RUSTSEC-2023-0022: openssl X509NameBuilder::build returned object is not thread safe #179
Description
opensslX509NameBuilder::buildreturned object is not thread safe
| Details | |
|---|---|
| Package | openssl |
| Version | 0.10.38 |
| URL | rust-openssl/rust-openssl#1854 |
| Date | 2023-03-24 |
| Patched versions | >=0.10.48 |
OpenSSL has a modified bit that it can set on on X509_NAME objects. If this
bit is set then the object is not thread-safe even when it appears the code is
not modifying the value.
Thanks to David Benjamin (Google) for reporting this issue.
See advisory page for additional details.