Skip to content

v0.7.6 - #1365

Merged
tarcieri merged 1 commit into
masterfrom
v0.7.6
Oct 23, 2026
Merged

v0.7.6#1365
tarcieri merged 1 commit into
masterfrom
v0.7.6

Conversation

@tarcieri

@tarcieri tarcieri commented Oct 23, 2026

Copy link
Copy Markdown
Member

Added

  • Implement Zeroize for EncodedUint (#1342)

Changed

  • Faster floor_sqrt, checked_sqrt implementation (#1312)
  • Bump ctutils to v0.4.4; MSRV 1.87 (#1350, #1359)

Fixed

  • BoxedUint GCD with mixed-precision zero operands (#1291)
  • Carry result from Karatsuba wrapping_square for larger integers (#1309)
  • Exact division edge cases (#1310)
  • Only use classic binary GCD in Jacobi symbol calculation (#1313)
  • Montgomery reduction in repeated squaring (#1344)
  • safegcd iteration count overflow at precisions of 93558 bits and above (#1346)
  • Carry returned by Uint::try_sub_with_carry (#1354)

Security

  • Make UintRef::PartialEq constant-time and implement PartialOrd/Ord (#1311)
  • Avoid branching on invertibility in BoxedMontyForm::invert (#1355)
  • borrowing_sub constant-timeness; use cargo checkct (#1358)
  • CT leaks in CTZ, div_rem, nlimbs, and Montgomery mul (#1360)

@codecov

codecov Bot commented Oct 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.32%. Comparing base (8032da9) to head (4d9c49a).

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #1365   +/-   ##
=======================================
  Coverage   91.32%   91.32%           
=======================================
  Files         190      190           
  Lines       22982    22982           
=======================================
  Hits        20989    20989           
  Misses       1993     1993

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@tarcieri
tarcieri merged commit c34044b into master Oct 23, 2026
34 checks passed
@tarcieri
tarcieri deleted the v0.7.6 branch October 23, 2026 12:23
@tarcieri tarcieri mentioned this pull request Oct 23, 2026
Merged
tarcieri added a commit to rustsec/advisory-db that referenced this pull request Oct 23, 2026
@tarcieri
Add crypto-bigint advisory for constant-time issues
f92d09e 
This advisory covers issues fixed in v0.7.6:

RustCrypto/crypto-bigint#1365
tarcieri added a commit to rustsec/advisory-db that referenced this pull request Oct 24, 2026
@tarcieri
Add crypto-bigint advisory for constant-time issues (#3432)
a32530a 
This advisory covers issues fixed in v0.7.6:

RustCrypto/crypto-bigint#1365
This was referenced Oct 24, 2026
Closed
Closed
Open
Open
Open
Open
Open
@Nicola-Ceornea Nicola-Ceornea mentioned this pull request Oct 24, 2026
Closed
@jrmatherly jrmatherly mentioned this pull request Oct 24, 2026
Merged
@ShixiangWang ShixiangWang mentioned this pull request Oct 24, 2026
Closed
This was referenced Oct 24, 2026
Open
Closed
@Kilerd Kilerd mentioned this pull request Oct 24, 2026
Merged
@rubentalstra rubentalstra mentioned this pull request Oct 24, 2026
Closed
3 tasks
jeffkit pushed a commit to jeffkit/recursive that referenced this pull request Oct 24, 2026
kongjie
chore(ci): [policy] supply-chain 豁免 RUSTSEC-2026-0387——crypto-bigint …
584f2f6 
…0.5.5 时序可变性族(无范围内补丁)

