UnratedFix available
rustls 0.23.44
Type: patchSources: Rustls
rustls 0.23.44 enables ML-DSA certificates by default in the aws-lc-rs crypto provider and restricts built-in KeyLogFile files to owner-only reading.
- Products
- rustls
- Affected versions
- Not specified
- Fixed versions
- 0.23.44
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 07:32 UTC · Revision 1
Source evidence
rustls 0.23.44 enables ML-DSA certificates by default in the aws-lc-rs crypto provider and restricts built-in KeyLogFile files to owner-only reading.
The built-in KeyLogFile implementation now creates files that are restricted to being read only by the owner.
rustls
Fixed versions: 0.23.44
Complete source record
{
"id": "15271cee9a6aed0262cef35fec875c63a62b25ad76b254a806a4887c1f977e97",
"url": "https://github.com/rustls/rustls/releases/tag/v%2F0.23.44",
"method": "llm",
"payload": {
"kind": "patch",
"title": "rustls 0.23.44",
"summary": "rustls 0.23.44 enables ML-DSA certificates by default in the aws-lc-rs crypto provider and restricts built-in KeyLogFile files to owner-only reading.",
"evidence": "The built-in KeyLogFile implementation now creates files that are restricted to being read only by the owner.",
"products": [
{
"name": {
"value": "rustls",
"evidence": "Release notes from rustls"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.23.44",
"evidence": "0.23.44"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-rustls-rustls",
"document_id": 22564,
"published_at": "2026-09-07T09:27:42+00:00"
}