Rust 1.99.1
2026-10-25T08:51:39Z•77b13bd85b26d6b68acac352006ec9800c1827906db8cb12913a7c178b10137c
CVE-2025-15661CVE-2026-33055CVE-2026-33056CVE-2026-55199CVE-2026-55200CargoFFILLVMMIRRustcompiler-miscompilationlibssh2rustcsoftware-updatestarvtablevulnerability-remediation
What happened
Rust releases 1.94.1 through 1.99.1 include multiple compiler correctness fixes, including miscompilations involving FFI bool returns, vtable generation, LLVM optimization, and MIR optimization. Rust 1.96.1 also updates Cargo's libssh2 patches for CVE-2025-15661, CVE-2026-55199, and CVE-2026-55200. Rust 1.94.1 updates Cargo's tar dependency to address CVE-2026-33055 and CVE-2026-33056; crates.io users are stated to be unaffected. Organizations should prioritize upgrading affected toolchains, especially where compiler-generated binaries, FFI, Cargo networking, or archive processing are used.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rust_lang_rust_releases
- Record identifier
- 77b13bd85b26d6b68acac352006ec9800c1827906db8cb12913a7c178b10137c
- Enrichment time
- 2026-10-25T08:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.