[CLSA-2026:1790157025] rust: Fix of CVE-2026-53587
Type:
security
Severity:
Low
Release date:
2026-09-23 09:50:35 UTC
Description:
- CVE-2026-53587: bounds-check the capability buffer before the fixed-size object-format= comparison in set_data, so a short pkt-line cannot cause a heap out-of-bounds read (vendored libgit2 1.8.1; the vendored libgit2 1.3.0 copy has no object-format parsing and is unaffected)
CVEs fixed:
Updated packages:
  • cargo-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:7216e79b6fc72d2c086490406f8c0101dd0a4532085e4725e33153e724efda07
  • clippy-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:a21dfba02e3a04dc1a39be3ff0ac0d8d2eeedc67595c29792bea3f115744a2f6
  • rust-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:276d07fae747e8d76674f898eeb0163b03db8ce15f2b3bfc04b1e85f3c725cde
  • rust-analyzer-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:dc4ed0e9bb4ade2588e4ee859fd5296e3d03a5df346fb2cff8f978134e5c8e1a
  • rust-debugger-common-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:a927885fa58f98600fad042f8ec43a169053e380734af847590011f222262230
  • rust-doc-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:ed6ddd9bdb1fec194aa2d322d10714e42251227b65434ed958e38bce260282b8
  • rust-gdb-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:d9ad9c462c44bb7adb68b054fc10e1a6f5a98a2255b1683c7fe2bc80a6c87d29
  • rust-lldb-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:eeed9184fab73334ddea729729cf4c52fb19ccfb30d0573f9d8131deb0d48eb1
  • rust-src-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:4369c7d964384f8001381a0beabcc7250b35eaa29665981296c33f1d6806dfd2
  • rust-std-static-1.84.1-1.el9_6.tuxcare.els2.i686.rpm
    sha:7cffeafc7e8cb6f5035bdad60f46a71c018dc6e05f1f435cd6c1e7d0d53db860
  • rust-std-static-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:20b789a64bee9211795f9d09722a91d532e1ae5b2dc9bb8c22b67e5cf347b123
  • rust-std-static-wasm32-unknown-unknown-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:d8d3f39fd2a0a1c59c2f1ed618fd1ea3ba0eccf538a8327f28a4c0c31b4f574e
  • rust-std-static-wasm32-wasip1-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:6a37ce11a6b5bb16eec30f936b910595a57951b83bd656079b8c35bc583f33d6
  • rust-toolset-1.84.1-1.el9_6.tuxcare.els2.noarch.rpm
    sha:3f0f7bc665763cd8c3932a7b1f707379797ee0d6fc3b4bfe0a941ed6486b05d8
  • rustfmt-1.84.1-1.el9_6.tuxcare.els2.x86_64.rpm
    sha:371d9c59273edf2bbec1e63cb7e4bdb23e4ba3f8f49b6e414a0d9c2ceb7e4925
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.