github.com
https://github.com/sfackler/rust-openssl GHSA-XPHF-CX8H-7Q9G
`openssl` `X509StoreRef::objects` is unsound
Description
This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind one's back. Use of this function should be replaced with `X509StoreRef::all_certificates`.
Description source: GitHub Advisory
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
opensslBrowse crates.io / openssl | GitHub Advisory | 0.10.29 to < 0.10.60 · Fixed in 0.10.60 | affected |
References
4github.com
https://github.com/sfackler/rust-openssl/commit/cf9681a55cabd4cb9f1475bde17b5079f2a0384e github.com
https://github.com/sfackler/rust-openssl/issues/2096 rustsec.org
https://rustsec.org/advisories/RUSTSEC-2023-0072.html