Skip to content
OpenAdvisories

Description

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.

Affected products

VendorProductAffectedFixed
time-rs time >= 0.3.6, < 0.3.47 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 rust-time 0.3.47-1 —
Debian 13 rust-time 0.3.37-1+deb13u1 —
Debian 12 rust-time 0.3.9-1+deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS rust-time No fix yet —
Ubuntu 25.10 rust-time No fix yet —
Ubuntu 24.04 LTS rust-time No fix yet —
Ubuntu 22.04 LTS rust-time No fix yet —
Ubuntu 20.04 LTS rust-time No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP7 SLES16-Migration 2.1.30-15.26.4 SUSE-SU-2026:0806-1
SLES 15 SP7 SLES16-SAP_Migration 2.1.30-15.18.4 SUSE-SU-2026:0806-1
SLES 15 SP7 aws-nitro-enclaves-cli 1.5.0~git0.2950b36-150600.10.15.1 SUSE-SU-2026:3992-1
SLES 15 SP7 cargo-auditable 0.7.2~0-150700.3.5.1 SUSE-SU-2026:0506-1
SLES 15 SP7 himmelblau 2.3.9+git0.a9fd29b-150700.3.15.1 SUSE-SU-2026:1361-1
SLES 15 SP7 rustup 1.28.2~0-150600.10.10.1 SUSE-SU-2026:2441-1
SLES 15 SP7 sccache 0.16.0~0-150600.10.11.1 SUSE-SU-2026:3022-1
SLES 15 SP7 snpguest 0.10.0-150700.3.3.1 SUSE-SU-2026:0620-1
SLES 15 SP7 suse-migration-services 2.1.30-150700.15.21.1 SUSE-SU-2026:0806-1
SLES 15 SP7 suse-migration-sle16-activation 2.1.30-150700.15.13.1 SUSE-SU-2026:0806-1
SLES 15 SP7 virtiofsd 1.12.0-150700.3.3.1 SUSE-SU-2026:0819-1
SLES 15 SP7 wicked2nm 1.4.1-150700.15.16.1 SUSE-SU-2026:0806-1
SLES 15 SP6 aws-nitro-enclaves-cli 1.5.0~git0.2950b36-150600.10.15.1 SUSE-SU-2026:3992-1
SLES 15 SP6 cargo-auditable 0.7.2~0-150500.12.6.1 SUSE-SU-2026:0505-1
SLES 15 SP6 rustup 1.28.2~0-150600.10.10.1 SUSE-SU-2026:2441-1
SLES 15 SP6 sccache 0.16.0~0-150600.10.11.1 SUSE-SU-2026:3022-1
SLES 15 SP6 snpguest 0.3.2-150600.3.9.1 SUSE-SU-2026:0582-1
SLES 15 SP6 virtiofsd 1.10.1-150600.4.6.1 SUSE-SU-2026:0816-1
SLES 15 SP5 cargo-auditable 0.7.2~0-150500.12.6.1 SUSE-SU-2026:0505-1
SLES 15 SP5 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLES 15 SP5 rustup 1.28.2~0-150400.3.13.1 SUSE-SU-2026:2831-1
SLES 15 SP4 cargo-auditable 0.7.2~0-150300.7.6.1 SUSE-SU-2026:0514-1
SLES 15 SP4 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLES 15 SP4 rustup 1.28.2~0-150400.3.13.1 SUSE-SU-2026:2831-1
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 aws-nitro-enclaves-cli 1.5.0~git0.2950b36-160000.1.1 SUSE-SU-2026:23659-1, SUSE-SU-2026:23643-1
SLES for SAP 16.0 gstreamer-devtools 1.26.7-160000.2.1 SUSE-SU-2026:23572-1
SLES for SAP 16.0 himmelblau 2.3.8+git0.dec3693-160000.1.1 SUSE-FU-2026:20990-1
SLES for SAP 16.0 rustup 1.29.1~0-160000.1.1 SUSE-SU-2026:24014-1
SLES for SAP 16.0 sccache 0.18.0~2-160000.1.1 SUSE-SU-2026:23983-1
SLES for SAP 16.0 virtiofsd 1.12.0-160000.4.1 SUSE-SU-2026:24223-1
SLES for SAP 16.0 wicked2nm 1.4.1-160000.1.1 SUSE-SU-2026:20575-1
SLES for SAP 15 SP6 cargo-auditable 0.7.2~0-150500.12.6.1 SUSE-SU-2026:0505-1
SLES for SAP 15 SP6 rustup 1.28.2~0-150600.10.10.1 SUSE-SU-2026:2441-1
SLES for SAP 15 SP6 sccache 0.16.0~0-150600.10.11.1 SUSE-SU-2026:3022-1
SLES for SAP 15 SP6 snpguest 0.3.2-150600.3.9.1 SUSE-SU-2026:0582-1
SLES for SAP 15 SP6 virtiofsd 1.10.1-150600.4.6.1 SUSE-SU-2026:0816-1
SLES for SAP 15 SP5 cargo-auditable 0.7.2~0-150500.12.6.1 SUSE-SU-2026:0505-1
SLES for SAP 15 SP5 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLES for SAP 15 SP5 rustup 1.28.2~0-150400.3.13.1 SUSE-SU-2026:2831-1
SLES for SAP 15 SP4 cargo-auditable 0.7.2~0-150300.7.6.1 SUSE-SU-2026:0514-1
SLES for SAP 15 SP4 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLES for SAP 15 SP4 rustup 1.28.2~0-150400.3.13.1 SUSE-SU-2026:2831-1
SLES 16.0 aws-nitro-enclaves-cli 1.5.0~git0.2950b36-160000.1.1 SUSE-SU-2026:23659-1, SUSE-SU-2026:23643-1
SLES 16.0 gstreamer-devtools 1.26.7-160000.2.1 SUSE-SU-2026:23572-1
SLES 16.0 himmelblau 2.3.8+git0.dec3693-160000.1.1 SUSE-FU-2026:20990-1
SLES 16.0 rustup 1.29.1~0-160000.1.1 SUSE-SU-2026:24014-1
SLES 16.0 sccache 0.18.0~2-160000.1.1 SUSE-SU-2026:23983-1
SLES 16.0 virtiofsd 1.12.0-160000.4.1 SUSE-SU-2026:24223-1
SLES 16.0 wicked2nm 1.4.1-160000.1.1 SUSE-SU-2026:20575-1
SLE Micro 6.2 librsvg 2.60.2-160000.2.1 SUSE-SU-2026:21275-1
SLE Micro 6.2 python-maturin 1.8.7-160000.4.1 SUSE-SU-2026:20748-1
SLE Micro 6.2 rust-keylime 0.2.8+116-160000.1.1 SUSE-SU-2026:20744-1
SLE Micro 6.2 virtiofsd 1.12.0-160000.3.1 SUSE-SU-2026:24127-1, SUSE-SU-2026:20684-1
SLE Micro 6.1 rust-keylime 0.2.8+116-slfo.1.1_1.1 SUSE-SU-2026:20534-1
SLE Micro 6.1 virtiofsd 1.10.1-slfo.1.1_2.1 SUSE-SU-2026:20661-1
SLE Micro 6.0 rust-keylime 0.2.8+116-1.1 SUSE-SU-2026:20526-1
SLE Micro 6.0 virtiofsd 1.10.1-2.1 SUSE-SU-2026:20723-1
SLE Micro 5.5 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLE Micro 5.5 rust-keylime 0.2.8+116-150500.3.11.1 SUSE-SU-2026:0470-1
SLE Micro 5.4 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLE Micro 5.4 rust-keylime 0.2.8+116-150400.3.11.1 SUSE-SU-2026:0452-1
SLE Micro 5.3 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLE Micro 5.3 rust-keylime 0.2.8+116-150400.3.13.1 SUSE-SU-2026:0453-1
SLE HPC 15 SP5 cargo-auditable 0.7.2~0-150500.12.6.1 SUSE-SU-2026:0505-1
SLE HPC 15 SP5 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLE HPC 15 SP5 rustup 1.28.2~0-150400.3.13.1 SUSE-SU-2026:2831-1
SLE HPC 15 SP4 cargo-auditable 0.7.2~0-150300.7.6.1 SUSE-SU-2026:0514-1
SLE HPC 15 SP4 librsvg 2.52.12-150400.3.12.1 SUSE-SU-2026:1599-1
SLE HPC 15 SP4 rustup 1.28.2~0-150400.3.13.1 SUSE-SU-2026:2831-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed aws-nitro-enclaves-cli 1.5.0~git0.2950b36-1.1 openSUSE-SU-2026:11656-1
openSUSE Tumbleweed cargo-audit 0.22.1~git0.efcde93-2.1 openSUSE-SU-2026:10175-1
openSUSE Tumbleweed cargo-auditable 0.7.2~0-2.1 openSUSE-SU-2026:10184-1
openSUSE Tumbleweed cargo-c 0.10.15-2.1 openSUSE-SU-2026:10185-1
openSUSE Tumbleweed himmelblau 2.3.5+git0.9dd526c-1.1 openSUSE-SU-2026:10202-1
openSUSE Tumbleweed python-maturin 1.11.5-1.1 openSUSE-SU-2026:10179-1
openSUSE Tumbleweed rust-keylime 0.2.8+116-1.1 openSUSE-SU-2026:10170-1
openSUSE Tumbleweed rustup 1.28.2~0-3.1 openSUSE-SU-2026:10180-1
openSUSE Tumbleweed sccache 0.13.0~1-2.1 openSUSE-SU-2026:10181-1
openSUSE Tumbleweed snpguest 0.10.0-2.1 openSUSE-SU-2026:10182-1
openSUSE Tumbleweed virtiofsd 1.13.2-2.1 openSUSE-SU-2026:10308-1
openSUSE Tumbleweed wicked2nm 1.4.1-1.1 openSUSE-SU-2026:10172-1
openSUSE Leap 16.0 aws-nitro-enclaves-cli 1.5.0~git0.2950b36-160000.1.1 openSUSE-SU-2026:21782-1
openSUSE Leap 16.0 gstreamer-devtools 1.26.7-160000.2.1 openSUSE-SU-2026:21689-1
openSUSE Leap 16.0 himmelblau 2.3.8+git0.dec3693-160000.1.1 openSUSE-FU-2026:20453-1
openSUSE Leap 16.0 librsvg 2.60.2-160000.2.1 openSUSE-SU-2026:20610-1
openSUSE Leap 16.0 python-maturin 1.8.7-160000.4.1 openSUSE-SU-2026:20377-1
openSUSE Leap 16.0 rust-keylime 0.2.8+116-160000.1.1 openSUSE-SU-2026:20364-1
openSUSE Leap 16.0 rustup 1.29.1~0-160000.1.1 openSUSE-SU-2026:22016-1
openSUSE Leap 16.0 sccache 0.18.0~2-160000.1.1 openSUSE-SU-2026:21982-1
openSUSE Leap 16.0 snpguest 0.10.0-160000.1.1 openSUSE-SU-2026:20380-1
openSUSE Leap 16.0 virtiofsd 1.12.0-160000.3.1 openSUSE-SU-2026:22079-1, openSUSE-SU-2026:20326-1
openSUSE Leap 16.0 wicked2nm 1.4.1-160000.1.1 openSUSE-SU-2026:20245-1
openSUSE Leap 15.6 cargo-auditable 0.7.2~0-150500.12.6.1 SUSE-SU-2026:0505-1
openSUSE Leap 15.6 python-maturin 1.4.0-150600.3.12.1 SUSE-SU-2026:0860-1
openSUSE Leap 15.6 snpguest 0.3.2-150600.3.9.1 SUSE-SU-2026:0582-1
openSUSE Leap 15.6 virtiofsd 1.10.1-150600.4.6.1 SUSE-SU-2026:0816-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-efs-utils 3.0.0-4.amzn2023 ALAS2023-2026-1564
Amazon Linux 2023 aws-nitro-tpm-tools 1.1.1-1.amzn2023 ALAS2023-2026-1610
Amazon Linux 2023 below 0.11.0-1.amzn2023.0.2 ALAS2023-2026-1523
Amazon Linux 2023 cargo-c 0.10.19-1.amzn2023.0.1 ALAS2023-2026-1527
Amazon Linux 2023 firefox 140.7.0-1.amzn2023.0.4 ALAS2023-2026-1445
Amazon Linux 2023 librsvg2 +3 2.59.2-318.amzn2023 ALAS2023-2026-1591
Amazon Linux 2023 mount-s3 1.22.2-1.amzn2023 ALAS2023-2026-1510
Amazon Linux 2 amazon-efs-utils 3.0.0-4.amzn2 ALAS2-2026-3245
Amazon Linux 2 thunderbird 140.7.1-1.amzn2.0.3 ALAS2-2026-3177

