Skip to content

Commit 5f8665b

Browse files
committed
chore: bump aws-lc-rs to fix RUSTSEC-2026-0044 and RUSTSEC-2026-0048
Updated aws-lc-rs to address the following cargo audit reports: Crate: aws-lc-sys Version: 0.38.0 Title: AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN Date: 2026-03-19 ID: RUSTSEC-2026-0044 URL: https://rustsec.org/advisories/RUSTSEC-2026-0044 Solution: Upgrade to >=0.39.0 Dependency tree: aws-lc-sys 0.38.0 └── aws-lc-rs 1.16.1 └── russh 0.58.0 Crate: aws-lc-sys Version: 0.38.0 Title: CRL Distribution Point Scope Check Logic Error in AWS-LC Date: 2026-03-19 ID: RUSTSEC-2026-0048 URL: https://rustsec.org/advisories/RUSTSEC-2026-0048 Severity: 7.4 (high) Solution: Upgrade to >=0.39.0 Signed-off-by: Roger Knecht <rknecht@pm.me>
1 parent 829d385 commit 5f8665b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

russh/Cargo.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ _bench = ["dep:criterion"]
3030
[dependencies]
3131
aes.workspace = true
3232
async-trait = { workspace = true, optional = true }
33-
aws-lc-rs = { version = "1.13.1", optional = true }
33+
aws-lc-rs = { version = "1.16.2", optional = true }
3434
bitflags = "2.0"
3535
block-padding = { version = "0.3", features = ["std"] }
3636
byteorder.workspace = true

0 commit comments

Comments
 (0)