ALSA-2022:1894

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2022-1894.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2022:1894.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2022:1894
Related
Published
2022-05-10T08:06:44Z
Modified
2022-05-10T08:06:43Z
Summary
Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update
Details

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.

The following packages have been upgraded to a later upstream version: rust (1.58.0). (BZ#2002883)

Security Fix(es):

  • rust: Race condition in removedirall leading to removal of files outside of the directory being removed (CVE-2022-21658)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8

cargo

Package

Name
cargo
Purl
pkg:rpm/almalinux/cargo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

cargo-doc

Package

Name
cargo-doc
Purl
pkg:rpm/almalinux/cargo-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

clippy

Package

Name
clippy
Purl
pkg:rpm/almalinux/clippy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rls

Package

Name
rls
Purl
pkg:rpm/almalinux/rls

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust

Package

Name
rust
Purl
pkg:rpm/almalinux/rust

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-analysis

Package

Name
rust-analysis
Purl
pkg:rpm/almalinux/rust-analysis

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-debugger-common

Package

Name
rust-debugger-common
Purl
pkg:rpm/almalinux/rust-debugger-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-doc

Package

Name
rust-doc
Purl
pkg:rpm/almalinux/rust-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-gdb

Package

Name
rust-gdb
Purl
pkg:rpm/almalinux/rust-gdb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-lldb

Package

Name
rust-lldb
Purl
pkg:rpm/almalinux/rust-lldb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-src

Package

Name
rust-src
Purl
pkg:rpm/almalinux/rust-src

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-std-static

Package

Name
rust-std-static
Purl
pkg:rpm/almalinux/rust-std-static

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-std-static-wasm32-unknown-unknown

Package

Name
rust-std-static-wasm32-unknown-unknown
Purl
pkg:rpm/almalinux/rust-std-static-wasm32-unknown-unknown

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-std-static-wasm32-wasi

Package

Name
rust-std-static-wasm32-wasi
Purl
pkg:rpm/almalinux/rust-std-static-wasm32-wasi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rust-toolset

Package

Name
rust-toolset
Purl
pkg:rpm/almalinux/rust-toolset

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

rustfmt

Package

Name
rustfmt
Purl
pkg:rpm/almalinux/rustfmt

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3