# rustls

Published articles for rustls.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Rustls 0.23.45 Released To Fix Two Year Old Security Issue

DevFeed: [Rustls 0.23.45 Released To Fix Two Year Old Security Issue](<https://devfeed.tech/articles/rustls-0-23-45-released-to-fix-two-year-old-security-issue-17446.md>)

Original publisher: [Read original article](<https://www.phoronix.com/news/Rustls-0.23.45-Released>)

Author: Michael Larabel

Published: 2026-09-14T15:35:11Z

Content type: news

Language: en

Sources: [Phoronix](<https://devfeed.tech/sources/phoronix.md>)

Topics: [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Security](<https://devfeed.tech/topics/security.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Memory Safety](<https://devfeed.tech/topics/memory-safety.md>), [Go Language](<https://devfeed.tech/topics/go-language.md>)

Tags: [bugs](<https://devfeed.tech/tags/bugs.md>), [desktop-linux](<https://devfeed.tech/tags/desktop-linux.md>), [go](<https://devfeed.tech/tags/go.md>), [library](<https://devfeed.tech/tags/library.md>), [linux-benchmarking](<https://devfeed.tech/tags/linux-benchmarking.md>), [linux-hardware-benchmarks](<https://devfeed.tech/tags/linux-hardware-benchmarks.md>), [linux-hardware-reviews](<https://devfeed.tech/tags/linux-hardware-reviews.md>), [linux-how-to](<https://devfeed.tech/tags/linux-how-to.md>), [linux-performance](<https://devfeed.tech/tags/linux-performance.md>), [linux-server-benchmarks](<https://devfeed.tech/tags/linux-server-benchmarks.md>), [open-source-graphics](<https://devfeed.tech/tags/open-source-graphics.md>), [phoronix](<https://devfeed.tech/tags/phoronix.md>), [phoronix-test-suite](<https://devfeed.tech/tags/phoronix-test-suite.md>), [rust](<https://devfeed.tech/tags/rust.md>), [rustls](<https://devfeed.tech/tags/rustls.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>), [ubuntu-benchmarks](<https://devfeed.tech/tags/ubuntu-benchmarks.md>), [ubuntu-hardware](<https://devfeed.tech/tags/ubuntu-hardware.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Rustls 0.23.45 fixes a vulnerability in which TLS 1.3 handshake messages sent at the wrong encryption level could be accepted as plaintext after a key-changing message. The issue was present since Rustls 0.23.13 and could allow an on-path attacker to inject plaintext messages, although the authenticated handshake transcript prevented altering or completing the handshake.

### Source excerpt

While the Rustls modern TLS library is written in the Rust programming language with a focus on memory safety, as we've seen out of other Rust project re-implementations in the past, the new implementations can lead to other security bugs of their own. Out today is Rustls 0.23.45 to fix a security issue introduced back in 2024 with Rustls while the likes of OpenSSL, BoringSSL, and others are unaffected...

## Building the first memory safe distro

DevFeed: [Building the first memory safe distro](<https://devfeed.tech/articles/building-the-first-memory-safe-distro-12912.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-the-first-memory-safe-distro>)

Published: 2023-01-25T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Memory Safety](<https://devfeed.tech/topics/memory-safety.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [C](<https://devfeed.tech/topics/c.md>), [C++](<https://devfeed.tech/topics/c-plus-plus.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [c](<https://devfeed.tech/tags/c.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [containers](<https://devfeed.tech/tags/containers.md>), [curl](<https://devfeed.tech/tags/curl.md>), [isrg](<https://devfeed.tech/tags/isrg.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [linux](<https://devfeed.tech/tags/linux.md>), [memory-safe](<https://devfeed.tech/tags/memory-safe.md>), [memory-safety](<https://devfeed.tech/tags/memory-safety.md>), [rust](<https://devfeed.tech/tags/rust.md>), [rustls](<https://devfeed.tech/tags/rustls.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [tls](<https://devfeed.tech/tags/tls.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

The article describes Chainguard's effort to make Wolfi, its "undistro," memory safe. It explains how memory-unsafe languages contribute to major vulnerabilities and presents the introduction of Rustls, in partnership with the Internet Security Research Group, as a way to provide memory-safe TLS in Wolfi. The article also connects Wolfi's source-based package builds and secure-by-default design to software supply chain security in cloud-native, containerized environments.

### Source excerpt

Thanks to our ISRG partnership, we are enabling memory-safe TLS by introducing Rustls to Wolfi, which now sets the standard for memory safety in distributions.