82 matches found
Important: rust-cargo-c
Issue Overview: gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious...
OPENSUSE-SU-2026:11741-1 cargo-c-0.10.25-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.25-1.1 package on the GA media of openSUSE Tumbleweed...
Important: rust-cargo-c
Issue Overview: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell...
Amazon Linux 2023 : cargo-c (ALAS2023-2026-2113)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2113 advisory. libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on a...
[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.24-2.fc43
Helper program to build and install c-like libraries...
[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44
Helper program to build and install c-like libraries...
Fedora 43 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce685f40fe)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce685f40fe advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...
Fedora 44 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-77528477c2)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-77528477c2 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...
Fedora 46 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce471fc0d3)
The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce471fc0d3 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...
Fedora 45 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-67365d8467)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-67365d8467 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...
Amazon Linux 2023 : cargo-c (ALAS2023-2026-2064)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2064 advisory. libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap...
cargo-c-0.10.23-2.1 on GA media (moderate)
cargo-c-0.10.23-2.1 on GA media Announcement ID: openSUSE-SU-2026:11513-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
PT-2026-76439
These are all security issues fixed in the cargo-c-0.10.23-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11513-1 cargo-c-0.10.23-2.1 on GA media
These are all security issues fixed in the cargo-c-0.10.23-2.1 package on the GA media of openSUSE Tumbleweed...
Important: rust-cargo-c
Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...
cargo-c-0.10.23-1.1 on GA media (moderate)
cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...
OPENSUSE-SU-2026:11210-1 cargo-c-0.10.23-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-3PV8-6F4R-FFG2 vulnerabilities
Vulnerabilities for packages: cleave, zizmor, wasmcloud, litmus, rustup, cargo-c, qdrant, deno, sccache, rye, wasm-pack, buck2...
