CVE:CVE-2022-24713
CNNVD:CNNVD-202203-774
Github regex是用于解析、编译和执行正则表达式的 Rust 库。
regex 存在安全漏洞，该漏洞源于不受信任的regex或由受信任的regex匹配的不受信任的输入引起的拒绝服务攻击。
solution:Upgrade rust-lang regex to a higher version than 1.5.5,and avoid the version (,1.5.5); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0