AlmaLinuxALSA-2023:4634Important: rust security update
7.9 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
5.1%
Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.
Security Fix(es):
- rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | noarch | rust-src | < 1.66.1-2.el9_2 | rust-src-1.66.1-2.el9_2.noarch.rpm |
| almalinux | 9 | noarch | rust-std-static-wasm32-wasi | < 1.66.1-2.el9_2 | rust-std-static-wasm32-wasi-1.66.1-2.el9_2.noarch.rpm |
| almalinux | 9 | noarch | rust-lldb | < 1.66.1-2.el9_2 | rust-lldb-1.66.1-2.el9_2.noarch.rpm |
| almalinux | 9 | noarch | rust-gdb | < 1.66.1-2.el9_2 | rust-gdb-1.66.1-2.el9_2.noarch.rpm |
| almalinux | 9 | i686 | rust-std-static | < 1.66.1-2.el9_2 | rust-std-static-1.66.1-2.el9_2.i686.rpm |
| almalinux | 9 | noarch | rust-debugger-common | < 1.66.1-2.el9_2 | rust-debugger-common-1.66.1-2.el9_2.noarch.rpm |
| almalinux | 9 | noarch | rust-std-static-wasm32-unknown-unknown | < 1.66.1-2.el9_2 | rust-std-static-wasm32-unknown-unknown-1.66.1-2.el9_2.noarch.rpm |
| almalinux | 9 | ppc64le | cargo | < 1.66.1-2.el9_2 | cargo-1.66.1-2.el9_2.ppc64le.rpm |
| almalinux | 9 | ppc64le | rust-std-static | < 1.66.1-2.el9_2 | rust-std-static-1.66.1-2.el9_2.ppc64le.rpm |
| almalinux | 9 | ppc64le | rust | < 1.66.1-2.el9_2 | rust-1.66.1-2.el9_2.ppc64le.rpm |
Related
7.9 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
5.1%