CVE-2021-45710

If a tokio::sync::oneshot channel is closed (via the oneshot::Receiver::close method), a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling try_recv.

When these methods are called concurrently on a closed channel, the two halves of the channel can concurrently access a shared memory location, resulting in a data race. This has been observed to cause memory corruption.

Note that the race only occurs when both halves of the channel are used after the Receiver half has called close. Code where close is not used, or where the Receiver is not awaited and try_recv is not called after calling close, is not affected.

An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.

This update for kanidm fixes the following issues:

• kanidm version 1.3.3~git0.f075d13:
  • Release 1.3.3
  • Mail substr index (#2981)

These are all security issues fixed in the greetd-0.8.0-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kanidm-1.1.0alpha7git0.c8468199-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the rustscan-2.0.1+0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the rustup-1.24.3~git1.0a74fef5-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the sccache-0.2.15~git0.6b6d2f7-8.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the tuigreet-0.7.1-3.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the cargo-c-0.8.1~git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the librav1e0-0.5.1+0-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the spotifyd-0.3.3-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the zram-generator-1.1.1~git5.8612dbb-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the afterburn-5.0.0-6.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the tealdeer-1.5.0+0-1.1 package on the GA media of openSUSE Tumbleweed.

If a tokio::sync::oneshot channel is closed (via the oneshot::Receiver::close method), a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling try_recv.

When these methods are called concurrently on a closed channel, the two halves of the channel can concurrently access a shared memory location, resulting in a data race. This has been observed to cause memory corruption.

Note that the race only occurs when both halves of the channel are used after the Receiver half has called close. Code where close is not used, or where the Receiver is not awaited and try_recv is not called after calling close, is not affected.

See tokio#4225 for more details.

This update for rustup fixes the following issues:

Updated to version 1.25.1~0:

• CVE-2022-24713: Fixed Regex denial of service (bsc#1196972).
• CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).

This update for 389-ds fixes the following issues:

• CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).

• Update to version 2.0.16~git56.d15a0a7:

• Failure to migrate from openldap if pwdPolicyChecker present (bsc#1205146).

• Resolve issue with checklist post migration when dds is present (bsc#1204748).

• Improve reliability of migrations from openldap when dynamic directory services is configured (bsc#1204493).

This update for sccache fixes the following issues:

Updated to version 0.3.0:

• CVE-2022-24713: Fixed Regex denial of service (bsc#1196972).
• CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).
• Added hardening to systemd service(s) (bsc#1181400).

This update for 389-ds fixes the following issues:

• CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).

• Update to version 2.0.16~git56.d15a0a7.

• Failure to migrate from openldap if pwdPolicyChecker present (bsc#1205146).

• Resolve issue with checklist post migration when dds is present (bsc#1204748).

• Improve reliability of migrations from openldap when dynamic directory services is configured (bsc#1204493).

This update for sccache fixes the following issues:

• Update to version 0.4.2.
• CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. (bsc#1194119)
• CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. (bsc#1196972)
• CVE-2022-31394: Fixed a DoS issue due to the max header list size not settable. (bsc#1208553)
• CVE-2023-1521: Fixed a local privilege escalation. (bsc#1212407)