Debian/rust-yamux: high 7.5
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting,
Action: Upgrade rust-yamux to 0.13.9+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.9+ds-1 | - |
Fixed versions
| 0.13.9+ds-1 |
Sources
- osv: DEBIAN-CVE-2026-31814#Debian:14/rust-yamux
- https://security-tracker.debian.org/tracker/CVE-2026-31814
published · modified · JSON