OPENSUSE-SU-2024:11359-1 cargo-1.54.0-1.2 on GA media

These are all security issues fixed in the cargo-1.54.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13262-1 cargo1.72-1.72.1-1.1 on GA media

These are all security issues fixed in the cargo1.72-1.72.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12469-1 cargo-audit-advisory-db-20221102-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20221102-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13542-1 cargo-audit-advisory-db-20231219-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20231219-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11720-1 cargo-c-0.8.1~git0.cce1b08-2.1 on GA media

These are all security issues fixed in the cargo-c-0.8.1git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14009-1 cargo-audit-advisory-db-20240528-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20240528-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11769-1 cargo1.58-1.58.0-2.1 on GA media

These are all security issues fixed in the cargo1.58-1.58.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12009-1 cargo-audit-advisory-db-20220420-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20220420-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11767-1 cargo1.56-1.56.1-4.1 on GA media

These are all security issues fixed in the cargo1.56-1.56.1-4.1 package on the GA media of openSUSE Tumbleweed...

Fedora: Security Advisory for rust-cargo-insta (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-cargo-deny (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-cargo-readme (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2023-38497

Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local...

SUSE CVE-2023-40030

Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when including them in the report generated by cargo build --timings. A malicious package included as a dependency may inject nearly arbitrar...

[SECURITY] Fedora 39 Update: rust-cargo-readme-3.3.1-3.fc39

A cargo subcommand to generate README.md content from doc comments...

[SECURITY] Fedora 39 Update: rust-cargo-deny-0.14.21-2.fc39

Cargo plugin to help you manage large dependency graphs...

[SECURITY] Fedora 39 Update: rust-cargo-insta-1.38.0-2.fc39

A review tool for the insta snapshot testing library for Rust...

Important: Red Hat Security Advisory: rust security update

An update for rust is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

rust-cargo: cargo does not respect the umask when extracting dependencies

A flaw was found in the rust-cargo package. Cargo, as bundled with the Rust compiler, did not respect the umask when extracting dependency tarballs and caching the extraction for future builds. If a dependency contained files with 0777 permissions, another local user could edit the cache of the...

Important: Red Hat Security Advisory: rust-toolset:rhel8 security update

An update for the rust-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...