diff --git a/Dockerfile b/Dockerfile
index e186b28..06a3a9c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -50,3 +50,4 @@ RUN ln -sf $(ls /usr/bin/gcc-*|grep -P ".*gcc-[[:digit:]]+") /usr/local/bin/gcc
 # smoke test that gcc works
 RUN gcc --version
 RUN ${CC} --version
+COPY rust-and-cargo-pin.check /etc/zypp/systemCheck.d/rust-and-cargo-pin.check
diff --git a/rust-and-cargo-pin.check b/rust-and-cargo-pin.check
new file mode 100644
index 0000000..4b517ac
--- /dev/null
+++ b/rust-and-cargo-pin.check
@@ -0,0 +1,2 @@
+requires:cargo1.76
+requires:rust1.76
diff --git a/rust-oldstable-image.changes b/rust-oldstable-image.changes
index c7dd83e..0ae0401 100644
--- a/rust-oldstable-image.changes
+++ b/rust-oldstable-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Apr 11 06:57:38 UTC 2024 - Dan Čermák <dcermak@suse.com>
+
+- Pin rust & cargo version to prevent zypper up from upgrading to a newer rust
+
 -------------------------------------------------------------------
 Wed Apr 10 05:02:54 UTC 2024 - Dirk Mueller <dmueller@suse.com>