[CLSA-2026:1788535576] rust: Fix of CVE-2026-33056
Type:
security
Severity:
Moderate
Release date:
2026-09-04 15:26:27 UTC
Description:
- CVE-2026-33056: in the vendored tar crate, use symlink_metadata instead of metadata when deciding whether an existing path is a directory, so a symlink cannot redirect the subsequent chmod outside the extraction root (applied to all three vendored copies: tar 0.4.38, 0.4.42 and 0.4.43)
CVEs fixed:
Updated packages:
  • cargo-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:adb248ec584e6438ce65d48d4b1ff6ed73433cca246ed4dbf68a7f6c646db5ad
  • clippy-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:74ffb4966aeeb71469d51947371b02029c99e0768ea5a4365f637dcae8d2d214
  • rust-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:8ac72b8ccde8b41379a4576012c5815ffd36130abd6d532ef9e91980494a20f3
  • rust-analyzer-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:ce3304ff1f9c9ef9c46bf962830663b33ebe1c50156c44da8a0358a7956aebe2
  • rust-debugger-common-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:0434da91ba0f7551f71c8bce504558bec5a4f622b73be2629bee91a0aa9200e2
  • rust-doc-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:0b0107cf0e405bbf8e386ff5bcee78dc508ca424a78d1dbaa0c8b74a16009fe7
  • rust-gdb-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:b5bdc7ea5c3e0c32f6f98f70cd0f86303e624107d312e36b1831cbc92c2142eb
  • rust-lldb-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:77ada20a60dc3015ba5c3e71a5ce66be9bc009ed67a31e2b6f528f6c35ca4676
  • rust-src-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:e1ab8d2b79616af5b04819bc0ecb3a9bb7207dc961924d77695e23c7fbc086e7
  • rust-std-static-1.84.1-1.el9_6.tuxcare.els1.i686.rpm
    sha:232a4d47aefef6bf90ffa1ca423d6ef315529ef0c32dbc90f618d174df837327
  • rust-std-static-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:e001beb4070bb74b40111571f65097283eab3c1e3a544e6a1615b6481165929b
  • rust-std-static-wasm32-unknown-unknown-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:1a32abdd11d85050d015d9291553189a0f84dfa034201639cfe7ee1c0b692706
  • rust-std-static-wasm32-wasip1-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:c984330c719d6f65fafcf4c296499a7e8c381ebc1dddbac7c1c36fca4813ce35
  • rust-toolset-1.84.1-1.el9_6.tuxcare.els1.noarch.rpm
    sha:898f0d6e1ba48c5886db24045a64ced491a76917872de975df116f6590c3d401
  • rustfmt-1.84.1-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:2a06535b809bb9d636a77c8aca130b014cf0eb31a98c4e469a64d1f234211ce1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.