vmware-labs / webassembly-language-runtimes

Wasm Language Runtimes provides popular language runtimes (Ruby, Python, …) precompiled to WebAssembly that are tested for compatibility and kept up to date when new versions of upstream languages are released
Apache License 2.0
337 stars 29 forks source link

fix: Remove security issue from openssl<0.10.60 #127

Closed assambar closed 11 months ago

assambar commented 11 months ago

Also, update all dependencies to latest versions.

The security fix is to remove openssl dependency in favor of rust-tls. It's propagated through several packages and none of them had the necessary update to >= 0.10.60.

Instead of posting update PRs for all on the dependency chain, I decided to cut it.

fixes https://github.com/vmware-labs/webassembly-language-runtimes/security/dependabot/13