AVG-1804 log
| Package | rust |
| Status | Fixed |
| Severity | Medium |
| Type | multiple issues |
| Affected | 1:1.48.0-1 |
| Fixed | 1:1.49.0-1 |
| Current | 1:1.77.2-1 [extra] |
| Ticket | None |
| Created | Mon Apr 12 09:41:29 2021 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2020-36318 | Medium | Yes | Arbitrary code execution | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This... |
| CVE-2020-36317 | Medium | Yes | Incorrect calculation | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the... |