Repository navigation

Issues

New issue

Dependency Dashboard
#1 · renovate opened on Sep 18, 2023
Tracking: Reworking includes/excludes
#327 · simonsan opened on Oct 10, 2024

RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict
rustic-rs/rustic_core#626 · opened on Oct 27, 2026
RUSTSEC-2026-0395: Use-after-free with CParameter::StableInBuffer
rustic-rs/rustic_core#625 · opened on Oct 27, 2026
RUSTSEC-2026-0401: Out-of-bounds read in train_from_buffer when sample sizes overflow
rustic-rs/rustic_core#624 · opened on Oct 27, 2026
RUSTSEC-2026-0396: Seekable reads a NULL or out-of-bounds seek table
rustic-rs/rustic_core#623 · opened on Oct 27, 2026
RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame
rustic-rs/rustic_core#622 · opened on Oct 27, 2026
RUSTSEC-2026-0405: Out-of-bounds read with an out-of-range InBuffer::pos
rustic-rs/rustic_core#621 · opened on Oct 27, 2026
RUSTSEC-2026-0397: OutBuffer::around_pos exposes uninitialized memory
rustic-rs/rustic_core#619 · opened on Oct 27, 2026
RUSTSEC-2026-0404: Double free in DCtx::try_clone
rustic-rs/rustic_core#620 · opened on Oct 27, 2026
RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream
rustic-rs/rustic_core#618 · opened on Oct 27, 2026
RUSTSEC-2026-0402: Heap buffer overflow in CCtx::try_clone on a multithreaded context
rustic-rs/rustic_core#617 · opened on Oct 27, 2026
RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails
rustic-rs/rustic_core#616 · opened on Oct 27, 2026
RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end
rustic-rs/rustic_core#615 · opened on Oct 27, 2026
RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context
rustic-rs/rustic_core#614 · opened on Oct 27, 2026
opendal backend: a retried listing can silently skip a directory, so check reports present packs as missing
rustic-rs/rustic_core#612 · opened on Oct 25, 2026
ignore_inode is inverted in Parent::is_parent: inodes are compared only when the option is set
rustic-rs/rustic_core#610 · opened on Oct 22, 2026
Rabin chunk boundaries differ from restic within 63 bytes after chunk_min_size (prefill reads 63 of the 64 window bytes)
rustic-rs/rustic_core#609 · opened on Oct 19, 2026
Rabin chunker breaks chunk_max_size or panics when chunk_min_size is below 4 KiB
rustic-rs/rustic_core#608 · opened on Oct 19, 2026
check --read-data can panic with "index still in use"
rustic-rs/rustic_core#606 · opened on Oct 18, 2026
copy --init between plain and hot/cold repositories creates the target, then aborts
rustic-rs/rustic_core#601 · opened on Oct 15, 2026
--as-path with a single file source records a path that doesn't exist in the snapshot
rustic-rs/rustic_core#599 · opened on Oct 15, 2026
REST backend: a failed HEAD for config reads as "no repository", hiding 401/403/5xx and skipping retries
rustic-rs/rustic_core#597 · opened on Oct 14, 2026
Backup silently drops extended attributes it cannot read
rustic-rs/rustic_core#596 · opened on Oct 11, 2026
Restore fails with EEXIST when a further hard link already exists at the destination
rustic-rs/rustic_core#595 · opened on Oct 9, 2026
Windows drive-letter paths with forward slashes (C:/tmp/repo) are rejected as backend type C
rustic-rs/rustic_core#594 · opened on Oct 9, 2026
restore panics instead of returning an error when a file cannot be written or a pack read fails
rustic-rs/rustic_core#593 · opened on Oct 8, 2026
2

Navigation Menu

Repository navigation

Issues

Issues

RUSTSEC-2026-0399: Use-after-free through `init_using_cdict` and `init_using_ddict`

RUSTSEC-2026-0395: Use-after-free with `CParameter::StableInBuffer`

RUSTSEC-2026-0401: Out-of-bounds read in `train_from_buffer` when sample sizes overflow

RUSTSEC-2026-0396: `Seekable` reads a NULL or out-of-bounds seek table

RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame

RUSTSEC-2026-0405: Out-of-bounds read with an out-of-range `InBuffer::pos`

RUSTSEC-2026-0397: `OutBuffer::around_pos` exposes uninitialized memory

RUSTSEC-2026-0404: Double free in `DCtx::try_clone`

RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream

RUSTSEC-2026-0402: Heap buffer overflow in `CCtx::try_clone` on a multithreaded context

RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

RUSTSEC-2026-0398: `Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end

RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

opendal backend: a retried listing can silently skip a directory, so check reports present packs as missing

`ignore_inode` is inverted in `Parent::is_parent`: inodes are compared only when the option is set

Rabin chunk boundaries differ from restic within 63 bytes after `chunk_min_size` (prefill reads 63 of the 64 window bytes)

Rabin chunker breaks `chunk_max_size` or panics when `chunk_min_size` is below 4 KiB

`check --read-data` can panic with "index still in use"

`copy --init` between plain and hot/cold repositories creates the target, then aborts

`--as-path` with a single file source records a path that doesn't exist in the snapshot

REST backend: a failed HEAD for `config` reads as "no repository", hiding 401/403/5xx and skipping retries

Backup silently drops extended attributes it cannot read

Restore fails with EEXIST when a further hard link already exists at the destination

Windows drive-letter paths with forward slashes (`C:/tmp/repo`) are rejected as backend type `C`

restore panics instead of returning an error when a file cannot be written or a pack read fails