airframe_recovery_bundle (>=1.0.0, <=1.0.2), cryptoballot (>=0.2.0, <=0.3.1) +9 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.5.0)

sharks CARGO version =0.3.3, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.2 - tsafe-collab 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-JP37-5QHW-MFFW...

airframe_recovery_bundle (>=1.0.0, <=1.0.2), cryptoballot (>=0.2.0, <=0.3.1) +9 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.5.0)

sharks CARGO version =0.3.3, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.2 - tsafe-collab 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0398...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys-cdylib (>=0.3.0, <=0.3.1) potentially affected by unknown CVE via libz-rs-sys (>=0.1.1, <=0.3.1)

libz-rs-sys CARGO version =0.1.1, =1.0.29, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

Fedora 41 : rust (2024-3534c44ef9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3534c44ef9 advisory. Automatic update for rust-1.77.2-1.fc41. Changelog Tue Apr 9 2024 Josh Stone - 1.77.2-1 - Update to 1.77.2; Fixes RHBZ2274248 CVE-2024-24576 Tenable has...

Fedora 41 : python-cramjam / rust-async-compression / rust-brotli / etc (2024-2096f5d14c)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-2096f5d14c advisory. Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async-compression to 0.4.13. Patch dependent packages as needed to avoid compat...

Fedora 41 : rust-hyper-rustls / rust-reqwest / rust-rustls-native-certs / etc (2024-347164df1c)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-347164df1c advisory. - Update the hyper-rustls crate to version 0.27.3. - Update the reqwest crate to version 0.12.8. - Update the rustls-native-certs crate to version 0.8.0 and...

A Bootiful Podcast: engineer, CTO, teacher, and pilot Ken Sipe

Hi, Spring fans, JVM enjoyers, and cloud natives! Have I got a treat for you today! We're going to be talking to my longtime pal Ken Sipe. groovy java kotlin go rust spring jvm...

difftastic (>=0.29.1, <=0.52.0), difftastic-lib (>=0.0.1, <=0.0.2) +3 more potentially affected by unknown CVE via mimalloc (>=0.1.28, <=0.1.37)

mimalloc CARGO version =0.1.28, =0.29.1, =0.0.1, =0.17.0-alpha.4, =0.15.0, =0.16.0-alpha.3, =0.18.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G23H-7VF9-XC25...

Mageia: Security Advisory (MGASA-2024-0349)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated nspr, nss, firefox & rust packages fix security vulnerabilities

Permission leak via embed or object elements. CVE-2024-10458 Use-after-free in layout with accessibility. CVE-2024-10459 Confusing display of origin for external protocol handler prompt. CVE-2024-10460 XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response...

rust-toolset:rhel8 bug fix and enhancement update

An update is available for rust, module.rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc,...

SUSE CVE-2024-51990

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

CVE-2024-51990

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

CVE-2024-51990 Path traversal via crafted Git repositories in jj

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

CVE-2024-51990: Improper Limitation of a Pathname to a Restricted Directory

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

New Stealer Uses Invalid Cert To Compromise Systems

New Stealer Uses Invalid Cert To Compromise Systems By Mohinder Gill, Mallikarjun Wali and Sangram Mohapatro · November 07, 2024 A new Stealer has been making the rounds. Its name: Fickle. Fickle Stealer is a new Rust-based information stealer that spreads through various attack vectors, includin...

AZL-52444 CVE-2024-9681 affecting package rust for versions less than 1.72.0-10

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...

gpiocdev (>=0.4.3, <=0.7.0), gpiocdev-embedded-hal (0.1.0) +1 more potentially affected by CVE-2024-51756 via cap-std (3.0.0)

cap-std CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cap-std and may be impacted: - gpiocdev =0.4.3, =0.16.0, =0.16.3 Source cves: CVE-2024-51756 Source advisory: OSV:GHSA-HXF5-99XG-86HW...