Crypton

Crypton Crypton is an educational library to learn and practice Offensive and Defensive Cryptography. It is basically a collection of explanation and implementation of all the existing vulnerabilities and attacks on various Encryption Systems Symmetric and Asymmetric, Digital Signatures, Message...

ghc-crypton-x509-store-1.9.0-1.1 on GA media (moderate)

ghc-crypton-x509-store-1.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11083-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

ghc-crypton-x509-system-1.9.0-1.1 on GA media (moderate)

ghc-crypton-x509-system-1.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11084-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ghc-crypton-asn1-types-0.4.1-1.1 on GA media (moderate)

ghc-crypton-asn1-types-0.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11080-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

ghc-crypton-asn1-parse-0.10.0-1.1 on GA media (moderate)

ghc-crypton-asn1-parse-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11079-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media (moderate)

ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11078-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ghc-crypton-pem-0.3.0-1.1 on GA media (moderate)

ghc-crypton-pem-0.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11081-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

OPENSUSE-SU-2026:11083-1 ghc-crypton-x509-store-1.9.0-1.1 on GA media

These are all security issues fixed in the ghc-crypton-x509-store-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11084-1 ghc-crypton-x509-system-1.9.0-1.1 on GA media

These are all security issues fixed in the ghc-crypton-x509-system-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11085-1 ghc-crypton-x509-validation-1.9.1-1.1 on GA media

These are all security issues fixed in the ghc-crypton-x509-validation-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11079-1 ghc-crypton-asn1-parse-0.10.0-1.1 on GA media

These are all security issues fixed in the ghc-crypton-asn1-parse-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11081-1 ghc-crypton-pem-0.3.0-1.1 on GA media

These are all security issues fixed in the ghc-crypton-pem-0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11082-1 ghc-crypton-x509-1.9.1-1.1 on GA media

These are all security issues fixed in the ghc-crypton-x509-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11078-1 ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media

These are all security issues fixed in the ghc-crypton-asn1-encoding-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11080-1 ghc-crypton-asn1-types-0.4.1-1.1 on GA media

These are all security issues fixed in the ghc-crypton-asn1-types-0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2026-36248

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

CVE-2026-9648: Undefined Security Weakness

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

crypton-x509-validation Haskell libraries do not enforce X.509 NameConstraints

Overview A vulnerability has been discovered in the Haskell TLS software stack, commonly used by applications built in the Haskell programming language to securely connect to servers over the internet. Specifically, the libraries "crypton-x509-validation" fail to enforce a key security feature...