A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rust-gdbUpgrade rust-analyzerUpgrade rustfmtUpgrade rust-toolsetUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-toolset-srpm-macrosUpgrade rustUpgrade rust-srcUpgrade rust-docUpgrade rust-std-staticUpgrade clippy | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade rustUpgrade rust-debuginfoUpgrade rust-docUpgrade rust-srcUpgrade rust-debugsourceUpgrade rust-gdbUpgrade rust-toolsetUpgrade rust-analyzerUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-lldbUpgrade cargo-debuginfoUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade cargoUpgrade rustfmtUpgrade rust-std-static-wasm32-wasip1Upgrade rust-std-staticUpgrade rust-debugger-commonUpgrade cargo-cUpgrade rust-toolset-srpm-macrosUpgrade rust-analyzer-debuginfoUpgrade clippyUpgrade rust-cargo-c-debugsourceUpgrade cargo-c-debuginfo | Apr 7, 2026 | Dec 29, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub