75 matches found
cargo-audit-0.20.0~git66.972ac93-3.1 on GA media (moderate)
cargo-audit-0.20.0git66.972ac93-3.1 on GA media Announcement ID: openSUSE-SU-2024:14363-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7...
OPENSUSE-SU-2024:14363-1 cargo-audit-0.20.0~git66.972ac93-3.1 on GA media
These are all security issues fixed in the cargo-audit-0.20.0git66.972ac93-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14224-1 cargo-audit-advisory-db-20240730-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20240730-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11920-1 cargo-audit-0.16.0~git0.625c965-3.1 on GA media
These are all security issues fixed in the cargo-audit-0.16.0git0.625c965-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10673-1 cargo-audit-advisory-db-20210802-1.2 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20210802-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11708-1 cargo-audit-advisory-db-20220105-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20220105-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12009-1 cargo-audit-advisory-db-20220420-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20220420-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13304-1 cargo-audit-advisory-db-20231007-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20231007-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13542-1 cargo-audit-advisory-db-20231219-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20231219-1.1 package on the GA media of openSUSE Tumbleweed...
rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency
Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the ed25519-dalek crate, which is a dependency of the rusty-paseto crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of ed25519-dalek prior to v2.0. These versions expose an unsafe AP...
GHSA-J57R-4QW6-58R3 rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency
Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the ed25519-dalek crate, which is a dependency of the rusty-paseto crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of ed25519-dalek prior to v2.0. These versions expose an unsafe AP...
GHSA-F2WX-XJFW-XJV6 topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
Summary https://github.com/advisories/GHSA-mc8h-8q98-g5hr https://github.com/XAMPPRocky/removedirall/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead tempfile v0.4.26 ships with affected removedirall v0.5.3 and so blocks my deployment of v12 to openSUSE distribution because it imposes a clean carg...
RUSTSEC-2020-0051 Obsolete versions of the `rustsec` crate do not support the new V3 advisory format
If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...
Obsolete versions of the `rustsec` crate do not support the new V3 advisory format
If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...
