Merge pull request #307 from himmelblau-idm/stable-0.7.x_CVE-2024-11738

Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
himmelblau-idm · Dec 2, 2024 · b48d0bb · b48d0bb
2 parents 38988ad + e900b6d
commit b48d0bb
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Cargo.toml b/Cargo.toml
@@ -19,7 +19,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.7.6"
+version = "0.7.7"
 authors = [
     "David Mulder <[email protected]>"
 ]
@@ -55,6 +55,7 @@ jsonwebtoken = "^9.2.0"
 zeroize = "^1.7.0"
 idmap = { path = "src/idmap" }
 identity_dbus_broker = "0.1.3"
+rustls = ">=0.23.19" # CVE-2024-11738
 
 # Kanidm deps
 argon2 = { version = "0.5.2", features = ["alloc"] }