rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the stack. This is reachable from safe Rust. This vulnerability is fixed in 0.10.78.

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the stack. This is reachable from safe Rust. This vulnerability is fixed in 0.10.78.

rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check

rust-openssl provides OpenSSL bindings for the Rust programming langua ...

rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check

Security update for aws-nitro-enclaves-cli

Security update for agama

Security update for aws-nitro-enclaves-cli

Security update for libkrun

Security update for python-cryptography

Security update for python-maturin

Security update for rust-keylime

Security update for python-cryptography

Security update for python-cryptography

Security update for afterburn

Security update for rustup

Security update for rustup

Security update for sccache