Request RUSTSEC for resolved UAF in OpenSSL

This commit is contained in:
Alex Gaynor
2018-12-10 19:48:20 -05:00
committed by GitHub
parent d364848782
commit dc704601c0

View File

@@ -0,0 +1,20 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "openssl"
date = "2018-06-01"
title = "Use after free in CMS Signing"
description = """
Affected versions of the OpenSSL crate used structures after they'd been freed.
"""
patched_versions = [">= 0.10.9"]
unaffected_versions = ["< 0.10.8"]
url = "https://github.com/sfackler/rust-openssl/pull/942"
keywords = ["memory-corruption"]