supply-chain job 红(run 于 e0c57e6 push):crypto-bigint 0.5.5 非常数时间运算时序可变性(2026-10-24 新公告,RustCrypto/crypto-bigint#1365),解法=升 >=0.7.6 跨大版本,而依赖方 aws-sigv4 1.5.1 / elliptic-curve 0.13.8 均 pin ^0.5——**升级通道不可用,进豁免清单**(audit.toml 头部原则:能 update 的不进清单;本条属「无 patched 可锁」场景,与 zip 0367-0369 同类)。暴露面:纯传递依赖零直接调用,AWS SigV4/P-256 均在成熟库内部,无自建常数时间面。解禁条件=依赖方发布支持 0.7 的版本并升级。与落地内容(e0c57e6 纯 docs)无关,纯 advisory-db 漂移。Policy-ack: jeffkit 2026-10-19
@github-actions github-actions Bot mentioned this pull request Oct 24, 2026
Closed
@hello-alexmcc hello-alexmcc mentioned this pull request Oct 24, 2026
Merged
2 of 4 tasks
Aelieth added a commit to Aelieth/kerber-rust that referenced this pull request Oct 24, 2026
@Aelieth
deps: Update crypto-bigint to 0.7.6 for RUSTSEC-2026-0387
7bd7846 
crypto-bigint 0.7.5 carries RUSTSEC-2026-0387: timing variability in
operations meant to be constant-time (RustCrypto/crypto-bigint#1365), on
the paths that rely on it for constant-time arithmetic -- PKINIT's
Diffie-Hellman, RSA and ECDSA, and SPAKE's curves. Update it to 0.7.6,
which fixes them, in the root and fuzz lockfiles; the transitive ctutils
constant-time helper moves 0.4.4 -> 0.4.5 with it. The dependency
requirement stays "0.7", so there is no manifest, API or MSRV change.

Move the cargo-vet exemptions for both crates to the new versions; they
stay exempted pending the 1.2 supply-chain audit. Record a Security
CHANGELOG bullet.
@schmitch schmitch mentioned this pull request Oct 24, 2026
Merged
This was referenced Oct 24, 2026
Closed
Closed
Open
Closed
@rafaga rafaga mentioned this pull request Oct 26, 2026
Closed
@Ben-Heerema Ben-Heerema mentioned this pull request Oct 26, 2026
Merged
@storopoli storopoli mentioned this pull request Oct 26, 2026
Merged
6 of 16 tasks
This was referenced Oct 26, 2026
Open
Open
Open
@mcronce mcronce mentioned this pull request Oct 27, 2026
Open
@VPRamon VPRamon mentioned this pull request Oct 27, 2026
Open
This was referenced Oct 28, 2026
Closed
Open
Open
Open
Open
Open
@jjeangal jjeangal mentioned this pull request Oct 29, 2026
Merged
This was referenced Oct 30, 2026
Open
Open
Open
Open
Open
Open
Open
Open
pq-cybarg added a commit to pq-cybarg/talkrypt that referenced this pull request Nov 3, 2026
@pq-cybarg
fv(decoders): unblock + wire the Aeneas->F* route for nested-heap dec…
9926a4e 
…oder totality (#106)

Begins landing the FV proof for the nested-heap decoders (LinkageProof/
LinkagePayload/NamePresence/Marking + IdentityChain/SignedCert) that Kani/CBMC
provably cannot discharge. The paradigm-change proof already succeeded in a Verus
spike (4 verified, 0 errors); this wires the zero-source-change Aeneas->F* route
that lands it in the existing F* CI.

Host-safe step done here: the Charon (Aeneas frontend) supply-chain CVEs that
made the spike skip this route are CLEARED. They were all transitive networking
crates (quinn-proto/rustls/rustls-webpki/bytes/crossbeam-epoch), irrelevant to
offline code extraction, each with a patched point-release;  bumps
them and Crate:     crypto-bigint
Version:   0.5.5
Title:     Multiple timing variability issues in operations intended to be constant-time
Date:      2026-10-23
ID:        RUSTSEC-2026-0387
URL:       RustCrypto/crypto-bigint#1365
Solution:  Upgrade to >=0.7.6

Crate:     h2
Version:   0.3.27
Title:     h2 unbounded empty DATA frames
Date:      2026-08-17
ID:        RUSTSEC-2026-0258
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0258
Solution:  Upgrade to >=0.4.16

Crate:     libcrux-aesgcm
Version:   0.0.7
Title:     AES-GCM did not enforce limits on AAD length
Date:      2026-06-09
ID:        RUSTSEC-2026-0209
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0209
Severity:  6.3 (medium)
Solution:  No fixed upgrade is available!

