OPENSUSE-SU-2024:14359-1 cargo-c-0.10.3~git0.ee7d7ef-2.1 on GA media

These are all security issues fixed in the cargo-c-0.10.3git0.ee7d7ef-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora: Security Advisory (FEDORA-2023-6f419dc91b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-d88521bfc5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-53685bdcb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-M8RP-VV92-46C7 vulnerabilities

Vulnerabilities for packages: cargo-audit, starship, cargo-c...

GHSA-M8RP-VV92-46C7 vulnerabilities

Vulnerabilities for packages: cargo-c, starship, cargo-audit...

CVE-2024-45405 vulnerabilities

Vulnerabilities for packages: cargo-audit, starship, cargo-c...

CVE-2024-45405 vulnerabilities

Vulnerabilities for packages: cargo-c, starship, cargo-audit...

GHSA-V26R-4C9C-H3J6 vulnerabilities

Vulnerabilities for packages: cargo-audit, starship, cargo-c...

GHSA-V26R-4C9C-H3J6 vulnerabilities

Vulnerabilities for packages: cargo-c, starship, cargo-audit...

CVE-2024-45305 vulnerabilities

Vulnerabilities for packages: cargo-audit, starship, cargo-c...

CVE-2024-45305 vulnerabilities

Vulnerabilities for packages: cargo-c, starship, cargo-audit...

Malicious code in cargo-hub-ui-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8018 Malicious code in cargo-hub-ui-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8019 Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2024:14224-1 cargo-audit-advisory-db-20240730-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20240730-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Cargo package manager in the Rust programming language allows a hacker to execute arbitrary code.

The vulnerability of the Cargo package manager in the Rust programming language is related to the ignoring of umask when extracting archives created on UNIX-like systems. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20240729-09

Vulnerability in Cargo package manager of Rust programming language is related to ignoring umask when extracting archives created on UNIX-like systems. when retrieving archives created on UNIX-like systems. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute...

ROS-20240729-11

A vulnerability in the Cargo package manager of the Rust programming language involves the injection of arbitrary HTML after including it in a report generated by Cargo. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code...