{"id":"CVE-2021-45710","aliases":["DEBIAN-CVE-2021-45710","EUVD-2022-0582","GHSA-fg7r-2g4j-5cgr","RUSTSEC-2021-0124","SUSE-SU-2022:3949-1","SUSE-SU-2022:3996-1","SUSE-SU-2022:4073-1","SUSE-SU-2022:4124-1","SUSE-SU-2023:3526-1","UBUNTU-CVE-2021-45710","openSUSE-SU-2024:0294-1","openSUSE-SU-2024:11710-1","openSUSE-SU-2024:11711-1","openSUSE-SU-2024:11714-1","openSUSE-SU-2024:11715-1","openSUSE-SU-2024:11716-1","openSUSE-SU-2024:11717-1","openSUSE-SU-2024:11720-1","openSUSE-SU-2024:11721-1","openSUSE-SU-2024:11722-1","openSUSE-SU-2024:11729-1","openSUSE-SU-2024:11751-1","openSUSE-SU-2024:11916-1"],"status":"published","title":"Race Condition in tokio","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01239,"percentile":0.6955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2021-11-16T12:00:00Z","modified":"2026-10-24T10:30:56Z","fixes":[{"ecosystem":"crates.io","package":"tokio","fixed_in":["1.13.1","1.8.4"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"rust-tokio","fixed_in":["1.15.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rust-tokio","fixed_in":["1.15.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rust-tokio","fixed_in":["1.15.0-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"389-ds","fixed_in":["2.0.16~git56.d15a0a7-150400.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"389-ds","fixed_in":["2.0.16~git56.d15a0a7-150400.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","fixed_in":["1.4.4.19~git59.136fc84-150300.3.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"389-ds","fixed_in":["1.4.4.19~git59.136fc84-150300.3.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"greetd","fixed_in":["0.8.0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rustscan","fixed_in":["2.0.1+0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rustup","fixed_in":["1.24.3~git1.0a74fef5-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sccache","fixed_in":["0.2.15~git0.6b6d2f7-8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"tuigreet","fixed_in":["0.7.1-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"spotifyd","fixed_in":["0.3.3-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"tealdeer","fixed_in":["1.5.0+0-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.13.1"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.1.14"},{"fixed":"1.8.4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"tokio","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.14"},{"fixed":"1.8.4"}]}]},{"source":"osv","ecosystem":"crates.io","package":"tokio","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.0"},{"fixed":"1.13.1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"tokio","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.14"},{"fixed":"1.8.4"},{"introduced":"1.9.0"},{"fixed":"1.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.1~0-150300.7.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.1~0-150300.7.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.16~git56.d15a0a7-150400.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.16~git56.d15a0a7-150400.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0~git5.14a4b8b-150300.7.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0~git5.14a4b8b-150300.7.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.19~git59.136fc84-150300.3.27.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.19~git59.136fc84-150300.3.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.14-2","0.1.14-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.14-2build1","1.15.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.29.1-1","1.33.0-1","1.35.1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.43.0-1","1.43.1-1","1.47.1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.48.0-2","1.53.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rust-tokio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.47.1-2","1.48.0-2"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"kanidm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3~git0.f075d13-bp156.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kanidm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3~git0.f075d13-bp156.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"greetd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rustscan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1+0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.3~git1.0a74fef5-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.15~git0.6b6d2f7-8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tuigreet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cargo-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1~git0.cce1b08-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spotifyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zram-generator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1~git5.8612dbb-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tealdeer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+0-1.1"}]}]}],"products":[{"vendor":"tokio","product":"tokio"}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0124.