tocsin

crates.io/rage: medium

rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

Action: Upgrade rage to 0.6.1 or later.

cargo update -p rage --precise 0.6.1
cargo update -p rage --precise 0.7.2
cargo update -p rage --precise 0.8.2
cargo update -p rage --precise 0.9.3
cargo update -p rage --precise 0.10.1
cargo update -p rage --precise 0.11.1

Affected

introducedfixedlast affected
0.6.00.6.1-
0.7.00.7.2-
0.8.00.8.2-
0.9.00.9.3-
0.10.00.10.1-
0.11.00.11.1-

Fixed versions

0.6.10.7.20.8.20.9.30.10.10.11.1

Sources

published · modified · JSON