● Covered by 1 source · 2 reportsMedium impact2 neutral
Rustup 1.29.2 Released, Addresses CVE-2026-111943 Security Vulnerability
Key points
- Rustup 1.29.2 released.
- Updates `rustls-webpki` and `webpki-root-certs` dependencies.
- Addresses CVE-2026-111943 security vulnerability.
- Rustup 1.29.3 was released.
- Fixed "Illegal instruction" error on x86_64 CPUs without SSE4.1.
- Fixed "lock() not supported" error on Solaris.
Rustup 1.29.2 Released
The rustup team announced the release of rustup version 1.29.2. Rustup is the recommended tool for installing the Rust programming language.
Security Fixes Included
This release primarily updates the `rustls-webpki` and `webpki-root-certs` dependencies. These updates are specifically to address the eMudhra intermediate certificates issue, which is described in CVE-2026-111943 and RUSTSEC-2026-0382.
Updating Rustup
Users with a previous version of rustup can update by running `rustup self update` or by performing a normal toolchain update with `rustup update`. Rustup will automatically update itself during a toolchain update.
Potential Anti-Malware Conflicts
The release notes mention that anti-malware scanners might temporarily block rustup or interfere with file operations, particularly when installing `rust-docs` due to its many small files. These issues are expected to resolve automatically as scanners update to recognize the new rustup release.
Updates
- Rustup 1.29.3 was released.
- Fixed "Illegal instruction" error on x86_64 CPUs without SSE4.1.
- Fixed "lock() not supported" error on Solaris.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
The Rustup team released version 1.29.3, a patch update addressing an "Illegal instruction" error on certain x86_64 CPUs without SSE4.1 and a "lock() not supported" error on Solaris. This release resolves minor regressions, improving compatibility for Rust installations on affected systems.
Rustup 1.29.2 has been released, updating `rustls-webpki` and `webpki-root-certs` dependencies. This update resolves the eMudhra intermediate certificates issue detailed in CVE-2026-111943.