From 49fb6c0b9418350332fa1e944ec83a5556ec5d91 Mon Sep 17 00:00:00 2001 From: "Sergey \"Shnatsel\" Davidoff" Date: Mon, 20 Jun 2022 14:19:49 +0200 Subject: [PATCH] Revert "Fix RUSTSEC-2022-0025,26,27 openssl-src for the 111 stream (#1263)" (#1264) This reverts commit 7cbdcd8500120cb5da62d1e9d1c6a28781008508. --- crates/openssl-src/RUSTSEC-2022-0025.md | 3 ++- crates/openssl-src/RUSTSEC-2022-0026.md | 3 ++- crates/openssl-src/RUSTSEC-2022-0027.md | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/crates/openssl-src/RUSTSEC-2022-0025.md b/crates/openssl-src/RUSTSEC-2022-0025.md index 5cfa27f..cbca0d3 100644 --- a/crates/openssl-src/RUSTSEC-2022-0025.md +++ b/crates/openssl-src/RUSTSEC-2022-0025.md @@ -9,7 +9,8 @@ date = "2022-05-03" url = "https://www.openssl.org/news/secadv/20220503.txt" [versions] -patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"] +patched = [">= 300.0.6"] +unaffected = ["< 300.0"] ``` # Resource leakage when decoding certificates and keys diff --git a/crates/openssl-src/RUSTSEC-2022-0026.md b/crates/openssl-src/RUSTSEC-2022-0026.md index 032efd2..644475d 100644 --- a/crates/openssl-src/RUSTSEC-2022-0026.md +++ b/crates/openssl-src/RUSTSEC-2022-0026.md @@ -9,7 +9,8 @@ date = "2022-05-03" url = "https://www.openssl.org/news/secadv/20220503.txt" [versions] -patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"] +patched = [">= 300.0.6"] +unaffected = ["< 300.0"] ``` # Incorrect MAC key used in the RC4-MD5 ciphersuite diff --git a/crates/openssl-src/RUSTSEC-2022-0027.md b/crates/openssl-src/RUSTSEC-2022-0027.md index 98bc8f3..a6293d0 100644 --- a/crates/openssl-src/RUSTSEC-2022-0027.md +++ b/crates/openssl-src/RUSTSEC-2022-0027.md @@ -9,7 +9,8 @@ date = "2022-05-03" url = "https://www.openssl.org/news/secadv/20220503.txt" [versions] -patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"] +patched = [">= 300.0.6"] +unaffected = ["< 300.0"] ``` # `OCSP_basic_verify` may incorrectly verify the response signing certificate