Linux · Security advisory · August 24, 2023

RLSA-2023:4635: rust security update

RLSA-2023:4635, released August 24, 2023, fixes 1 CVE in rust (version 0:1.66.1-2.module+el8.8.0+1428+0690fcea). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0070

53rd percentile

Fixed package versions

Product	Release	Fixed in
rust	rocky 8	0:1.66.1-2.module+el8.8.0+1428+0690fcea

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2023-38497	cargo: Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and...		7.3	0.0070	None reported

Also fixes CVE-2023-38497

ALAS2023-2023-323
cargo, cargo-debuginfo, clippy and 17 more on amzn 2023
ELSA-2023-4635
cargo, clippy, rust and 12 more on ol 8
ELSA-2023-4634
cargo, clippy, rust and 12 more on ol 9
RLSA-2023:4634
rust on rocky 9
ALSA-2023:4634
cargo, clippy, rust and 12 more on almalinux 9
ALSA-2023:4635
cargo, clippy, rust and 12 more on almalinux 8
RHSA-2023:4634
cargo, clippy, rust and 12 more on RHEL 9
RHSA-2023:4635
cargo, clippy, rust and 12 more on RHEL 8

Vendor advisory

https://errata.rockylinux.org/RLSA-2023:4635

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo