This Week in Rust 507 (this-week-in-rust.org)
Security advisory for Cargo (CVE-2023-38497) | Rust Blog (blog.rust-lang.org)
The Rust Security Response WG was notified that Cargo did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local user, another local user could exploit this to change the source code compiled and executed by the current user.
This Week in Rust 506 (this-week-in-rust.org)
This Week in Rust 504 (this-week-in-rust.org)
Rustc Trait System Refactor Initiative Update | Inside Rust Blog (blog.rust-lang.org)
This Week in Rust 503 (this-week-in-rust.org)
RFC3355 "Start working on a Rust specification" accepted (github.com)
The Foundation is planning to hire a technical editor / project manager for somewhere between 6 and 9 months.
This Week in Rust 502 (this-week-in-rust.org)
GitHub org for Rust jobs (github.com)
Following the odyssey mentioned in https://lemmyrs.org/post/87787 and the discussion with users.rust-lang.org mods, I have concluded that the simplest and most sustainable way to solve this is a GitHub org where companies can post jobs and regular Rust developers on GitHub participate in moderation. GitHub provides different...
