Threats tagged 'rustsec-2026-0042'

CVE-2026-4428 is a logic error in the CRL distribution point matching of AWS-LC that allows revoked certificates to bypass revocation checks during validation when CRL checking is enabled and partitioned CRLs with Issuing Distribution Point extensions are used. This affects aws-lc-fips-sys versions from 0.13.0 up to but not including 0.13.13. Applications using complete CRLs without IDP extensions or those not enabling CRL checking are not affected. A fix is available in version 0.13.13. Customers of AWS services do not need to take action as this does not affect AWS cloud services directly.