Skip to content
OpenAdvisories
Unscored RHSA-2021:1935 2 CVEs

Red Hat Security Advisory: rust-toolset:rhel8 security, bug fix, and enhancement update

Published Sep 14, 2024 · Updated Feb 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream cargo 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream cargo-debuginfo 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream cargo-doc 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream clippy 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream clippy-debuginfo 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rls 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rls-debuginfo 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-analysis 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-debugger-common 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-debuginfo 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-debugsource 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-doc 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-gdb 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-lldb 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-src 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-std-static 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rust-toolset 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rustfmt 0:1.49.0-1.module+el8.4.0+9446+1a463e08
Red Hat · RHEL 8 enterprise_linux:8::appstream rustfmt-debuginfo 0:1.49.0-1.module+el8.4.0+9446+1a463e08

Vulnerabilities 2

  • Unscored —
    CVE-2020-36317

    In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation…

    rustc rustc Debian Ubuntu
  • Unscored —
    CVE-2020-36318

    In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than…

    rustc rustc Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1949189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1949192
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1935.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-36317
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-36317
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-36317
  • report
    https://access.redhat.com/security/cve/CVE-2020-36318
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-36318
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-36318