search

stackabletech / stackablectl

Commandline tool to interact with a Stackable Data Platform
Other
8 stars 1 forks source link

chore(deps): update rust crate openssl to v0.10.60 [security] #295

Open stackable-bot opened 7 months ago

stackable-bot commented 7 months ago

This PR contains the following updates:

Package Type Update Change
openssl dependencies patch 0.10.45 -> 0.10.60

GitHub Vulnerability Alerts

GHSA-9qwg-crg9-m2vc

SubjectAlternativeName and ExtendedKeyUsage arguments were parsed using the OpenSSL function X509V3_EXT_nconf. This function parses all input using an OpenSSL mini-language which can perform arbitrary file reads.

Thanks to David Benjamin (Google) for reporting this issue.

GHSA-6hcf-g6gr-hhcr

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

GHSA-3gxf-9r58-2ghg

OpenSSL has a modified bit that it can set on on X509_NAME objects. If this bit is set then the object is not thread-safe even when it appears the code is not modifying the value.

Thanks to David Benjamin (Google) for reporting this issue.

GHSA-xcf7-rvmh-g6q4

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte.

GHSA-xphf-cx8h-7q9g

This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind one's back.

Use of this function should be replaced with X509StoreRef::all_certificates.

Release Notes

sfackler/rust-openssl (openssl) ### [`v0.10.60`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.60) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.59...openssl-v0.10.60) #### What's Changed - Correct off-by-one in minimum output buffer size computation by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2088](https://togithub.com/sfackler/rust-openssl/pull/2088) - Expose a few more (bad) ciphers in cipher::Cipher by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2084](https://togithub.com/sfackler/rust-openssl/pull/2084) - add temp key bindings by [@​jmayclin](https://togithub.com/jmayclin) in [https://github.com/sfackler/rust-openssl/pull/2076](https://togithub.com/sfackler/rust-openssl/pull/2076) - Expose ChaCha20 on LibreSSL by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2093](https://togithub.com/sfackler/rust-openssl/pull/2093) - Revert "Correct off-by-one in minimum output buffer size computation" by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2090](https://togithub.com/sfackler/rust-openssl/pull/2090) - Added `update_unchecked` to `symm::Crypter` by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2100](https://togithub.com/sfackler/rust-openssl/pull/2100) - fixes [#​2096](https://togithub.com/sfackler/rust-openssl/issues/2096) -- deprecate `X509StoreRef::objects`, it is unsound by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2099](https://togithub.com/sfackler/rust-openssl/pull/2099) - Don't leak when overwriting ex data by [@​sfackler](https://togithub.com/sfackler) in [https://github.com/sfackler/rust-openssl/pull/2102](https://togithub.com/sfackler/rust-openssl/pull/2102) - Release openssl v0.10.60 and openssl-sys v0.9.96 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2104](https://togithub.com/sfackler/rust-openssl/pull/2104) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.59...openssl-v0.10.60 ### [`v0.10.59`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.59) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.58...openssl-v0.10.59) #### What's Changed - Add binding to NID of Chacha20-Poly1305 cipher by [@​Arnavion](https://togithub.com/Arnavion) in [https://github.com/sfackler/rust-openssl/pull/2081](https://togithub.com/sfackler/rust-openssl/pull/2081) - Fixed cfg for RSA_PSS by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2079](https://togithub.com/sfackler/rust-openssl/pull/2079) - fixes [#​2050](https://togithub.com/sfackler/rust-openssl/issues/2050) -- build and test on libressl 3.8.2 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2082](https://togithub.com/sfackler/rust-openssl/pull/2082) - Release openssl v0.10.59 and openssl-sys v0.9.95 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2083](https://togithub.com/sfackler/rust-openssl/pull/2083) #### New Contributors - [@​Arnavion](https://togithub.com/Arnavion) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2081](https://togithub.com/sfackler/rust-openssl/pull/2081) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.58...openssl-v0.10.59 ### [`v0.10.58`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.58) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.57...openssl-v0.10.58) #### What's Changed - LibreSSL 3.8.1 support by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2035](https://togithub.com/sfackler/rust-openssl/pull/2035) - Update vendored version to openssl 3 by [@​amousset](https://togithub.com/amousset) in [https://github.com/sfackler/rust-openssl/pull/1925](https://togithub.com/sfackler/rust-openssl/pull/1925) - Test against 3.2.0-alpha1 by [@​sfackler](https://togithub.com/sfackler) in [https://github.com/sfackler/rust-openssl/pull/2037](https://togithub.com/sfackler/rust-openssl/pull/2037) - Removed reference to non-existent method by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2039](https://togithub.com/sfackler/rust-openssl/pull/2039) - Bump CI to 1.1.1w by [@​sfackler](https://togithub.com/sfackler) in [https://github.com/sfackler/rust-openssl/pull/2040](https://togithub.com/sfackler/rust-openssl/pull/2040) - \[openssl-sys] Add X509\_check\_{host,email,ip,ip_asc} fns by [@​jgallagher](https://togithub.com/jgallagher) in [https://github.com/sfackler/rust-openssl/pull/2042](https://togithub.com/sfackler/rust-openssl/pull/2042) - Expose CBC mode for several more (bad) ciphers by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2045](https://togithub.com/sfackler/rust-openssl/pull/2045) - Expose two additional Pkey IDs by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2046](https://togithub.com/sfackler/rust-openssl/pull/2046) - Add support for CRL extensions and the Authority Information Access eā€¦ by [@​AdmiralGT](https://togithub.com/AdmiralGT) in [https://github.com/sfackler/rust-openssl/pull/2003](https://togithub.com/sfackler/rust-openssl/pull/2003) - Fix clippy warnings produced by newer Rust by [@​wiktor-k](https://togithub.com/wiktor-k) in [https://github.com/sfackler/rust-openssl/pull/2052](https://togithub.com/sfackler/rust-openssl/pull/2052) - Use osslconf on BoringSSL by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2056](https://togithub.com/sfackler/rust-openssl/pull/2056) - Make X509\_ALGOR opaque for LibreSSL by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2060](https://togithub.com/sfackler/rust-openssl/pull/2060) - Don't ignore ECDSA tests without GF2m support by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2061](https://togithub.com/sfackler/rust-openssl/pull/2061) - Clarify 'possible LibreSSL bug' by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2062](https://togithub.com/sfackler/rust-openssl/pull/2062) - Enable BN_mod_sqrt() for upcoming LibreSSL 3.8.2 by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2063](https://togithub.com/sfackler/rust-openssl/pull/2063) - Enable SHA-3 for LibreSSL 3.8.0 by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2064](https://togithub.com/sfackler/rust-openssl/pull/2064) - Remove DH_generate_parameters for LibreSSL 3.8.2 by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2065](https://togithub.com/sfackler/rust-openssl/pull/2065) - Use EVP_MD_CTX\_{new,free}() in LibreSSL 3.8.2 by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2067](https://togithub.com/sfackler/rust-openssl/pull/2067) - Enable HKDF support for LibreSSL >= 3.6.0 by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2066](https://togithub.com/sfackler/rust-openssl/pull/2066) - Two build script fixes for LibreSSL by [@​botovq](https://togithub.com/botovq) in [https://github.com/sfackler/rust-openssl/pull/2068](https://togithub.com/sfackler/rust-openssl/pull/2068) - Respect OPENSSL_NO_OCB on AES functions by [@​GuyLewin](https://togithub.com/GuyLewin) in [https://github.com/sfackler/rust-openssl/pull/2070](https://togithub.com/sfackler/rust-openssl/pull/2070) - Support OPENSSL_NO_SCRYPT by [@​GuyLewin](https://togithub.com/GuyLewin) in [https://github.com/sfackler/rust-openssl/pull/2071](https://togithub.com/sfackler/rust-openssl/pull/2071) - Bump 3.2.0 beta by [@​sfackler](https://togithub.com/sfackler) in [https://github.com/sfackler/rust-openssl/pull/2073](https://togithub.com/sfackler/rust-openssl/pull/2073) - add security level bindings by [@​jmayclin](https://togithub.com/jmayclin) in [https://github.com/sfackler/rust-openssl/pull/2074](https://togithub.com/sfackler/rust-openssl/pull/2074) - Release openssl v0.10.58 and openssl-sys v0.9.94 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2078](https://togithub.com/sfackler/rust-openssl/pull/2078) #### New Contributors - [@​amousset](https://togithub.com/amousset) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1925](https://togithub.com/sfackler/rust-openssl/pull/1925) - [@​jgallagher](https://togithub.com/jgallagher) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2042](https://togithub.com/sfackler/rust-openssl/pull/2042) - [@​AdmiralGT](https://togithub.com/AdmiralGT) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2003](https://togithub.com/sfackler/rust-openssl/pull/2003) - [@​botovq](https://togithub.com/botovq) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2060](https://togithub.com/sfackler/rust-openssl/pull/2060) - [@​GuyLewin](https://togithub.com/GuyLewin) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2070](https://togithub.com/sfackler/rust-openssl/pull/2070) - [@​jmayclin](https://togithub.com/jmayclin) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2074](https://togithub.com/sfackler/rust-openssl/pull/2074) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.57...openssl-v0.10.58 ### [`v0.10.57`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.57) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.56...openssl-v0.10.57) #### What's Changed - Expose chacha20\_poly1305 on LibreSSL by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2011](https://togithub.com/sfackler/rust-openssl/pull/2011) - Add openssl::cipher_ctx::CipherCtx::clone by [@​johntyner](https://togithub.com/johntyner) in [https://github.com/sfackler/rust-openssl/pull/2017](https://togithub.com/sfackler/rust-openssl/pull/2017) - Add X509VerifyParam::set_email by [@​dhouck](https://togithub.com/dhouck) in [https://github.com/sfackler/rust-openssl/pull/2018](https://togithub.com/sfackler/rust-openssl/pull/2018) - Add perl-FindBin dep for fedora by [@​JadedBlueEyes](https://togithub.com/JadedBlueEyes) in [https://github.com/sfackler/rust-openssl/pull/2023](https://togithub.com/sfackler/rust-openssl/pull/2023) - Update to bitflags 2.2.1. by [@​qwandor](https://togithub.com/qwandor) in [https://github.com/sfackler/rust-openssl/pull/1906](https://togithub.com/sfackler/rust-openssl/pull/1906) - Release openssl v0.10.57 and openssl-sys v0.9.92 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/2025](https://togithub.com/sfackler/rust-openssl/pull/2025) #### New Contributors - [@​johntyner](https://togithub.com/johntyner) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2017](https://togithub.com/sfackler/rust-openssl/pull/2017) - [@​dhouck](https://togithub.com/dhouck) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2018](https://togithub.com/sfackler/rust-openssl/pull/2018) - [@​JadedBlueEyes](https://togithub.com/JadedBlueEyes) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/2023](https://togithub.com/sfackler/rust-openssl/pull/2023) - [@​qwandor](https://togithub.com/qwandor) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1906](https://togithub.com/sfackler/rust-openssl/pull/1906) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.56...openssl-v0.10.57 ### [`v0.10.56`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.56): openssl v0.10.56 [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.55...openssl-v0.10.56) ### [`v0.10.55`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.55) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.54...openssl-v0.10.55) #### What's Changed - Fix warnings from BoringSSL on Rust 1.70 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1948](https://togithub.com/sfackler/rust-openssl/pull/1948) - Honor OPENSSL_NO_OCB if OpenSSL was built this way by [@​davidben](https://togithub.com/davidben) in [https://github.com/sfackler/rust-openssl/pull/1952](https://togithub.com/sfackler/rust-openssl/pull/1952) - Fix some deprecated patterns when using BoringSSL by [@​davidben](https://togithub.com/davidben) in [https://github.com/sfackler/rust-openssl/pull/1945](https://togithub.com/sfackler/rust-openssl/pull/1945) - add get_asn1\_flag to EcGroupRef by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1947](https://togithub.com/sfackler/rust-openssl/pull/1947) - Fixed type mutability on asn1\_flag by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1954](https://togithub.com/sfackler/rust-openssl/pull/1954) - allow affine_coordinates on boring and libre by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1955](https://togithub.com/sfackler/rust-openssl/pull/1955) - add support for EVP_PKEY_derive_set_peer_ex in OpenSSL 3 by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1956](https://togithub.com/sfackler/rust-openssl/pull/1956) - Use type-safe wrappers instead of EVP_PKEY_assign by [@​davidben](https://togithub.com/davidben) in [https://github.com/sfackler/rust-openssl/pull/1959](https://togithub.com/sfackler/rust-openssl/pull/1959) - add Nid::SM2 and pkey Id::SM2 by [@​zh-jq](https://togithub.com/zh-jq) in [https://github.com/sfackler/rust-openssl/pull/1962](https://togithub.com/sfackler/rust-openssl/pull/1962) - Fix handling of empty host strings by [@​sfackler](https://togithub.com/sfackler) in [https://github.com/sfackler/rust-openssl/pull/1968](https://togithub.com/sfackler/rust-openssl/pull/1968) - Remove old codes that belows supported Rust version. by [@​tesuji](https://togithub.com/tesuji) in [https://github.com/sfackler/rust-openssl/pull/1966](https://togithub.com/sfackler/rust-openssl/pull/1966) - Release openssl v0.10.55 and openssl-sys v0.9.89 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1970](https://togithub.com/sfackler/rust-openssl/pull/1970) #### New Contributors - [@​davidben](https://togithub.com/davidben) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1952](https://togithub.com/sfackler/rust-openssl/pull/1952) - [@​tesuji](https://togithub.com/tesuji) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1966](https://togithub.com/sfackler/rust-openssl/pull/1966) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.54...openssl-v0.10.55 ### [`v0.10.54`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.54) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.53...openssl-v0.10.54) #### What's Changed - Remove converting [PKCS#8](https://togithub.com/PKCS/rust-openssl/issues/8) passphrase to CString by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1941](https://togithub.com/sfackler/rust-openssl/pull/1941) - Version bump for openssl v0.10.54 release by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1942](https://togithub.com/sfackler/rust-openssl/pull/1942) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.53...openssl-v0.10.54 ### [`v0.10.53`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.53) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.52...openssl-v0.10.53) #### What's Changed - Check for OPENSSL_NO_RC4 when using EVP_rc4 by [@​oskirby](https://togithub.com/oskirby) in [https://github.com/sfackler/rust-openssl/pull/1910](https://togithub.com/sfackler/rust-openssl/pull/1910) - Fix link errors for X509\_get0\_authority_xxx methods on Ubuntu/bionic by [@​oskirby](https://togithub.com/oskirby) in [https://github.com/sfackler/rust-openssl/pull/1909](https://togithub.com/sfackler/rust-openssl/pull/1909) - add X509::pathlen by [@​zh-jq-b](https://togithub.com/zh-jq-b) in [https://github.com/sfackler/rust-openssl/pull/1916](https://togithub.com/sfackler/rust-openssl/pull/1916) - Add bindings to SSL_bytes_to_cipher_list by [@​RoastVeg](https://togithub.com/RoastVeg) in [https://github.com/sfackler/rust-openssl/pull/1921](https://togithub.com/sfackler/rust-openssl/pull/1921) - Add boringssl hkdf derivation by [@​AndrewScull](https://togithub.com/AndrewScull) in [https://github.com/sfackler/rust-openssl/pull/1926](https://togithub.com/sfackler/rust-openssl/pull/1926) - add other name support by [@​huettner94](https://togithub.com/huettner94) in [https://github.com/sfackler/rust-openssl/pull/1915](https://togithub.com/sfackler/rust-openssl/pull/1915) - LibreSSL 3.8.0 by [@​vishwin](https://togithub.com/vishwin) in [https://github.com/sfackler/rust-openssl/pull/1935](https://togithub.com/sfackler/rust-openssl/pull/1935) - add Dsa with some helper functions