Threats tagged 'rustsec-2026-0048'

CVE-2026-4428 is a logic error in the CRL distribution point matching of AWS-LC that allows revoked certificates to bypass revocation checks during validation when CRL checking is enabled and partitioned CRLs with Issuing Distribution Point extensions are used. Applications using aws-lc-sys versions from 0.15.0 up to but not including 0.39.0 are affected. AWS customers using AWS services do not need to take action. The issue is fixed in aws-lc-sys version 0.39.0.