turborepo
ac22a298 - fix: Upgrade openssl to 0.10.75 (#11660)

Commit
18 days ago
fix: Upgrade openssl to 0.10.75 (#11660) ## Summary - Upgrades openssl from 0.10.47 to 0.10.75 - Fixes multiple vulnerabilities: - RUSTSEC-2023-0022: X509NameBuilder::build not thread safe - RUSTSEC-2023-0023: SubjectAlternativeName arbitrary file read - RUSTSEC-2023-0024: X509Extension::new null pointer dereference - RUSTSEC-2023-0044: X509VerifyParamRef::set_host buffer over-read - RUSTSEC-2024-0357: MemBio::get_buf undefined behavior - RUSTSEC-2025-0004: ssl::select_next_proto use after free - RUSTSEC-2025-0022: Use-After-Free in Md::fetch and Cipher::fetch <sub>CLOSES TURBO-5182</sub> <sub>CLOSES TURBO-5183</sub> <sub>CLOSES TURBO-5184</sub> <sub>CLOSES TURBO-5185</sub> <sub>CLOSES TURBO-5186</sub> <sub>CLOSES TURBO-5187</sub> <sub>CLOSES TURBO-5188</sub>
Author
Parents
Loading