Back Linuxsecurity

Fedora 42 Rust Cargo C Critical CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 29, 2026

Helper program to build and install c-like libraries. Update Information : Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Helper program to build and install c-like libraries.

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

* Sun Mar 22 2026 Benjamin A. Beasley - 0.10.19-2 - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Fedora Update Notification FEDORA-2026-82783c3c1d 2026-03-29 01:07:01.422657+00:00 Name : rust-cargo-c Product : Fedora 42 Version : 0.10.19 Release : 2.fc42 URL : Summary : Helper program to build and install c-like libraries Description : Helper program to build and install c-like libraries.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-82783c3c1d' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 Rust Components Vulnerability CVE-2026-33056 Addressed On March 20, 2026, CVE-2026-33056 was published, affecting Fedora 42's Rust components. The vulnerability relates to the rust-tar library, which is used in building and installing C-like libraries and checking ingredients of published Rust crates. Two updates were released on March 22 and March 23, 2026, by Benjamin A. Beasley, rebuilding the affected components with rust-tar version 0.4.45 to mitigate the vulnerability. The updates include rust-cargo-c version 0.10.19-2 and rust-ingredients version 0.2.2-3. Users are advised to apply these updates using the dnf package manager to ensure their systems are secure. The updates are critical for maintaining the integrity of Rust-based applications on Fedora 42. No active exploitation has been reported at this time, but users are encouraged to remain vigilant. 5 sources 46

Extracted Entities

CVEs (1)

CVE-2026-33056