File _patchinfo of Package patchinfo.9097

<patchinfo incident="9097">
  <issue tracker="bnc" id="1100691">VUL-0: CVE-2018-1000622 rust: rustdoc loads plugins from world writable directory allowing for arbitrary code execution</issue>
  <issue tracker="cve" id="2018-1000622"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>qkzhu</packager>
  <description>This update for rust fixes the following issues:

- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution
  This patch consists of requiring `--plugin-path` to be passed whenever `--plugin` is passed
  Note that rustdoc plugins will be removed entirely on 1.28.0 (bsc#1100691).
</description>
  <summary>Security update for rust</summary>
</patchinfo>