RHSA-2021:3042MediumCVSS 9.8

Red Hat Security Advisory: rust-toolset-1.52 and rust-toolset-1.52-rust security and enhancement update

Published
August 10, 2021
Last Modified
November 6, 2026

🔗 CVE IDs covered (7)

CVE-2020-36323 →CVE-2021-28875 →CVE-2021-28876 →CVE-2021-28877 →CVE-2021-28878 →CVE-2021-28879 →CVE-2021-31162 →

📋 Description

CVE-2020-36323 — rust: optimization for joining strings can cause uninitialized bytes to be exposed CVE-2021-28875 — rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context CVE-2021-28876 — rust: panic safety issue in Zip implementation CVE-2021-28877 — rust: memory safety violation in Zip implementation for nested iter::Zips CVE-2021-28878 — rust: memory safety violation in Zip implementation when next_back() and next() are used together CVE-2021-28879 — rust: integer overflow in the Zip implementation can lead to a buffer overflow CVE-2021-31162 — rust: double free in Vec::from_iter function if freeing the element panics

🎯 Affected products55

  • Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-0:1.52.1-1.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-0:1.52.1-1.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-0:1.52.1-1.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-0:1.52.1-1.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-0:1.52.1-1.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-build-0:1.52.1-1.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-build-0:1.52.1-1.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-build-0:1.52.1-1.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-build-0:1.52.1-1.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-cargo-0:1.52.1-2.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-cargo-0:1.52.1-2.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-cargo-0:1.52.1-2.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-cargo-0:1.52.1-2.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-cargo-doc-0:1.52.1-2.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-clippy-0:1.52.1-2.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-clippy-0:1.52.1-2.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-clippy-0:1.52.1-2.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-clippy-0:1.52.1-2.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rls-0:1.52.1-2.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rls-0:1.52.1-2.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rls-0:1.52.1-2.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rls-0:1.52.1-2.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-runtime-0:1.52.1-1.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-runtime-0:1.52.1-1.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-runtime-0:1.52.1-1.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-runtime-0:1.52.1-1.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rust-0:1.52.1-2.el7_9.ppc64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rust-0:1.52.1-2.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • rust-toolset-1.52-rust-0:1.52.1-2.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • +25 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (11)