rustls disclosed five TLS 1.3 CVEs: key exchange downgrade (eats post-quantum), record-boundary alignment, ECH info leak, 1GiB Brotli DoS, Debug-format key leak. Five bugs, one root cause. TLS 1.3 is not done as a protocol.
trinity.sh/posts/2026-11-08-rustls-five-tls-bugs/
trinity.sh/posts/2026-11-08-rustls-five-tls-bugs/
November 8, 2026 at 11:00 PM
rustls disclosed five TLS 1.3 CVEs: key exchange downgrade (eats post-quantum), record-boundary alignment, ECH info leak, 1GiB Brotli DoS, Debug-format key leak. Five bugs, one root cause. TLS 1.3 is not done as a protocol.
trinity.sh/posts/2026-11-08-rustls-five-tls-bugs/
trinity.sh/posts/2026-11-08-rustls-five-tls-bugs/
Rust TLS devs surfaced detection of the leaked #eMudhra intermediates so we surfaced it all the way up to the customer's SIEM, in case their #egress firewall was misconfigured or diverted with spoofing. It's 'CertDistrusted' in the rustls-webpki library: docs.rs/rustls-webpk...
November 11, 2026 at 3:57 PM
Rust TLS devs surfaced detection of the leaked #eMudhra intermediates so we surfaced it all the way up to the customer's SIEM, in case their #egress firewall was misconfigured or diverted with spoofing. It's 'CertDistrusted' in the rustls-webpki library: docs.rs/rustls-webpk...
🚨 EUVD-2026-119369
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119369
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119369
#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:05 AM
🚨 EUVD-2026-119369
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119369
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119369
#cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-119371
📊 4.6/10
🏢 rustls
📝 rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the cli...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119371
#cybersecurity #infosec #cve #euvd
📊 4.6/10
🏢 rustls
📝 rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the cli...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119371
#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:05 AM
🚨 EUVD-2026-119371
📊 4.6/10
🏢 rustls
📝 rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the cli...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119371
#cybersecurity #infosec #cve #euvd
📊 4.6/10
🏢 rustls
📝 rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the cli...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119371
#cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-119370
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group reco...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119370
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group reco...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119370
#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:05 AM
🚨 EUVD-2026-119370
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group reco...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119370
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 rustls
📝 rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group reco...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119370
#cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-119368
📊 4.1/10
🏢 rustls
📝 Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client sess...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119368
#cybersecurity #infosec #cve #euvd
📊 4.1/10
🏢 rustls
📝 Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client sess...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119368
#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:05 AM
🚨 EUVD-2026-119368
📊 4.1/10
🏢 rustls
📝 Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client sess...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119368
#cybersecurity #infosec #cve #euvd
📊 4.1/10
🏢 rustls
📝 Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client sess...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119368
#cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-119372
📊 6.9/10
🏢 rustls
📝 Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same r...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119372
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 rustls
📝 Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same r...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119372
#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:05 AM
🚨 EUVD-2026-119372
📊 6.9/10
🏢 rustls
📝 Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same r...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119372
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 rustls
📝 Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same r...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119372
#cybersecurity #infosec #cve #euvd
sigh it might be time to evaluate rustls
November 5, 2026 at 3:29 PM
sigh it might be time to evaluate rustls
Ubuntu、curlに証明書失効チェックを導入 次はOpenSSLに対応へ
Ubuntu 26.10に同梱されるcurlに、証明書失効チェック機能が組み込まれました。この機能は、rustlsの開発者が手がけるプロジェクト「upki」によるものです。Ubuntuの開発者は両リリースで同じcurlコマンドを実行しました。Ubuntu 26.04では失効した証明書を受け入れて接続で
Ubuntu 26.10に同梱されるcurlに、証明書失効チェック機能が組み込まれました。この機能は、rustlsの開発者が手がけるプロジェクト「upki」によるものです。Ubuntuの開発者は両リリースで同じcurlコマンドを実行しました。Ubuntu 26.04では失効した証明書を受け入れて接続で
Ubuntu、curlに証明書失効チェックを導入 次はOpenSSLに対応へ
Ubuntu 26.10に同梱されるcurlに、証明書失効チェック機能が組み込まれました。この機能は、rustlsの開発者が手がけるプロジェクト「upki」によるものです。Ubuntuの開発者は両リリースで同じcurlコマンドを実行しました。Ubuntu 26.04では失効した証明書を受け入れて接続で
blackhatnews.tokyo
November 11, 2026 at 10:00 AM
Ubuntu、curlに証明書失効チェックを導入 次はOpenSSLに対応へ
Ubuntu 26.10に同梱されるcurlに、証明書失効チェック機能が組み込まれました。この機能は、rustlsの開発者が手がけるプロジェクト「upki」によるものです。Ubuntuの開発者は両リリースで同じcurlコマンドを実行しました。Ubuntu 26.04では失効した証明書を受け入れて接続で
Ubuntu 26.10に同梱されるcurlに、証明書失効チェック機能が組み込まれました。この機能は、rustlsの開発者が手がけるプロジェクト「upki」によるものです。Ubuntuの開発者は両リリースで同じcurlコマンドを実行しました。Ubuntu 26.04では失効した証明書を受け入れて接続で
🍻 upki 🍻
Implements platform-independent browser-grade certificate infrastructure
🔗 https://github.com/rustls/upki
#homebrew #newpkg #macos #linux #formula
Implements platform-independent browser-grade certificate infrastructure
🔗 https://github.com/rustls/upki
#homebrew #newpkg #macos #linux #formula
October 30, 2026 at 6:09 PM
🍻 upki 🍻
Implements platform-independent browser-grade certificate infrastructure
🔗 https://github.com/rustls/upki
#homebrew #newpkg #macos #linux #formula
Implements platform-independent browser-grade certificate infrastructure
🔗 https://github.com/rustls/upki
#homebrew #newpkg #macos #linux #formula
On macOS, rustls with OS roots (rustls-native-certs) accepted the eMudhra test servers until rustls-webpki 0.103.16. reqwest 0.13 defaults and native-tls rejected them via Apple's revocation.
https://importstatic.com/rust/rustls-emudhra-distrust
https://importstatic.com/rust/rustls-emudhra-distrust
Which Rust TLS setups trusted the compromised eMudhra certificates
On macOS, rustls with OS roots accepted the eMudhra test servers until rustls-webpki 0.103.16. Apple-verified setups rejected them; cargo update fixes the rest.
importstatic.com
October 29, 2026 at 7:10 AM
On macOS, rustls with OS roots (rustls-native-certs) accepted the eMudhra test servers until rustls-webpki 0.103.16. reqwest 0.13 defaults and native-tls rejected them via Apple's revocation.
https://importstatic.com/rust/rustls-emudhra-distrust
https://importstatic.com/rust/rustls-emudhra-distrust
To see whether a Rust binary has the eMudhra key blocklist, run cargo tree -i rustls-webpki. 0.103.16 (2026-10-20) has it; 0.102.x, used by rustls 0.23.23 and older, never got it.
October 29, 2026 at 10:32 AM
To see whether a Rust binary has the eMudhra key blocklist, run cargo tree -i rustls-webpki. 0.103.16 (2026-10-20) has it; 0.102.x, used by rustls 0.23.23 and older, never got it.
October 26, 2026 at 8:07 PM
[Backport release-26.05] rustls-ffi: 0.15.6 -> 0.15.7
https://github.com/NixOS/nixpkgs/pull/579362
#security
https://github.com/NixOS/nixpkgs/pull/579362
#security
October 26, 2026 at 8:39 PM
[Backport release-26.05] rustls-ffi: 0.15.6 -> 0.15.7
https://github.com/NixOS/nixpkgs/pull/579362
#security
https://github.com/NixOS/nixpkgs/pull/579362
#security
yeahhhhhhh
browsers have mostly gotten this working, everyone else...
(rustls/upki should hopefully be a path forward)
browsers have mostly gotten this working, everyone else...
(rustls/upki should hopefully be a path forward)
October 21, 2026 at 6:41 PM
yeahhhhhhh
browsers have mostly gotten this working, everyone else...
(rustls/upki should hopefully be a path forward)
browsers have mostly gotten this working, everyone else...
(rustls/upki should hopefully be a path forward)
Rustup 1.29.2 has been released.
This is a small release which only updates the rustls-webpki and webpki-root-certs dependencies to remove the compromised eMudhra intermediate certificates.
See the announcement for details: blog.rust-lang.org/2026/10/20/R...
This is a small release which only updates the rustls-webpki and webpki-root-certs dependencies to remove the compromised eMudhra intermediate certificates.
See the announcement for details: blog.rust-lang.org/2026/10/20/R...
Announcing rustup 1.29.2 | Rust Blog
Empowering everyone to build reliable and efficient software.
blog.rust-lang.org
October 21, 2026 at 12:29 PM
Rustup 1.29.2 has been released.
This is a small release which only updates the rustls-webpki and webpki-root-certs dependencies to remove the compromised eMudhra intermediate certificates.
See the announcement for details: blog.rust-lang.org/2026/10/20/R...
This is a small release which only updates the rustls-webpki and webpki-root-certs dependencies to remove the compromised eMudhra intermediate certificates.
See the announcement for details: blog.rust-lang.org/2026/10/20/R...
If you’re using rustls, upgrade to rustls-webpki 0.103.16 and/or webpki-roots or webpki-root-certs 1.0.10.
Update everything that verifies certificates against public roots.
👩🏽🔬 Go 1.27.3 and 1.26.10 are released!
🔐 Security: Includes 1 security fixes to the standard library.
