Gix-date: gix-date: undefined behavior due to invalid string generation
概要
Gix-date: gix-date: undefined behavior due to invalid string generation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in gix-date. The gix_date::parse::TimeBuf::as_str function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2026-0810 rust-gix-date
- Ubuntu UBUNTU-CVE-2026-0810 rust-gix-date
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory rustsec.org
- package github.com
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web crates.io