{"id":"CLSA-2026-1790157025","summary":"rust: Fix of CVE-2026-53587","details":"- CVE-2026-53587: bounds-check the capability buffer before the fixed-size\n  object-format= comparison in set_data, so a short pkt-line cannot cause a\n  heap out-of-bounds read (vendored libgit2 1.8.1; the vendored libgit2 1.3.0\n  copy has no object-format parsing and is unaffected)","modified":"2026-10-26T09:31:35.730288194Z","published":"2026-09-23T09:50:35Z","upstream":["CVE-2026-53587"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790157025.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53587"}],"affected":[{"package":{"name":"cargo","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/cargo?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"clippy","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/clippy?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-analyzer","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-analyzer?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-debugger-common","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-debugger-common?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-doc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-doc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-gdb","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-gdb?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-lldb","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-lldb?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-src","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-src?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-std-static","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-std-static?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-std-static-wasm32-unknown-unknown","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-std-static-wasm32-unknown-unknown?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-std-static-wasm32-wasip1","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-std-static-wasm32-wasip1?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rust-toolset","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rust-toolset?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}},{"package":{"name":"rustfmt","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/rustfmt?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790157025.json"}}],"schema_version":"1.9.0"}