Linux · Security advisory · August 12, 2021

ELSA-2021-3063: Security update for 14 packages

ELSA-2021-3063, released August 12, 2021, fixes 7 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0289
86th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 6 Routine 1

Fixed package versions

ProductReleaseFixed in
cargool 80:1.52.1-1.module+el8.4.0+20287+5ada6442
cargo-docol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
clippyol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rlsol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rustol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-analysisol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-debugger-commonol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-docol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-gdbol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-lldbol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-srcol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-std-staticol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rust-toolsetol 80:1.52.1-1.module+el8.4.0+20287+5ada6442
rustfmtol 80:1.52.1-1.module+el8.4.0+20287+5ada6442

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-31162 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 9.8 0.0289 None reported
High CVE-2021-28879 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 9.8 0.0241 None reported
High CVE-2021-28875 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 7.5 0.0212 None reported
High CVE-2020-36323 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 8.2 0.0203 None reported
High CVE-2021-28878 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 7.5 0.0200 None reported
High CVE-2021-28877 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 7.5 0.0139 None reported
Routine CVE-2021-28876 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 5.3 0.0157 None reported
Showing 1 to 7 of 7 1