Debian/rust-openssl: high 8.1
rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks that out.len() + 8 <= in_.len(), but this
Action: Upgrade rust-openssl to 0.10.78-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.78-1 | - |
Fixed versions
| 0.10.78-1 |
Sources
- osv: DEBIAN-CVE-2026-41678#Debian:14/rust-openssl
- https://security-tracker.debian.org/tracker/CVE-2026-41678
published · modified · JSON