Update Rust crate cxx to v1.0.195 [SECURITY] #3
Open
renovate-bot
wants to merge 1 commit from
renovate/crate-cxx-vulnerability into main
pull from: renovate/crate-cxx-vulnerability
merge into: Evobug:main
Evobug:main
Evobug:renovate/crate-zip-vulnerability
Evobug:renovate/npm-pnpm-vulnerability
Evobug:renovate/crate-rtrb-vulnerability
Evobug:renovate/crate-anyhow-vulnerability
Evobug:mickle/deps-dedupe-2026-10
Evobug:mickle/m150
Evobug:fix/voice-rtc-error-decoding-20260907
Evobug:nvenc-windows
Evobug:dc/exp/jetson_nvmm
Evobug:dc/feature/user_timestamp
Evobug:theo/device-info
Evobug:dc/sensor_capture_timestamp
Evobug:sxian/CLT-2692/improve-peer-connection-tests
Evobug:dc/nvenc_debug
Evobug:ladvoc/prost-upgrade
Evobug:knope/temp-a8be7264-d069-4e3c-b539-d3c54e8dfb90
Evobug:sxian/CLT-2618/changing_3_packets_to_1_packet_in_data_stream
Evobug:revert-733-duan/fix-linux-so-link-issue
Evobug:binhpham/uniffi-wakeword
Evobug:mike/rust_latency_measurement_example
Evobug:sxian/rust_latency_measurement_example
Evobug:lukas/test-knope
Evobug:dc/rockchip_encoder
Evobug:sxian/CLT-2585/avoid_offer_answer_races
Evobug:dc/jetson_encoder
Evobug:theo/dynamic-webrtc
Evobug:sxian/CLT-2534/add_compression_to_rpc_with_backward_compatibility
Evobug:theo/fix-complaints
Evobug:theo/no-verify
Evobug:dc/feature/low_latency
Evobug:dc/pi_encoder
Evobug:dc/user_timestamp_2
Evobug:copilot/add-event-listener-example
Evobug:dc/passthru_simulcast
Evobug:dc/passthru
Evobug:sxian/CLT-2533/update_livekit_models
Evobug:theo/h264-ingest
Evobug:ladvoc/copyright-year-2026
Evobug:ladvoc/uniffi-tier3-panic
Evobug:jacobgelman/clt-2513-allow-rpc-registration-before-room-connection
Evobug:jacobgelman/clt-2512-mark-vendored-dependencies
Evobug:ladvoc/data-tracks
Evobug:blaze/fix-uniffi-headers
Evobug:ladvoc/doc-examples
Evobug:ladvoc/build-test
Evobug:ladvoc/ffi-perf
Evobug:dc/jetson_nvenc
Evobug:dc/nvenc_h265_test
Evobug:dc/user_timestamp
Evobug:ladvoc/nextest
Evobug:dc/jetson_pipeline
Evobug:dc/jetson_pipeline2
Evobug:dc/jetson_exp2
Evobug:dc/jetson_exp
Evobug:ladvoc/participant-state
Evobug:dc/nvenc_simulcast_exp
Evobug:ladvoc/uniffi-resampler
Evobug:dc/fps_debug
Evobug:ladvoc/yuv-optimize
Evobug:ladvoc/ffi-metrics
Evobug:dc/local_camera
Evobug:dc/local_camera_exp1
Evobug:ladvoc/stream-dump
Evobug:duan/uniffi-bindgen-for-csharp
Evobug:rg/uniffi-typescript
Evobug:ladvoc/core-token
Evobug:ladvoc/build-754
Evobug:token-source
Evobug:ladvoc/cdylib-load-test
Evobug:ladvoc/test-room-options
Evobug:ladvoc/gen-protocol-fix
Evobug:ladvoc/participant-active
Evobug:typester/libwebrtc-update
Evobug:typester/release-plz-webrtc-sys
Evobug:theo/fix-win
Evobug:typester/fast-publish
Evobug:shubhra/sample-logs
Evobug:feat/metrics
Evobug:ladvoc/aec-dump
Evobug:feat/forward-participant
Evobug:typester/cleanup-changeset
Evobug:typester/ws-http-proxy-release
Evobug:typester/leak-test
Evobug:theo/bump-manylinux
Evobug:typester/fix-changeset
Evobug:theo/fix-yuv-path
Evobug:nbsp/add/wgpu-screenshare
Evobug:duan/aec3-experimental
Evobug:typester/fix-cpu-leak
Evobug:bcherry/nanpa-folders
Evobug:nbsp/fix/screenshare
Evobug:nbsp/add/fast-publish
Evobug:bcherry/android
Evobug:bcherry/clippy
Evobug:bcherry/rpc
Evobug:bcherry/disable-failing
Evobug:theo/expose-buffer-size
Evobug:theo/fix-timestamps
Evobug:nbsp/worktree/bssl-windows
Evobug:nbsp/fix/race
Evobug:update-protocol
Evobug:theo/audio-resampler
Evobug:theo/fix-events-race
Evobug:duan/fix-build-for-msvc
Evobug:theo/dylib
Evobug:theo/openssl
Evobug:theo/test-symbols
Evobug:theo/unused-code
Evobug:theo/fix-videobuffer
Evobug:theo/audio-ts
Evobug:theo/uwp
Evobug:theo/mediadevices
No reviewers
Labels
Clear labels
bug
Something isn't working
documentation
Improvements or additions to documentation
duplicate
This issue or pull request already exists
enhancement
New feature or request
good first issue
Good for newcomers
help wanted
Extra attention is needed
invalid
This doesn't seem right
question
Further information is requested
wontfix
This will not be worked on
No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set
Reference
Evobug/rust-sdks!3
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate/crate-cxx-vulnerability"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
1.0.194→1.0.195let_cxx_string!uses uninitialized value due to exception safety violationsRUSTSEC-2026-0202
More information
Details
In affected versions of this crate,
let_cxx_string!is not exception safe. After creating theStackString, ifmatch $valuepanics, the content ofStackStringis not yet initialized, while the drop implementation ofStackStringunconditionally deinitializes the content, leading to use of uninitialized value.The soundness issue was fixed in version
1.0.195by moving drop logics to separate drop guard after initializing theStackString.Severity
Unknown
References
This data is provided by OSV and the Rust Advisory Database (CC0 1.0).
Configuration
📅 Schedule: (in timezone Europe/Prague)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.