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 kata-containers 3.19.1.kata2-6 —
Azure Linux 3 librsvg2 No fix yet —
Azure Linux 3 rust 1.75.0-27 —
Azure Linux 2 (CBL-Mariner) azl-compliance 1.0.2-3 —
Azure Linux 2 (CBL-Mariner) rust No fix yet —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling atuin 18.11.0-r2 —
Wolfi rolling bat 0.26.1-r3 —
Wolfi rolling berg 0.5.5-r0 —
Wolfi rolling buck2 20260201-r1 —
Wolfi rolling cargo-audit 0.22.1-r1 —
Wolfi rolling cargo-c 0.10.20-r3 —
Wolfi rolling cedar 4.8.2-r3 —
Wolfi rolling deno 2.6.8-r2 —
Wolfi rolling eza 0.23.4-r3 —
Wolfi rolling geckodriver 0.36.0-r5 —
Wolfi rolling kdash 0.6.2-r11 —
Wolfi rolling linkerd2-proxy 2.338.0-r3 —
Wolfi rolling lychee 0.22.0-r5 —
Wolfi rolling nushell +1 0.110.0-r2 —
Wolfi rolling oranda 0.6.5-r14 —
Wolfi rolling parseable 2.5.11-r0 —
Wolfi rolling pixi 0.63.2-r3 —
Wolfi rolling py3.10-hf-xet +3 1.2.0-r5 —
Wolfi rolling qdrant 1.16.3-r5 —
Wolfi rolling quiche +1 0.25.0-r0 —
Wolfi rolling rust-analyzer 20260202-r1 —
Wolfi rolling rye 0.44.0-r5 —
Wolfi rolling samply 0.13.1-r8 —
Wolfi rolling sccache 0.14.0-r0 —
Wolfi rolling shadowsocks-rust-ssserver 1.24.0-r3 —
Wolfi rolling sqlx 0.8.6-r4 —
Wolfi rolling starship 1.24.2-r1 —
Wolfi rolling topgrade 16.9.0-r2 —
Wolfi rolling uutils 0.6.0-r1 —
Wolfi rolling uv 0.10.2-r1 —
Wolfi rolling wadm 0.21.1-r3 —
Wolfi rolling wash 0.39.0-r7 —
Wolfi rolling wasm-pack 0.14.0-r3 —
Wolfi rolling wasmcloud 2.0.1-r0 —
Wolfi rolling xh 0.25.3-r2 —
Wolfi rolling yara-x 1.12.0-r3 —
Wolfi rolling yazi 26.1.22-r3 —
Wolfi rolling zed 0.224.5-r0 —
Wolfi rolling zellij 0.43.1-r6 —
Wolfi rolling zizmor +1 1.22.0-r3 —
Wolfi rolling zola 0.22.1-r2 —

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io time >= 0.3.6, < 0.3.47 0.3.47 GHSA-r6v5-fh4h-64xc

Advisories 50

References