rpm package
almalinux/rust-analyzer
pkg:rpm/almalinux/rust-analyzer
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-53587 | Hig | 7.5 | < 1.92.0-2.el9_8 | 1.92.0-2.el9_8 | Aug 20, 2026 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_p | |
| CVE-2023-38497 | Hig | 7.9 | < 1.66.1-2.el9_2 | 1.66.1-2.el9_2 | Aug 4, 2023 | Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files write |
- affected < 1.92.0-2.el9_8fixed 1.92.0-2.el9_8
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_p
- affected < 1.66.1-2.el9_2fixed 1.66.1-2.el9_2
Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files write