Rust Team Releases Version 1.94.1 to Fix Regressions and Security Vulnerabilities
The Rust programming language team has officially announced the release of version 1.94.1, a critical point update designed to address several regressions introduced in the previous 1.94.0 version. This release focuses on enhancing stability and security for developers building reliable software. Key technical fixes include resolving issues with std::thread::spawn on wasm32-wasip1-threads, removing unstable methods from std::os::windows::fs::OpenOptionsExt, and fixing an internal compiler error in Clippy. Additionally, the update downgrades curl-sys in Cargo to resolve certificate validation errors affecting some FreeBSD users. A significant security component of this release involves updating the tar dependency in Cargo to version 0.4.45, which mitigates two identified vulnerabilities, CVE-2026-33055 and CVE-2026-33056. The team clarifies that users of crates.io are not impacted by these security flaws. Developers using rustup can easily upgrade to this new version by executing the standard update command. This release underscores the Rust community's commitment to maintaining a robust and secure ecosystem for systems programming.
Wire timeline
Rust Team Releases Version 1.94.1 to Fix Regressions and Security Vulnerabilities
The Rust programming language team has officially announced the release of version 1.94.1, a critical point update designed to address several regressions introduced in the previous 1.94.0 version. This release focuses on enhancing stability and security for developers building reliable software. Key technical fixes include resolving issues with std::thread::spawn on wasm32-wasip1-threads, removing unstable methods from std::os::windows::fs::OpenOptionsExt, and fixing an internal compiler error in Clippy. Additionally, the update downgrades curl-sys in Cargo to resolve certificate validation errors affecting some FreeBSD users. A significant security component of this release involves updating the tar dependency in Cargo to version 0.4.45, which mitigates two identified vulnerabilities, CVE-2026-33055 and CVE-2026-33056. The team clarifies that users of crates.io are not impacted by these security flaws. Developers using rustup can easily upgrade to this new version by executing the standard update command. This release underscores the Rust community's commitment to maintaining a robust and secure ecosystem for systems programming.
Rust Blog