Summary
Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.
The following packages have been upgraded to a later upstream version: rust (1.54.0). (BZ#1945805)
Security Fix(es):
* rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string (CVE-2021-29922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | rust-toolset | 1.54.0-1.module_el8.5.0+2599+d655d86c |
Vulnerabilities 1
-
Unscored —
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginn…
References
-
report
https://vulners.com/cve/CVE-2021-29922