ghc-crypton-x509-system-1.9.0-1.1 on GA media (moderate)

ghc-crypton-x509-system-1.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11084-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ghc-crypton-pem-0.3.0-1.1 on GA media (moderate)

ghc-crypton-pem-0.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11081-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

ghc-crypton-asn1-parse-0.10.0-1.1 on GA media (moderate)

ghc-crypton-asn1-parse-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11079-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ghc-crypton-asn1-types-0.4.1-1.1 on GA media (moderate)

ghc-crypton-asn1-types-0.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11080-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media (moderate)

ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11078-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ghc-aws-0.25.2-1.1 on GA media (moderate)

ghc-aws-0.25.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11077-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

CVE-2026-9648

creationtimestamp| type| source ---|---|--- 2026-06-11 16:53:27+00:00| seen| https://bsky.app/profile/drweb2.bsky.social/post/3mnzotj3lap23 2026-06-11 17:44:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzro3zxu52w...

DEBIAN-CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...