RHSA-2021:3063MediumCVSS 9.8

Red Hat Security Advisory: rust-toolset:rhel8 security, bug fix, and enhancement update

Published
August 10, 2021
Last Modified
November 6, 2026

🔗 CVE IDs covered (7)

CVE-2020-36323 →CVE-2021-28875 →CVE-2021-28876 →CVE-2021-28877 →CVE-2021-28878 →CVE-2021-28879 →CVE-2021-31162 →

📋 Description

CVE-2020-36323 — rust: optimization for joining strings can cause uninitialized bytes to be exposed CVE-2021-28875 — rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context CVE-2021-28876 — rust: panic safety issue in Zip implementation CVE-2021-28877 — rust: memory safety violation in Zip implementation for nested iter::Zips CVE-2021-28878 — rust: memory safety violation in Zip implementation when next_back() and next() are used together CVE-2021-28879 — rust: integer overflow in the Zip implementation can lead to a buffer overflow CVE-2021-31162 — rust: double free in Vec::from_iter function if freeing the element panics

🎯 Affected products68

  • Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.x86_64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.x86_64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cargo-doc-0:1.52.1-1.module+el8.4.0+11282+0729bac9.noarch (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-0:1.52.1-1.module+el8.4.0+11282+0729bac9.x86_64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • clippy-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.x86_64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-0:1.52.1-1.module+el8.4.0+11282+0729bac9.x86_64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rls-debuginfo-0:1.52.1-1.module+el8.4.0+11282+0729bac9.x86_64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rust-0:1.52.1-1.module+el8.4.0+11282+0729bac9.aarch64 (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rust-0:1.52.1-1.module+el8.4.0+11282+0729bac9.ppc64le (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rust-0:1.52.1-1.module+el8.4.0+11282+0729bac9.s390x (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • rust-0:1.52.1-1.module+el8.4.0+11282+0729bac9.src (rust-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +38 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (11)