Description
regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations already provide sane defaults to prevent attacks. This guarantee is documented and it's considered part of the crate's API. Unfortunately a bug was discovered in the mitigations designed to prevent untrusted regexes to take an arbitrary amount of time during parsing, and it's possible to craft regexes that bypass such mitigations. This makes it possible to perform denial of service attacks by sending specially crafted regexes to services accepting user-controlled, untrusted regexes. All versions of the regex crate before or equal to 1.5.4 are affected by this issue. The fix is include starting from regex 1.5.5. All users accepting user-controlled regexes are recommended to upgrade immediately to the latest version of the regex crate. Unfortunately there is no fixed set of problematic regexes, as there are practically infinite regexes that could be crafted to exploit this vulnerability. Because of this, it us not recommend to deny known problematic regexes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rust-lang | regex | < 1.5.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | firefox-esr | 91.8.0esr-1 | — |
| Debian 14 | rust-regex | 1.5.5-1 | — |
| Debian 14 | thunderbird | 1:91.8.0-1 | — |
| Debian 13 | firefox-esr | 91.8.0esr-1 | — |
| Debian 13 | rust-regex | 1.5.5-1 | — |
| Debian 13 | thunderbird | 1:91.8.0-1 | — |
| Debian 12 | firefox-esr | 91.8.0esr-1 | — |
| Debian 12 | rust-regex | 1.5.5-1 | — |
| Debian 12 | thunderbird | 1:91.8.0-1 | — |
| Debian 11 | firefox-esr | 91.8.0esr-1~deb11u1 | DSA-5113-1 |
| Debian 11 | thunderbird | 1:91.8.0-1~deb11u1 | DSA-5118-1 |
| Debian 10 | firefox-esr | 91.8.0esr-1~deb10u1 | DSA-5113-1 |
| Debian 10 | thunderbird | 1:91.8.0-1~deb10u1 | DSA-5118-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 9 | firefox-esr | 91.8.0esr-1~deb9u1 | DLA-2971-1 |
| Debian 9 | thunderbird | 1:91.8.0-1~deb9u1 | DLA-2978-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | firefox | 1:1snap1-0ubuntu1 | — |
| Ubuntu 22.04 LTS | rust-regex | 1.5.4-1ubuntu0.1 | USN-5610-1 |
| Ubuntu 20.04 LTS | firefox | 99.0+build2-0ubuntu0.20.04.2 | USN-5370-1 |
| Ubuntu 20.04 LTS | rust-regex | 1.2.1-3ubuntu0.1 | USN-5610-1 |
| Ubuntu 20.04 LTS | thunderbird | 1:91.8.1+build1-0ubuntu0.20.04.1 | — |
| Ubuntu 18.04 LTS | firefox | 99.0+build2-0ubuntu0.18.04.2 | USN-5370-1 |
| Ubuntu 18.04 LTS | thunderbird | 1:91.8.1+build1-0ubuntu0.18.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | firefox +1 | 91.8.0-1.el8_5 | RHSA-2022:1301, RHSA-2022:1287 |
| RHEL 7 | firefox +1 | 91.8.0-1.el7_9 | RHSA-2022:1302, RHSA-2022:1284 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.4 EUS | firefox +1 | 91.8.0-1.el8_4 | RHSA-2022:1305, RHSA-2022:1285 |
| RHEL 8.2 EUS | firefox +1 | 91.8.0-1.el8_2 | RHSA-2022:1326, RHSA-2022:1286 |
| RHEL 8.1 E4S | firefox +1 | 91.8.0-1.el8_1 | RHSA-2022:1303, RHSA-2022:1283 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | firefox +1 | 91.8.0-1.el8_5.alma | ALSA-2022:1301, ALSA-2022:1287 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | firefox +1 | 91.8.0-1.el8_5 | RLSA-2022:1301, RLSA-2022:1287 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | sccache | 0.4.2~3-150400.3.3.1 | SUSE-SU-2023:3526-1 |
| SLES 15 SP4 | MozillaThunderbird | 91.8.0-150200.8.65.1 | SUSE-SU-2022:1176-1 |
| SLES 15 SP4 | aws-nitro-enclaves-cli | 1.2.2~git0.4ccc639-150400.3.3.1 | SUSE-SU-2023:1844-1 |
| SLES 15 SP4 | sccache | 0.4.2~3-150400.3.3.1 | SUSE-SU-2023:3526-1 |
| SLES 15 SP3 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SLES 15 SP3 | MozillaThunderbird | 91.8.0-150200.8.65.1 | SUSE-SU-2022:1176-1 |
| SLES 15 SP3 | rustup | 1.25.1~0-150300.7.13.2 | SUSE-SU-2022:3949-1 |
| SLES 15 SP3 | sccache | 0.3.0~git5.14a4b8b-150300.7.9.1 | SUSE-SU-2022:4073-1 |
| SLES 15 SP2 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SLES 15 SP1 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
Show 33 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
| SLES 12 SP5 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLES 12 SP4 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLES 12 SP3 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLES 12 SP2 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLES 11 SP4 | MozillaFirefox | 91.8.0-78.170.1 | SUSE-RU-2022:14935-1 |
| SLES for SAP 15 SP2 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SLES for SAP 15 SP1 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
| SLES for SAP 15 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
| SLES for SAP 12 SP5 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLES for SAP 12 SP4 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLES for SAP 12 SP3 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SLE Real Time 15 SP2 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SLE Micro 6.1 | afterburn | 5.10.0.git73.b97f772-slfo.1.1_1.1 | SUSE-SU-2026:23071-1 |
| SLE Micro 6.0 | afterburn | 5.10.0.git73.b97f772-1.1 | SUSE-SU-2026:22917-1 |
| SLE Micro 5.5 | afterburn | 5.9.0.git21.a73f509-150500.3.3.1 | SUSE-SU-2025:3784-1 |
| SLE Micro 5.4 | afterburn | 5.9.0.git21.a73f509-150400.3.3.1 | SUSE-SU-2025:3785-1 |
| SLE Micro 5.3 | afterburn | 5.9.0.git21.a73f509-150400.3.3.1 | SUSE-SU-2025:3786-1 |
| SLE Micro 5.2 | afterburn | 5.9.0.git21.a73f509-150300.3.5.1 | SUSE-SU-2025:3783-1 |
| SLE HPC 15 SP2 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SLE HPC 15 SP1 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
| SLE HPC 15 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
| SUSE Package Hub 15 SP6 | kanidm | 1.3.3~git0.f075d13-bp156.4.1 | openSUSE-SU-2024:0294-1 |
| SUSE OpenStack Cloud Crowbar 9 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SUSE OpenStack Cloud Crowbar 8 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SUSE OpenStack Cloud 9 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SUSE OpenStack Cloud 8 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SUSE Manager Server 4.1 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SUSE Manager Retail Branch Server 4.1 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SUSE Manager Proxy 4.1 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SUSE HPE Helion OpenStack 8 | MozillaFirefox | 91.8.0-112.98.1 | SUSE-RU-2022:1114-1 |
| SUSE Enterprise Storage 7 | MozillaFirefox | 91.8.0-150200.152.26.1 | SUSE-SU-2022:1127-1 |
| SUSE Enterprise Storage 6 | MozillaFirefox | 91.8.0-150000.150.27.1 | SUSE-RU-2022:1125-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 99.0-1.1 | openSUSE-SU-2024:11975-1 |
| openSUSE Tumbleweed | bat | 0.21.0-1.1 | openSUSE-SU-2024:12131-1 |
| openSUSE Tumbleweed | cargo-audit | 0.16.0~git0.625c965-3.1 | openSUSE-SU-2024:11920-1 |
| openSUSE Tumbleweed | firecracker | 1.0.0-2.1 | openSUSE-SU-2024:11925-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
| openSUSE Tumbleweed | git-delta | 0.12.1-1.1 | openSUSE-SU-2024:11937-1 |
| openSUSE Tumbleweed | juliaup | 1.5.37-2.1 | openSUSE-SU-2024:11913-1 |
| openSUSE Tumbleweed | macchina | 6.0.6~git0.c21ce78-2.1 | openSUSE-SU-2024:11914-1 |
| openSUSE Tumbleweed | parsec | 1.0.0~rc3-1.1 | openSUSE-SU-2024:11945-1 |
| openSUSE Tumbleweed | parsec-tool | 0.5.2-1.1 | openSUSE-SU-2024:11946-1 |
| openSUSE Tumbleweed | pijul | 1.0.0~beta.2-1.1 | openSUSE-SU-2024:12055-1 |
| openSUSE Tumbleweed | pleaser | 0.5.1~git0.ce9627c-4.1 | openSUSE-SU-2024:11928-1 |
| openSUSE Tumbleweed | rage-encryption | 0.7.1+0-2.1 | openSUSE-SU-2024:11921-1 |
| openSUSE Tumbleweed | rustup | 1.24.3~0-3.1 | openSUSE-SU-2024:11922-1 |
| openSUSE Tumbleweed | sccache | 0.2.15~git0.6b6d2f7-11.1 | openSUSE-SU-2024:11923-1 |
| openSUSE Tumbleweed | spotifyd | 0.3.3-5.1 | openSUSE-SU-2024:11948-1 |
| openSUSE Tumbleweed | treefetch | 2.0.0~git0.5b3eac1-2.1 | openSUSE-SU-2024:11917-1 |
| openSUSE Tumbleweed | tuigreet | 0.7.1-4.1 | openSUSE-SU-2024:11918-1 |
| openSUSE Leap 15.6 | kanidm | 1.3.3~git0.f075d13-bp156.4.1 | openSUSE-SU-2024:0294-1 |
| openSUSE Leap 15.5 | sccache | 0.4.2~3-150400.3.3.1 | SUSE-SU-2023:3526-1 |
| openSUSE Leap 15.4 | aws-nitro-enclaves-cli | 1.2.2~git0.4ccc639-150400.3.3.1 | SUSE-SU-2023:1844-1 |
| openSUSE Leap 15.4 | sccache | 0.4.2~3-150400.3.3.1 | SUSE-SU-2023:3526-1 |
| openSUSE Leap 15.3 | MozillaFirefox | 91.8.0-150200.152.26.1 | openSUSE-SU-2022:1127-1 |
| openSUSE Leap 15.3 | MozillaThunderbird | 91.8.0-150200.8.65.1 | SUSE-SU-2022:1176-1 |
| openSUSE Leap 15.3 | rustup | 1.25.1~0-150300.7.13.2 | SUSE-SU-2022:3949-1 |
| openSUSE Leap 15.3 | sccache | 0.3.0~git5.14a4b8b-150300.7.9.1 | SUSE-SU-2022:4073-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | bat | 0.21.0-r0 | — |
| Alpine v3.24 | delta | 0.13.0-r0 | — |
| Alpine v3.24 | librewolf | 99.0-r0 | — |
| Alpine v3.24 | swayr | 0.16.1-r0 | — |
| Alpine v3.23 | bat | 0.21.0-r0 | — |
| Alpine v3.23 | delta | 0.13.0-r0 | — |
| Alpine v3.23 | firefox +1 | 99.0-r0 | — |
| Alpine v3.23 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.23 | swayr | 0.16.1-r0 | — |
| Alpine v3.22 | bat | 0.21.0-r0 | — |
| Alpine v3.22 | delta | 0.13.0-r0 | — |
| Alpine v3.22 | firefox +1 | 99.0-r0 | — |
| Alpine v3.22 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.22 | swayr | 0.16.1-r0 | — |
| Alpine v3.21 | bat | 0.21.0-r0 | — |
| Alpine v3.21 | delta | 0.13.0-r0 | — |
| Alpine v3.21 | firefox +1 | 99.0-r0 | — |
| Alpine v3.21 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.21 | swayr | 0.16.1-r0 | — |
| Alpine v3.20 | bat | 0.21.0-r0 | — |
| Alpine v3.20 | delta | 0.13.0-r0 | — |
| Alpine v3.20 | firefox | 99.0-r0 | — |
| Alpine v3.20 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.20 | swayr | 0.16.1-r0 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | bat | 0.21.0-r0 | — |
| Alpine v3.19 | delta | 0.13.0-r0 | — |
| Alpine v3.19 | firefox | 99.0-r0 | — |
| Alpine v3.19 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.19 | swayr | 0.16.1-r0 | — |
| Alpine v3.18 | bat | 0.21.0-r0 | — |
| Alpine v3.18 | delta | 0.13.0-r0 | — |
| Alpine v3.18 | firefox | 99.0-r0 | — |
| Alpine v3.18 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.18 | swayr | 0.16.1-r0 | — |
| Alpine v3.17 | bat | 0.21.0-r0 | — |
| Alpine v3.17 | delta | 0.13.0-r0 | — |
| Alpine v3.17 | firefox | 99.0-r0 | — |
| Alpine v3.17 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.17 | swayr | 0.16.1-r0 | — |
| Alpine v3.16 | bat | 0.21.0-r0 | — |
| Alpine v3.16 | delta | 0.13.0-r0 | — |
| Alpine v3.16 | firefox | 99.0-r0 | — |
| Alpine v3.16 | firefox-esr +1 | 91.8.0-r0 | — |
| Alpine v3.16 | swayr | 0.16.1-r0 | — |
| Alpine v3.15 | bat | 0.18.3-r2 | — |
| Alpine v3.15 | firefox-esr | 91.8.0-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-efs-utils | 2.4.0-1.amzn2023 | ALAS2023-2025-1283 |
| Amazon Linux 2 | amazon-efs-utils | 2.4.0-1.amzn2 | ALAS2-2025-3076 |
| Amazon Linux 2 | thunderbird | 91.8.0-1.amzn2.0.1 | ALAS2-2022-1789 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | librsvg2 | 2.58.1-1 | — |
| Azure Linux 3 | regexp +1 | No fix yet | — |
| Azure Linux 3 | rust | regex-1.8.4 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | firefox +1 | 91.8.0-1.0.1.el8_5 | ELSA-2022-1301, ELSA-2022-1287 |
| Oracle Linux 7 | firefox +1 | 91.8.0-1.0.1.el7_9 | ELSA-2022-1302, ELSA-2022-1284 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 2 repositories
-
federiconbaez/cortex9-rust-regex-empty-repetition-size-limit-model ★ 0 · Nov 6, 2026
Offline model of the regex 1.5.4 compile-size accounting for empty repetitions (CVE-2022-24713), checked against regex-syntax HIR and real compile results. Bounded cases are labelled MODEL_LIMIT.
