CVE-2020-35928

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync.

RUSTSEC-2020-0092 — Send/Sync bound needed on V in `impl Send/Sync for ARCache`

Affected: crates.io: concread

Affected versions of this crate unconditionally implemented `Send`/`Sync` traits for `ARCache<K, V>` type.

This allows users to send/access types that do not implement `Send`/`Sync`, which can cause a data race.

The flaw was corrected in the 0.2.6 release by adding bounds `K: Send + Sync` & `V: Send + Sync` to affected `Send`/`Sync` trait implementations.

Most recent entries from all

CVE-2020-35928

RUSTSEC-2020-0092 — Send/Sync bound needed on V in `impl Send/Sync for ARCache`