https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:48:22 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:1894 <p><strong>Affected:</strong> AlmaLinux:8: cargo, AlmaLinux:8: cargo-doc, AlmaLinux:8: clippy, AlmaLinux:8: rls, AlmaLinux:8: rust, AlmaLinux:8: rust-analysis, AlmaLinux:8: rust-debugger-common, AlmaLinux:8: rust-doc, AlmaLinux:8: rust-gdb, AlmaLinux:8: rust-lldb and 6 more</p> <p>Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.</p> <p>The following packages have been upgraded to a later upstream version: rust (1.58.0). (BZ#2002883)</p> <p>Security Fix(es):</p> <p>* rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed (CVE-2022-21658)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: cargo, AlmaLinux:8: cargo-doc, AlmaLinux:8: clippy, AlmaLinux:8: rls, AlmaLinux:8: rust, AlmaLinux:8: rust-analysis, AlmaLinux:8: rust-debugger-common, AlmaLinux:8: rust-doc, AlmaLinux:8: rust-gdb, AlmaLinux:8: rust-lldb and 6 more</p> <p>Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.</p> <p>The following packages have been upgraded to a later upstream version: rust (1.58.0). (BZ#2002883)</p> <p>Security Fix(es):</p> <p>* rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed (CVE-2022-21658)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:1894 https://cve.radiocsirt.org/vuln/bdu:2022-05167 bdu:2022-05167 https://cve.radiocsirt.org/vuln/bdu:2022-05167 https://cve.radiocsirt.org/vuln/bell-cve-2022-21658 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-21658 https://cve.radiocsirt.org/vuln/euvd-2026-232839 EUVD-2026-232839 https://cve.radiocsirt.org/vuln/euvd-2026-232839 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21658 <p>Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn&#39;t otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don&#39;t have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions.</p> <p>Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn&#39;t otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don&#39;t have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21658 https://cve.radiocsirt.org/vuln/gsd-2022-21658 gsd-2022-21658 https://cve.radiocsirt.org/vuln/gsd-2022-21658 https://cve.radiocsirt.org/vuln/icsa-25-100-02 <p>Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn&#39;t otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don&#39;t have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions. Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm a…</p> <p>Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn&#39;t otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don&#39;t have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions. Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm a…</p> https://cve.radiocsirt.org/vuln/icsa-25-100-02 https://cve.radiocsirt.org/vuln/msrc_cve-2022-21658 msrc_CVE-2022-21658 https://cve.radiocsirt.org/vuln/msrc_cve-2022-21658 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0149-1 <p>Security update for rust1.56</p> <p>Security update for rust1.56</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0149-1 https://cve.radiocsirt.org/vuln/suse-su-2022:0149-1 <p>Security update for rust1.56</p> <p>Security update for rust1.56</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0149-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-21658 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rustc, Ubuntu:Pro:16.04:LTS: rustc, Ubuntu:20.04:LTS: rustc</p> <p>Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn&#39;t otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don&#39;t have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rustc, Ubuntu:Pro:16.04:LTS: rustc, Ubuntu:20.04:LTS: rustc</p> <p>Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn&#39;t otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don&#39;t have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-21658 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0561 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0561