bug#47544: rust-slice-deque is vulnerable to CVE-2021-29938

2022-03-22 Thread Maxim Cournoyer
Hello, Léo Le Bouter writes: > CVE-2021-2993807:15 > An issue was discovered in the slice-deque crate through 2021-02-19 for > Rust. A double drop can occur in SliceDeque::drain_filter upon a panic > in a predicate function. > > Upstream PR: https://github.com/gnzlbg/slice_deque/pull/91

bug#47544: rust-slice-deque is vulnerable to CVE-2021-29938

2021-04-01 Thread Léo Le Bouter via Bug reports for GNU Guix
CVE-2021-29938 07:15 An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter upon a panic in a predicate function. Upstream PR: https://github.com/gnzlbg/slice_deque/pull/91 I suggest we wait for merge then update our pack