by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1937](https://togithub.com/sfackler/rust-openssl/pull/1937) - reimplement Dsa::generate in terms of generate_params/generate_key by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1938](https://togithub.com/sfackler/rust-openssl/pull/1938) - Added DER serialization for `DSAPrivateKey` by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1939](https://togithub.com/sfackler/rust-openssl/pull/1939) - version bump 0.9.88 and 0.10.53 by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1940](https://togithub.com/sfackler/rust-openssl/pull/1940) #### New Contributors - [@​oskirby](https://togithub.com/oskirby) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1910](https://togithub.com/sfackler/rust-openssl/pull/1910) - [@​zh-jq-b](https://togithub.com/zh-jq-b) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1916](https://togithub.com/sfackler/rust-openssl/pull/1916) - [@​RoastVeg](https://togithub.com/RoastVeg) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1921](https://togithub.com/sfackler/rust-openssl/pull/1921) - [@​huettner94](https://togithub.com/huettner94) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1915](https://togithub.com/sfackler/rust-openssl/pull/1915) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.52...openssl-v0.10.53 ### [`v0.10.52`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.52) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.51...openssl-v0.10.52) #### What's Changed - Expose BigNum::to_vec_padded on libressl and boringssl by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1895](https://togithub.com/sfackler/rust-openssl/pull/1895) - add support for DH check key by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1896](https://togithub.com/sfackler/rust-openssl/pull/1896) - add poly1305 EVP_PKEY type by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1897](https://togithub.com/sfackler/rust-openssl/pull/1897) - Don't restrict the Signer lifetime by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1898](https://togithub.com/sfackler/rust-openssl/pull/1898) - add low level cmac bindings by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1899](https://togithub.com/sfackler/rust-openssl/pull/1899) - Expose pbkdf2\_hmac and scrypt on BoringSSL by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1900](https://togithub.com/sfackler/rust-openssl/pull/1900) - binding to get fips status for ossl300 by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1901](https://togithub.com/sfackler/rust-openssl/pull/1901) - add more x509 extension helper functions by [@​zh-jq](https://togithub.com/zh-jq) in [https://github.com/sfackler/rust-openssl/pull/1887](https://togithub.com/sfackler/rust-openssl/pull/1887) - changelog and version bumps for openssl and openssl-sys by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1905](https://togithub.com/sfackler/rust-openssl/pull/1905) #### New Contributors - [@​zh-jq](https://togithub.com/zh-jq) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1887](https://togithub.com/sfackler/rust-openssl/pull/1887) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.51...openssl-v0.10.52 ### [`v0.10.51`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.51) [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.50...openssl-v0.10.51) #### What's Changed - update documentation to reflect libressl support by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1876](https://togithub.com/sfackler/rust-openssl/pull/1876) - Add issuer_name and reason_code to X509RevokedRef by [@​Skepfyr](https://togithub.com/Skepfyr) in [https://github.com/sfackler/rust-openssl/pull/1847](https://togithub.com/sfackler/rust-openssl/pull/1847) - Preparing openssl-sys for PKCS7 and X509 extensions by [@​bkstein](https://togithub.com/bkstein) in [https://github.com/sfackler/rust-openssl/pull/1789](https://togithub.com/sfackler/rust-openssl/pull/1789) - Fixes [#​1884](https://togithub.com/sfackler/rust-openssl/issues/1884) -- don't leave an error on the stack in public_eq by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1885](https://togithub.com/sfackler/rust-openssl/pull/1885) - Fixes [#​1882](https://togithub.com/sfackler/rust-openssl/issues/1882) -- added