CVE-2024-9979
Fixed in a distro release EPSS <1%CVSS 5.3
A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak Python references.
Products: Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| crates.io | pyo3 | 0.22.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | rust-pyo3 | 0.22.5-1 |
| Debian 14 | rust-pyo3 | 0.22.5-1 |