crates.io/ostree CVE-2022-47085: medium, EPSS 0.87%
libostree vulnerable to denial of service attack
Action: Upgrade ostree to 0.17.1 or later.
cargo update -p ostree --precise 0.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.1 | - |
Fixed versions
| 0.17.1 |
Sources
- osv: GHSA-x96g-95fq-4xv4
- https://nvd.nist.gov/vuln/detail/CVE-2022-47085
- https://github.com/ostreedev/ostree/issues/2775
- https://github.com/ostreedev/ostree/commit/d9bb160a7c1e7f0a2308a7282622b91bc27d448c
- https://doc.rust-lang.org/std/macro.eprintln.html
- https://github.com/ostreedev/ostree
CVE-2022-47085 · published · modified · JSON