From c683358a4a5f0d9f47bba0a79bdb4029eb2c5d79 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Mon, 29 Jun 2026 06:14:37 -0400 Subject: [PATCH 1/2] Add Cargo symlink unpack fix reference --- .../2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json b/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json index edd9153452431..ad7bfbdc9a13d 100644 --- a/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json +++ b/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/rust-lang/cargo/pull/17031" }, + { + "type": "WEB", + "url": "https://github.com/rust-lang/cargo/commit/312d5575ac924de000b3582ed0e7520dea216894" + }, { "type": "WEB", "url": "https://blog.rust-lang.org/2026/05/25/cve-2026-5223" From 9d14cd3a2d53193c6137e0394e26d542aa5cdd26 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Wed, 8 Jul 2026 02:32:12 -0400 Subject: [PATCH 2/2] Add Cargo symlink unpack backport PR reference --- .../2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json b/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json index ad7bfbdc9a13d..8d93da29d8e2d 100644 --- a/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json +++ b/advisories/github-reviewed/2026/06/GHSA-jq42-7mfv-hm57/GHSA-jq42-7mfv-hm57.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/rust-lang/cargo/pull/17031" }, + { + "type": "WEB", + "url": "https://github.com/rust-lang/cargo/pull/17030" + }, { "type": "WEB", "url": "https://github.com/rust-lang/cargo/commit/312d5575ac924de000b3582ed0e7520dea216894" @@ -74,4 +78,4 @@ "github_reviewed_at": "2026-06-26T21:48:43Z", "nvd_published_at": "2026-05-25T10:16:15Z" } -} \ No newline at end of file +}