From 7cbdcd8500120cb5da62d1e9d1c6a28781008508 Mon Sep 17 00:00:00 2001 From: "pinkforest(she/her)" <36498018+pinkforest@users.noreply.github.com> Date: Fri, 17 Jun 2022 21:15:51 +1000 Subject: [PATCH] Fix RUSTSEC-2022-0025,26,27 openssl-src for the 111 stream (#1263) * Fix advisory openssl-src 111 stream patched * not a semver * make 111 affected --- crates/openssl-src/RUSTSEC-2022-0025.md | 3 +-- crates/openssl-src/RUSTSEC-2022-0026.md | 3 +-- crates/openssl-src/RUSTSEC-2022-0027.md | 3 +-- 3 files changed, 3 insertions(+), 6 deletions(-) diff --git a/crates/openssl-src/RUSTSEC-2022-0025.md b/crates/openssl-src/RUSTSEC-2022-0025.md index cbca0d3..5cfa27f 100644 --- a/crates/openssl-src/RUSTSEC-2022-0025.md +++ b/crates/openssl-src/RUSTSEC-2022-0025.md @@ -9,8 +9,7 @@ date = "2022-05-03" url = "https://www.openssl.org/news/secadv/20220503.txt" [versions] -patched = [">= 300.0.6"] -unaffected = ["< 300.0"] +patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"] ``` # Resource leakage when decoding certificates and keys diff --git a/crates/openssl-src/RUSTSEC-2022-0026.md b/crates/openssl-src/RUSTSEC-2022-0026.md index 644475d..032efd2 100644 --- a/crates/openssl-src/RUSTSEC-2022-0026.md +++ b/crates/openssl-src/RUSTSEC-2022-0026.md @@ -9,8 +9,7 @@ date = "2022-05-03" url = "https://www.openssl.org/news/secadv/20220503.txt" [versions] -patched = [">= 300.0.6"] -unaffected = ["< 300.0"] +patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"] ``` # Incorrect MAC key used in the RC4-MD5 ciphersuite diff --git a/crates/openssl-src/RUSTSEC-2022-0027.md b/crates/openssl-src/RUSTSEC-2022-0027.md index a6293d0..98bc8f3 100644 --- a/crates/openssl-src/RUSTSEC-2022-0027.md +++ b/crates/openssl-src/RUSTSEC-2022-0027.md @@ -9,8 +9,7 @@ date = "2022-05-03" url = "https://www.openssl.org/news/secadv/20220503.txt" [versions] -patched = [">= 300.0.6"] -unaffected = ["< 300.0"] +patched = [">= 111.20.0, < 300.0.0", ">= 300.0.6"] ``` # `OCSP_basic_verify` may incorrectly verify the response signing certificate