Summary
Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator.
Security Fix(es):
* libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | cargo | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | clippy | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-analyzer | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-debugger-common | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-doc | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-gdb | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-lldb | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-src | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-std-static | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-std-static-aarch64-unknown-none-softfloat | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-std-static-wasm32-unknown-unknown | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-std-static-wasm32-wasip1 | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-std-static-x86_64-unknown-none | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-toolset | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rust-toolset-srpm-macros | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux · 10 | rustfmt | 1.92.0-2.el10_2.alma.1 |
Vulnerabilities 1
-
High 7.5CVE-2026-53587 Public exploit
libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgi…