diff --git a/Dockerfile b/Dockerfile
index 82799c9..6c95ab7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -51,3 +51,4 @@ RUN ln -sf $(ls /usr/bin/gcc-*|grep -P ".*gcc-[[:digit:]]+") /usr/local/bin/gcc
 # smoke test that gcc works
 RUN gcc --version
 RUN ${CC} --version
+COPY rust-and-cargo-pin.check /etc/zypp/systemCheck.d/rust-and-cargo-pin.check
diff --git a/rust-and-cargo-pin.check b/rust-and-cargo-pin.check
new file mode 100644
index 0000000..87b8e1e
--- /dev/null
+++ b/rust-and-cargo-pin.check
@@ -0,0 +1,2 @@
+requires:cargo1.77
+requires:rust1.77
diff --git a/rust-stable-image.changes b/rust-stable-image.changes
index cb22c6b..c1648f3 100644
--- a/rust-stable-image.changes
+++ b/rust-stable-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Apr 11 06:57:38 UTC 2024 - Dan Čermák <dcermak@suse.com>
+
+- Pin rust & cargo version to prevent zypper up from upgrading to a newer rust
+
 -------------------------------------------------------------------
 Wed Apr 10 05:02:54 UTC 2024 - Dirk Mueller <dmueller@suse.com>