File _patchinfo of Package patchinfo.25974

<patchinfo incident="25974">
  <issue tracker="bnc" id="1203431">VUL-0: CVE-2022-36114: rust1.60,rust1.61,rust1.62,rust: cargo is vulnerable to zip bomb attacks</issue>
  <issue tracker="bnc" id="1203433">VUL-0: CVE-2022-36113: rust1.61,rust1.62,rust1.60,rust: cargo is vulnerable to symlink attacks</issue>
  <issue tracker="cve" id="2022-36113"/>
  <issue tracker="cve" id="2022-36114"/>
  <packager>firstyear</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for rust1.62</summary>
  <description>This update for rust1.62 fixes the following issues:

- CVE-2022-36113: Fixed symlink hijack vulnerability (bsc#1203433).
- CVE-2022-36114: Fixed zip bomb vulnerability (bsc#1203431).
</description>
</patchinfo>
openSUSE Build Service is sponsored by