crates.io/bottlerocket/update-operator: medium

bottlerocket dependency openssl is vulnerable to read buffer overflow via X.509 verification

Action: Upgrade bottlerocket/update-operator to 1.1.0 or later.

cargo update -p bottlerocket/update-operator --precise 1.1.0

Affected

Fixed versions

Sources

• osv: GHSA-pj34-fpw3-83qj
• https://github.com/bottlerocket-os/bottlerocket-update-operator/security/advisories/GHSA-pj34-fpw3-83qj
• https://github.com/bottlerocket-os/bottlerocket-update-operator
• https://github.com/bottlerocket-os/bottlerocket-update-operator/releases/tag/v1.1.0
• https://www.openssl.org/news/secadv/20230207.txt

published 2023-02-09T19:31:25Z · modified 2023-02-09T19:31:25Z · JSON