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","advisory","report"]},{"url":"https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0124.md","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45710","tags":["advisory"]},{"url":"https://github.com/tokio-rs/tokio/issues/4225","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-fg7r-2g4j-5cgr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-45710","tags":["advisory"]},{"url":"https://github.com/tokio-rs/tokio","tags":["package"]},{"url":"https://crates.io/crates/tokio","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223949-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194119","tags":["report"]},{"url":"https://bugzilla.suse.com/1196972","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24713","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223996-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204493","tags":["report"]},{"url":"https://bugzilla.suse.com/1204748","tags":["report"]},{"url":"https://bugzilla.suse.com/1205146","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224073-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181400","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224124-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233526-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208553","tags":["report"]},{"url":"https://bugzilla.suse.com/1212407","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1521","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-45710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45710","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5D6EJD2U437T6U4EHNYRU44B2UOGLUUB/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191031","tags":["report"]},{"url":"https://bugzilla.suse.com/1210356","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26964","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38191","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-45710","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","status":"published","published":"2021-12-26T21:47:20Z","modified":"2024-08-04T04:47:02.072Z","updated_at":"2026-11-02T14:33:02.580561Z"}],"euvd":[{"id":"EUVD-2022-0582","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","status":"published","published":"2021-12-26T21:47:20Z","modified":"2024-08-04T04:47:02Z","updated_at":"2026-11-03T03:08:25.77408Z"}],"ghsa":[{"id":"GHSA-fg7r-2g4j-5cgr","title":"Race Condition in tokio","description":"If a tokio::sync::oneshot channel is closed (via the oneshot::Receiver::close method), a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling try_recv.\n\nWhen these methods are called concurrently on a closed channel, the two halves of the channel can concurrently access a shared memory location, resulting in a data race. This has been observed to cause memory corruption.\n\nNote that the race only occurs when both halves of the channel are used after the Receiver half has called close. Code where close is not used, or where the Receiver is not awaited and try_recv is not called after calling close, is not affected.\n\n","status":"published","published":"2022-01-06T22:04:37Z","modified":"2023-06-13T22:01:00Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:36:54.225318Z"}],"nvd":[{"id":"CVE-2021-45710","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","status":"published","published":"2021-12-27T00:15:10.057Z","modified":"2026-06-17T04:13:59.733Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:07:02.977492Z"}],"osv":[{"id":"CVE-2021-45710","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","status":"published","published":"2021-12-27T00:15:10.057Z","modified":"2026-10-24T10:30:56.050191897Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-45710","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","status":"published","published":"2021-12-27T00:15:10.057Z","modified":"2026-10-23T18:03:45.666981397Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"GHSA-fg7r-2g4j-5cgr","title":"Race Condition in tokio","description":"If a tokio::sync::oneshot channel is closed (via the oneshot::Receiver::close method), a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling try_recv.\n\nWhen these methods are called concurrently on a closed channel, the two halves of the channel can concurrently access a shared memory location, resulting in a data race. This has been observed to cause memory corruption.\n\nNote that the race only occurs when both halves of the channel are used after the Receiver half has called close. Code where close is not used, or where the Receiver is not awaited and try_recv is not called after calling close, is not affected.\n\n","status":"published","published":"2022-01-06T22:04:37Z","modified":"2023-11-08T04:07:23.239744Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T15:46:46.39441Z"},{"id":"UBUNTU-CVE-2021-45710","description":"An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.","status":"published","published":"2021-12-27T00:15:00Z","modified":"2026-10-17T12:55:55.055627118Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"openSUSE-SU-2024:0294-1","title":"Security update for kanidm","description":"This update for kanidm fixes the following issues:\n\n- kanidm version 1.3.3~git0.f075d13:\n  * Release 1.3.3\n  * Mail substr index (#2981)\n","status":"published","published":"2024-09-09T12:04:21Z","modified":"2026-02-04T02:13:32.494912Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:11710-1","title":"greetd-0.8.0-2.1 on GA media","description":"These are all security issues fixed in the greetd-0.8.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:13:52.370095Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11711-1","title":"kanidm-1.1.0~alpha7~git0.c8468199-1.1 on GA media","description":"These are all security issues fixed in the kanidm-1.1.0~alpha7~git0.c8468199-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:01.351076Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11714-1","title":"rustscan-2.0.1+0-1.1 on GA media","description":"These are all security issues fixed in the rustscan-2.0.1+0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:10.089927Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11715-1","title":"rustup-1.24.3~git1.0a74fef5-2.1 on GA media","description":"These are all security issues fixed in the rustup-1.24.3~git1.0a74fef5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:13.316083Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11716-1","title":"sccache-0.2.15~git0.6b6d2f7-8.1 on GA media","description":"These are all