MGASA-2022-0044
- Source
- https://advisories.mageia.org/MGASA-2022-0044.html
- Import Source
- https://advisories.mageia.org/MGASA-2022-0044.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2022-0044
- Related
- Published
- 2022-02-02T21:29:30Z
- Modified
- 2022-02-02T20:45:01Z
- Summary
- Updated rust packages fix security vulnerability
- Details
-
This update provides Rust 1.57.0 as a feature and bugfix update. See the release notes for details.
The 'std::fs::removedirall' standard library function was vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn't otherwise access or delete (CVE-2022-21658). This vulnerability was fixed by patching Rust 1.57.0.
- References
- Credits
-
-
- Mageia - COORDINATOR
-