From 88fdf45a24ccbc982e57eaece3042f1712d3ed02 Mon Sep 17 00:00:00 2001 From: nibon7 Date: Wed, 21 Jun 2023 17:07:33 +0800 Subject: [PATCH] Bump openssl to 0.10.55 (#9488) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit # Description `cargo audit` reported a vulnerability found in the openssl crate. ``` Crate: openssl Version: 0.10.52 Title: `openssl` `X509VerifyParamRef::set_host` buffer over-read Date: 2023-06-20 ID: RUSTSEC-2023-0044 URL: https://rustsec.org/advisories/RUSTSEC-2023-0044 Solution: Upgrade to >=0.10.55 Dependency tree: openssl 0.10.52 ├── nu 0.81.1 └── native-tls 0.2.11 ├── ureq 2.6.2 │ └── nu-command 0.81.1 │ ├── nu-cli 0.81.1 │ │ └── nu 0.81.1 │ └── nu 0.81.1 └── nu-command 0.81.1 ``` --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 864cf7e461..e344444b68 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3346,9 +3346,9 @@ dependencies = [ [[package]] name = "openssl" -version = "0.10.52" +version = "0.10.55" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "01b8574602df80f7b85fdfc5392fa884a4e3b3f4f35402c070ab34c3d3f78d56" +checksum = "345df152bc43501c5eb9e4654ff05f794effb78d4efe3d53abc158baddc0703d" dependencies = [ "bitflags 1.3.2", "cfg-if 1.0.0", @@ -3387,9 +3387,9 @@ dependencies = [ [[package]] name = "openssl-sys" -version = "0.9.87" +version = "0.9.90" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8e17f59264b2809d77ae94f0e1ebabc434773f370d6ca667bd223ea10e06cc7e" +checksum = "374533b0e45f3a7ced10fcaeccca020e66656bc03dac384f852e4e5a7a8104a6" dependencies = [ "cc", "libc",