RHSA-2023:4634: Important: rust security update
Published Aug 14, 2023
·Updated
Important: rust security update
Other sources
Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. Security Fix(es): rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
79 affected componentsFixes available
redhat/rust<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/clippy<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/clippy-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/clippy-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analysis<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analyzer<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analyzer-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analyzer-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debugger-common<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debugsource<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debugsource<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-doc<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-gdb<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-lldb<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-src<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-std-static<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-std-static<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-std-static-wasm32-unknown-unknown<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-std-static-wasm32-wasi<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-toolset<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rustfmt<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rustfmt-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rustfmt-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/clippy<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analysis<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analyzer<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-doc<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-toolset<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rustfmt<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/clippy<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/clippy-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analysis<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analyzer<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-analyzer-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-debugsource<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-doc<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-std-static<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rust-toolset<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rustfmt<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/rustfmt-debuginfo<1.66.1-2.el9_2
1.66.1-2.el9_2
redhat/cargo<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/cargo-debuginfo<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/clippy<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/clippy-debuginfo<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-analysis<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-analyzer<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-analyzer-debuginfo<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-debuginfo<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-debugsource<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-doc<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-std-static<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rust-toolset<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rustfmt<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
redhat/rustfmt-debuginfo<1.66.1-2.el9_2.aa
1.66.1-2.el9_2.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Remediation
Event History
Aug 14, 2023
Advisory Published
via Red Hat·12:00 AM
Advisory Published
01:42 PM
Frequently Asked Questions
1
What is the severity of RHSA-2023:4634?
The severity of RHSA-2023:4634 is classified as important.
2
How do I fix RHSA-2023:4634?
To fix RHSA-2023:4634, update the affected packages to version 1.66.1-2.el9_2 or later.
3
Which packages are affected by RHSA-2023:4634?
Affected packages include rust, cargo, clippy, and various related tools in the Rust Toolset.
4
What vulnerability is addressed in RHSA-2023:4634?
RHSA-2023:4634 addresses a security issue where cargo does not respect the umask when extracting dependencies.
5
Is there a specific package version to upgrade for RHSA-2023:4634?
Yes, you should upgrade to rust version 1.66.1-2.el9_2 for compliance.