Crate:     libcrux-aesgcm
Version:   0.0.7
Title:     Non-constant time Authentication Tag Check in AES-GCM Decryption
Date:      2026-07-14
ID:        RUSTSEC-2026-0211
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0211
Severity:  6.3 (medium)
Solution:  No fixed upgrade is available!

Crate:     libcrux-chacha20poly1305
Version:   0.0.7
Title:     Potential Panic on Overlong Ciphertext Buffer
Date:      2026-03-29
ID:        RUSTSEC-2026-0124
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0124
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.8

Crate:     libcrux-kem
Version:   0.0.7
Title:     Panic on Decoding Short Hybrid Keys
Date:      2026-08-24
ID:        RUSTSEC-2026-0331
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0331
Severity:  8.7 (high)
Solution:  Upgrade to >=0.0.10

Crate:     libcrux-kem
Version:   0.0.7
Title:     Hybrid Encapsulation from Seed Panics on Short Seed
Date:      2026-09-28
ID:        RUSTSEC-2026-0330
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0330
Severity:  5.6 (medium)
Solution:  Upgrade to >=0.0.10

Crate:     libcrux-ml-dsa
Version:   0.0.8
Title:     Signature Verification on AVX2 Platforms Mishandles Edge Case
Date:      2026-05-05
ID:        RUSTSEC-2026-0125
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0125
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.9

Crate:     libcrux-secrets
Version:   0.0.5
Title:     Potentially Incorrect Output of Constant-Time Swap/Select on Aarch64
Date:      2026-05-26
ID:        RUSTSEC-2026-0212
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0212
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.6

Crate:     libcrux-sha3
Version:   0.0.8
Title:     Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls
Date:      2026-04-22
ID:        RUSTSEC-2026-0207
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0207
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.10

Crate:     libcrux-sha3
Version:   0.0.8
Title:     Potential Panic in AVX2 SHAKE-256
Date:      2026-05-21
ID:        RUSTSEC-2026-0208
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0208
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.10

Crate:     rustls
Version:   0.21.12
Title:     `Debug` impls for client session values expose TLS secrets
Date:      2026-10-14
ID:        RUSTSEC-2026-0346
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0346
Severity:  4 (medium)
Solution:  Upgrade to >=0.23.46

Crate:     rustls
Version:   0.21.12
Title:     Unauthenticated ServerHello can downgrade later connections to classical key exchange
Date:      2026-10-14
ID:        RUSTSEC-2026-0349
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0349
Severity:  3.7 (low)
Solution:  Upgrade to >=0.23.46

Crate:     rustls-webpki
Version:   0.101.7
Title:     Reachable panic in certificate revocation list parsing
Date:      2026-04-22
ID:        RUSTSEC-2026-0104
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0104
Solution:  Upgrade to >=0.103.13, <0.104.0-alpha.1 OR >=0.104.0-alpha.7

Crate:     rustls-webpki
Version:   0.101.7
Title:     Name constraints for URI names were incorrectly accepted
Date:      2026-04-14
ID:        RUSTSEC-2026-0098
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0098
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6

Crate:     rustls-webpki
Version:   0.101.7
Title:     Name constraints were accepted for certificates asserting a wildcard name
Date:      2026-04-14
ID:        RUSTSEC-2026-0099
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0099
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6

Crate:     rustls-webpki
Version:   0.101.7
Title:     Certificate verification may accept distrusted intermediates
Date:      2026-10-20
ID:        RUSTSEC-2026-0382
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0382
Solution:  Upgrade to >=0.103.16, <0.104.0-alpha.1 OR >=0.104.0-alpha.8

Crate:     webpki-roots
Version:   0.24.0
Title:     Bundled root certificates allow trust in distrusted emSign intermediates
Date:      2026-10-19
ID:        RUSTSEC-2026-0381
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0381
Solution:  Upgrade to >=1.0.10

