[CLSA-2026:1783631013] Fix CVE(s): CVE-2026-33055
Type:
security
Severity:
Moderate
Release date:
2026-07-09 21:03:54 UTC
Description:
* SECURITY UPDATE: PAX size header smuggling in vendored tar crate - debian/patches/vendor/tar-rs-backport-fix-for-CVE-2026-33055.patch: unconditionally honor the PAX size extended header in vendor/tar-0.4.44/src/archive.rs so crafted archives cannot smuggle hidden entries past the parser - CVE-2026-33055
CVEs fixed:
Updated packages:
  • cargo1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:af0c1a2ac76a8bd6e9b6c8edefe2bc2d2c65bffe
  • cargo1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:e52536897b4fc841aa7442faf51664213eef374a
  • libstd-rust1.87-1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:6b64be94c26c28c781c255cd09c77637161c71ea
  • libstd-rust1.87-dev_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:8f8125591295741b8f57fb5367e56fc29c5a6d0f
  • rust1.87-all_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:8adca25749c063493ad59697786f382c8342148f
  • rust1.87-analyzer_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:4e1d30e31694b2af99715bd9d09e8ed3bf7fd76b
  • rust1.87-clippy_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:04f0628908e11aa1f2b686cf065a52ad032bbfe2
  • rust1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:52f72098696d3a1550e9c2e6e1a2ea238793e853
  • rust1.87-gdb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:ab223beeef985905bb4d7e8e115a9eb0099243b6
  • rust1.87-lldb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:2e6d2cd46c4901144fce0eaa7f3e14da718515da
  • rust1.87-llvm_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:4f9372bf1f8956e350ad083325c81efe2e1279ba
  • rust1.87-src_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:5b8fdc6decec090c3145bb0d69986e5e75978d64
  • rustc1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:464abb43c7cdf63d3098aaca3900ac6a5c98c8fb
  • rustfmt1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_amd64.deb
    sha:e0eea8aca4cde2d2dbb9c75aaf7309d9f5074f08
  • cargo1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:a356aad52c057962f6eeb9c796d93971c2aab18d
  • cargo1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:dfcfd4cbfbbb5880f16ecfe0c21e60249f11cc78
  • libstd-rust1.87-1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:e05509bd743518eedf08380a0b3da4db8c1c35eb
  • libstd-rust1.87-dev_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:83fb32c911cb2bd85970e89456f610702105ee7b
  • rust1.87-all_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:8adca25749c063493ad59697786f382c8342148f
  • rust1.87-analyzer_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:bd8802d73a63ef49dd95f0626e514967e0f29fec
  • rust1.87-clippy_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:cdff4d150d728730f6d28cb60e07e6f36c741e86
  • rust1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:7826fb8c5d86a15c70a07ca3df84638f210e0db1
  • rust1.87-gdb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:ab223beeef985905bb4d7e8e115a9eb0099243b6
  • rust1.87-lldb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:2e6d2cd46c4901144fce0eaa7f3e14da718515da
  • rust1.87-llvm_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:3ceb2c313989275176c9bb37b56bbae0f9f173bc
  • rust1.87-src_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_all.deb
    sha:5b8fdc6decec090c3145bb0d69986e5e75978d64
  • rustc1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:f45e8eefc0eadee75bfbfe1c16e35e032eb3c06e
  • rustfmt1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els5_arm64.deb
    sha:496188a2442696114a33be065d9d9db2d6ad5c48
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.