-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2022-dc3bd1f656 2022-02-27 02:52:54.757108 --------------------------------------------------------------------------------
Name : llvm13 Product : Fedora EPEL 7 Version : 13.0.1 Release : 1.el7 URL : http://llvm.org Summary : The Low Level Virtual Machine Description : LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2022-21658, a TOCTOU race condition in `std::fs::remove_dir_all`. Privileged programs should be rebuilt if they use this function on paths that may be manipulated with lesser privileges. For more details, see the upstream [security advisory](https://blog.rust- lang.org/2022/01/20/cve-2022-21658.html). Additional features from 1.58.0: * Captured identifiers in format strings * More `#[must_use]` in the standard library * Stabilized APIs See the [blog post](https://blog.rust- lang.org/2022/01/13/Rust-1.58.0.html) and [release notes](https://github.com/rust- lang/rust/blob/master/RELEASES.md#version-1580-2022-01-13) for more details. -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 16 2022 Josh Stone jistone@redhat.com - 13.0.1-1 - 13.0.1 Release, ported to epel7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2041504 - CVE-2022-21658 rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed https://bugzilla.redhat.com/show_bug.cgi?id=2041504 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update llvm13' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org