CRITICAL9.8
GHSA-xjxc-vfw2-cg96
Use after free in openssl
Details
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/openssl
Introduced in:
0.10.8Fixed in: 0.10.9Upgrade openssl to 0.10.9 or newer (ecosystem crates.io).