Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:3944-1

Опубликовано: 05 нояб. 2025
Источник: suse-cvrf

Описание

Security update for sccache

This update for sccache fixes the following issues:

  • CVE-2025-55159 - updated slab with the uninit memory access fix (bsc#1248003)

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP6
sccache-0.4.2~4-150600.10.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
sccache-0.4.2~4-150600.10.6.1
openSUSE Leap 15.6
sccache-0.4.2~4-150600.10.6.1

Ссылки

Описание

slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has been fixed in slab 0.4.11. A workaround for this issue involves to avoid using get_disjoint_mut with indices that might be beyond the slab's actual length.

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP6:sccache-0.4.2~4-150600.10.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7:sccache-0.4.2~4-150600.10.6.1
openSUSE Leap 15.6:sccache-0.4.2~4-150600.10.6.1
Ссылки