Alpine/chromium-rust: critical 9.8
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
Action: Upgrade chromium-rust to 1.51.0-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.51.0-r2 | - |
Fixed versions
| 1.51.0-r2 |
Sources
- osv: ALPINE-CVE-2021-31162#Alpine:v3.24/chromium-rust
- https://security.alpinelinux.org/vuln/CVE-2021-31162
published · modified · JSON