Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cargo | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cargo-debuginfo | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cargo-doc | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | clippy | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | clippy-debuginfo | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rls | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rls-debuginfo | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-analysis | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-debugger-common | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-debuginfo | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-debugsource | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-doc | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-gdb | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-lldb | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-src | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-std-static | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rust-toolset | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rustfmt | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rustfmt-debuginfo | 0:1.52.1-1.module+el8.4.0+11282+0729bac9 |
Vulnerabilities 7
-
Unscored —
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialize…
-
Unscored —
In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe …
-
Unscored —
In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get…
-
Unscored —
In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same ind…
-
Unscored —
In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once f…
-
Unscored —CVE-2021-28879 Public exploit
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer ov…
-
Unscored —
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the el…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_rust_1.52.1_toolset
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1949194
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1949198
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1949204
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1949207
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1949211
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1950396
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1950398
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3063.json
-
report
https://access.redhat.com/security/cve/CVE-2020-36323
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-36323
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-36323
-
report
https://access.redhat.com/security/cve/CVE-2021-28875
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-28875
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28875
-
report
https://access.redhat.com/security/cve/CVE-2021-28876
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-28876
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28876
-
report
https://access.redhat.com/security/cve/CVE-2021-28877
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-28877
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28877
-
report
https://access.redhat.com/security/cve/CVE-2021-28878
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-28878
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28878
-
report
https://access.redhat.com/security/cve/CVE-2021-28879
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-28879
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28879
-
report
https://access.redhat.com/security/cve/CVE-2021-31162
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-31162
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-31162