<div class="container">
<h1>Recommended update for rust, rust1.68</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2023:2088-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1209839">#1209839</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Development Tools Module 15-SP4</li>
<li class="list-group-item">openSUSE Leap 15.4</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Manager Proxy 4.3</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.3</li>
<li class="list-group-item">SUSE Manager Server 4.3</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains one feature and has one recommended fix can now be installed.</p>
<h2>Description:</h2>
<p>This update for rust, rust1.68 fixes the following issues:</p>
<p>Changes in rust1.68:</p>
<ul>
<li>bsc#1209839 - replace leaked github keys in rust/cargo</li>
</ul>
<h1>Version 1.68.2 (2023-03-28)</h1>
<ul>
<li>Update the GitHub RSA host key bundled within Cargo
The key was rotated by GitHub (https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/)
on 2023-03-24 after the old one leaked.</li>
<li>Mark the old GitHub RSA host key as revoked](https://github.com/rust-lang/cargo/pull/11889).
This will prevent Cargo from accepting the leaked key even when trusted by
the system.</li>
<li>Add support for <code>@revoked</code> and a better error message for <code>@cert-authority</code> in Cargo's SSH host key verification</li>
<li>Fix miscompilation in produced Windows MSVC artifacts
This was introduced by enabling ThinLTO for the distributed rustc which led
to miscompilations in the resulting binary. Currently this is believed to be
limited to the -Zdylib-lto flag used for rustc compilation, rather than a
general bug in ThinLTO, so only rustc artifacts should be affected.</li>
<li>Fix --enable-local-rust builds</li>
<li>Treat <code>$prefix-clang</code> as <code>clang</code> in linker detection code</li>
<li>Fix panic in compiler code</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE Moderate update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.4
<br/>
<code>zypper in -t patch openSUSE-SLE-15.4-2023-2088=1</code>
</li>
<li class="list-group-item">
Development Tools Module 15-SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-2088=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cargo1.68-debuginfo-1.68.2-150400.9.10.2</li>
<li>rust1.68-debuginfo-1.68.2-150400.9.10.2</li>
<li>cargo1.68-1.68.2-150400.9.10.2</li>
</ul>
</li>
<li>
openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 nosrc)
<ul>
<li>rust1.68-1.68.2-150400.9.10.2</li>
</ul>
</li>
<li>
Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>cargo1.68-debuginfo-1.68.2-150400.9.10.2</li>
<li>rust1.68-debuginfo-1.68.2-150400.9.10.2</li>
<li>cargo1.68-1.68.2-150400.9.10.2</li>
</ul>
</li>
<li>
Development Tools Module 15-SP4 (aarch64 ppc64le s390x x86_64 nosrc)
<ul>
<li>rust1.68-1.68.2-150400.9.10.2</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1209839">https://bugzilla.suse.com/show_bug.cgi?id=1209839</a>
</li>
<li>
<a href="https://jira.suse.com/browse/SLE-18626">https://jira.suse.com/browse/SLE-18626</a>
</li>
</ul>
</div>