Skip to content
OpenAdvisories
Medium ALAS2023-2026-3380 1 CVE

Moderate: rust security update (Amazon Linux 2023)

Published Nov 9, 2026 · Updated Nov 9, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-82250: gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the client process during fetch operations without authentication.

Fixed packages 21

ReleasePackageFixed in
Amazon Linux · 2023 cargo 0:1.98.0-1.amzn2023
Amazon Linux · 2023 cargo-debuginfo 0:1.98.0-1.amzn2023
Amazon Linux · 2023 clippy 0:1.98.0-1.amzn2023
Amazon Linux · 2023 clippy-debuginfo 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-analyzer 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-analyzer-debuginfo 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-debugger-common 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-debuginfo 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-debugsource 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-doc 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-gdb 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-lldb 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-src 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-std-static 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-std-static-wasm32-unknown-unknown 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-std-static-wasm32-wasip1 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-toolset 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rust-toolset-srpm-macros 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rustfmt 0:1.98.0-1.amzn2023
Amazon Linux · 2023 rustfmt-debuginfo 0:1.98.0-1.amzn2023

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-82250.html