From a3d10b27f5ba9fa58f29e979ee2322940c2cac7b Mon Sep 17 00:00:00 2001 From: Mark Rousskov Date: Sun, 22 Mar 2026 08:36:58 -0400 Subject: [PATCH 1/3] 1.94.1 release --- content/1.94.1-release.md | 43 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 content/1.94.1-release.md diff --git a/content/1.94.1-release.md b/content/1.94.1-release.md new file mode 100644 index 000000000..cddf87e32 --- /dev/null +++ b/content/1.94.1-release.md @@ -0,0 +1,43 @@ ++++ +path = "2026/03/26/1.94.1-release" +title = "Announcing Rust 1.94.1" +authors = ["The Rust Release Team"] +aliases = ["releases/1.94.1"] + +[extra] +release = true ++++ + +The Rust team has published a new point release of Rust, 1.94.1. Rust is a +programming language that is empowering everyone to build reliable and +efficient software. + +If you have a previous version of Rust installed via rustup, getting Rust 1.94.1 is as easy as: + +``` +rustup update stable +``` + +If you don't have it already, you can [get `rustup`][rustup] from the appropriate page on our website. + +[rustup]: https://www.rust-lang.org/install.html + +## What's in 1.94.1 + +Rust 1.94.1 resolves three regressions that were introduced in the 1.94.0 release. + +* [Fix `std::thread::spawn` on wasm32-wasip1-threads](https://github.com/rust-lang/rust/pull/153634) +* [Remove new methods added to `std::os::windows::fs::OpenOptionsExt`](https://github.com/rust-lang/rust/pull/153491) + The new methods were unstable, but the trait itself is not sealed and so + cannot be extended with non-default methods. +* [[Clippy] Fix ICE in `match_same_arms`](https://github.com/rust-lang/rust-clippy/pull/16685) + +And a security fix: + +* [[Cargo] Update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769) + This resolves CVE-2026-33055 and CVE-2026-33056. Users of crates.io are not affected. + See [blog](https://blog.rust-lang.org/2026/03/21/cve-2026-33056/) for more details. + +### Contributors to 1.94.1 + +Many people came together to create Rust 1.94.1. We couldn't have done it without all of you. [Thanks!](https://thanks.rust-lang.org/rust/1.94.1/) From f369caa376f61322950cdd4d072f5f81306bd0c5 Mon Sep 17 00:00:00 2001 From: Mark Rousskov Date: Mon, 23 Mar 2026 07:48:48 -0400 Subject: [PATCH 2/3] Link to CVEs Co-authored-by: Emily Albini --- content/1.94.1-release.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/content/1.94.1-release.md b/content/1.94.1-release.md index cddf87e32..76609d368 100644 --- a/content/1.94.1-release.md +++ b/content/1.94.1-release.md @@ -35,9 +35,12 @@ Rust 1.94.1 resolves three regressions that were introduced in the 1.94.0 releas And a security fix: * [[Cargo] Update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769) - This resolves CVE-2026-33055 and CVE-2026-33056. Users of crates.io are not affected. + This resolves [CVE-2026-33055] and [CVE-2026-33056]. Users of crates.io are not affected. See [blog](https://blog.rust-lang.org/2026/03/21/cve-2026-33056/) for more details. +[CVE-2026-33055]: https://www.cve.org/CVERecord?id=CVE-2026-33055 +[CVE-2026-33056]: https://www.cve.org/CVERecord?id=CVE-2026-33056 + ### Contributors to 1.94.1 Many people came together to create Rust 1.94.1. We couldn't have done it without all of you. [Thanks!](https://thanks.rust-lang.org/rust/1.94.1/) From 7d97a5e3b122cbfaf03caf0355f598bb8645e94a Mon Sep 17 00:00:00 2001 From: Mark Rousskov Date: Wed, 25 Mar 2026 20:31:11 -0400 Subject: [PATCH 3/3] Update blog post with curl-sys downgrade --- content/1.94.1-release.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/content/1.94.1-release.md b/content/1.94.1-release.md index 76609d368..1599708df 100644 --- a/content/1.94.1-release.md +++ b/content/1.94.1-release.md @@ -30,11 +30,15 @@ Rust 1.94.1 resolves three regressions that were introduced in the 1.94.0 releas * [Remove new methods added to `std::os::windows::fs::OpenOptionsExt`](https://github.com/rust-lang/rust/pull/153491) The new methods were unstable, but the trait itself is not sealed and so cannot be extended with non-default methods. -* [[Clippy] Fix ICE in `match_same_arms`](https://github.com/rust-lang/rust-clippy/pull/16685) +* [Clippy: fix ICE in `match_same_arms`](https://github.com/rust-lang/rust-clippy/pull/16685) +* [Cargo: downgrade curl-sys to 0.4.83](https://github.com/rust-lang/cargo/pull/16787) + This fixes certificate validation error for some users on some versions of + FreeBSD. See [this issue](https://github.com/rust-lang/cargo/issues/16357) + for more details. And a security fix: -* [[Cargo] Update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769) +* [Cargo: Update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769) This resolves [CVE-2026-33055] and [CVE-2026-33056]. Users of crates.io are not affected. See [blog](https://blog.rust-lang.org/2026/03/21/cve-2026-33056/) for more details.