In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-srcUpgrade rust-gdbUpgrade rust-analysisUpgrade rustfmtUpgrade rust-toolsetUpgrade rust-std-staticUpgrade rlsUpgrade rust-debugger-commonUpgrade cargoUpgrade clippyUpgrade cargo-docUpgrade rust-docUpgrade rustUpgrade rust-lldb | May 4, 2022 | Apr 14, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Apr 14, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-docUpgrade rlsUpgrade rust-gdbUpgrade rust-srcUpgrade cargoUpgrade rust-debugger-commonUpgrade clippyUpgrade rustUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade cargo-docUpgrade rust-std-static | Sep 30, 2022 | Apr 14, 2021 |
| Centos_linux | — | Upgrade cargoUpgrade rlsUpgrade rust-toolsetUpgrade cargo-docUpgrade rust-gdbUpgrade rust-analysisUpgrade clippyUpgrade clippy-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-lldbUpgrade rust-docUpgrade cargo-debuginfoUpgrade rust-debuginfoUpgrade rustUpgrade rustfmtUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rust-srcUpgrade rust-debugger-commonUpgrade rls-debuginfo | Aug 12, 2021 | Apr 14, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 14, 2021 |
| Oracle_linux | — | Upgrade rlsUpgrade rust-debugger-commonUpgrade cargoUpgrade rustUpgrade rust-std-staticUpgrade clippyUpgrade rust-lldbUpgrade rust-analysisUpgrade rust-toolsetUpgrade cargo-docUpgrade rust-docUpgrade rustfmtUpgrade rust-srcUpgrade rust-gdb | Aug 12, 2021 | Dec 23, 2020 |
| Redhat_linux | — | Upgrade rustfmt-debuginfoUpgrade rlsUpgrade rustUpgrade clippy-debuginfoUpgrade rust-debugger-commonUpgrade clippyUpgrade cargo-debuginfoUpgrade rust-lldbUpgrade cargoUpgrade rust-docUpgrade rust-std-staticUpgrade rust-debuginfoUpgrade rust-srcUpgrade rust-debugsourceUpgrade rust-gdbUpgrade rust-toolsetUpgrade rustfmtUpgrade cargo-docUpgrade rls-debuginfoUpgrade rust-analysis | Aug 12, 2021 | Apr 14, 2021 |
| Rocky_linux | — | Upgrade rustUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rustfmtUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade rustfmt-debuginfoUpgrade rlsUpgrade rust-docUpgrade clippyUpgrade rust-toolsetUpgrade cargoUpgrade rust-analysis | May 5, 2022 | Apr 14, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub