Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1415-1

Опубликовано: 16 апр. 2026
Источник: suse-cvrf

Описание

Security update for rust1.93

This update for rust1.93 fixes the following issues:

Security issue:

  • CVE-2026-31812: denial of service via crafted QUIC initial packet (bsc#1259623).

Non security issue:

  • Resolve missing gcc requirement that may affect some crate buildin (bsc#1253321).

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP7
cargo1.93-1.93.0-150300.7.6.1
rust1.93-1.93.0-150300.7.6.1
rust1.93-src-1.93.0-150300.7.6.1
openSUSE Leap 15.6
cargo1.93-1.93.0-150300.7.6.1
rust1.93-1.93.0-150300.7.6.1
rust1.93-src-1.93.0-150300.7.6.1

Ссылки

Описание

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP7:cargo1.93-1.93.0-150300.7.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7:rust1.93-1.93.0-150300.7.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7:rust1.93-src-1.93.0-150300.7.6.1
openSUSE Leap 15.6:cargo1.93-1.93.0-150300.7.6.1
Ссылки