Skip to content
OpenAdvisories
High RLSA-2026:67285 1 CVE

Important: rust security update

Published Sep 15, 2026 · Updated Sep 15, 2026

Summary

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator.

Security Fix(es):

* libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 rust 0:1.92.0-2.el9_8

Vulnerabilities 1

  • High 7.5
    CVE-2026-53587 Public exploit

    libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgi…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2520693
  • advisory
    https://access.redhat.com/errata/RHSA-2026:67285