VYPR

rpm package

suse/rust1.71&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5

pkg:rpm/suse/rust1.71&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5

Vulnerabilities (1)

  • CVE-2023-38497Aug 4, 2023
    affected < 1.71.1-150400.9.6.1fixed 1.71.1-150400.9.6.1

    Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files write