[SECURITY] Fedora 43 Update: rust-ctutils-0.4.5-1.fc43

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

[SECURITY] Fedora 44 Update: rust-ctutils-0.4.5-1.fc44

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

[SECURITY] Fedora 45 Update: rust-ctutils-0.4.5-1.fc45

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

Fedora 43 : rust-ctutils (2026-ba0a45059f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ba0a45059f advisory. Update to version 0.4.5. This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures. Tenable...

RUSTSEC-2026-0385 Non-constant-time mask generation and `u128` comparisons

Summary The ctutils::Choice type has mask generation functions for each unsigned integer size u8, u16, u32, u64, u128. These are const fn and therefore can't reuse the asm!-backed mask generation in the cmov crate that's otherwise used to ensure constant-time. In releases prior to v0.4.4, the...

Non-constant-time mask generation and `u128` comparisons

Summary The ctutils::Choice type has mask generation functions for each unsigned integer size u8, u16, u32, u64, u128. These are const fn and therefore can't reuse the asm!-backed mask generation in the cmov crate that's otherwise used to ensure constant-time. In releases prior to v0.4.4, the...

blueprint-ytls (0.0.1), ctutils (>=0.0.0, <=0.3.2) potentially affected by CVE-2026-50185 via cmov (>=0.4.6, <=0.5.0-pre.0)

cmov CARGO version =0.4.6, =0.0.0, =0.3.2 Source cves: CVE-2026-50185 Source advisory: OSV:GHSA-3RJW-M598-PQ24...

blueprint-ytls (0.0.1), ctutils (>=0.0.0, <=0.3.2) potentially affected by CVE-2026-50185 via cmov (>=0.4.6, <=0.5.0-pre.0)

cmov CARGO version =0.4.6, =0.0.0, =0.3.2 Source cves: CVE-2026-50185 Source advisory: GHSA-3RJW-M598-PQ24...