Red Hat Security AdvisoryRHSA-2021:2243
rust-toolset-1.49 and rust-toolset-1.49-rust update
Released 2021-06-03 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) rust-toolset-1.49-1.49.0-1.el7_9, rust-toolset-1.49-build-1.49.0-1.el7_9, rust-toolset-1.49-cargo-1.49.0-1.el7_9 +13
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) rust-toolset-1.49-1.49.0-1.el7_9, rust-toolset-1.49-build-1.49.0-1.el7_9, rust-toolset-1.49-cargo-1.49.0-1.el7_9 +13
Fixes 2 records
Priority MEDIUM 45
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01676 · Published 2021-04-11 · Fixed CWE-415
Priority LOW 36
In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01496 · Published 2021-04-11 · Fixed CWE-787
