https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:22:03 +0000 https://vulnerability.circl.lu/vuln/rustsec-2025-0008 <p><strong>Affected:</strong> crates.io: openh264-sys2</p> <p>OpenH264 recently reported a [heap overflow](https://github.com/cisco/openh264/security/advisories/GHSA-m99q-5j7x-7m9x) that was fixed in upstream [63db555](https://github.com/cisco/openh264/commit/63db555e30986e3a5f07871368dc90ae78c27449) and [integrated into](https://github.com/ralfbiedert/openh264-rs/commit/3a822fff0b4c9a984622ca2b179fe8898ac54b14) our 0.6.6 release. For users relying on Cisco&#39;s pre-compiled DLL, we also published 0.8.0, which is compatible with their latest fixed DLL version 2.6.0.</p> <p>In other words: - if you rely on our `source` feature only, &gt;=0.6.6 should be safe, - if you rely on `libloading`, you must upgrade to 0.8.0 _and_ use their latest DLL &gt;=2.6.0.</p> <p>Users handling untrusted video files should update immediately.</p> <p><strong>Affected:</strong> crates.io: openh264-sys2</p> <p>OpenH264 recently reported a [heap overflow](https://github.com/cisco/openh264/security/advisories/GHSA-m99q-5j7x-7m9x) that was fixed in upstream [63db555](https://github.com/cisco/openh264/commit/63db555e30986e3a5f07871368dc90ae78c27449) and [integrated into](https://github.com/ralfbiedert/openh264-rs/commit/3a822fff0b4c9a984622ca2b179fe8898ac54b14) our 0.6.6 release. For users relying on Cisco&#39;s pre-compiled DLL, we also published 0.8.0, which is compatible with their latest fixed DLL version 2.6.0.</p> <p>In other words: - if you rely on our `source` feature only, &gt;=0.6.6 should be safe, - if you rely on `libloading`, you must upgrade to 0.8.0 _and_ use their latest DLL &gt;=2.6.0.</p> <p>Users handling untrusted video files should update immediately.</p> https://vulnerability.circl.lu/vuln/rustsec-2025-0008