rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref<Target = str> wraps the raw bytes with str::from_utf8_unchecked. OpenSSL does not enforce that the underlying IA5String is ASCII, so a certificate with non-UTF-8 bytes in its OCSP accessLocation causes safe Rust code to construct a &str that violates the UTF-8 invariant — resulting in undefined behavior. This vulnerability is fixed in 0.10.79.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-debuginfoUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cli-devel | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade clamd1.5-debuginfoUpgrade clamav1.5-freshclamUpgrade clamav1.5-develUpgrade clamav1.5-milterUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cliUpgrade clamav1.5-dataUpgrade clamav1.5-debuginfoUpgrade clamav1.5-debugsourceUpgrade clamav1.5-filesystemUpgrade clamav1.5-milter-debuginfoUpgrade clamav1.5-docUpgrade clamav1.5-freshclam-debuginfoUpgrade clamd1.5Upgrade aws-nitro-enclaves-cli-develUpgrade clamav1.5-libUpgrade clamav1.5-lib-debuginfoUpgrade clamav1.5 | Jun 23, 2026 | May 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub