112 matches found
Important: rust-cargo-c
Issue Overview: gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious...
Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2023_4635)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234635 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 9 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2023_4634)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234634 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from the CIQ...
Important: rust-cargo-c
Issue Overview: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell...
[SECURITY] Fedora 43 Update: rust-cargo-util-0.2.30-1.fc43
Miscellaneous support code used by Cargo...
[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.24-2.fc43
Helper program to build and install c-like libraries...
[SECURITY] Fedora 43 Update: rust-cargo-util-schemas-0.14.1-1.fc43
Deserialization schemas for Cargo...
[SECURITY] Fedora 43 Update: rust-cargo-0.98.0-1.fc43
Package manager for Rust...
[SECURITY] Fedora 43 Update: rust-cargo-util-terminal-0.1.0-1.fc43
Cargo's terminal rendering...
[SECURITY] Fedora 44 Update: rust-cargo-util-schemas-0.14.1-1.fc44
Deserialization schemas for Cargo...
[SECURITY] Fedora 44 Update: rust-cargo-util-terminal-0.1.0-1.fc44
Cargo's terminal rendering...
[SECURITY] Fedora 44 Update: rust-cargo-0.98.0-1.fc44
Package manager for Rust...
[SECURITY] Fedora 44 Update: rust-cargo-credential-libsecret-0.5.8-1.fc44
A Cargo credential process that stores tokens with GNOME libsecret...
[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44
Helper program to build and install c-like libraries...
[SECURITY] Fedora 44 Update: rust-cargo-util-0.2.30-1.fc44
Miscellaneous support code used by Cargo...
Fedora 46 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce471fc0d3)
The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce471fc0d3 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...
Important: rust-cargo-c
Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.97.1-2.hum1 aarch64, x8664 clippy-1.97.1-2.hum1 aarch64, x8664 rust-1.97.1-2.hum1 aarch64, x8664 rust-analyzer-1.97.1-2.hum1 aarch64, x8664 rust-debugger-common-1.97.1-2.hum1 noarch...