LANGUAGES Signal 184

Announcing Rust 1.96.1

Rust Blog 1 month ago 1 min read ↗ Original

WHY IT MATTERS

The miscompilation fix means prior builds may have produced incorrect machine code, so projects should rebuild and re-verify behavior. The three libssh2 CVEs (CVE-2025-15661, CVE-2026-55199, CVE-2026-55200) make this a security-relevant update for anyone using Cargo's network functionality. The HTTP client fix improves reliability of dependency fetching in unstable network conditions.

Written by elseif from the cluster below · every claim links back to a source

The three things worth knowing

A MIR optimization miscompilation was fixed, meaning previous compilations could have generated incorrect code.

Three CVEs in libssh2, which is compiled into Cargo, were patched: CVE-2025-15661, CVE-2026-55199, and CVE-2026-55200.

Cargo's HTTP client now properly handles retries and timeouts that were previously missing.

THE CLUSTER

Same story, 1 feed.

ORDERED BY FIRST SEEN

Rust Blog Announcing Rust 1.96.1 1 month Open ↗