🗣 Announcement: https://groups.google.com/g/golang-announce/c/66pojueaQek/m/tmWX2Pq9AgAJ
📦 Download: https://go.dev/dl/#go1.27.3
#golang
🔐 Security: Includes 1 security fixes to the standard library.
🗣 Announcement: https://groups.google.com/g/golang-announce/c/66pojueaQek/m/tmWX2Pq9AgAJ
📦 Download: https://go.dev/dl/#go1.27.3
#golang
October 20, 2026 at 11:09 AM
If you’re using rustls, upgrade to rustls-webpki 0.103.16 and/or webpki-roots or webpki-root-certs 1.0.10.
this is some work in that direction github.com/rustls/upki/
GitHub - rustls/upki: upki implements platform-independent browser-grade certificate infrastructure
upki implements platform-independent browser-grade certificate infrastructure - rustls/upki
github.com
October 20, 2026 at 8:02 PM
this is some work in that direction github.com/rustls/upki/
Browser via reqwest client impl is safe, no action needed. Jacquard websocket client uses rustls with native system certs on native and web_sys certs in browser, also safe.
Otherwise just cargo update rustls stuff and re-compile if you're not using platform trust roots, and update those if you are.
Otherwise just cargo update rustls stuff and re-compile if you're not using platform trust roots, and update those if you are.
If you're actively using jacquard for the wasm browser target or with static binaries that don't use the system certs, please lmk ASAP, I'm investigating if jacquard's rustls defaults are vulnerable to the current cert thing in any configuration without an update, or if re-deploying is sufficient.
October 21, 2026 at 12:16 AM
Browser via reqwest client impl is safe, no action needed. Jacquard websocket client uses rustls with native system certs on native and web_sys certs in browser, also safe.
Otherwise just cargo update rustls stuff and re-compile if you're not using platform trust roots, and update those if you are.
Otherwise just cargo update rustls stuff and re-compile if you're not using platform trust roots, and update those if you are.
Tranquil 0.7.1 has been tagged and multi-arch docker images published. This security release includes a patched rustls-webpki that rejects the vulnerable certificates everyone is talking about.
October 20, 2026 at 6:53 PM
Tranquil 0.7.1 has been tagged and multi-arch docker images published. This security release includes a patched rustls-webpki that rejects the vulnerable certificates everyone is talking about.
Of course, we may have sponsored and shipped it, but the credit really belongs to @djc and @ctz from the rustls project for conceiving and building upki.
Super excited for the future of this project.
Super excited for the future of this project.
Couldn’t have asked for a better week to demo the value prop of upki, which now ships by default in #ubuntu 💪
Also delighted to see this proposal from @cpu to include support for checking cached upki revocation data by default in the Go standard library TLS implementation! […]
Also delighted to see this proposal from @cpu to include support for checking cached upki revocation data by default in the Go standard library TLS implementation! […]
Original post on hachyderm.io
hachyderm.io
October 21, 2026 at 9:43 PM
<-- creature that regrets using Rustls bundled webpki in so many things and now has to update them all while in another country
October 20, 2026 at 6:18 PM
<-- creature that regrets using Rustls bundled webpki in so many things and now has to update them all while in another country
github.com/seanmonstar/...
actually got it flipped (sorta). reqwest versions below 0.13.x use webpki-roots by default. rustls doesn't depend on it, crates.io loves to lie.
actually got it flipped (sorta). reqwest versions below 0.13.x use webpki-roots by default. rustls doesn't depend on it, crates.io loves to lie.
feat: consolidate TLS options with rustls-platform-verifier (#2891) · seanmonstar/reqwest@d506978
This includes two logical change groups, done together because the intermediate step is not really useful.
1. This makes rustls-platform-verifier the default verifier, and removes the ability to u...
github.com
October 20, 2026 at 8:10 PM
github.com/seanmonstar/...
actually got it flipped (sorta). reqwest versions below 0.13.x use webpki-roots by default. rustls doesn't depend on it, crates.io loves to lie.
actually got it flipped (sorta). reqwest versions below 0.13.x use webpki-roots by default. rustls doesn't depend on it, crates.io loves to lie.
oh you know what's fantastic about this?
rustls depends on webpki-roots. reqwest depends on rustls.
therefore Rust programs that make HTTP requests trust compromised root certs with no way to revoke them in the field without recompiling and deploying a new binary.
rustls depends on webpki-roots. reqwest depends on rustls.
therefore Rust programs that make HTTP requests trust compromised root certs with no way to revoke them in the field without recompiling and deploying a new binary.
October 20, 2026 at 7:58 PM
oh you know what's fantastic about this?
rustls depends on webpki-roots. reqwest depends on rustls.
therefore Rust programs that make HTTP requests trust compromised root certs with no way to revoke them in the field without recompiling and deploying a new binary.
rustls depends on webpki-roots. reqwest depends on rustls.
therefore Rust programs that make HTTP requests trust compromised root certs with no way to revoke them in the field without recompiling and deploying a new binary.