chore(deps): update rust crate openssl to 0.10.57 #1497
Security advisories found
1 advisory(ies), 1 unmaintained, 1 other
Details
Vulnerabilities
RUSTSEC-2023-0052
webpki: CPU denial of service in certificate path building
| Details | |
|---|---|
| Package | webpki |
| Version | 0.22.0 |
| Date | 2023-08-22 |
When this crate is given a pathological certificate chain to validate, it will
spend CPU time exponential with the number of candidate certificates at each
step of path building.
Both TLS clients and TLS servers that accept client certificate are affected.
This was previously reported in
<briansmith/webpki#69> and re-reported recently
by Luke Malinowski.
rustls-webpki is a fork of this crate which contains a fix for this issue
and is actively maintained.
Warnings
RUSTSEC-2021-0139
ansi_term is Unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | ansi_term |
| Version | 0.12.1 |
| URL | ogham/rust-ansi-term#72 |
| Date | 2021-08-18 |
The maintainer has advised that this crate is deprecated and will not receive any maintenance.
The crate does not seem to have much dependencies and may or may not be ok to use as-is.
Last release seems to have been three years ago.
Possible Alternative(s)
The below list has not been vetted in any way and may or may not contain alternatives;