https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:42:06 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba38324 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ztunnel-fips</p> <p>Package ztunnel-fips version 1.29.1-r0 fixes 8 vulnerabilities: ghsa-65p9-r9h6-22vj, ghsa-hfpc-8r3f-gw53, ghsa-vw5v-4f2q-w9xf, ghsa-394x-vwmw-crm3, ghsa-9f94-5g5w-gf6r...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ztunnel-fips</p> <p>Package ztunnel-fips version 1.29.1-r0 fixes 8 vulnerabilities: ghsa-65p9-r9h6-22vj, ghsa-hfpc-8r3f-gw53, ghsa-vw5v-4f2q-w9xf, ghsa-394x-vwmw-crm3, ghsa-9f94-5g5w-gf6r...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ba38324 https://cve.radiocsirt.org/vuln/euvd-2026-277395 EUVD-2026-277395 https://cve.radiocsirt.org/vuln/euvd-2026-277395 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4428 <p>A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks.</p> <p>To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.</p> <p>A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks.</p> <p>To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4428 https://cve.radiocsirt.org/vuln/rustsec-2026-0042 <p><strong>Affected:</strong> crates.io: aws-lc-fips-sys</p> <p>A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point (IDP) extensions.</p> <p>Customers of AWS services do not need to take action. `aws-lc-fips-sys` contains code from AWS-LC. Applications using `aws-lc-fips-sys` should upgrade to the most recent release of `aws-lc-fips-sys`.</p> <p>## Workarounds</p> <p>Applications can workaround this issue if they do not enable CRL checking (`X509_V_FLAG_CRL_CHECK`). Applications using complete (non-partitioned) CRLs without IDP extensions are also not affected.</p> <p>Otherwise, there is no workaround and applications using `aws-lc-fips-sys` should upgrade to the most recent releases of `aws-lc-fips-sys`.</p> <p><strong>Affected:</strong> crates.io: aws-lc-fips-sys</p> <p>A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point (IDP) extensions.</p> <p>Customers of AWS services do not need to take action. `aws-lc-fips-sys` contains code from AWS-LC. Applications using `aws-lc-fips-sys` should upgrade to the most recent release of `aws-lc-fips-sys`.</p> <p>## Workarounds</p> <p>Applications can workaround this issue if they do not enable CRL checking (`X509_V_FLAG_CRL_CHECK`). Applications using complete (non-partitioned) CRLs without IDP extensions are also not affected.</p> <p>Otherwise, there is no workaround and applications using `aws-lc-fips-sys` should upgrade to the most recent releases of `aws-lc-fips-sys`.</p> https://cve.radiocsirt.org/vuln/rustsec-2026-0042