Rust 1.98.0
2026-08-21T08:51:36Z•a0bd885426719f6f9c2538f222ec4b458b6cec088478f2662000627a40b79c0b
CVE-2025-15661CVE-2026-33055CVE-2026-33056CVE-2026-55199CVE-2026-55200CargoLLVMMIRRustcompilerlibssh2miscompilationreleaserustcsecurity-fixsupply-chaintarvulnerability-remediation
What happened
Rust release feed covering versions 1.93.0 through 1.98.0. Security-relevant updates include Cargo/libssh2 patches for CVE-2025-15661, CVE-2026-55199, and CVE-2026-55200 in Rust 1.96.1; Cargo tar updates resolving CVE-2026-33055 and CVE-2026-33056 in Rust 1.94.1; and compiler fixes for LLVM and MIR miscompilation issues. Rust 1.98.0 also introduces stricter lints for invalid or suspicious runtime symbol definitions. Users of crates.io were explicitly stated not to be affected by CVE-2026-33055 and CVE-2026-33056.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rust_lang_rust_releases
- Record identifier
- a0bd885426719f6f9c2538f222ec4b458b6cec088478f2662000627a40b79c0b
- Enrichment time
- 2026-08-21T08:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.