9 matches found
[SECURITY] Fedora 41 Update: rust-zerovec-0.10.4-4.fc41
Zero-copy vector backed by a byte array...
[SECURITY] Fedora 40 Update: rust-zerovec-0.10.4-4.fc40
Zero-copy vector backed by a byte array...
[SECURITY] Fedora 42 Update: rust-zerovec-0.10.4-4.fc42
Zero-copy vector backed by a byte array...
GHSA-74R5-G7VC-J2V2 zerovec-derive incorrectly uses `#[repr(packed)]`
The affected versions make unsafe memory accesses under the assumption that reprpacked has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 1.80.0-beta starts reordering fields of reprpacked structs, leading to illegal...
zerovec-derive incorrectly uses `#[repr(packed)]`
The affected versions make unsafe memory accesses under the assumption that reprpacked has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 1.80.0-beta starts reordering fields of reprpacked structs, leading to illegal...
ayaka-model (=0.2.0), ayaka-runtime (=0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0 <=0.8.0)
zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob =1.0.0-beta1 - icusegmenter =1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...
zerovec incorrectly uses `#[repr(packed)]`
The affected versions make unsafe memory accesses under the assumption that reprpacked has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 1.80.0-beta starts reordering fields of reprpacked structs, leading to illegal...
GHSA-XRV3-JMCP-374J zerovec incorrectly uses `#[repr(packed)]`
The affected versions make unsafe memory accesses under the assumption that reprpacked has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 1.80.0-beta starts reordering fields of reprpacked structs, leading to illegal...
ayaka-model (=0.2.0), ayaka-runtime (=0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0 <=0.8.0)
zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob =1.0.0-beta1 - icusegmenter =1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0346...