Gix-date: gix-date: undefined behavior due to invalid string generation
Résumé
Gix-date: gix-date: undefined behavior due to invalid string generation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in gix-date. The gix_date::parse::TimeBuf::as_str function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-0810 rust-gix-date
- Ubuntu UBUNTU-CVE-2026-0810 rust-gix-date
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory rustsec.org
- package github.com
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web crates.io