Back Linuxsecurity

Fedora 42 rust-components Urgent Service Interruption CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 29, 2026

Share: View original

Check ingredients of published Rust crates. Update Information : Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Check ingredients of published Rust crates.

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

* Mon Mar 23 2026 Benjamin A. Beasley - 0.2.2-3 - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Fedora Update Notification FEDORA-2026-1c54435571 2026-03-29 01:07:01.422661+00:00 Name : rust-ingredients Product : Fedora 42 Version : 0.2.2 Release : 3.fc42 URL : Summary : Check ingredients of published Rust crates Description : Check ingredients of published Rust crates.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1c54435571' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 Rust Components Vulnerability CVE-2026-33056 Addressed On March 20, 2026, CVE-2026-33056 was published, affecting Fedora 42's Rust components. The vulnerability relates to the rust-tar library, which is used in building and installing C-like libraries and checking ingredients of published Rust crates. Two updates were released on March 22 and March 23, 2026, by Benjamin A. Beasley, rebuilding the affected components with rust-tar version 0.4.45 to mitigate the vulnerability. The updates include rust-cargo-c version 0.10.19-2 and rust-ingredients version 0.2.2-3. Users are advised to apply these updates using the dnf package manager to ensure their systems are secure. The updates are critical for maintaining the integrity of Rust-based applications on Fedora 42. No active exploitation has been reported at this time, but users are encouraged to remain vigilant. 5 sources 46

Extracted Entities

CVEs (1)

CVE-2026-33056