TI-2023-19877 CVE-2023-38497 · GHSA-j3xp-wfr4-hx87
Cargo not respecting umask when extracting crate archives
Priority LOW 37
Cargo downloads the Rust project’s dependencies and compiles the project.
RHSA-2023:4635
rust-toolset:rhel8 security update
Released 2023-08-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cargo-1.66.1-2.module+el8.8.0+19613+f0bba33b.aarch64::rust-toolset:rhel8, cargo-1.66.1-2.module+el8.8.0+19613+f0bba33b.ppc64le::rust-toolset:rhel8, cargo-1.66.1-2.module+el8.8.0+19613+f0bba33b.s390x::rust-toolset:rhel8 +44