Merge pull request #77 from alex/patch-1

Request RUSTSEC for resolved UAF in OpenSSL
This commit is contained in:
Tony Arcieri
2018-12-16 09:45:04 -08:00
committed by GitHub

View File

@@ -0,0 +1,20 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "openssl"
date = "2018-06-01"
title = "Use after free in CMS Signing"
description = """
Affected versions of the OpenSSL crate used structures after they'd been freed.
"""
patched_versions = [">= 0.10.9"]
unaffected_versions = ["< 0.10.8"]
url = "https://github.com/sfackler/rust-openssl/pull/942"
keywords = ["memory-corruption"]