starred/EasyTier
1
0
Fork 0
mirror of https://github.com/EasyTier/EasyTier.git synced 2026-10-26 16:00:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): bump rustls stack for eMudhra CA distrust + rustls 0.23.46 advisories (#2751)

Browse Source 
- rustls 0.23.45 -> 0.23.46 (RUSTSEC-2026-0346, -0347, -0348, -0349)
- rustls-webpki 0.103.15 -> 0.103.16
- webpki-roots 1.0.9 -> 1.0.11
- webpki-root-certs 1.0.9 -> 1.0.11

  RUSTSEC-2026-0381 / RUSTSEC-2026-0382 / RUSTSEC-2026-0383,
  CVE-2026-111943: compromised eMudhra emSign intermediate CA keys.
  Disclosure: https://emudhra.we-have-a-problem.com/
  Mozilla bug 2083449.

- zip 8.6.0 audited against RUSTSEC-2026-0367 / -0368 / -0369: no
  ZipArchive::extract / ZipStreamReader::extract usage in this repo,
  vulnerable extraction paths not reachable, no bump needed.

Cargo.lock only; no source changes.

Co-authored-by: minc-nice-100 <minc-nice-100@users.noreply.github.com>
This commit is contained in:
minc_nice_100
2026-10-25 12:55:20 +08:00
committed by GitHub
co-authored by minc-nice-100
parent 7f2e9dddf2
commit ffcfba4afd
1 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Cargo.lock
Generated
+12 -12
View File
@@ -2702,7 +2702,7 @@ dependencies = [
"url",
"uuid",
"wasm-bindgen",
"webpki-roots 1.0.9",
"webpki-roots 1.0.11",
"wildmatch",
"x25519-dalek 2.0.1",
"zerocopy 0.7.35",
@@ -8064,9 +8064,9 @@ dependencies = [
[[package]]
name = "rustls"
version = "0.23.45"
version = "0.23.46"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
dependencies = [
"aws-lc-rs",
"once_cell",
@@ -8128,9 +8128,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
[[package]]
name = "rustls-webpki"
version = "0.103.15"
version = "0.103.16"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281"
dependencies = [
"aws-lc-rs",
"ring",
@@ -9902,7 +9902,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
dependencies = [
"fastrand",
"getrandom 0.4.3",
"getrandom 0.3.4",
"once_cell",
"rustix 1.1.5",
"windows-sys 0.61.2",
@@ -10190,7 +10190,7 @@ dependencies = [
"tokio",
"tokio-rustls",
"tokio-util",
"webpki-roots 1.0.9",
"webpki-roots 1.0.11",
]
[[package]]
@@ -11222,9 +11222,9 @@ dependencies = [
[[package]]
name = "webpki-root-certs"
version = "1.0.9"
version = "1.0.11"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b"
checksum = "e49d0e65abc00c142e8f9428da991da9f1a250c39be97459901eb12b9b49f62a"
dependencies = [
"rustls-pki-types",
]
@@ -11235,14 +11235,14 @@ version = "0.26.11"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
dependencies = [
"webpki-roots 1.0.9",
"webpki-roots 1.0.11",
]
[[package]]
name = "webpki-roots"
version = "1.0.9"
version = "1.0.11"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a"
checksum = "f5f280bbb2b287bc8e7de7e3852945a0ff50d1bbcb5ed42b6c7a568c546df171"
dependencies = [
"rustls-pki-types",
]