Test ID:	1.3.6.1.4.1.25623.1.1.4.2022.0843.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2022:0843-1)
Summary:	The remote host is missing an update for the 'rust, rust1.58, rust1.59' package(s) announced via the SUSE-SU-2022:0843-1 advisory.
Description:	Summary: The remote host is missing an update for the 'rust, rust1.58, rust1.59' package(s) announced via the SUSE-SU-2022:0843-1 advisory. Vulnerability Insight: This update for rust, rust1.58, rust1.59 fixes the following issues: This update provides both rust1.58 and rust1.59. Changes in rust1.58: Add recommends for GCC for installs to be able to link. Add suggests for lld/clang which are faster than gcc for linking to allow users choice on what they use. CVE-2022-21658: Resolve race condition in std::fs::remove_dir_all (bsc#1194767) Version 1.58.0 (2022-01-13) ========================== Language -------- [Format strings can now capture arguments simply by writing `{ident}` in the string.][90473] This works in all macros accepting format strings. Support for this in `panic!` (`panic!('{ident}')`) requires the 2021 edition, panic invocations in previous editions that appear to be trying to use this will result in a warning lint about not having the intended effect. [`*const T` pointers can now be dereferenced in const contexts.][89551] [The rules for when a generic struct implements `Unsize` have been relaxed.][90417] Compiler -------- [Add LLVM CFI support to the Rust compiler][89652] [Stabilize -Z strip as -C strip][90058]. Note that while release builds already don't add debug symbols for the code you compile, the compiled standard library that ships with Rust includes debug symbols, so you may want to use the `strip` option to remove these symbols to produce smaller release binaries. Note that this release only includes support in rustc, not directly in cargo. [Add support for LLVM coverage mapping format versions 5 and 6][91207] [Emit LLVM optimization remarks when enabled with `-Cremark`][90833] [Update the minimum external LLVM to 12][90175] [Add `x86_64-unknown-none` at Tier 3*][89062] [Build musl dist artifacts with debuginfo enabled][90733]. When building release binaries using musl, you may want to use the newly stabilized strip option to remove these debug symbols, reducing the size of your binaries. [Don't abort compilation after giving a lint error][87337] [Error messages point at the source of trait bound obligations in more places][89580] \* Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support. Libraries --------- [All remaining functions in the standard library have `#[must_use]` annotations where appropriate][89692], producing a warning when ignoring their return value. This helps catch mistakes such as expecting a function to mutate a value in place rather than return a new value. [Paths are automatically canonicalized on Windows for operations that support it][89174] [Re-enable debug checks for `copy` and `copy_nonoverlapping`][90041] [Implement `RefUnwindSafe` for `Rc`][87467] [Make RSplit: Clone not require T: Clone][90117] [Implement `Termination` for `Result`][88601]. This allows writing `fn main() -> Result`, for a program whose successful exits never involve returning from `main` (for ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'rust, rust1.58, rust1.59' package(s) on SUSE Linux Enterprise Module for Development Tools 15-SP3. Solution: Please install the updated package(s). CVSS Score: 3.3 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-21658 https://github.com/rust-lang/rust/security/advisories/GHSA-r9cc-f5pr-p3j2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7JKZDTBMGAWIFJSNWKBMPO5EAKRR4BEW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKGTACKMKAPRDPWPTU26GYWBELIRFF5N/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BK32QZLHDC2OVLPKTUHNT2G3VHWHD4LX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63NH72Q7UHJM5V3IVYRI7LVBGGFQMSQ/ https://security.gentoo.org/glsa/202210-09 https://blog.rust-lang.org/2022/01/20/cve-2022-21658.html https://github.com/rust-lang/rust/pull/93110 https://github.com/rust-lang/rust/pull/93110/commits/32ed6e599bb4722efefd78bbc9cd7ec4613cb946 https://github.com/rust-lang/rust/pull/93110/commits/406cc071d6cfdfdb678bf3d83d766851de95abaf https://github.com/rust-lang/rust/pull/93110/commits/4f0ad1c92ca08da6e8dc17838070975762f59714
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.