← Packages
rust-rustls-0.23
Rust crate "rustls"
- Current
- 0.23.37
- Candidate
- 0.23.46Stale
- Release line
- 0.23.x
- License
- Apache-2.0 OR ISC OR MIT
Advisory · 4
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKsOSV
- Summary
- `Debug` impls for client session values expose TLS secretsOSV
- Fixed events
- 0.23.46, 0.24.0-dev.2OSV
- Fixed events
- 0.23.46OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.101%FIRST
- Returned advisory
- GHSA-c8m5-c952-6cm4OSV
- Returned advisory
- RUSTSEC-2026-0346OSV
- Aliases
- GHSA-c8m5-c952-6cm4, RUSTSEC-2026-0346OSV
- KEV
- NoCISA
- Summary
- Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.OSV
- Summary
- Brotli certificate decompression can allocate up to 1 GiB before authenticationOSV
- Fixed events
- 0.23.46, 0.24.0-dev.2OSV
- Fixed events
- 0.23.46OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.165%FIRST
- Returned advisory
- GHSA-h2v8-394m-p7vvOSV
- Returned advisory
- RUSTSEC-2026-0348OSV
- Aliases
- GHSA-h2v8-394m-p7vv, RUSTSEC-2026-0348OSV
- KEV
- NoCISA
- Summary
- rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 shareOSV
- Summary
- Unauthenticated ServerHello can downgrade later connections to classical key exchangeOSV
- Fixed events
- 0.23.46, 0.24.0-dev.2OSV
- Fixed events
- 0.23.46OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.188%FIRST
- Returned advisory
- GHSA-w44r-93j7-qv28OSV
- Returned advisory
- RUSTSEC-2026-0349OSV
- Aliases
- GHSA-w44r-93j7-qv28, RUSTSEC-2026-0349OSV
- KEV
- NoCISA
- Summary
- Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesOSV
- Summary
- TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesOSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.156%FIRST
- Returned advisory
- GHSA-2mjx-qc3c-rqvcOSV
- Returned advisory
- RUSTSEC-2026-0285OSV
- Aliases
- GHSA-2mjx-qc3c-rqvc, RUSTSEC-2026-0285OSV
- KEV
- NoCISA
Description
Source code for takopackized Rust crate "rustls"
Changelog
PR · 3
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-12T05:22:32+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |