An issue was discovered in the memoffset crate before 0.5.0 for Rust. offset_of and span_of can cause exposure of uninitialized memory. Reference: https://github.com/Gilnaa/memoffset/issues/9#issuecomment-505461490
Created rust-memoffset tracking bugs for this issue: Affects: fedora-29 [bug 1747325]
External References: https://rustsec.org/advisories/RUSTSEC-2019-0011.html
Quite a few modules need rebuild: sd/sd.yaml 496: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 ffsend/ffsend.yaml 1957: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 tokei/tokei.yaml 994: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 zincati/zincati.yaml 2174: ref: f84516bdf8700387668c7484d8c76cc07b83e60a # rust-memoffset-0.2.1-8.fc31 askalono-cli/askalono-cli.yaml 752: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 zola/zola.yaml 2826: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 skim/skim.yaml 630: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 heatseeker/heatseeker.yaml 259: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31 afterburn/afterburn.yaml 1593: ref: 116746c6f2e3fde2abab7b5872ebda32b858df84 # rust-memoffset-0.2.1-7.fc31
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.