security issues fixed in the sccache-0.2.15~git0.6b6d2f7-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:06:25.272009Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11717-1","title":"tuigreet-0.7.1-3.1 on GA media","description":"These are all security issues fixed in the tuigreet-0.7.1-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:01:02.989393Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11720-1","title":"cargo-c-0.8.1~git0.cce1b08-2.1 on GA media","description":"These are all security issues fixed in the cargo-c-0.8.1~git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:10:16.506118Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11721-1","title":"librav1e0-0.5.1+0-2.1 on GA media","description":"These are all security issues fixed in the librav1e0-0.5.1+0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:09:12.919442Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11722-1","title":"spotifyd-0.3.3-2.1 on GA media","description":"These are all security issues fixed in the spotifyd-0.3.3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:18.848505Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11729-1","title":"zram-generator-1.1.1~git5.8612dbb-1.1 on GA media","description":"These are all security issues fixed in the zram-generator-1.1.1~git5.8612dbb-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:19.410307Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11751-1","title":"afterburn-5.0.0-6.1 on GA media","description":"These are all security issues fixed in the afterburn-5.0.0-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:42:02.541488Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11916-1","title":"tealdeer-1.5.0+0-1.1 on GA media","description":"These are all security issues fixed in the tealdeer-1.5.0+0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:24:36.653324Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"RUSTSEC-2021-0124","title":"Data race when sending and receiving after closing a `oneshot` channel","description":"If a `tokio::sync::oneshot` channel is closed (via the\n[`oneshot::Receiver::close`] method), a data race may occur if the\n`oneshot::Sender::send` method is called while the corresponding\n`oneshot::Receiver` is `await`ed or calling `try_recv`.\n\nWhen these methods are called concurrently on a closed channel, the two halves\nof the channel can concurrently access a shared memory location, resulting in a\ndata race. This has been observed to [cause memory corruption][corruption].\n\nNote that the race only occurs when **both** halves of the channel are used\nafter the `Receiver` half has called `close`. Code where `close` is not used, or where the\n`Receiver` is not `await`ed and `try_recv` is not called after calling `close`,\nis not affected.\n\nSee [tokio#4225][issue] for more details.\n\n[corruption]: https://github.com/tokio-rs/tokio/issues/4225#issuecomment-967434847\n[issue]: https://github.com/tokio-rs/tokio/issues/4225\n[`oneshot::Receiver::close`]: https://docs.rs/tokio/1.14.0/tokio/sync/oneshot/struct.Receiver.html#method.close","status":"published","published":"2021-11-16T12:00:00Z","modified":"2023-11-08T04:07:23.239744Z","updated_at":"2026-11-02T15:53:39.492624Z"},{"id":"SUSE-SU-2022:3949-1","title":"Security update for rustup","description":"This update for rustup fixes the following issues:\n\nUpdated to version 1.25.1~0:\n  - CVE-2022-24713: Fixed Regex denial of service (bsc#1196972).\n  - CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).\n\n","status":"published","published":"2022-11-11T08:26:16Z","modified":"2026-02-04T02:30:50.348095Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3996-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).\n\n- Update to version 2.0.16~git56.d15a0a7:\n- Failure to migrate from openldap if pwdPolicyChecker present (bsc#1205146). \n- Resolve issue with checklist post migration when dds is present (bsc#1204748). \n- Improve reliability of migrations from openldap when dynamic directory services is configured (bsc#1204493).\n","status":"published","published":"2022-11-15T16:07:01Z","modified":"2026-02-04T03:12:43.594364Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4073-1","title":"Security update for sccache","description":"This update for sccache fixes the following issues:\n\n  Updated to version 0.3.0:\n\n  - CVE-2022-24713: Fixed Regex denial of service (bsc#1196972).\n  - CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).\n  - Added hardening to systemd service(s) (bsc#1181400).\n\n","status":"published","published":"2022-11-18T12:39:41Z","modified":"2026-02-04T03:06:22.46128Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4124-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119).\n\n- Update to version 2.0.16~git56.d15a0a7.\n\n- Failure to migrate from openldap if pwdPolicyChecker present (bsc#1205146).\n- Resolve issue with checklist post migration when dds is present (bsc#1204748).\n- Improve reliability of migrations from openldap when dynamic directory services is configured (bsc#1204493).\n","status":"published","published":"2022-11-18T19:05:47Z","modified":"2026-02-04T03:59:02.974318Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:3526-1","title":"Security update for sccache","description":"This update for sccache fixes the following issues:\n\n- Update to version 0.4.2.\n- CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. (bsc#1194119)\n- CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. (bsc#1196972)\n- CVE-2022-31394: Fixed a DoS issue due to the max header list size not settable. (bsc#1208553)\n- CVE-2023-1521: Fixed a local privilege escalation. (bsc#1212407)\n","status":"published","published":"2023-09-05T07:56:33Z","modified":"2026-02-04T04:06:52.862143Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}