Test ID:	1.3.6.1.4.1.25623.1.0.833389
Category:	SuSE Local Security Checks
Title:	openSUSE: Security Advisory for rust1.71 (SUSE-SU-2023:3251-1)
Summary:	The remote host is missing an update for the 'rust1.71'; package(s) announced via the SUSE-SU-2023:3251-1 advisory.
Description:	Summary: The remote host is missing an update for the 'rust1.71' package(s) announced via the SUSE-SU-2023:3251-1 advisory. Vulnerability Insight: This update for rust1.71 fixes the following issues: Update to version 1.71.1: * CVE-2023-38497: Fixed privilege escalation with Cargo not respecting umask when extracting dependencies (bsc#1213817). ## Affected Software/OS: 'rust1.71' package(s) on openSUSE Leap 15.4, openSUSE Leap 15.5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-38497 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMEXGUGPW5OBSQA6URTBNDSU3RAEFOZ4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGKE6PGM4HIQUHPJRBQAHMELINSGN4H4/ https://en.wikipedia.org/wiki/Umask https://github.com/rust-lang/cargo/commit/d78bbf4bde3c6b95caca7512f537c6f9721426ff https://github.com/rust-lang/cargo/pull/12443 https://github.com/rust-lang/cargo/security/advisories/GHSA-j3xp-wfr4-hx87 https://github.com/rust-lang/wg-security-response/tree/main/patches/CVE-2023-38497 https://www.rust-lang.org/policies/security
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.