Summary
rust
[1.52.1-1]
- Update to 1.52.1. Includes security fixes for CVE-2020-36323,
CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.
[1.51.0-1]
- Update to 1.51.0. Update to 1.51.0. Includes security fixes for
CVE-2021-28875 and CVE-2021-28877.
[1.50.0-1]
- Update to 1.50.0.
rust-toolset
[1.52.1-1]
- Update to Rust and Cargo 1.52.1.
[1.51.0-1]
- Update to Rust and Cargo 1.51.0.
[1.50.0-1]
- Update to Rust and Cargo 1.50.0.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cargo | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | cargo-doc | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | clippy | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rls | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-analysis | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-debugger-common | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-doc | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-gdb | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-lldb | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-src | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-std-static | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rust-toolset | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
| Oracle Linux · 8 | rustfmt | 0:1.52.1-1.module+el8.4.0+20287+5ada6442 |
Vulnerabilities 7
-
Unscored —
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialize…
-
Unscored —
In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe …
-
Unscored —
In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get…
-
Unscored —
In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same ind…
-
Unscored —
In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once f…
-
Unscored —CVE-2021-28879 Public exploit
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer ov…
-
Unscored —
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the el…