Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RUSTSEC-2023-0072: openssl X509StoreRef::objects is unsound #13739

Closed
github-actions bot opened this issue Nov 30, 2023 · 3 comments
Closed

RUSTSEC-2023-0072: openssl X509StoreRef::objects is unsound #13739

github-actions bot opened this issue Nov 30, 2023 · 3 comments
Assignees
@xxchan
Milestone
release-1.7

Comments

@github-actions
Copy link
Contributor

openssl X509StoreRef::objects is unsound

Details
Status unsound
Package openssl
Version 0.10.57
URL sfackler/rust-openssl#2096
Date 2023-11-23

This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind ones back.

Use of this function should be replaced with X509StoreRef::all_certificates.

See advisory page for additional details.
@xiangjinwu
Copy link
Contributor

Version is pinned #12219

@xiangjinwu xiangjinwu added this to the future-release-1.6 milestone Nov 30, 2023
@fuyufjh fuyufjh modified the milestones: release-1.6, release-1.7 Jan 9, 2024
@fuyufjh
Copy link
Contributor

fuyufjh commented Jan 9, 2024

@xxchan Do you know the context?

@xxchan
Copy link
Member

xxchan commented Jan 9, 2024

  • Version is unpinned now.
  • This is not related with us.

@xxchan xxchan closed this as completed Jan 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@xxchan xxchan

Labels
None yet
Projects
None yet
Milestone
release-1.7
Development

No branches or pull requests
3 participants
@fuyufjh @xiangjinwu @xxchan