Lucene search

K
mageiaGentoo FoundationMGASA-2018-0318
HistoryJul 24, 2018 - 1:27 a.m.

Updated rust packages fix security vulnerability

2018-07-2401:27:34
Gentoo Foundation
advisories.mageia.org
9

0.001 Low

EPSS

Percentile

46.2%

The Rust Programming Language rustdoc version before version 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability has been fixed in 1.27.1 (CVE-2018-1000622). This update also fixes a bug in the borrow checker verification of match expressions.

OSVersionArchitecturePackageVersionFilename
Mageia6noarchrust< 1.27.1-1.1rust-1.27.1-1.1.mga6