Crate:     webpki-roots
Version:   0.25.4
Title:     Bundled root certificates allow trust in distrusted emSign intermediates
Date:      2026-10-19
ID:        RUSTSEC-2026-0381
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0381
Solution:  Upgrade to >=1.0.10

Crate:     libcrux-ml-dsa
Version:   0.0.8
Warning:   notice
Title:     AVX2 Implementation Did Not Fully Reduce Intermediate Values
Date:      2026-04-27
ID:        RUSTSEC-2026-0126
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0126

Crate:     basic-toml
Version:   0.1.10
Warning:   unmaintained
Title:     `basic-toml` is unmaintained
Date:      2026-09-26
ID:        RUSTSEC-2026-0374
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0374

Crate:     bincode
Version:   1.3.3
Warning:   unmaintained
Title:     Bincode is unmaintained
Date:      2025-12-16
ID:        RUSTSEC-2025-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0141

Crate:     bincode
Version:   2.0.1
Warning:   unmaintained
Title:     Bincode is unmaintained
Date:      2025-12-16
ID:        RUSTSEC-2025-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0141

Crate:     derivative
Version:   2.2.0
Warning:   unmaintained
Title:     `derivative` is unmaintained; consider using an alternative
Date:      2024-06-26
ID:        RUSTSEC-2024-0388
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0388

Crate:     libcrux-aesgcm
Version:   0.0.7
Warning:   unmaintained
Title:     `libcrux-aesgcm` Renamed to `libcrux-aes`
Date:      2026-07-15
ID:        RUSTSEC-2026-0210
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0210

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate:     proc-macro-error2
Version:   2.0.1
Warning:   unmaintained
Title:     proc-macro-error2 is unmaintained
Date:      2026-06-07
ID:        RUSTSEC-2026-0173
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0173

Crate:     rustls-pemfile
Version:   1.0.4
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134

Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     `ttf-parser` is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192

Crate:     unsafe-libyaml
Version:   0.2.11
Warning:   unmaintained
Title:     unsafe-libyaml is unmaintained
Date:      2024-03-25
ID:        RUSTSEC-2024-0449
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0449

Crate:     zbus_names
Version:   3.0.0
Warning:   unmaintained
Title:     `zbus_names` is unmaintained
Date:      2026-10-16
ID:        RUSTSEC-2026-0371
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0371

Crate:     zvariant
Version:   4.2.0
Warning:   unmaintained
Title:     `zvariant` is unmaintained
Date:      2026-10-16
ID:        RUSTSEC-2026-0370
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0370

Crate:     zvariant_derive
Version:   4.2.0
Warning:   unmaintained
Title:     `zvariant_derive` is unmaintained
Date:      2026-10-16
ID:        RUSTSEC-2026-0372
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0372

Crate:     rand
Version:   0.9.2
Warning:   unsound
Title:     Rand is unsound with a custom logger using `rand::rng()`
Date:      2026-04-09
ID:        RUSTSEC-2026-0097
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0097 then exits 0 (8 residual advisory WARNINGS only -
unmaintained/unsound dev deps, accepted). /Crate:     crypto-bigint
Version:   0.5.5
Title:     Multiple timing variability issues in operations intended to be constant-time
Date:      2026-10-23
ID:        RUSTSEC-2026-0387
URL:       RustCrypto/crypto-bigint#1365
Solution:  Upgrade to >=0.7.6

Crate:     h2
Version:   0.3.27
Title:     h2 unbounded empty DATA frames
Date:      2026-08-17
ID:        RUSTSEC-2026-0258
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0258
Solution:  Upgrade to >=0.4.16

Crate:     libcrux-aesgcm
Version:   0.0.7
Title:     AES-GCM did not enforce limits on AAD length
Date:      2026-06-09
ID:        RUSTSEC-2026-0209
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0209
Severity:  6.3 (medium)
Solution:  No fixed upgrade is available!

