Fix RUSTSEC-2022-0025,26,27 openssl-src for the 111 stream (#1263)

* Fix advisory openssl-src 111 stream patched

* not a semver

* make 111 affected
This commit is contained in:
pinkforest(she/her)
2022-06-17 21:15:51 +10:00
committed by GitHub
parent f10f232879
commit 7cbdcd8500
3 changed files with 3 additions and 6 deletions

View File

@@ -9,8 +9,7 @@ date = "2022-05-03"
url = "https://www.openssl.org/news/secadv/20220503.txt"
[versions]
patched = [">= 300.0.6"]
unaffected = ["< 300.0"]
patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"]
```
# Resource leakage when decoding certificates and keys

View File

@@ -9,8 +9,7 @@ date = "2022-05-03"
url = "https://www.openssl.org/news/secadv/20220503.txt"
[versions]
patched = [">= 300.0.6"]
unaffected = ["< 300.0"]
patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"]
```
# Incorrect MAC key used in the RC4-MD5 ciphersuite

View File

@@ -9,8 +9,7 @@ date = "2022-05-03"
url = "https://www.openssl.org/news/secadv/20220503.txt"
[versions]
patched = [">= 300.0.6"]
unaffected = ["< 300.0"]
patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"]
```
# `OCSP_basic_verify` may incorrectly verify the response signing certificate