Commit 5f8665b
committed
chore: bump aws-lc-rs to fix RUSTSEC-2026-0044 and RUSTSEC-2026-0048
Updated aws-lc-rs to address the following cargo audit reports:
Crate: aws-lc-sys
Version: 0.38.0
Title: AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Date: 2026-03-19
ID: RUSTSEC-2026-0044
URL: https://rustsec.org/advisories/RUSTSEC-2026-0044
Solution: Upgrade to >=0.39.0
Dependency tree:
aws-lc-sys 0.38.0
└── aws-lc-rs 1.16.1
└── russh 0.58.0
Crate: aws-lc-sys
Version: 0.38.0
Title: CRL Distribution Point Scope Check Logic Error in AWS-LC
Date: 2026-03-19
ID: RUSTSEC-2026-0048
URL: https://rustsec.org/advisories/RUSTSEC-2026-0048
Severity: 7.4 (high)
Solution: Upgrade to >=0.39.0
Signed-off-by: Roger Knecht <rknecht@pm.me>1 parent 829d385 commit 5f8665b
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | | - | |
| 33 | + | |
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
| |||
0 commit comments