< back to search

shield Security update for rustup

SUSE-SLE-Module-Development-Tools-15-SP4-2023-2603

This update for rustup fixes the following issues: - CVE-2022-31394: Fixed possible HTTP2 attacks by specifying the HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE (bsc#1208552). - CVE-2023-26964: Fixed high memory and CPU usage when stream stacking occurs when H2 processes HTTP2 RST_STREAM frames (bsc#1210345).

Release Date

Jun 22 2023
References

Bugzilla: 1208552, 1210345
CVEs: CVE-2022-31394, CVE-2023-26964
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Development Tools Module 15.4 x86_64

Packages

rustup
A tool for managing user Rust toolchains

1.26.0~0-150400.3.7.1 lock rpm lock src

Development Tools Module 15.4 aarch64

Packages

rustup
A tool for managing user Rust toolchains

1.26.0~0-150400.3.7.1 lock rpm lock src