Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2022:1894
HistoryMay 10, 2022 - 8:06 a.m.

Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

2022-05-1008:06:44
errata.almalinux.org
20
rust toolset
security fix
bug fix
enhancement
upgrade
cve-2022-21658
almalinux
race condition
unix

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

EPSS

0.001

Percentile

38.0%

JSON

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.

The following packages have been upgraded to a later upstream version: rust (1.58.0). (BZ#2002883)

Security Fix(es):

  • rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed (CVE-2022-21658)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64rust-std-static< 1.58.1-1.module_el8.6.0+2748+176088b3rust-std-static-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8noarchrust-src< 1.58.1-1.module_el8.6.0+2748+176088b3rust-src-1.58.1-1.module_el8.6.0+2748+176088b3.noarch.rpm
almalinux8aarch64rust-std-static-wasm32-unknown-unknown< 1.58.1-1.module_el8.6.0+2748+176088b3rust-std-static-wasm32-unknown-unknown-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8aarch64rust-analysis< 1.58.1-1.module_el8.6.0+2748+176088b3rust-analysis-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8aarch64rust-toolset< 1.58.1-1.module_el8.6.0+2748+176088b3rust-toolset-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8aarch64clippy< 1.58.1-1.module_el8.6.0+2748+176088b3clippy-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8noarchrust-gdb< 1.58.1-1.module_el8.6.0+2748+176088b3rust-gdb-1.58.1-1.module_el8.6.0+2748+176088b3.noarch.rpm
almalinux8aarch64rust-std-static-wasm32-wasi< 1.58.1-1.module_el8.6.0+2748+176088b3rust-std-static-wasm32-wasi-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8aarch64rustfmt< 1.58.1-1.module_el8.6.0+2748+176088b3rustfmt-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
almalinux8aarch64rust< 1.58.1-1.module_el8.6.0+2748+176088b3rust-1.58.1-1.module_el8.6.0+2748+176088b3.aarch64.rpm
Rows per page:
1-10 of 381

Related

fedora 32
nessus 25
redos 1
cbl_mariner 2
ubuntucve 1
openvas 44
debiancve 1
cvelist 1
suse 5
osv 5
redhat 1
cve 1
nvd 1
mageia 1
veracode 1
prion 1
hackerone 1
freebsd 1
oraclelinux 1
rocky 1
alpinelinux 1
githubexploit 1
thn 1
redhatcve 1
amazon 1
photon 4
gentoo 1
apple 4
fedora
fedora
[SECURITY] Fedora 34 Update: rust-afterburn-5.2.0-3.fc34
2022-02-04 01:23:34
[SECURITY] Fedora 35 Update: rust-cargo-insta-1.8.0-3.fc35
2022-01-29 06:41:37
[SECURITY] Fedora 35 Update: rust-afterburn-5.2.0-4.fc35
2022-02-09 01:18:31
nessus
nessus
Amazon Linux 2 : rust (ALAS-2022-1817)
2022-07-15 00:00:00
SUSE SLED15 / SLES15 Security Update : rust1.55 (SUSE-SU-2022:0171-1)
2022-01-26 00:00:00
RHEL 8 : rust-toolset:rhel8 (RHSA-2022:1894)
2022-05-11 00:00:00
redos
redos
ROS-20220804-01
2022-08-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-21658 affecting package rust 1.47.0-3
2022-03-19 16:41:23
CVE-2022-21658 affecting package rust for versions less than 1.59.0-1
2022-04-09 06:53:16
ubuntucve
ubuntucve
CVE-2022-21658
2022-01-20 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0044)
2022-02-09 00:00:00
Fedora: Security Advisory for rust-below (FEDORA-2022-7ec8bda833)
2022-02-04 00:00:00
Fedora: Security Advisory for rust-cargo-insta (FEDORA-2022-7ec8bda833)
2022-02-04 00:00:00
debiancve
debiancve
CVE-2022-21658
2022-01-20 18:15:07
cvelist
cvelist
CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang
2022-01-20 00:00:00
suse
suse
Security update for rust1.55 (moderate)
2022-01-25 00:00:00
Security update for rust, rust1.58, rust1.59 (moderate)
2022-03-15 00:00:00
Security update for rust (moderate)
2022-02-18 00:00:00
osv
osv
Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update
2022-05-10 08:06:44
cargo1.58-1.58.0-2.1 on GA media
2024-06-15 00:00:00
cargo1.56-1.56.1-4.1 on GA media
2024-06-15 00:00:00
redhat
redhat
(RHSA-2022:1894) Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update
2022-05-10 08:06:44
cve
cve
CVE-2022-21658
2022-01-20 18:15:07
nvd
nvd
CVE-2022-21658
2022-01-20 18:15:07
mageia
mageia
Updated rust packages fix security vulnerability
2022-02-03 00:29:30
veracode
veracode
Directory Traversal
2022-03-10 00:21:33
prion
prion
Race condition
2022-01-20 18:15:00
hackerone
hackerone
Internet Bug Bounty: Time-of-check to time-of-use vulnerability in the std::fs::remove_dir_all() function of the Rust standard library
2022-03-24 09:23:58
freebsd
freebsd
Rust -- Race condition enabling symlink following
2022-01-20 00:00:00
oraclelinux
oraclelinux
rust-toolset:ol8 security, bug fix, and enhancement update
2022-05-17 00:00:00
rocky
rocky
rust-toolset:rhel8 security, bug fix, and enhancement update
2022-05-10 08:06:44
alpinelinux
alpinelinux
CVE-2022-21658
2022-01-20 18:15:00
githubexploit
githubexploit
Exploit for Race Condition Enabling Link Following in Rust-Lang Rust
2022-01-21 06:09:16
thn
thn
High-Severity Rust Programming Bug Could Lead to File, Directory Deletion
2022-01-24 06:53:00
redhatcve
redhatcve
CVE-2022-21658
2022-01-20 14:36:34
amazon
amazon
Medium: rust
2022-07-06 03:16:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0147
2022-01-27 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0147
2022-01-27 00:00:00
Critical Photon OS Security Update - PHSA-2022-0358
2022-02-07 00:00:00
gentoo
gentoo
Rust: Multiple Vulnerabilities
2022-10-16 00:00:00
apple
apple
About the security content of tvOS 15.4
2022-03-14 00:00:00
About the security content of watchOS 8.5
2022-03-14 00:00:00
About the security content of iOS 15.4 and iPadOS 15.4
2022-03-14 00:00:00

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

EPSS

0.001

Percentile

38.0%

JSON
Related for ALSA-2022:1894
fedora32nessus25redos1cbl_mariner2ubuntucve1openvas44debiancve1cvelist1suse5osv5redhat1cve1nvd1mageia1veracode1prion1hackerone1freebsd1oraclelinux1rocky1alpinelinux1githubexploit1thn1redhatcve1amazon1photon4gentoo1apple4