add cve-2022-21658

Author: pietroalbini

posts/2022-01-20-Rust-1.58.1.md

@@ -23,7 +23,13 @@ appropriate page on our website.
 
 ## What's in 1.58.1 stable
 
-Rust 1.58.1 addresse several regressions introduced in Rust 1.58.0:
+Rust 1.58.1 fixes a race condition in the `std::fs::remove_dir_all` standard
+library function. This security vulnerability is tracked as [CVE-2022-21658],
+and you can read more about it [on the advisory we published earlier
+today][advisory]. We recommend all users to update their toolchain immediately
+and rebuild their programs with the updated compiler.
+
+Rust 1.58.1 also addresse several regressions introduced in Rust 1.58.0:
 
 * The `non_send_fields_in_send_ty` Clippy lint was discovered to have too many
   false positives and has been moved to the experimental lints group (called
@@ -37,6 +43,8 @@ Rust 1.58.1 addresse several regressions introduced in Rust 1.58.0:
 You can find more detailed information on the specific regressions in the
 [release notes].
 
+[CVE-2022-21658]: https://www.cve.org/CVERecord?id=CVE-2022-21658
+[advisory]: https://blog.rust-lang.org/2022/01/20/cve-2022-21658.html
 [release notes]: https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1581-2022-01-20
 
 ### Contributors to 1.58.1