[Medium] Patch rust for CVE-2026-47143

SPECS/rust/CVE-2026-47143.patch

@@ -0,0 +1,35 @@
+From aaa3b18afd6fc421f3ca387070b0b617a410a205 Mon Sep 17 00:00:00 2001
+From: SumitJenaHCL <v-sumitjena@microsoft.com>
+Date: Tue, 28 Jul 2026 04:21:22 +0530
+Subject: [PATCH] Patch CVE-2026-47143
+
+Upstream Patch Reference: https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f
+---
+ vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c b/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c
+index 22acab3..972d8e8 100644
+--- a/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c
++++ b/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c
+@@ -99,7 +99,7 @@ static int modRMRequired(OpcodeType type,
+ 	unsigned int index;
+
+ 	switch (type) {
+-		default: break;
++		default: return false;
+ 		case ONEBYTE:
+ 			decision = ONEBYTE_SYM;
+ 			indextable = index_x86DisassemblerOneByteOpcodes;
+@@ -163,7 +163,7 @@ static InstrUID decode(OpcodeType type,
+ 	static const struct OpcodeDecision emptyDecision = { 0 };
+
+ 	switch (type) {
+-		default: break;	// never reach
++		default: return 0;
+ 		case ONEBYTE:
+ 			// dec = &ONEBYTE_SYM.opcodeDecisions[insnContext].modRMDecisions[opcode];
+ 			index = index_x86DisassemblerOneByteOpcodes[insnContext];
+-- 
+2.45.4
+

SPECS/rust/rust.spec

@@ -9,7 +9,7 @@
 Summary:        Rust Programming Language
 Name:           rust
 Version:        1.90.0
-Release:        9%{?dist}
+Release:        10%{?dist}
 License:        (ASL 2.0 OR MIT) AND BSD AND CC-BY-3.0
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -60,6 +60,7 @@ Patch15:        CVE-2026-34743.patch
 Patch16:        CVE-2026-5222.patch
 Patch17:        CVE-2026-5223.patch
 Patch18:        CVE-2026-40034.patch
+Patch19:        CVE-2026-47143.patch
 
 BuildRequires:  binutils
 BuildRequires:  cmake
@@ -198,6 +199,9 @@ rm %{buildroot}%{_docdir}/docs/html/.lock
 %{_mandir}/man1/*
 
 %changelog
+* Tue Jul 28 2026 SumitJenaHCL <v-sumitjena@microsoft.com> - 1.90.0-10
+- Patch for CVE-2026-47143
+
 * Thu Jun 04 2026 BinduSri Adabala <v-badabala@microsoft.com> - 1.90.0-9
 - Add patch for CVE-2026-5222, CVE-2026-5223 & CVE-2026-40034
 
@@ -223,12 +227,12 @@ rm %{buildroot}%{_docdir}/docs/html/.lock
 * Mon Jan 19 2026 Kanishk Bansal <kanbansal@microsoft.com> - 1.90.0-2
 - Bump to rebuild with updated glibc
 
-* Tue Oct 28 2025 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 1.90.0-1
-- Upgrade to 1.90.0
-
 * Mon Nov 10 2025 Andrew Phelps <anphel@microsoft.com> - 1.86.0-10
 - Bump to rebuild with updated glibc
 
+* Tue Oct 28 2025 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 1.90.0-1
+- Upgrade to 1.90.0
+
 * Thu Oct 23 2025 Kanishk Bansal <kanbansal@microsoft.com> - 1.86.0-9
 - Bump to rebuild with updated glibc