Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2023_4635)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234635 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2023_4634)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234634 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from the CIQ...

Important: rust-cargo-c

Issue Overview: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell...

[SECURITY] Fedora 43 Update: rust-cargo-0.98.0-1.fc43

Package manager for Rust...

[SECURITY] Fedora 43 Update: rust-cargo-util-terminal-0.1.0-1.fc43

Cargo's terminal rendering...

[SECURITY] Fedora 43 Update: rust-cargo-util-0.2.30-1.fc43

Miscellaneous support code used by Cargo...

[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.24-2.fc43

Helper program to build and install c-like libraries...

[SECURITY] Fedora 43 Update: rust-cargo-util-schemas-0.14.1-1.fc43

Deserialization schemas for Cargo...

[SECURITY] Fedora 44 Update: rust-cargo-util-terminal-0.1.0-1.fc44

Cargo's terminal rendering...

[SECURITY] Fedora 44 Update: rust-cargo-util-schemas-0.14.1-1.fc44

Deserialization schemas for Cargo...

[SECURITY] Fedora 44 Update: rust-cargo-0.98.0-1.fc44

Package manager for Rust...

[SECURITY] Fedora 44 Update: rust-cargo-credential-libsecret-0.5.8-1.fc44

A Cargo credential process that stores tokens with GNOME libsecret...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-cargo-util-0.2.30-1.fc44

Miscellaneous support code used by Cargo...

Fedora 46 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce471fc0d3)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce471fc0d3 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...

Important: rust-cargo-c

Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.97.1-2.hum1 aarch64, x8664 clippy-1.97.1-2.hum1 aarch64, x8664 rust-1.97.1-2.hum1 aarch64, x8664 rust-analyzer-1.97.1-2.hum1 aarch64, x8664 rust-debugger-common-1.97.1-2.hum1 noarch...

[SECURITY] Fedora 43 Update: rust-cargo-rpmstatus-0.2.5-2.fc43

Cargo-tree for RPM packaging...

[SECURITY] Fedora 44 Update: rust-cargo-rpmstatus-0.2.5-2.fc44

Cargo-tree for RPM packaging...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35353 via uu_mkdir (>=0.0.14, <=0.0.16)

uumkdir CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35353 Source advisory: OSV:GHSA-MJ6P-44CH-CQ69...