In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-srcUpgrade rust-gdbUpgrade rustfmtUpgrade rust-toolsetUpgrade rust-analysisUpgrade rust-debugger-commonUpgrade rust-lldbUpgrade rustUpgrade cargo-docUpgrade cargoUpgrade rust-std-staticUpgrade rust-docUpgrade rlsUpgrade clippy | May 4, 2022 | Apr 14, 2021 |
| Alpine Linux | — | Upgrade chromium-rustUpgrade rust | Mar 26, 2024 | Apr 14, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-std-staticUpgrade rustfmtUpgrade rust-debugger-commonUpgrade clippyUpgrade rustUpgrade rust-debuginfoUpgrade rust-analysisUpgrade cargo-docUpgrade rust-docUpgrade rlsUpgrade rust-srcUpgrade rust-gdbUpgrade cargo | Sep 30, 2022 | Apr 14, 2021 |
| Centos_linux | — | Upgrade rust-debuginfoUpgrade rustfmtUpgrade rustUpgrade rust-docUpgrade rust-std-staticUpgrade rust-srcUpgrade rustfmt-debuginfoUpgrade rls-debuginfoUpgrade rust-lldbUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rust-debugger-commonUpgrade rlsUpgrade clippy-debuginfoUpgrade rust-toolsetUpgrade rust-analysisUpgrade cargoUpgrade cargo-docUpgrade clippyUpgrade rust-gdb | Aug 12, 2021 | Apr 14, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 14, 2021 |
| Oracle_linux | — | Upgrade rust-debugger-commonUpgrade rlsUpgrade rustUpgrade rust-lldbUpgrade cargoUpgrade rust-std-staticUpgrade clippyUpgrade rust-analysisUpgrade cargo-docUpgrade rustfmtUpgrade rust-docUpgrade rust-srcUpgrade rust-gdbUpgrade rust-toolset | Aug 12, 2021 | Dec 23, 2020 |
| Redhat_linux | — | Upgrade rust-gdbUpgrade rust-toolsetUpgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-srcUpgrade rustfmtUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade cargo-docUpgrade rust-docUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade cargoUpgrade rlsUpgrade rust-lldbUpgrade clippyUpgrade cargo-debuginfoUpgrade rust-debugger-commonUpgrade rustfmt-debuginfoUpgrade rust | Aug 12, 2021 | Apr 14, 2021 |
| Rocky_linux | — | Upgrade rustUpgrade rustfmtUpgrade rls-debuginfoUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade rust-toolsetUpgrade rust-docUpgrade rust-analysisUpgrade clippyUpgrade rustfmt-debuginfoUpgrade cargoUpgrade rls | May 5, 2022 | Apr 14, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub