Summary
Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.
The following packages have been upgraded to a later upstream version: rust (1.54.0). (BZ#1945805)
Security Fix(es):
* rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string (CVE-2021-29922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | rust | 0:1.54.0-2.module+el8.5.0+678+cf7bc64b |
| Rocky Linux · 8 | rust-toolset | 0:1.54.0-1.module+el8.5.0+678+cf7bc64b |
Vulnerabilities 1
-
Unscored —
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginn…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1991962