RUSTSEC-2021-0040 panic safety: double drop or uninitialized drop of T upon panic

Affected versions of this crate did not guard against potential panics that may happen from user-provided functions T::default and T::drop. Panic within T::default leads to dropping uninitialized T, when it is invoked from common::Slice::::new. Panic within T::drop leads to double drop of T, when...

RUSTSEC-2021-0010 panic safety: double drop may happen within `util::{mutate, mutate2}`

Upon panic in a user-provided function f, fn mutate & fn mutate2 drops twice a same object. Affected versions of this crate did not guard against double drop while temporarily duplicating an object's ownership with ptr::read. Dropping a same object can result in memory corruption. The flaw was...

panic safety: double drop or uninitialized drop of T upon panic

Affected versions of this crate did not guard against potential panics that may happen from user-provided functions T::default and T::drop. Panic within T::default leads to dropping uninitialized T, when it is invoked from common::Slice::::new. Panic within T::drop leads to double drop of T, when...

panic safety: double drop may happen within `util::{mutate, mutate2}`

Upon panic in a user-provided function f, fn mutate & fn mutate2 drops twice a same object. Affected versions of this crate did not guard against double drop while temporarily duplicating an object's ownership with ptr::read. Dropping a same object can result in memory corruption. The flaw was...

PT-2021-18543

Name of the Vulnerable Software and Affected Versions arenavec crate versions through 2021-01-12 arenavec crate versions through 0.1.1 Description The issue concerns the arenavec crate for Rust, where a drop of uninitialized memory can occur upon a panic in T::default. This happens because affect...

PT-2021-16838

Name of the Vulnerable Software and Affected Versions containers crate versions prior to 0.9.11 Description An issue in the containers crate for Rust can cause a double drop of an object when a panic occurs in a user-provided function f, specifically in fn mutate and fn mutate2. This happens...

PT-2021-18544

Name of the Vulnerable Software and Affected Versions arenavec crate through 2021-01-12 arenavec crate through 0.1.1 Description An issue was discovered in the arenavec crate where affected versions did not guard against potential panics that may happen from user-provided functions T::default and...

Sandbox Restrictions Bypass

chromium is vulnerable to sandbox restrictions bypass. A use-after-free in drag and drop allows a remote attacker who has compromised the renderer process to perform a sandbox escape via a malicious HTML page...

PT-2021-18549

Name of the Vulnerable Software and Affected Versions adtensor crate versions through 0.0.3 adtensor crate versions through 2021-01-11 Description An issue was discovered in the adtensor crate for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0048-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

RUSTSEC-2021-0005 Double drop upon panic in 'fn map_array()'

Affected versions of this crate did not guard against panic within the user-provided function f 2nd parameter of fn maparray, and thus panic within f causes double drop of a single object. The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within...

Double drop upon panic in 'fn map_array()'

Affected versions of this crate did not guard against panic within the user-provided function f 2nd parameter of fn maparray, and thus panic within f causes double drop of a single object. The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within...

panic safety issue in `impl TransformContent<S, D> for [S; (2|3|4)]`

Affected versions of this crate did not guard against double drop while temporarily duplicating objects' ownership using ptr::read. Upon panic in a user-provided function conversion, objects that are copied by ptr::read are dropped twice, leading to memory corruption. The flaw was corrected in...

PT-2021-16833

Name of the Vulnerable Software and Affected Versions glsl-layout crate versions prior to 0.4.0 Description An issue was discovered in the glsl-layout crate where a panic occurring within the user-provided function f 2nd parameter of fn map array causes a double drop of a single object. This...

PT-2021-16837

Name of the Vulnerable Software and Affected Versions basic dsp matrix crate versions prior to 0.9.2 Description An issue was discovered in the basic dsp matrix crate where a double drop can be performed when a TransformContent panic occurs. This happens because affected versions of the crate did...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0041-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

UBUNTU-CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...