[CLSA-2026:1783612426] Fix CVE(s): CVE-2026-33055, CVE-2026-33056
Type:
security
Severity:
Moderate
Release date:
2026-07-09 16:11:05 UTC
Description:
* SECURITY UPDATE: PAX size smuggling in vendored tar crate - debian/patches/CVE-2026-33055.patch: unconditionally honor the PAX extended-header size override in next_entry_raw so a PAX size cannot be used to hide a smuggled entry behind a smaller ustar header size - CVE-2026-33055
CVEs fixed:
Updated packages:
  • cargo1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:bad64b766ece2e9b3375b2fc13ae66df6d54f60a
  • cargo1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:f39f0e0c2f1a6a4daf2538d71260c9690046a830
  • libstd-rust1.89-1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:45d70a8a1884daefb85372d650836ec004549927
  • libstd-rust1.89-dev_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:9682048200e47e12a45bcedd4a303a93a1be6341
  • rust1.89-all_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:72f6673952b7ef1bd87a2b191a57421cba04cf45
  • rust1.89-analyzer_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:a0d72f3f094e12937512d95f80f8e3d295002cfc
  • rust1.89-clippy_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:34a152dd5f993294c83c50d0c494960bb3109622
  • rust1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:e3a61259e4c003e75d9e89e698e03489b4b3a92d
  • rust1.89-gdb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:3394e35b612880b031a90ad7f96dc011df1463a7
  • rust1.89-lldb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:a82fba6ca79a3d877f3213e32c668090564e9e8d
  • rust1.89-llvm_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:a5fcd18b80e5bf393aaf129be116fc50e523be8d
  • rust1.89-src_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:6862a50701615c974dd5cc1545efcb7e8ef1f88d
  • rustc1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:4ff37dd2fffce578f007b057c37c0c4bf8317add
  • rustfmt1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_amd64.deb
    sha:afd95ea77e6a96cb497efab2c6d8297e01af8b70
  • cargo1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:238de47fa929cb553e6eb233f3baa70f9172f722
  • cargo1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:f39f0e0c2f1a6a4daf2538d71260c9690046a830
  • libstd-rust1.89-1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:35070ca5e37f7cbdeb60145d78db6f347237ea14
  • libstd-rust1.89-dev_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:717ab7f2e7f9e477894d6c679edc774999daa0de
  • rust1.89-all_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:72f6673952b7ef1bd87a2b191a57421cba04cf45
  • rust1.89-analyzer_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:e8037635e2e29c77ff2864a1634ce449318f3533
  • rust1.89-clippy_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:b75a06caec2449a8f7b91289ccd6472610b0b1a8
  • rust1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:36d9be547a82b94d7fd0049e6e477ae63580bbba
  • rust1.89-gdb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:3394e35b612880b031a90ad7f96dc011df1463a7
  • rust1.89-lldb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:a82fba6ca79a3d877f3213e32c668090564e9e8d
  • rust1.89-llvm_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:a65de166b17fd52cda68ad373c7df4bd096ec339
  • rust1.89-src_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_all.deb
    sha:6862a50701615c974dd5cc1545efcb7e8ef1f88d
  • rustc1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:8b1f92b16ae3a2385cca8f140e32384872b46a6e
  • rustfmt1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els6_arm64.deb
    sha:5b1daa2554b711674525434ebf91dda378f27397
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.