Debian Rust Security Tracker 🩺🦀

RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

45 affected
Crate
rustls-webpki
Patched Versions
>=0.103.16, <0.104.0-alpha.1
>=0.104.0-alpha.8
Debian Version
0.103.15+ds-1
0.101.7-7
Debian Bugs
—
Issued
2026-10-20
Aliases
CVE-2026-111943
Patched:Affected

Affected versions may accept certificate paths containing distrusted emSign intermediate public keys when the configured trust anchors allow such paths. The private keys corresponding to these intermediates are now well known.

Versions 0.103.16 and 0.104.0-alpha.8 reject paths containing these public keys.

Affected Packages

rustls-webpki 0.103.15 acme-redirect 0.8.1+ds-1
rustls-webpki 0.103.15 apt-swarm 0.6.0-3
rustls-webpki 0.103.15 apt-transport-blob 1.2.2-1+b2
rustls-webpki 0.103.15 bmap-rs 0.2.3-1
rustls-webpki 0.103.15 cargo-audit 0.22.2-1+b3
rustls-webpki 0.103.15 css-inline 0.22.0-1
rustls-webpki 0.103.15 debian-lsp 0.1.8-5+b2
rustls-webpki 0.103.15 debian-repro-status 0.4.0-3
rustls-webpki 0.103.15 gpg-sq 0.13.1-15
rustls-webpki 0.103.15 gpgv-sq 0.13.1-15
rustls-webpki 0.103.15 hickory-dns 0.26.3-1+b2
rustls-webpki 0.103.15 hussh 0.2.3-1
rustls-webpki 0.103.15 hypothesis-client 0.12.0-4+b3
rustls-webpki 0.103.15 icu4x-datagen 2.2.0-1+b2
affected ⚠️ librust-rustls-webpki-0.101-dev 0.101.7-7
affected ⚠️ librust-rustls-webpki-dev 0.103.15+ds-1
rustls-webpki 0.103.15 miniserve 0.35.0-5+b2
rustls-webpki 0.103.15 nethsm-pkcs11 2.0.0-3+b2
rustls-webpki 0.103.15 ntpd-rs 1.9.0-1+b2
rustls-webpki 0.103.15 ntpd-rs-metrics 1.9.0-1+b2
rustls-webpki 0.103.15 numbat 1.24.0-1
rustls-webpki 0.103.15 ognibuild 0.2.19-2+b2
rustls-webpki 0.103.15 patch-hub 0.1.7-3+b2
rustls-webpki 0.103.15 protonup-rs 0.15.0-1+b2
rustls-webpki 0.103.15 prr 0.21.0-2+b2
rustls-webpki 0.103.15 python3-taskchampion-py 2.0.2-5+b2
rustls-webpki 0.103.15 rbw 1.15.0-2+b2
rustls-webpki 0.103.15 rebuildctl 0.28.0-2
rustls-webpki 0.103.15 rebuilderd 0.28.0+ds-2+b2
rustls-webpki 0.103.15 rebuilderd-worker 0.28.0-1+b2
rustls-webpki 0.103.15 repro-env 0.4.4+ds-1
rustls-webpki 0.103.15 repro-threshold 0.1.2-1+b2
rustls-webpki 0.103.15 ripasso-cursive 0.8.0-1+b7
rustls-webpki 0.103.15 safe-vdash 0.20.0-6+b2
rustls-webpki 0.103.15 samply 0.13.1-1+b2
rustls-webpki 0.103.15 sccache 0.17.0+ds-3+b2
rustls-webpki 0.103.15 sequoia-git 0.6.0-2+b2
rustls-webpki 0.103.15 signal-tlsd 0.1.4-1+b2
rustls-webpki 0.103.15 silver-platter 0.8.4-2+b3
rustls-webpki 0.103.15 spytrap-adb 0.3.5-6
rustls-webpki 0.103.15 sq 1.4.1-2
rustls-webpki 0.103.15 taskwarrior 3.5.0+dfsg-3+b2
rustls-webpki 0.103.15 tealdeer 1.9.0-1+b2
rustls-webpki 0.103.15 wasm-pack 0.15.0+ds-2+b2
rustls-webpki 0.103.15 xh 0.26.2-1+b2