crates.io/xcb CVE-2021-26955, CVE-2021-26956, CVE-2021-26957, CVE-2021-26958: critical 9.8, EPSS 1.73%

Out of bounds read in xcb

Action: Upgrade xcb to 1.0.0 or later.

cargo update -p xcb --precise 1.0.0

Affected

Fixed versions

Sources

• osv: GHSA-2xpg-3hx4-fm9r
• https://nvd.nist.gov/vuln/detail/CVE-2021-26957
• https://github.com/RustSec/advisory-db/issues/653
• https://github.com/rtbo/rust-xcb
• https://rustsec.org/advisories/RUSTSEC-2021-0019.html

CVE-2021-26955, CVE-2021-26956, CVE-2021-26957, CVE-2021-26958 · published 2021-08-25T20:53:20Z · modified 2024-03-15T00:05:17.174146Z · JSON