Crate:     libcrux-aesgcm
Version:   0.0.7
Title:     Non-constant time Authentication Tag Check in AES-GCM Decryption
Date:      2026-07-14
ID:        RUSTSEC-2026-0211
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0211
Severity:  6.3 (medium)
Solution:  No fixed upgrade is available!

Crate:     libcrux-chacha20poly1305
Version:   0.0.7
Title:     Potential Panic on Overlong Ciphertext Buffer
Date:      2026-03-29
ID:        RUSTSEC-2026-0124
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0124
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.8

Crate:     libcrux-kem
Version:   0.0.7
Title:     Panic on Decoding Short Hybrid Keys
Date:      2026-08-24
ID:        RUSTSEC-2026-0331
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0331
Severity:  8.7 (high)
Solution:  Upgrade to >=0.0.10

Crate:     libcrux-kem
Version:   0.0.7
Title:     Hybrid Encapsulation from Seed Panics on Short Seed
Date:      2026-09-28
ID:        RUSTSEC-2026-0330
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0330
Severity:  5.6 (medium)
Solution:  Upgrade to >=0.0.10

Crate:     libcrux-ml-dsa
Version:   0.0.8
Title:     Signature Verification on AVX2 Platforms Mishandles Edge Case
Date:      2026-05-05
ID:        RUSTSEC-2026-0125
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0125
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.9

Crate:     libcrux-secrets
Version:   0.0.5
Title:     Potentially Incorrect Output of Constant-Time Swap/Select on Aarch64
Date:      2026-05-26
ID:        RUSTSEC-2026-0212
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0212
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.6

Crate:     libcrux-sha3
Version:   0.0.8
Title:     Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls
Date:      2026-04-22
ID:        RUSTSEC-2026-0207
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0207
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.10

Crate:     libcrux-sha3
Version:   0.0.8
Title:     Potential Panic in AVX2 SHAKE-256
Date:      2026-05-21
ID:        RUSTSEC-2026-0208
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0208
Severity:  8.2 (high)
Solution:  Upgrade to >=0.0.10

Crate:     rustls
Version:   0.21.12
Title:     `Debug` impls for client session values expose TLS secrets
Date:      2026-10-14
ID:        RUSTSEC-2026-0346
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0346
Severity:  4 (medium)
Solution:  Upgrade to >=0.23.46

Crate:     rustls
Version:   0.21.12
Title:     Unauthenticated ServerHello can downgrade later connections to classical key exchange
Date:      2026-10-14
ID:        RUSTSEC-2026-0349
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0349
Severity:  3.7 (low)
Solution:  Upgrade to >=0.23.46

Crate:     rustls-webpki
Version:   0.101.7
Title:     Reachable panic in certificate revocation list parsing
Date:      2026-04-22
ID:        RUSTSEC-2026-0104
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0104
Solution:  Upgrade to >=0.103.13, <0.104.0-alpha.1 OR >=0.104.0-alpha.7

Crate:     rustls-webpki
Version:   0.101.7
Title:     Name constraints for URI names were incorrectly accepted
Date:      2026-04-14
ID:        RUSTSEC-2026-0098
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0098
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6

Crate:     rustls-webpki
Version:   0.101.7
Title:     Name constraints were accepted for certificates asserting a wildcard name
Date:      2026-04-14
ID:        RUSTSEC-2026-0099
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0099
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6

Crate:     rustls-webpki
Version:   0.101.7
Title:     Certificate verification may accept distrusted intermediates
Date:      2026-10-20
ID:        RUSTSEC-2026-0382
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0382
Solution:  Upgrade to >=0.103.16, <0.104.0-alpha.1 OR >=0.104.0-alpha.8

Crate:     webpki-roots
Version:   0.24.0
Title:     Bundled root certificates allow trust in distrusted emSign intermediates
Date:      2026-10-19
ID:        RUSTSEC-2026-0381
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0381
Solution:  Upgrade to >=1.0.10

