Debian/rust-openssl: critical 9.1
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A pass
Action: Upgrade rust-openssl to 0.10.78-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.78-1 | - |
Fixed versions
| 0.10.78-1 |
Sources
- osv: DEBIAN-CVE-2026-41677#Debian:14/rust-openssl
- https://security-tracker.debian.org/tracker/CVE-2026-41677
published · modified · JSON