In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-analysisUpgrade rust-srcUpgrade rust-toolsetUpgrade rustfmtUpgrade rust-gdbUpgrade rust-docUpgrade rust-debugger-commonUpgrade cargoUpgrade rlsUpgrade clippyUpgrade rust-std-staticUpgrade rust-lldbUpgrade rustUpgrade cargo-doc | May 4, 2022 | Apr 14, 2021 |
| Alpine Linux | — | Upgrade rustUpgrade chromium-rust | Mar 26, 2024 | Apr 14, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-std-staticUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rustfmtUpgrade clippyUpgrade rustUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rlsUpgrade rust-srcUpgrade cargoUpgrade rust-gdbUpgrade rust-doc | Sep 30, 2022 | Apr 14, 2021 |
| Centos_linux | — | Upgrade rust-srcUpgrade rustfmt-debuginfoUpgrade rust-std-staticUpgrade rust-lldbUpgrade rust-docUpgrade rls-debuginfoUpgrade cargo-debuginfoUpgrade rust-debugger-commonUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade rustfmtUpgrade rustUpgrade clippy-debuginfoUpgrade rust-toolsetUpgrade rust-analysisUpgrade rlsUpgrade cargo-docUpgrade rust-gdbUpgrade cargoUpgrade clippy | Aug 12, 2021 | Apr 14, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 14, 2021 |
| Oracle_linux | — | Upgrade clippyUpgrade rust-lldbUpgrade rustUpgrade rlsUpgrade rust-std-staticUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-toolsetUpgrade rust-analysisUpgrade cargo-docUpgrade rust-docUpgrade rust-srcUpgrade rustfmtUpgrade rust-gdb | Aug 12, 2021 | Dec 23, 2020 |
| Redhat_linux | — | Upgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade rustfmtUpgrade cargo-docUpgrade rust-gdbUpgrade clippy-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade cargoUpgrade rustUpgrade clippyUpgrade rust-debugger-commonUpgrade rlsUpgrade rust-lldb | Aug 12, 2021 | Apr 14, 2021 |
| Rocky_linux | — | Upgrade cargoUpgrade rlsUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade clippyUpgrade rust-toolsetUpgrade rust-analysisUpgrade cargo-debuginfoUpgrade rustfmtUpgrade rustUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rls-debuginfo | May 5, 2022 | Apr 14, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub