Important: rust-cargo-c

Issue Overview: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell...

[SECURITY] Fedora 43 Update: rust-cargo-0.98.0-1.fc43

Package manager for Rust...

[SECURITY] Fedora 43 Update: rust-cargo-util-terminal-0.1.0-1.fc43

Cargo's terminal rendering...

[SECURITY] Fedora 43 Update: rust-cargo-util-schemas-0.14.1-1.fc43

Deserialization schemas for Cargo...

[SECURITY] Fedora 43 Update: rust-cargo-util-0.2.30-1.fc43

Miscellaneous support code used by Cargo...

[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.24-2.fc43

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-cargo-util-terminal-0.1.0-1.fc44

Cargo's terminal rendering...

[SECURITY] Fedora 44 Update: rust-cargo-util-schemas-0.14.1-1.fc44

Deserialization schemas for Cargo...

[SECURITY] Fedora 44 Update: rust-cargo-util-0.2.30-1.fc44

Miscellaneous support code used by Cargo...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-cargo-0.98.0-1.fc44

Package manager for Rust...

[SECURITY] Fedora 44 Update: rust-cargo-credential-libsecret-0.5.8-1.fc44

A Cargo credential process that stores tokens with GNOME libsecret...

Fedora 46 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce471fc0d3)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce471fc0d3 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...

Important: rust-cargo-c

Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.97.1-2.hum1 aarch64, x8664 clippy-1.97.1-2.hum1 aarch64, x8664 rust-1.97.1-2.hum1 aarch64, x8664 rust-analyzer-1.97.1-2.hum1 aarch64, x8664 rust-debugger-common-1.97.1-2.hum1 noarch...

[SECURITY] Fedora 43 Update: rust-cargo-rpmstatus-0.2.5-2.fc43

Cargo-tree for RPM packaging...

[SECURITY] Fedora 44 Update: rust-cargo-rpmstatus-0.2.5-2.fc44

Cargo-tree for RPM packaging...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35353 via uu_mkdir (>=0.0.14, <=0.0.16)

uumkdir CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35353 Source advisory: OSV:GHSA-MJ6P-44CH-CQ69...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +3 more potentially affected by unknown CVE via pqcrypto-classicmceliece (>=0.1.7, <=0.2.1)

pqcrypto-classicmceliece CARGO version =0.1.7, =0.12.2, =0.18.1 - pqcrypto-compat 0.1.0 - qfe 0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0167...

crypt_guard (0.1.4), env_encryption_tool (0.9.17) +7 more potentially affected by unknown CVE via pqcrypto (>=0.11.1, <=0.18.1)

pqcrypto CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.23.0, =0.23.0, =12.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0164...