Описание
Security update for gstreamer-devtools
This update for gstreamer-devtools fixes the following issues:
- CVE-2025-4574: crossbeam-channel: internal
Channeltype'sDropmethod has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output when logged and lead to terminal manipulation (bsc#1249015).
- CVE-2026-25541: bytes: integer overflow in
BytesMut:reservecan lead to undefined behavior and crashes (bsc#1274306). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257914).
- CVE-2026-72813: actix-files: empty
Rangeheader in GET requests for static files can lead to a process crash (bsc#1275210). - CVE-2026-72814: actix-files: non-existing folders passed as an argument to the
actix_files::Files::new()method can lead to information disclosure (bsc#1275209).
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1243178
- SUSE Bug 1249015
- SUSE Bug 1257914
- SUSE Bug 1274306
- SUSE Bug 1275209
- SUSE Bug 1275210
- SUSE CVE CVE-2025-4574 page
- SUSE CVE CVE-2025-58160 page
- SUSE CVE CVE-2026-25541 page
- SUSE CVE CVE-2026-25727 page
- SUSE CVE CVE-2026-72813 page
- SUSE CVE CVE-2026-72814 page
Описание
In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
Затронутые продукты
Ссылки
- CVE-2025-4574
- SUSE Bug 1243169
Описание
tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.
Затронутые продукты
Ссылки
- CVE-2025-58160
- SUSE Bug 1249007
Описание
Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1.
Затронутые продукты
Ссылки
- CVE-2026-25541
- SUSE Bug 1271347
Описание
time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.
Затронутые продукты
Ссылки
- CVE-2026-25727
- SUSE Bug 1257901
Описание
actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header.
Затронутые продукты
Ссылки
- CVE-2026-72813
- SUSE Bug 1275210
Описание
The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the serve_from argument to Files::new(), the mount path defaults to an empty path; the service then joins the request path with this empty path and canonicalizes it, causing Rust to resolve it as a relative path. As a result, an attacker can request paths that resolve relative to the application's working directory and access unintended files.
Затронутые продукты
Ссылки
- CVE-2026-72814
- SUSE Bug 1275209