CVE-2020-36462
2 advisories.
crates.io/syncpool CVE-2020-36462: high 8.1
Data race in syncpool
Action: Upgrade syncpool to 0.1.6 or later.
cargo update -p syncpool --precise 0.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.6 | - |
Fixed versions
| 0.1.6 |
Sources
- osv: GHSA-vp6r-mrq9-8f4h
- https://nvd.nist.gov/vuln/detail/CVE-2020-36462
- https://github.com/Chopinsky/byte_buffer/issues/2
- https://github.com/Chopinsky/byte_buffer/commit/15b282877d1e576de2b337d8162bbf43ed1a0f2d
- https://github.com/Chopinsky/byte_buffer/tree/master/syncpool
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/syncpool/RUSTSEC-2020-0142.md
- https://rustsec.org/advisories/RUSTSEC-2020-0142.html
CVE-2020-36462 · published · modified · JSON
crates.io/syncpool CVE-2020-36462: high 8.1
Send bound needed on T (for Send impl of `Bucket2`)
Action: Upgrade syncpool to 0.1.6 or later.
cargo update -p syncpool --precise 0.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.1.6 | - |
Fixed versions
| 0.1.6 |
Sources
- osv: RUSTSEC-2020-0142
- https://crates.io/crates/syncpool
- https://rustsec.org/advisories/RUSTSEC-2020-0142.html
- https://github.com/Chopinsky/byte_buffer/issues/2
CVE-2020-36462 · published · modified · JSON