APIs for setting public keys on Dh by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1883](https://togithub.com/sfackler/rust-openssl/pull/1883) - DTLS1 and DTLS1\_2 SslVersion for set_min_proto_version() by [@​algesten](https://togithub.com/algesten) in [https://github.com/sfackler/rust-openssl/pull/1886](https://togithub.com/sfackler/rust-openssl/pull/1886) - Remove size_t-is-usize argument to bindgen by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1888](https://togithub.com/sfackler/rust-openssl/pull/1888) - Documentation typo for X509Crl by [@​remigranotier](https://togithub.com/remigranotier) in [https://github.com/sfackler/rust-openssl/pull/1891](https://togithub.com/sfackler/rust-openssl/pull/1891) - \[Documentation] fixed X509Crl and X509Revoked description in doc by [@​remigranotier](https://togithub.com/remigranotier) in [https://github.com/sfackler/rust-openssl/pull/1892](https://togithub.com/sfackler/rust-openssl/pull/1892) - add asn1octetstring creation support by [@​reaperhulk](https://togithub.com/reaperhulk) in [https://github.com/sfackler/rust-openssl/pull/1893](https://togithub.com/sfackler/rust-openssl/pull/1893) - Introduce X509Extension::new_from_der and deprecate the bad APIs by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1880](https://togithub.com/sfackler/rust-openssl/pull/1880) - Release openssl v0.10.51 and openssl-sys v0.9.86 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1894](https://togithub.com/sfackler/rust-openssl/pull/1894) #### New Contributors - [@​algesten](https://togithub.com/algesten) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1886](https://togithub.com/sfackler/rust-openssl/pull/1886) - [@​remigranotier](https://togithub.com/remigranotier) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1891](https://togithub.com/sfackler/rust-openssl/pull/1891) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.50...openssl-v0.10.51 ### [`v0.10.50`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.50): openssl v0.10.50 [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.49...openssl-v0.10.50) ### [`v0.10.49`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.49): openssl v0.10.49 [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.48...openssl-v0.10.49) ### [`v0.10.48`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.48): openssl v0.10.48 [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.47...openssl-v0.10.48) #### What's Changed - Fix LibreSSL version checking in openssl/ by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1851](https://togithub.com/sfackler/rust-openssl/pull/1851) - Skip a test that hangs on OpenSSL 3.1.0 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1850](https://togithub.com/sfackler/rust-openssl/pull/1850) - Improve reliability of some tests by [@​smoelius](https://togithub.com/smoelius) in [https://github.com/sfackler/rust-openssl/pull/1852](https://togithub.com/sfackler/rust-openssl/pull/1852) - Fix a series of security issues by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1854](https://togithub.com/sfackler/rust-openssl/pull/1854) - Release openssl v0.10.48 and openssl-sys v0.9.83 by [@​alex](https://togithub.com/alex) in [https://github.com/sfackler/rust-openssl/pull/1855](https://togithub.com/sfackler/rust-openssl/pull/1855) #### New Contributors - [@​smoelius](https://togithub.com/smoelius) made their first contribution in [https://github.com/sfackler/rust-openssl/pull/1852](https://togithub.com/sfackler/rust-openssl/pull/1852) **Full Changelog**: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.47...openssl-v0.10.48 ### [`v0.10.47`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.47): openssl v0.10.47 [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.46...openssl-v0.10.47) ### [`v0.10.46`](https://togithub.com/sfackler/rust-openssl/releases/tag/openssl-v0.10.46): openssl v0.10.46 [Compare Source](https://togithub.com/sfackler/rust-openssl/compare/openssl-v0.10.45...openssl-v0.10.46)

Configuration

šŸ“… Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

šŸš¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.

ā™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

šŸ”• Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Renovate Bot.