Most recent entries from all

ALSA-2021:4270 — Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Affected: AlmaLinux:8: rust-toolset

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.

The following packages have been upgraded to a later upstream version: rust (1.54.0). (BZ#1945805)

Security Fix(es):

* rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string (CVE-2021-29922)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-01689

Withdrawn: BELL-CVE-2021-29922 — CVE-2021-29922 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-JA53746 — Security fixes in rust 1.52.1-r1

Withdrawn by the publisher.

Affected: CleanStart: rust

Package rust version 1.52.1-r1 fixes 1 vulnerabilities: CVE-2021-29922

EUVD-2026-26565

fkie_cve-2021-29922

library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.

GHSA-g9v3-gh27-qjh3

gsd-2021-29922

OESA-2021-1323 — rust security update

Affected: openEuler:20.03-LTS-SP1: rust, openEuler:20.03-LTS-SP2: rust

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. Security Fix(es): library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.(CVE-2021-29922)

RHSA-2021:4270 — Red Hat Security Advisory: rust-toolset:rhel8 security, bug fix, and enhancement update

rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string

UBUNTU-CVE-2021-29922

Affected: Ubuntu:Pro:14.04:LTS: rustc, Ubuntu:Pro:16.04:LTS: rustc, Ubuntu:20.04:LTS: rustc, Ubuntu:22.04:LTS: rustc

WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.