[CLSA-2026:1791334145] Fix CVE(s): CVE-2026-5222
Type:
security
Severity:
Low
Release date:
2026-10-07 00:49:19 UTC
Description:
* SECURITY UPDATE: Registry credential confusion in cargo URL canonicalization - debian/patches/upstream/CVE-2026-5222.patch: skip the GitHub lower-casing and .git-suffix stripping in CanonicalUrl::new for URLs whose scheme contains a '+', so a sparse+https registry URL ending in .git no longer canonicalizes to the same index as its non-.git twin and cannot be sent that registry's credentials - CVE-2026-5222
CVEs fixed:
Updated packages:
  • cargo1.85_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:cc167ee07c64a0fd58f67a7f222ed7c09fbd29c5
  • cargo1.85-doc_1.85.0+dfsg3-1+tuxcare.els8_all.deb
    sha:fa99c5deeb3456a260e56e53db67b5592fc38ab8
  • libstd-rust1.85-1.85_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:7c2dcebdd6388e1be8f2095ab948561e00ee6350
  • libstd-rust1.85-dev_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:193a5da1686749851438db804f9f2a5d11a393e6
  • rust1.85-all_1.85.0+dfsg3-1+tuxcare.els8_all.deb
    sha:166a291592fa33a215638c263ce0731d4d3a1239
  • rust1.85-analyzer_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:02977249859b96179c8131b6b0b1bfe54fa3ffd2
  • rust1.85-clippy_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:005d7330fa45ab61e0c260092c6760071748a9eb
  • rust1.85-doc_1.85.0+dfsg3-1+tuxcare.els8_all.deb
    sha:400e97f473faa364e71eeecbbcb7acb1011135ec
  • rust1.85-gdb_1.85.0+dfsg3-1+tuxcare.els8_all.deb
    sha:d0f4b2d296a2c262496f61acb47118b3a40995c6
  • rust1.85-lldb_1.85.0+dfsg3-1+tuxcare.els8_all.deb
    sha:1ceeb53e20b4b9b0896aa4dcb2a7972d26c9a5b6
  • rust1.85-llvm_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:a69b9353eb228a67931b4c075f5522d7e8767fd7
  • rust1.85-src_1.85.0+dfsg3-1+tuxcare.els8_all.deb
    sha:e11039a6610790479dbce57160fef43fe8f205a7
  • rustc1.85_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:0718b08abb8e489d3fdb603796cd5a51b2831a00
  • rustfmt1.85_1.85.0+dfsg3-1+tuxcare.els8_amd64.deb
    sha:b1ba5ca79cfcbfe2f215fa3a780f77b3e62a1efe
  • cargo1.85_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:d688443d1bff76e08534aaf0551ecc4014901b0b
  • libstd-rust1.85-1.85_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:42160609b67e652bcaf12986a867cc6026f041ec
  • libstd-rust1.85-dev_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:a63c1414ecc2462598c424e21e6ec22c7ddf307e
  • rust1.85-analyzer_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:d0b7160feb3c63be373874674ef9291696aea19f
  • rust1.85-clippy_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:2579decfeab83f8e7c0f4db721ee93897200e386
  • rust1.85-llvm_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:74a9cff788c31c5357a0eb2cc8fdc423e65c0a5a
  • rustc1.85_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:22a89a91ed37f003646c3de9052c2d15bebfad63
  • rustfmt1.85_1.85.0+dfsg3-1+tuxcare.els8_arm64.deb
    sha:eaefd0cc89166dfcde49ea9acb77351b60851f2d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.