Преглед изворни кода

v2.0: ignore openssl audit (#4743)

Yihau Chen пре 9 месеци
родитељ
комит
3dccb3e785
1 измењених фајлова са 11 додато и 0 уклоњено
  1. 11 0
      ci/do-audit.sh

+ 11 - 0
ci/do-audit.sh

@@ -50,6 +50,17 @@ cargo_audit_ignores=(
   # the server to exit cleanly on accepting a tcp/tls stream.
   # Ignoring because we do not use this functionality.
   --ignore RUSTSEC-2024-0376
+
+  # Crate:     openssl
+  # Version:   0.10.68
+  # Title:     ssl::select_next_proto use after free
+  # Date:      2025-02-02
+  # ID:        RUSTSEC-2025-0004
+  # URL:       https://rustsec.org/advisories/RUSTSEC-2025-0004
+  # Solution:  Upgrade to >=0.10.70
+  # Dependency tree:
+  # openssl 0.10.68
+  --ignore RUSTSEC-2025-0004
 )
 scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter
 # we want the `cargo audit` exit code, not `$dep_tree_filter`'s