Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:01591-1

Опубликовано: 19 мая 2025
Источник: suse-cvrf

Описание

Security update for python-maturin

This update for python-maturin fixes the following issues:

  • CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some(...) value passed as properties argument to either function (bsc#1242631).
  • CVE-2025-4574: crossbeam-channel: double-free leading to possible memory corruption in Channel::drop when dropping a channel (bsc#1243177).

Список пакетов

openSUSE Leap 15.6
python311-maturin-1.4.0-150600.3.6.1

Ссылки

Описание

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Затронутые продукты
openSUSE Leap 15.6:python311-maturin-1.4.0-150600.3.6.1
Ссылки

Описание

In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

Затронутые продукты
openSUSE Leap 15.6:python311-maturin-1.4.0-150600.3.6.1
Ссылки