Debian/rust-cargo: high 7.3
Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate arch
Action: Upgrade rust-cargo to 0.76.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.76.0-1 | - |
Fixed versions
| 0.76.0-1 |
Sources
- osv: DEBIAN-CVE-2023-38497#Debian:14/rust-cargo
- https://security-tracker.debian.org/tracker/CVE-2023-38497
published · modified · JSON