cargo-c-0.10.23-1.1 on GA media (moderate)

cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...

OPENSUSE-SU-2026:11210-1 cargo-c-0.10.23-1.1 on GA media

These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-3PV8-6F4R-FFG2 vulnerabilities

Vulnerabilities for packages: rye, sccache, wasm-pack, zizmor, wasmcloud, cargo-c, buck2, cleave, rustup, deno, qdrant, litmus...

GHSA-9857-6MW7-FQ2M vulnerabilities

Vulnerabilities for packages: cargo-c, cargo-audit...

GHSA-3PV8-6F4R-FFG2 vulnerabilities

Vulnerabilities for packages: fnm, sccache, wasmcloud, litmus, buck2, rye, cleave, cargo-c, typst, qdrant, wasm-pack, rustup, zizmor, bootc, deno...

GHSA-9857-6MW7-FQ2M vulnerabilities

Vulnerabilities for packages: cargo-c, cargo-audit...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: rav1e, zellij, netavark, sccache, zola, wadm, berg, linkerd-network-validator, parseable, sqlx, ntpd-rs, vector, yazi, deno, uutils, hurl, uv, fish, zizmor, buck2, shadowsocks-rust, mountpoint-s3, mdbook, atuin, starship, yara-x, efs-utils, ruff, biome, nushell,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: kdash, zed, apollo-router, sentry-cli, buck2, rye, efs-utils, pgcat, ntpd-rs, vector, jujutsu, linkerd2-proxy, rustup, watchexec, yazi, worktrunk, chaos-tproxy, xh, virtiofsd, samply, wizer, parseable, py3-xet-core, typst, hurl, biome, valkey-ldap, garage, zizmor,...

Ubuntu 25.10 : cargo-c vulnerability (USN-8139-1)

The remote Ubuntu 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8139-1 advisory. It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processin...

Ubuntu: Security Advisory (USN-8139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-8139-1: cargo-c vulnerability

It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...

PT-2026-29964

It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...

Fedora: Security Advisory (FEDORA-2026-82783c3c1d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-7624cdcfb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: rust-cargo-c-0.10.19-2.fc42

Helper program to build and install c-like libraries...

[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.19-2.fc43

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.19-2.fc44

Helper program to build and install c-like libraries...

Fedora 44 : rust-cargo-c (2026-ad73d6fafe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ad73d6fafe advisory. Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : rust-cargo-c (2026-82783c3c1d)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-82783c3c1d advisory. Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : rust-cargo-c (2026-7624cdcfb6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7624cdcfb6 advisory. Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...