File _patchinfo of Package patchinfo.38634
<patchinfo incident="38634"> <issue tracker="bnc" id="1242617">VUL-0: CVE-2025-3416: rustup: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate</issue> <issue tracker="bnc" id="1243862">VUL-0: CVE-2024-12224: rustup: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded</issue> <issue tracker="cve" id="2024-12224"/> <issue tracker="cve" id="2025-3416"/> <packager>firstyear</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for rustup</summary> <description>This update for rustup fixes the following issues: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode (bsc#1243862) - CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242617) </description> </patchinfo>