AVG-1804 log

Package	rust
Status	Fixed
Severity	Medium
Type	multiple issues
Affected	1:1.48.0-1
Fixed	1:1.49.0-1
Current	1:1.82.0-2 [extra]
Ticket	None
Created	Mon Apr 12 09:41:29 2021

Issue	Severity	Remote	Type	Description
CVE-2020-36318	Medium	Yes	Arbitrary code execution	In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This...
CVE-2020-36317	Medium	Yes	Incorrect calculation	In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the...

Issue

Severity

Remote

Type

Description

CVE-2020-36318

Medium

Yes

Arbitrary code execution

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This...

CVE-2020-36317

Medium

Yes

Incorrect calculation

In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the...