misc: fix openssl's vulnerability for tauri

Trivy scaned one vulnerability three days ago and we fixed it now.

The title for vulnerability is openssl's `MemBio:get_buf` has undefined
behavior with empty buffers.

I tested through building configurator, launching it and generating
scenario.xml & launch scripts. I confirmed the result is correct.

Signed-off-by: dongpingx <dongpingx.wu@intel.com>
Tracked-On: #8668
This commit is contained in:
dongpingx 2024-07-25 15:52:48 +08:00 committed by acrnsi-robot
parent 2dc56a8f23
commit 4924766b67
2 changed files with 6 additions and 4 deletions

View File

@ -10,6 +10,7 @@ dependencies = [
"glob",
"itertools",
"log",
"openssl",
"serde",
"serde_json",
"tauri",
@ -2252,9 +2253,9 @@ dependencies = [
[[package]]
name = "openssl"
version = "0.10.60"
version = "0.10.66"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "79a4c6c3a2b158f7f8f2a2fc5a969fa3a068df6fc9dbb4a43845436e3af7c800"
checksum = "9529f4786b70a3e8c61e11179af17ab6188ad8d0ded78c5529441ed39d4bd9c1"
dependencies = [
"bitflags 2.4.1",
"cfg-if",
@ -2284,9 +2285,9 @@ checksum = "ff011a302c396a5197692431fc1948019154afc178baf7d8e37367442a4601cf"
[[package]]
name = "openssl-sys"
version = "0.9.96"
version = "0.9.103"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "3812c071ba60da8b5677cc12bcb1d42989a65553772897a7e0355545a819838f"
checksum = "7f9e8deee91df40a943c71b917e5874b951d32a802526c85721ce3b776c929d6"
dependencies = [
"cc",
"libc",

View File

@ -15,6 +15,7 @@ rust-version = "1.57"
tauri-build = { version = "1.5.2", features = [] }
[dependencies]
openssl = "0.10.66" # fix vulnerability only
serde_json = "1.0.81"
serde = { version = "1.0.137", features = ["derive"] }
tauri = { version = "1.6.7", features = ["api-all", "devtools"] }