104 matches found
Important: rust-cargo-c
Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.97.1-2.hum1 aarch64, x8664 clippy-1.97.1-2.hum1 aarch64, x8664 rust-1.97.1-2.hum1 aarch64, x8664 rust-analyzer-1.97.1-2.hum1 aarch64, x8664 rust-debugger-common-1.97.1-2.hum1 noarch...
[SECURITY] Fedora 43 Update: rust-cargo-rpmstatus-0.2.5-2.fc43
Cargo-tree for RPM packaging...
[SECURITY] Fedora 44 Update: rust-cargo-rpmstatus-0.2.5-2.fc44
Cargo-tree for RPM packaging...
coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35353 via uu_mkdir (>=0.0.14, <=0.0.16)
uumkdir CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35353 Source advisory: OSV:GHSA-MJ6P-44CH-CQ69...
crypt_guard (0.1.4), env_encryption_tool (0.9.17) +3 more potentially affected by unknown CVE via pqcrypto-classicmceliece (>=0.1.7, <=0.2.1)
pqcrypto-classicmceliece CARGO version =0.1.7, =0.12.2, =0.18.1 - pqcrypto-compat 0.1.0 - qfe 0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0167...
crypt_guard (0.1.4), env_encryption_tool (0.9.17) +7 more potentially affected by unknown CVE via pqcrypto (>=0.11.1, <=0.18.1)
pqcrypto CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.23.0, =0.23.0, =12.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0164...
nimiq-account (0.1.0), nimiq-accounts (0.1.0) +15 more potentially affected by CVE-2026-46539 via nimiq-primitives (0.1.0)
nimiq-primitives CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-primitives and may be impacted: - nimiq-account 0.1.0 - nimiq-accounts 0.1.0 - nimiq-block 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 -...
libcrux-aead (>=0.0.4-pre.1, <=0.0.7) potentially affected by unknown CVE via libcrux-chacha20poly1305 (>=0.0.4, <=0.0.7-rc.1)
libcrux-chacha20poly1305 CARGO version =0.0.4, =0.0.4-pre.1, =0.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-HC3C-63HC-2R9F...
[SECURITY] Fedora 43 Update: rust-cargo-vendor-filterer-0.5.18-5.fc43
cargo vendor, but with filtering for platforms and more...
Fedora 45 : helix / rust-asyncgit / rust-cargo / rust-cargo-deny / rust-dua-cli / etc (2026-a843eb2666)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a843eb2666 advisory. Update gix to version 0.83 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Ubuntu: Security Advisory (USN-8139-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-8139-1 rust-cargo-c vulnerability
It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...
[SECURITY] Fedora 42 Update: rust-cargo-vendor-filterer-0.5.18-4.fc42
cargo vendor, but with filtering for platforms and more...
[SECURITY] Fedora 42 Update: rust-cargo-rpmstatus-0.2.4-3.fc42
Cargo-tree for RPM packaging...
[SECURITY] Fedora 43 Update: rust-cargo-vendor-filterer-0.5.18-4.fc43
cargo vendor, but with filtering for platforms and more...
Fedora: Security Advisory (FEDORA-2026-433d51e09b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2026-1a04e4e1ed)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2026-f0710d7a56)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...