openSUSE cargo-auditable Important Stack Exhaustion Issue 2026-0505-1

opensuse

February 13, 2026

An update that solves one vulnerability can now be installed.

Description

This update for cargo-auditable fixes the following issues:

Update to version 0.7.2~0.

Security issues fixed:

* CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser

can lead to stack exhaustion (bsc#1257906).

Other updates and bugfixes:

* Update to version 0.7.2~0:

* mention cargo-dist in README

* commit Cargo.lock

* bump which dev-dependency to 8.0.0

* bump object to 0.37

* Upgrade cargo_metadata to 0.23

* Expand the set of dist platforms in config

* Update to version 0.7.1~0:

* Out out of unhelpful clippy lint

* Satisfy clippy

* Do not assume --crate-name and --out-dir are present in the rustc command,

but show warnings if they aren't

* Run apt-get update before trying to install packages

* run `cargo dist init` on dist 0.30

* Drop allow-dirty from dist config, should no longer be needed

* Reorder paragraphs in README

* Note the maintenance transition for the go extraction library

* Editing pass on the...

Read the Full Advisory

Topics Covered

security advisory important OpenSUSE stack exhaustion data parsing cargo-auditable

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.5

zypper in -t patch SUSE-2026-505=1

* openSUSE Leap 15.6

zypper in -t patch openSUSE-SLE-15.6-2026-505=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-505=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-505=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-505=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-505=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-505=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch...

Read the Full Advisory