chore: update to openssl 0.10.70 for CVE-2025-24898

freedomofpress · Feb 3, 2025 · 9be6245 · 9be6245
1 parent b6020fa
commit 9be6245
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 9 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
@@ -109,6 +109,16 @@ who = "Kunal Mehta <legoktm@debian.org>"
 criteria = "safe-to-run"
 version = "0.6.3"
 
+[[audits.openssl]]
+who = "Cory Francis Myers <cory@freedom.press>"
+criteria = "safe-to-run"
+delta = "0.10.68 -> 0.10.70"
+
+[[audits.openssl-sys]]
+who = "Cory Francis Myers <cory@freedom.press>"
+criteria = "safe-to-run"
+delta = "0.9.104 -> 0.9.105"
+
 [[audits.petgraph]]
 who = "Kunal Mehta <legoktm@debian.org>"
 criteria = "safe-to-run"

diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
@@ -176,15 +176,15 @@ user-login = "cuviper"
 user-name = "Josh Stone"
 
 [[publisher.openssl]]
-version = "0.10.66"
-when = "2024-07-21"
+version = "0.10.68"
+when = "2024-10-16"
 user-id = 163
 user-login = "alex"
 user-name = "Alex Gaynor"
 
 [[publisher.openssl-sys]]
-version = "0.9.103"
-when = "2024-07-20"
+version = "0.9.104"
+when = "2024-10-16"
 user-id = 163
 user-login = "alex"
 user-name = "Alex Gaynor"