Skip to content
OpenAdvisories
Low ELSA-2021-1935 2 CVEs

Low: rust-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

rust
[1.49.0-1]
- Update to 1.49.0.

[1.48.0-1]
- Update to 1.48.0.

rust-toolset
[1.49.0-1]
- Update to Rust and Cargo 1.49.0.

[1.48.0-1]
- Update to Rust and Cargo 1.48.0.

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 cargo 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 cargo-doc 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 clippy 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rls 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-analysis 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-debugger-common 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-doc 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-gdb 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-lldb 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-src 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-std-static 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rust-toolset 0:1.49.0-1.module+el8.4.0+20083+9f8f961d
Oracle Linux · 8 rustfmt 0:1.49.0-1.module+el8.4.0+20083+9f8f961d

Vulnerabilities 2

  • Unscored —
    CVE-2020-36317

    In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation…

    rustc rustc Debian Ubuntu
  • Unscored —
    CVE-2020-36318

    In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than…

    rustc rustc Debian Ubuntu