ALSA-2022:1894

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2022-1894.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2022:1894.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2022:1894
Related
Published
2022-05-10T08:06:44Z
Modified
2022-05-10T08:06:43Z
Summary
Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update
Details

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.

The following packages have been upgraded to a later upstream version: rust (1.58.0). (BZ#2002883)

Security Fix(es):

  • rust: Race condition in removedirall leading to removal of files outside of the directory being removed (CVE-2022-21658)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / cargo

Package

Name
cargo
Purl
pkg:rpm/almalinux/cargo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / cargo-doc

Package

Name
cargo-doc
Purl
pkg:rpm/almalinux/cargo-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / clippy

Package

Name
clippy
Purl
pkg:rpm/almalinux/clippy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rls

Package

Name
rls
Purl
pkg:rpm/almalinux/rls

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust

Package

Name
rust
Purl
pkg:rpm/almalinux/rust

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-analysis

Package

Name
rust-analysis
Purl
pkg:rpm/almalinux/rust-analysis

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-debugger-common

Package

Name
rust-debugger-common
Purl
pkg:rpm/almalinux/rust-debugger-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-doc

Package

Name
rust-doc
Purl
pkg:rpm/almalinux/rust-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-gdb

Package

Name
rust-gdb
Purl
pkg:rpm/almalinux/rust-gdb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-lldb

Package

Name
rust-lldb
Purl
pkg:rpm/almalinux/rust-lldb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-src

Package

Name
rust-src
Purl
pkg:rpm/almalinux/rust-src

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-std-static

Package

Name
rust-std-static
Purl
pkg:rpm/almalinux/rust-std-static

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-std-static-wasm32-unknown-unknown

Package

Name
rust-std-static-wasm32-unknown-unknown
Purl
pkg:rpm/almalinux/rust-std-static-wasm32-unknown-unknown

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-std-static-wasm32-wasi

Package

Name
rust-std-static-wasm32-wasi
Purl
pkg:rpm/almalinux/rust-std-static-wasm32-wasi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rust-toolset

Package

Name
rust-toolset
Purl
pkg:rpm/almalinux/rust-toolset

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3

AlmaLinux:8 / rustfmt

Package

Name
rustfmt
Purl
pkg:rpm/almalinux/rustfmt

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.58.1-1.module_el8.6.0+2748+176088b3