CVE:CVE-2023-38497
CNNVD:CNNVD-202308-264
Cargo是The Rust Programming Language开源的一个 Rust 包管理器。
Cargo 0.72.2之前版本存在安全漏洞，该漏洞源于在类UNIX系统上，Cargo 在提取 crate 存档时没有考虑 umask 设置。
solution:Upgrade rust-lang cargo to a higher version than 0.72.2,and avoid the version (,0.72.2); Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38