Skip to content

Bump aws-lc-rs to fix RUSTSEC-2026-0044 and RUSTSEC-2026-0048 - #681

Merged
Eugeny merged 1 commit into
Eugeny:mainfrom
rogkne:update-aws-lc-sys
Mar 26, 2026
Merged

Bump aws-lc-rs to fix RUSTSEC-2026-0044 and RUSTSEC-2026-0048#681
Eugeny merged 1 commit into
Eugeny:mainfrom
rogkne:update-aws-lc-sys

Conversation

@rogkne

@rogkne rogkne commented Mar 25, 2026

Copy link
Copy Markdown
Contributor

Updated aws-lc-rs to address the following cargo audit reports:

Crate:     aws-lc-sys
Version:   0.38.0
Title:     AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Date:      2026-03-19
ID:        RUSTSEC-2026-0044
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0044
Solution:  Upgrade to >=0.39.0
Dependency tree:
aws-lc-sys 0.38.0
└── aws-lc-rs 1.16.1
		└── russh 0.58.0

Crate:     aws-lc-sys
Version:   0.38.0
Title:     CRL Distribution Point Scope Check Logic Error in AWS-LC
Date:      2026-03-19
ID:        RUSTSEC-2026-0048
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0048
Severity:  7.4 (high)
Solution:  Upgrade to >=0.39.0

Updated aws-lc-rs to address the following cargo audit reports:

	Crate:     aws-lc-sys
	Version:   0.38.0
	Title:     AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
	Date:      2026-03-19
	ID:        RUSTSEC-2026-0044
	URL:       https://rustsec.org/advisories/RUSTSEC-2026-0044
	Solution:  Upgrade to >=0.39.0
	Dependency tree:
	aws-lc-sys 0.38.0
	└── aws-lc-rs 1.16.1
			└── russh 0.58.0

	Crate:     aws-lc-sys
	Version:   0.38.0
	Title:     CRL Distribution Point Scope Check Logic Error in AWS-LC
	Date:      2026-03-19
	ID:        RUSTSEC-2026-0048
	URL:       https://rustsec.org/advisories/RUSTSEC-2026-0048
	Severity:  7.4 (high)
	Solution:  Upgrade to >=0.39.0

Signed-off-by: Roger Knecht <rknecht@pm.me>
@Eugeny

Eugeny commented Mar 26, 2026

Copy link
Copy Markdown
Owner

Thank you!

@Eugeny
Eugeny merged commit bcdc9b9 into Eugeny:main Mar 26, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants