RUSTSEC-2022-0054 wee_alloc is Unmaintained

Two of the maintainers have indicated that the crate may not be maintained. The crate has open issues including memory leaks and may not be suitable for production use. It may be best to switch to the default Rust standard allocator on wasm32 targets. Last release seems to have been three years...

RHEL 8 : rust-toolset:rhel8 (RHSA-2022:1894)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1894 advisory. Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The followin...

Moderate: Red Hat Security Advisory: rust-toolset:rhel8 security, bug fix, and enhancement update

An update for the rust-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

a2 (>=0.2.0, <=0.3.6), abc (>=0.1.0, <=0.2.3) +502 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.6.0)

crossbeam CARGO version =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0020...

a2 (>=0.3.6, <=0.5.0-alpha.7), abci-rs (0.2.0) +937 more potentially affected by unknown CVE via crossbeam-channel (>=0.1.3, <=0.3.9)

crossbeam-channel CARGO version =0.1.3, =0.3.6, =0.4.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0019...

malicious crate `rustdecimal`

The Rust Security Response WG and the crates.io team were notified1 on 2022-05-02 of the existence of the malicious crate rustdecimal, which contained malware. The crate name was intentionally similar to the name of the popular rustdecimal2 crate, hoping that potential victims would misspell its...

Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust 1.58.0. BZ2002883 Security Fixes: rust: Race condition in removedirall leading to...

rust-toolset:rhel8 security, bug fix, and enhancement update

An update is available for rust-toolset, rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc...

ALSA-2022:1894 Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust 1.58.0. BZ2002883 Security Fixes: rust: Race condition in removedirall leading to...

RLSA-2022:1894 Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust 1.58.0. BZ2002883 Security Fixes: rust: Race condition in removedirall leading to...

CentOS 8 : rust-toolset:rhel8 (CESA-2022:1894)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1894 advisory. - rust: Race condition in removedirall leading to removal of files outside of the directory being removed CVE-2022-21658 Note that Nessus has not tested for thi...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1343 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1343 Source advisory: OSV:GHSA-MFM6-R9G2-Q4R7...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1473 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1473 Source advisory: OSV:GHSA-G323-FR93-4J3C...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1434 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1434 Source advisory: OSV:GHSA-638M-M8MH-7GW2...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1343 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1343 Source advisory: OSV:RUSTSEC-2022-0027...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1434 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1434 Source advisory: OSV:RUSTSEC-2022-0026...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1473 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1473 Source advisory: OSV:RUSTSEC-2022-0025...

FBI Warns of BlackCat Ransomware That Breached Over 60 Organisations Worldwide

The U.S. Federal Bureau of Investigation FBI is sounding the alarm on the BlackCat ransomware-as-a-service RaaS, which it said victimized at least 60 entities worldwide between as of March 2022 since its emergence last November. Also called ALPHV and Noberus, the malware is notable for being the...

acmev02 (0.1.0), adventure-rusoto-ecs (0.4.0) +405 more potentially affected by unknown CVE via rusoto_credential (>=0.41.1, <=0.48.0)

rusotocredential CARGO version =0.41.1, =0.3.5, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.3.0 - aws-instance 0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0071...

afire_compress (>=0.1.0, <=0.1.1-alpha) potentially affected by unknown CVE via afire (0.3.0)

afire CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on afire and may be impacted: - afirecompress =0.1.0, =0.1.1-alpha Source cves: unknown CVE Source advisory: OSV:GHSA-3227-R97M-8J95...