Red Hat has issued a security advisory (RHSA-2026:7191) for Red Hat Hardened Images RPMs, including Rust toolchain components such as cargo, rust, rust-analyzer, and rustfmt. The advisory lists an update to version 1.97.1-2.hum1 for multiple RPMs across aarch64 and x86_64 architectures. Although the advisory references CVE-2025-11233 and CVE-2026-32285, it explicitly states that no fixes for CVEs are included in this update. The advisory provides no patch links or explicit remediation steps, and no known exploits in the wild are reported. The update is characterized as a bug fix and enhancement rather than a direct security fix.

The advisory does not confirm resolution of any specific vulnerabilities, nor does it report active exploitation. The severity is marked as high, but without CVSS scoring or detailed impact descriptions. Since no fixes for CVEs are included, the impact of the referenced vulnerabilities remains unmitigated by this update. Users relying on Red Hat Hardened Images and related Rust RPMs may remain exposed to the referenced vulnerabilities until official fixes are released.

The vendor advisory does not indicate that this update addresses the referenced CVEs or provides a security fix. No patch or remediation instructions are currently available. Users should monitor Red Hat's official security advisories and apply updates once official fixes for the referenced CVEs are released. No immediate action is required based on this advisory alone.