Linux · Security advisory · August 25, 2023

ELSA-2023-4634: Security update for 15 packages

ELSA-2023-4634, released August 25, 2023, fixes 1 CVE across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0070
53rd percentile

Fixed package versions

ProductReleaseFixed in
cargool 90:1.66.1-2.el9_2
clippyol 90:1.66.1-2.el9_2
rustol 90:1.66.1-2.el9_2
rust-analysisol 90:1.66.1-2.el9_2
rust-analyzerol 90:1.66.1-2.el9_2
rust-debugger-commonol 90:1.66.1-2.el9_2
rust-docol 90:1.66.1-2.el9_2
rust-gdbol 90:1.66.1-2.el9_2
rust-lldbol 90:1.66.1-2.el9_2
rust-srcol 90:1.66.1-2.el9_2
rust-std-staticol 90:1.66.1-2.el9_2
rust-std-static-wasm32-unknown-unknownol 90:1.66.1-2.el9_2
rust-std-static-wasm32-wasiol 90:1.66.1-2.el9_2
rust-toolsetol 90:1.66.1-2.el9_2
rustfmtol 90:1.66.1-2.el9_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-38497 cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and... 7.3 0.0070 None reported
Showing 1 to 1 of 1 1