crates.io/crossbeam-utils CVE-2022-23639: high 8.1, EPSS 1.23%

crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64

Action: Upgrade crossbeam-utils to 0.8.7 or later.

cargo update -p crossbeam-utils --precise 0.8.7

Affected

Fixed versions

Sources

• osv: GHSA-qc84-gqf4-9926
• https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-qc84-gqf4-9926
• https://nvd.nist.gov/vuln/detail/CVE-2022-23639
• https://github.com/crossbeam-rs/crossbeam/pull/781
• https://github.com/crossbeam-rs/crossbeam
• https://github.com/crossbeam-rs/crossbeam/releases/tag/crossbeam-utils-0.8.7
• https://rustsec.org/advisories/RUSTSEC-2022-0041.html

CVE-2022-23639 · published 2022-02-16T22:36:21Z · modified 2025-02-04T17:30:19Z · JSON