Описание
Security update for cargo-c
This update for cargo-c fixes the following issues:
- CVE-2025-3416: use-after-free in Md::fetch and Cipher::fetch of rust-openssl crate (bsc#1242675).
Список пакетов
openSUSE Leap 15.6
cargo-c-0.10.3~git0.ee7d7ef-150600.3.6.1
Ссылки
- Link for SUSE-SU-2025:1570-1
- E-Mail link for SUSE-SU-2025:1570-1
- SUSE Security Ratings
- SUSE Bug 1242675
- SUSE CVE CVE-2025-3416 page
Описание
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
Затронутые продукты
openSUSE Leap 15.6:cargo-c-0.10.3~git0.ee7d7ef-150600.3.6.1
Ссылки
- CVE-2025-3416
- SUSE Bug 1242599