Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

SUSE: 2023:3092-1 Critical: bci/rust Privilege Escalation

suse
Calendar Grey September 22, 2023
Scroller Suse
Important security patch for SUSE Container bci/node, addressing privilege elevation vulnerabilities and implementing additional fixes.
The container bci/rust was updated

Summary

Advisory ID: SUSE-RU-2023:2978-1 Released: Wed Jul 26 09:56:57 2023 Summary: Recommended update for rust, rust1.71 Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:3251-1 Released: Tue Aug 8 22:15:14 2023 Summary: Security update for rust1.71 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory privilege escalation security patch SUSE bci/rust

References

References : 1213817 CVE-2023-38497

This update for rust and rust1.71 fixes the following issues:

This update ships rust1.71.

Version 1.71.0 (2023-07-13)

==========================

Language

--------

- Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`.

- Uplift `clippy::{drop,forget}_{ref,copy}` lints.

- Type inference is more conservative around constrained vars.

- Use fulfillment to check `Drop` impl compatibility

Compiler

--------

- Evaluate place expression in `PlaceMention`

making `let _ =` patterns more consistent with respect to the borrow checker.

- Add `--print deployment-target` flag for Apple targets.

- Stabilize `extern 'C-unwind'` and friends.

The existing `extern 'C'` etc. may change behavior for cross-language unwinding in a future release.

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3092-1
Container Tags : bci/rust:1.71 , bci/rust:1.71-2.2.1 , bci/rust:oldstable , bci/rust:oldstable-2.2.1
Container Release : 2.1
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory privilege escalation security patch SUSE bci/rust

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.