Red Hat Security Advisory

RHSA-2021:1935

rust-toolset:rhel8 security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) cargo-1.49.0-1.module+el8.4.0+9446+1a463e08.aarch64::rust-toolset:rhel8, cargo-1.49.0-1.module+el8.4.0+9446+1a463e08.ppc64le::rust-toolset:rhel8, cargo-1.49.0-1.module+el8.4.0+9446+1a463e08.s390x::rust-toolset:rhel8 +40

TI-2020-18601 CVE-2020-36318 · GHSA-w7c8-v5h2-32ff

MEDIUM 45

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01676 Published 2021-04-11 Fixed CWE-415

TI-2020-18600 CVE-2020-36317 · GHSA-jc5q-p9cv-j8pj

LOW 36

In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01496 Published 2021-04-11 Fixed CWE-787