Back Linuxsecurity

Fedora 43 rust-cargo Information Disclosure CVE-2026-5222 2026

Linuxsecurity •LinuxSecurity Advisories • August 27, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

Package manager for Rust.

Update cargo-c to version 0.10.24 (plus dependency updates). Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util- terminal crates.

* Tue Aug 18 2026 Fabio Valentini - 0.98.0-1 - Update to version 0.98.0; Fixes RHBZ#2366645 * Tue Aug 18 2026 Fabio Valentini - 0.97.2-1 - Update to version 0.97.2

[ 1 ] Bug #2489768 - CVE-2026-5222 rust-cargo: rust-cargo: Information disclosure due to URL normalization flaw [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ce685f40fe' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Rust-Cargo Information Disclosure Vulnerabilities 2026 Multiple information disclosure vulnerabilities have been identified in Fedora's Rust-Cargo packages, primarily affecting versions 0.10.24 and earlier. The vulnerabilities, cataloged under CVE-2026-5222, arise from a URL normalization flaw that could potentially expose sensitive data. Affected systems include Fedora 43 and 44, with updates released to mitigate these risks. The vulnerabilities were disclosed on May 25, 2026, and have since been addressed with patches. Users are advised to update their systems using the 'dnf' package manager to the latest versions. The updates include various packages related to Rust-Cargo, which are critical for managing Rust dependencies. The advisory emphasizes the importance of applying these updates promptly to safeguard against potential exploitation. 23 sources 46

Extracted Entities

Fedora 43 rust-cargo Information Disclosure CVE-2026-5222 2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)