rust-toolset:rhel8 security, bug fix, and enhancement update

エラータID: AXSA:2021-2857:01

リリース日: 
2021/12/23 Thursday - 12:31
題名: 
rust-toolset:rhel8 security, bug fix, and enhancement update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Rust の library/std/src/net/parser.rs には、IP アドレスの文字列の先頭に
無関係のゼロの文字がある場合を適切に考慮されていない問題があり、
予期しない8進数の解釈が起こるため、攻撃者が IP アドレスをベースとした
アクセスコントロールをバイパスすることの可能な脆弱性があります。
(CVE-2021-29922)

Modularity name: rust-toolset
Stream name: rhel8

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2021-29922
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rust-toolset-1.54.0-1.module+el8+1353+3d5a7d8e.src.rpm
    MD5: dc1a527251ed967aa154b0f2108fd654
    SHA-256: db83a50f3a97cc616e1f9472988f5b66820e435ba1131cb3d1ec0e20d304a057
    Size: 11.40 kB
  2. rust-1.54.0-2.module+el8+1353+3d5a7d8e.src.rpm
    MD5: 97b52b4e38a5557af4ea63fa69c0ab64
    SHA-256: 64b6c0f1e2ee99cf7abab5f05f6273a13a54fe0f6f2a8e6fdd0c96ea995553ca
    Size: 110.96 MB

Asianux Server 8 for x86_64
  1. rust-toolset-1.54.0-1.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: f94f2ef3998d8f8f17e7b75547cda153
    SHA-256: cc911b304851f52a06802e08ae503f54562503d0f0e671a92bbbb9de767401ff
    Size: 11.10 kB
  2. cargo-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: cb7cd8632adc910dff049c3aaf93470a
    SHA-256: 0352a2b26924fa9eb99b9c9e03eead2d973436aeda462feb7da2602ae316a070
    Size: 4.18 MB
  3. cargo-doc-1.54.0-2.module+el8+1353+3d5a7d8e.noarch.rpm
    MD5: d81097b8461bcb7c36d6d66b2f53639c
    SHA-256: 096b38b85f2f8f8c64e559e2222c6d40e812f0c6343a2573c2749706efcf7ec1
    Size: 11.31 kB
  4. clippy-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: eaca7c3f6db637225ddf619ac5567623
    SHA-256: 3d7cf2f2c2e327991f60a8ed4b429d3de7a7cb55089f6744e0efe8612f07c453
    Size: 1.96 MB
  5. rls-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: c952623083b8d3b254d641aa85d8ce6e
    SHA-256: 0636e4eb97dbd7b193c27edfb153444c2a4519ec6dfb6768f923f10709066d35
    Size: 7.54 MB
  6. rust-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: 07cdcc9576350e2ec66ed6247923f132
    SHA-256: a043365d52d850a4fc9d1b03d5f66a2ece59d371216b3b50f3ad4813353888d4
    Size: 24.84 MB
  7. rust-analysis-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: b440d51a3b9a4ad12d209bc8d83fde8f
    SHA-256: 01db4ceb637d3b1f5ecf5fe31e9a8f4a21a8a81a23ec7f1090f25e903d1b4932
    Size: 3.18 MB
  8. rust-debugger-common-1.54.0-2.module+el8+1353+3d5a7d8e.noarch.rpm
    MD5: fa78664c824d63e7bd10a0f2680181a8
    SHA-256: 0ce34e76760d4d6f5961f78367c0b8c4902cf5f673fccd807cf3f80cbad82a05
    Size: 12.52 kB
  9. rust-debugsource-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: fc66488144e2142475b3b14b19d5fc55
    SHA-256: f380d4f4e0eae91c5822dabbee4e04e801048c39298aa5de070e67e8cda9310b
    Size: 11.57 MB
  10. rust-doc-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: 82ae2a46ed4c288a1118aba8b15ec4a3
    SHA-256: da3319672b98f7e6d9c3c091fac7a1773d221a1188cb31d87eb369d17323ddc6
    Size: 31.23 MB
  11. rust-gdb-1.54.0-2.module+el8+1353+3d5a7d8e.noarch.rpm
    MD5: e4cffe75ed64bf9d44ab0c43da70e12b
    SHA-256: 234440cf6055477548fe68cb082f3202cdd692530384401c21b95b0df23e00d5
    Size: 15.92 kB
  12. rust-lldb-1.54.0-2.module+el8+1353+3d5a7d8e.noarch.rpm
    MD5: 42ac1c3e9f4023b6304d1e41b60ac335
    SHA-256: 117773b4aaf6b54522a6016ad1361299cb9bbeaacb0f944e20ff20bbc07a48f5
    Size: 17.54 kB
  13. rust-src-1.54.0-2.module+el8+1353+3d5a7d8e.noarch.rpm
    MD5: 4f2937f90e4b1f61d55a97e4495e8dbe
    SHA-256: d982e19c306f17f9672fc94438510650e6f323ebfd20a8eb2baaa9036a8bc1dd
    Size: 2.63 MB
  14. rust-std-static-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: 675f1f4f1c0ebcf067b75b6fbe5ede71
    SHA-256: a21647e566d4a446bc3df6063b63a1ff63718eb4897f812fc8fd6a214abf4ede
    Size: 21.91 MB
  15. rust-std-static-wasm32-unknown-unknown-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: b69860229cc924473c6fef4e1d064a7b
    SHA-256: c6c074ec4478b558b386fc11d7978f1de7f125f9d642885eb9bf861382c82577
    Size: 19.55 MB
  16. rustfmt-1.54.0-2.module+el8+1353+3d5a7d8e.x86_64.rpm
    MD5: 9bac3371b220c3e133394191f6e6cd14
    SHA-256: 919fc52fa0f79301985ca4d2da7336fd29da86f96e48ac9e5bbe1a66ba9fde95
    Size: 2.76 MB