airgorah (>=0.1.0, <=0.3.0), aki-image-view-gtk (>=0.2.9, <=0.2.10) +377 more potentially affected by unknown CVE via glib (>=0.15.12, <=0.19.9)

glib CARGO version =0.15.12, =0.1.0, =0.2.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.8.0, =0.2.0-beta-1, =0.3.2 - asyncuigtk 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0429...

Stories from the SOC Part 1: IDAT Loader to BruteRatel

Rapid7’s Managed Detection and Response MDR team continuously monitors our customers' environments, identifying emerging threats and developing new detections. In August 2023, Rapid7 identified a new malware loader named the IDAT Loader. Malware loaders are a type of malicious software designed t...

a0 (>=0.0.1, <=0.0.4), a3s-use-core (>=0.2.2, <=0.2.10) +1769 more potentially affected by unknown CVE via unsafe-libyaml (0.2.11)

unsafe-libyaml CARGO version 0.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on unsafe-libyaml and may be impacted: - a0 =0.0.1, =0.2.2, =0.0.1-alpha.4, =0.0.1-beta.4, =0.1.0, =0.10.0-dev0, =0.1.0, =0.1.0, =0.0.6, =0.0.1, =0.0.2, =0.0.2, =0.1.0,...

PT-2024-42043

The repository was archived by its owner on 2024-03-25 and is read-only. The last release is 0.2.11 March 2024. unsafe-libyaml is a machine translation of libyaml's C code into unsafe Rust c2rust. Bugs found in it will not be fixed upstream. It is used by serde yaml itself deprecated and by forks...

Fedora: Security Advisory (FEDORA-2024-1f5908a311)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-routinator (FEDORA-2024-28a151028a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-d20ff4a09b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-routinator-0.13.2-1.fc40

An RPKI relying party software...

CVE-2024-28101

The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions 0.9.5 until 1.40.2 are subject to a Denial-of-Service DoS type vulnerability. When receiving compressed HTTP payloads, affected versions of the Router evaluate the...

Important: rust

Issue Overview: RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Affected Packages: rust Issue Correction: Run dnf update rust --releasever 2023.4.20240319 or dnf update --advisory...

Important: rust

Issue Overview: RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Affected Packages: rust Issue Correction: Run dnf update rust --releasever 2023.4.20240319 to update your system. New...

Important: rust

Issue Overview: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitrevparsesingle can cause the function to enter an infinite loop, potentially...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2024-574)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-574 advisory. RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Tenable has extracted the preceding...

RUSTSEC-2024-0320 yaml-rust is unmaintained.

The maintainer seems unreachable. Many issues and pull requests have been submitted over the years without any response. Alternatives Consider switching to the actively maintained yaml-rust2 fork of the original project: - yaml-rust2 - yaml-rust2 @ crates.io...

aa2 (>=0.9.0, <=0.9.1), abridge (>=1.0.0, <=1.1.6) +2189 more potentially affected by unknown CVE via yaml-rust (>=0.2.2, <=0.4.5)

yaml-rust CARGO version =0.2.2, =0.9.0, =1.0.0, =0.1.13, =0.0.9, =0.0.1, =0.1.0, =0.2.2, =0.2.2, =0.1.3, =0.1.5, =0.1.0, =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0320...

PT-2024-40905 · Yaml-Rust · Yaml-Rust

Name of the Vulnerable Software and Affected Versions: yaml-rust affected versions not specified Description: The maintainer of yaml-rust seems unreachable, with many issues and pull requests submitted over the years without any response. Recommendations: Consider switching to the actively...

CVE-2023-45853 affecting package rust for versions less than 1.75.0-1

CVE-2023-45853 affecting package rust for versions less than 1.75.0-1. A patched version of the package is available...

CVE-2023-45853 affecting package rust for versions less than 1.75.0-1

CVE-2023-45853 affecting package rust for versions less than 1.75.0-1. A patched version of the package is available...

CVE-2023-3817 affecting package rust for versions less than 1.68.2-5

CVE-2023-3817 affecting package rust for versions less than 1.68.2-5. A patched version of the package is available...

Important: rust

Issue Overview: RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Affected Packages: rust Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section f...