Read the docs
Red Hat Security Advisory

RHSA-2026:42923

Red Hat Hardened Images RPMs Security Update

Released 2026-07-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 2 records

Priority LOW 29

Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry.

CVSS 4.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00294 Published 2026-05-25 Partial fix · 1.96.0, 0.97.0 CWE-61