 <=0.1.7) +2447 more potentially affected by unknown CVE via serde_yaml (>=0.6.2 <=0.8.26)

serdeyaml CARGO version =0.6.2, =0.3.5, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.1.1, =0.1.1, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0005...

Debian DSA-4295-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird: Multiple memory safety errors and use-after-frees may lead to the execution of arbitrary code or denial of service. Debian follows the Thunderbird upstream releases. Support for the 52.x series has ended, so starting with this update we're...