This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-28876 →

DEBIAN-CVE-2021-28876

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for...

Original description

The description as published by the source.

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]

Debian:13 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]

Debian:14 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]

References

advisory security-tracker.debian.org