tocsin

CVE-2018-20991

2 advisories.

crates.io/smallvec CVE-2018-20991: critical 9.8

Double free in smallvec

Action: Upgrade smallvec to 0.6.3 or later.

cargo update -p smallvec --precise 0.6.3

Affected

introducedfixedlast affected
0.3.20.6.3-

Fixed versions

0.6.3

Sources

CVE-2018-20991 · published · modified · JSON

crates.io/smallvec CVE-2018-20991: critical 9.8

Possible double free during unwinding in SmallVec::insert_many

Action: Upgrade smallvec to 0.3.4 or later.

cargo update -p smallvec --precise 0.3.4
cargo update -p smallvec --precise 0.4.5
cargo update -p smallvec --precise 0.5.1
cargo update -p smallvec --precise 0.6.3

Affected

introducedfixedlast affected
0.3.20.3.4-
0.4.0-00.4.5-
0.5.0-00.5.1-
0.6.0-00.6.3-

Fixed versions

0.3.40.4.50.5.10.6.3

Sources

CVE-2018-20991 · published · modified · JSON