{"id":"GHSA-cqpr-pcm7-m3jc","summary":"Potential segfault in `localtime_r` invocations","details":"### Impact\n\nUnix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.\n\n### Workarounds \n\nNo workarounds are known.","modified":"2022-08-04T19:38:53Z","published":"2022-06-16T23:48:34Z","withdrawn":"2022-07-21T18:06:06Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2022-06-16T23:48:34Z","nvd_published_at":null,"cwe_ids":[],"severity":"MODERATE"},"references":[{"type":"WEB","url":"https://github.com/chronotope/chrono/issues/499"},{"type":"WEB","url":"https://github.com/time-rs/time/issues/293"},{"type":"PACKAGE","url":"https://github.com/chronotope/chrono"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2020-0159.html"}],"affected":[{"package":{"name":"chrono","ecosystem":"crates.io","purl":"pkg:cargo/chrono"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.4.20"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-cqpr-pcm7-m3jc/GHSA-cqpr-pcm7-m3jc.json"}}],"schema_version":"1.9.0"}