cargo-c-0.10.23-1.1 on GA media (moderate)

cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...

OPENSUSE-SU-2026:11210-1 cargo-c-0.10.23-1.1 on GA media

These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-3PV8-6F4R-FFG2 vulnerabilities

Vulnerabilities for packages: rustup, zizmor, litmus, deno, sccache, cargo-c, rye, wasmcloud, buck2, cleave, wasm-pack, qdrant...

GHSA-9857-6MW7-FQ2M vulnerabilities

Vulnerabilities for packages: cargo-audit, cargo-c...

GHSA-3PV8-6F4R-FFG2 vulnerabilities

Vulnerabilities for packages: deno, cleave, bootc, rye, buck2, sccache, typst, wasmcloud, zizmor, cargo-c, wasm-pack, litmus, fnm, qdrant, rustup...

GHSA-9857-6MW7-FQ2M vulnerabilities

Vulnerabilities for packages: cargo-audit, cargo-c...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: rustup, sdp-k8s-injector, uutils, mountpoint-s3, cargo-c, rye, buck2, biome, kdash, lychee, deno, cargo-audit, just, nushell, pixi, fish, zellij, berg, linkerd-network-validator, parseable, vector, zed, wasmcloud, yazi, py3-xet-core, samply, ntpd-rs, shadowsocks-rust...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: biome, wasmtime, efs-utils, sentry-cli, yara-x, zizmor, lychee, cargo-audit, valkey-ldap, berg, guestproxyagent, linkerd-network-validator, shadowsocks-rust, zed, netavark, nushell, ntpd-rs, jujutsu, samply, mise, pgcat, rav1e, watchexec, komodo, mdbook, fish, sccach...

Ubuntu 25.10 : cargo-c vulnerability (USN-8139-1)

The remote Ubuntu 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8139-1 advisory. It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processin...

Ubuntu: Security Advisory (USN-8139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-8139-1: cargo-c vulnerability

It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...

PT-2026-29964

It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...

Fedora: Security Advisory (FEDORA-2026-82783c3c1d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-7624cdcfb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: rust-cargo-c-0.10.19-2.fc42

Helper program to build and install c-like libraries...

[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.19-2.fc43

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.19-2.fc44

Helper program to build and install c-like libraries...

Fedora 44 : rust-cargo-c (2026-ad73d6fafe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ad73d6fafe advisory. Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : rust-cargo-c (2026-82783c3c1d)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-82783c3c1d advisory. Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : rust-cargo-c (2026-7624cdcfb6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7624cdcfb6 advisory. Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...