Low: rust-toolset:rhel8 security, bug fix, and enhancement update

2021-05-1806:26:06

errata.almalinux.org

rust

security update

bug fix

enhancement

cve-2020-36318

cve-2020-36317

vecdeque::make_contiguous

string::retain()

almalinux.

EPSS

0.003

Percentile

70.3%

JSON

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety.

The following packages have been upgraded to a later upstream version: rust (1.49.0). (BZ#1896712)

Security Fix(es):

rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)
rust: memory safety violation in String::retain() (CVE-2020-36317)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64cargo< 1.49.0-1.module_el8.4.0+2145+1a463e08cargo-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux8noarchcargo-doc< 1.49.0-1.module_el8.4.0+2145+1a463e08cargo-doc-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm
almalinux8x86_64clippy< 1.49.0-1.module_el8.4.0+2145+1a463e08clippy-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux8x86_64rls< 1.49.0-1.module_el8.4.0+2145+1a463e08rls-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux8x86_64rust< 1.49.0-1.module_el8.4.0+2145+1a463e08rust-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux8x86_64rust-analysis< 1.49.0-1.module_el8.4.0+2145+1a463e08rust-analysis-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux8noarchrust-debugger-common< 1.49.0-1.module_el8.4.0+2145+1a463e08rust-debugger-common-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm
almalinux8x86_64rust-doc< 1.49.0-1.module_el8.4.0+2145+1a463e08rust-doc-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux8noarchrust-gdb< 1.49.0-1.module_el8.4.0+2145+1a463e08rust-gdb-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm
almalinux8noarchrust-lldb< 1.49.0-1.module_el8.4.0+2145+1a463e08rust-lldb-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	cargo	< 1.49.0-1.module_el8.4.0+2145+1a463e08	cargo-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux	8	noarch	cargo-doc	< 1.49.0-1.module_el8.4.0+2145+1a463e08	cargo-doc-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm
almalinux	8	x86_64	clippy	< 1.49.0-1.module_el8.4.0+2145+1a463e08	clippy-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux	8	x86_64	rls	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rls-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux	8	x86_64	rust	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rust-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux	8	x86_64	rust-analysis	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rust-analysis-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux	8	noarch	rust-debugger-common	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rust-debugger-common-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm
almalinux	8	x86_64	rust-doc	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rust-doc-1.49.0-1.module_el8.4.0+2145+1a463e08.x86_64.rpm
almalinux	8	noarch	rust-gdb	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rust-gdb-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm
almalinux	8	noarch	rust-lldb	< 1.49.0-1.module_el8.4.0+2145+1a463e08	rust-lldb-1.49.0-1.module_el8.4.0+2145+1a463e08.noarch.rpm