MEDIUM
GHSA-xphf-cx8h-7q9g
`openssl` `X509StoreRef::objects` is unsound
Details
This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind one's back.
Use of this function should be replaced with `X509StoreRef::all_certificates`.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/openssl
Introduced in:
0.10.29Fixed in: 0.10.60Upgrade openssl to 0.10.60 or newer (ecosystem crates.io).