Rustup 1.29.2 updates certificate dependencies to address CVE-2026-111943
The small release only bumps two TLS-related crates; rustup users can update with a single command.
The rustup team has released version 1.29.2. It is a small release that only updates the rustls-webpki and webpki-root-certs dependencies, in response to an issue with certain eMudhra intermediate certificates described in CVE-2026-111943 and RUSTSEC-2026-0382.
To update, close any programs that may be using rustup, such as an IDE, and run rustup self update. Rustup also updates itself automatically at the end of a normal rustup update run.
The team notes that anti-malware scanners can occasionally block a new rustup release or interfere with file copying, especially when rust-docs is installed. Such problems are expected to clear once the scanners learn about the new version.
Sources
- Announcing rustup 1.29.2official