Crate:     webpki-roots
Version:   0.25.4
Title:     Bundled root certificates allow trust in distrusted emSign intermediates
Date:      2026-10-19
ID:        RUSTSEC-2026-0381
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0381
Solution:  Upgrade to >=1.0.10

Crate:     libcrux-ml-dsa
Version:   0.0.8
Warning:   notice
Title:     AVX2 Implementation Did Not Fully Reduce Intermediate Values
Date:      2026-04-27
ID:        RUSTSEC-2026-0126
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0126

Crate:     basic-toml
Version:   0.1.10
Warning:   unmaintained
Title:     `basic-toml` is unmaintained
Date:      2026-09-26
ID:        RUSTSEC-2026-0374
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0374

Crate:     bincode
Version:   1.3.3
Warning:   unmaintained
Title:     Bincode is unmaintained
Date:      2025-12-16
ID:        RUSTSEC-2025-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0141

Crate:     bincode
Version:   2.0.1
Warning:   unmaintained
Title:     Bincode is unmaintained
Date:      2025-12-16
ID:        RUSTSEC-2025-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0141

Crate:     derivative
Version:   2.2.0
Warning:   unmaintained
Title:     `derivative` is unmaintained; consider using an alternative
Date:      2024-06-26
ID:        RUSTSEC-2024-0388
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0388

Crate:     libcrux-aesgcm
Version:   0.0.7
Warning:   unmaintained
Title:     `libcrux-aesgcm` Renamed to `libcrux-aes`
Date:      2026-07-15
ID:        RUSTSEC-2026-0210
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0210

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate:     proc-macro-error2
Version:   2.0.1
Warning:   unmaintained
Title:     proc-macro-error2 is unmaintained
Date:      2026-06-07
ID:        RUSTSEC-2026-0173
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0173

Crate:     rustls-pemfile
Version:   1.0.4
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134

Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     `ttf-parser` is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192

Crate:     unsafe-libyaml
Version:   0.2.11
Warning:   unmaintained
Title:     unsafe-libyaml is unmaintained
Date:      2024-03-25
ID:        RUSTSEC-2024-0449
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0449

Crate:     zbus_names
Version:   3.0.0
Warning:   unmaintained
Title:     `zbus_names` is unmaintained
Date:      2026-10-16
ID:        RUSTSEC-2026-0371
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0371

Crate:     zvariant
Version:   4.2.0
Warning:   unmaintained
Title:     `zvariant` is unmaintained
Date:      2026-10-16
ID:        RUSTSEC-2026-0370
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0370

Crate:     zvariant_derive
Version:   4.2.0
Warning:   unmaintained
Title:     `zvariant_derive` is unmaintained
Date:      2026-10-16
ID:        RUSTSEC-2026-0372
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0372

Crate:     rand
Version:   0.9.2
Warning:   unsound
Title:     Rand is unsound with a custom logger using `rand::rng()`
Date:      2026-04-09
ID:        RUSTSEC-2026-0097
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0097 run no
build scripts, so the gate clears on the opsec host.

Adds formal/decoder-totality/: a README (pipeline + CVE-fix recipe + extraction
targets + opsec/VM boundary + the no-VM bounded-buffer alternative) and a turnkey
build-in-vm.sh (clone/patch/build Charon+Aeneas -> extract decoders -> F* ->
formal/ CI). The build runs hundreds of third-party build scripts and needs a
pinned nightly + OCaml, so it stays a VM step per the opsec posture; the script
refuses to be anything but VM-run by documentation. Updates the spike doc:
Aeneas route 'skipped (CVEs)' -> 'unblocked'.

NOT certified / NOT audited.
@github-actions github-actions Bot mentioned this pull request Nov 3, 2026
Open
@Voxelot Voxelot mentioned this pull request Nov 3, 2026
Merged
4 of 5 tasks
This was referenced Nov 4, 2026
Open
Open
@hbjoroy hbjoroy mentioned this pull request Nov 5, 2026
Closed
@github-actions github-actions Bot mentioned this pull request Nov 6, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@tarcieri @radawson