-
jpeisach/CVE-2022-24713-POC ★ 0 · Jun 5, 2022
Proof of Concept/Test for CVE-2022-24713 on Ubuntu
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | regex | < 1.5.5 | 1.5.5 | GHSA-m5pq-gvj9-9vr8 |
| crates.io | regex | >= 0.0.0-0, < 1.5.5 | 1.5.5 | RUSTSEC-2022-0013 |
Advisories 50
- ALSA-2022:1287 Important: firefox security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:1301 Important: thunderbird security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:23071-1 Security update for afterburn SUSE / openSUSE Security Updates · Aug 14, 2026
- SUSE-SU-2026:22917-1 Security update for afterburn SUSE / openSUSE Security Updates · Jul 28, 2026
- RHSA-2022:1302 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2022:1284 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-5370-1 firefox vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-5118-1 thunderbird - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5113-1 firefox-esr - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2978-1 thunderbird - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2971-1 firefox-esr - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-5610-1 rust-regex vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- RLSA-2022:1287 Important: firefox security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2022:1301 Important: thunderbird security update Rocky Linux Security Advisories · Feb 5, 2026
- openSUSE-SU-2024:11975-1 MozillaFirefox-99.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11925-1 firecracker-1.0.0-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1127-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11923-1 sccache-0.2.15~git0.6b6d2f7-11.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11945-1 parsec-1.0.0~rc3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11928-1 pleaser-0.5.1~git0.ce9627c-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11918-1 tuigreet-0.7.1-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11946-1 parsec-tool-0.5.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3526-1 Security update for sccache SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11948-1 spotifyd-0.3.3-5.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12055-1 pijul-1.0.0~beta.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11917-1 treefetch-2.0.0~git0.5b3eac1-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11914-1 macchina-6.0.6~git0.c21ce78-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11921-1 rage-encryption-0.7.1+0-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2022:1114-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11913-1 juliaup-1.5.37-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1844-1 Security update for aws-nitro-enclaves-cli SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:1127-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3784-1 Security update for afterburn SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:4073-1 Security update for sccache SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3783-1 Security update for afterburn SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3785-1 Security update for afterburn SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12131-1 bat-0.21.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3949-1 Security update for rustup SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3786-1 Security update for afterburn SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11922-1 rustup-1.24.3~0-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:0294-1 Security update for kanidm SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2023-2025-1283 Important: amazon-efs-utils security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Dec 30, 2025
- ALAS2-2025-3076 Important: amazon-efs-utils security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Dec 30, 2025
- RHSA-2022:1326 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2022:1303 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2022:1305 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2022:1301 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2022:1287 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2022:1286 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- https://github.com/rust-lang/regex/security/advisories/GHSA-m5pq-gvj9-9vr8
- https://github.com/rust-lang/regex/commit/ae70b41d4f46641dbc45c7a4f87954aea356283e
- https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw
- FEDORA-2022-ceb3e03c5e vendor-advisory
- FEDORA-2022-8436ac4c39 vendor-advisory
- FEDORA-2022-d20d44ba98 vendor-advisory
- [debian-lts-announce] 20220407 [SECURITY] [DLA 2971-1] firefox-esr security update mailing-list
- DSA-5113 vendor-advisory
- [debian-lts-announce] 20220411 [SECURITY] [DLA 2978-1] thunderbird security update mailing-list
- DSA-5118 vendor-advisory
- GLSA-202208-08 vendor-advisory
- GLSA-202208-14 vendor-advisory