From 16ea52584fc1f7f6f663d86b750bd6f4b7efcccb Mon Sep 17 00:00:00 2001 From: Ngo Quoc Dat Date: Wed, 21 Oct 2026 04:12:27 +0700 Subject: [PATCH] build(linux): take rustls-webpki 0.103.16 and webpki-roots 1.0.10 for RUSTSEC-2026-0381 and 0382 --- linux/Cargo.lock | 8 ++++---- linux/build-aux/debian/copyright | 4 ++-- linux/data/licenses/THIRD-PARTY-NOTICE.md | 4 ++-- linux/data/licenses/third-party.json | 8 ++++---- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/linux/Cargo.lock b/linux/Cargo.lock index 46d73fb052..1d2eaced43 100644 --- a/linux/Cargo.lock +++ b/linux/Cargo.lock @@ -3603,9 +3603,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f" [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "aws-lc-rs", "ring", @@ -5492,9 +5492,9 @@ dependencies = [ [[package]] name = "webpki-roots" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a" +checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9" dependencies = [ "rustls-pki-types", ] diff --git a/linux/build-aux/debian/copyright b/linux/build-aux/debian/copyright index 95e8b794e4..68c51d7b12 100644 --- a/linux/build-aux/debian/copyright +++ b/linux/build-aux/debian/copyright @@ -4416,7 +4416,7 @@ License: Apache-2.0 or Expat OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -Files: vendor/rustls-webpki-0.103.15/* +Files: vendor/rustls-webpki-0.103.16/* Copyright: 2015 Brian Smith. License: ISC Except as otherwise noted, this project is licensed under the following @@ -5450,7 +5450,7 @@ License: Expat OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -Files: vendor/webpki-roots-1.0.9/* +Files: vendor/webpki-roots-1.0.10/* Copyright: the authors of webpki-roots License: CDLA-Permissive-2.0 # Community Data License Agreement - Permissive - Version 2.0 diff --git a/linux/data/licenses/THIRD-PARTY-NOTICE.md b/linux/data/licenses/THIRD-PARTY-NOTICE.md index aabf7ea4a2..310140947b 100644 --- a/linux/data/licenses/THIRD-PARTY-NOTICE.md +++ b/linux/data/licenses/THIRD-PARTY-NOTICE.md @@ -1632,7 +1632,7 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Used by: -- webpki-roots 1.0.9 +- webpki-roots 1.0.10 ~~~~text # Community Data License Agreement - Permissive - Version 2.0 @@ -2052,7 +2052,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI Used by: -- rustls-webpki 0.103.15 +- rustls-webpki 0.103.16 ~~~~text Except as otherwise noted, this project is licensed under the following diff --git a/linux/data/licenses/third-party.json b/linux/data/licenses/third-party.json index ad9d96243a..e6b97e1f3c 100644 --- a/linux/data/licenses/third-party.json +++ b/linux/data/licenses/third-party.json @@ -78,7 +78,7 @@ "name": "Community Data License Agreement Permissive 2.0", "text": "# Community Data License Agreement - Permissive - Version 2.0\n\nThis is the Community Data License Agreement - Permissive, Version\n2.0 (the \"agreement\"). Data Provider(s) and Data Recipient(s) agree\nas follows:\n\n## 1. Provision of the Data\n\n1.1. A Data Recipient may use, modify, and share the Data made\navailable by Data Provider(s) under this agreement if that Data\nRecipient follows the terms of this agreement.\n\n1.2. This agreement does not impose any restriction on a Data\nRecipient's use, modification, or sharing of any portions of the\nData that are in the public domain or that may be used, modified,\nor shared under any other legal exception or limitation.\n\n## 2. Conditions for Sharing Data\n\n2.1. A Data Recipient may share Data, with or without modifications, so\nlong as the Data Recipient makes available the text of this agreement\nwith the shared Data.\n\n## 3. No Restrictions on Results\n\n3.1. This agreement does not impose any restriction or obligations\nwith respect to the use, modification, or sharing of Results.\n\n## 4. No Warranty; Limitation of Liability\n\n4.1. All Data Recipients receive the Data subject to the following\nterms:\n\nTHE DATA IS PROVIDED ON AN \"AS IS\" BASIS, WITHOUT REPRESENTATIONS,\nWARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED\nINCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE,\nNON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.\n\nNO DATA PROVIDER SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT,\nINCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING\nWITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF\nLIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING\nNEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE DATA OR RESULTS,\nEVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\n## 5. Definitions\n\n5.1. \"Data\" means the material received by a Data Recipient under\nthis agreement.\n\n5.2. \"Data Provider\" means any person who is the source of Data\nprovided under this agreement and in reliance on a Data Recipient's\nagreement to its terms.\n\n5.3. \"Data Recipient\" means any person who receives Data directly\nor indirectly from a Data Provider and agrees to the terms of this\nagreement.\n\n5.4. \"Results\" means any outcome obtained by computational analysis\nof Data, including for example machine learning models and models'\ninsights.\n", "used_by": [ - { "crate": { "name": "webpki-roots", "version": "1.0.9" } } + { "crate": { "name": "webpki-roots", "version": "1.0.10" } } ] }, { @@ -102,7 +102,7 @@ "name": "ISC License", "text": "Except as otherwise noted, this project is licensed under the following\n(ISC-style) terms:\n\nCopyright 2015 Brian Smith.\n\nPermission to use, copy, modify, and/or distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHORS DISCLAIM ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\nThe files under third-party/chromium are licensed as described in\nthird-party/chromium/LICENSE.\n", "used_by": [ - { "crate": { "name": "rustls-webpki", "version": "0.103.15" } } + { "crate": { "name": "rustls-webpki", "version": "0.103.16" } } ] }, { @@ -1702,7 +1702,7 @@ { "name": "rustls-native-certs", "version": "0.8.4", "license": "Apache-2.0 OR ISC OR MIT" }, { "name": "rustls-pki-types", "version": "1.15.1", "license": "MIT OR Apache-2.0" }, { "name": "rustls-platform-verifier", "version": "0.7.0", "license": "MIT OR Apache-2.0" }, - { "name": "rustls-webpki", "version": "0.103.15", "license": "ISC" }, + { "name": "rustls-webpki", "version": "0.103.16", "license": "ISC" }, { "name": "rustversion", "version": "1.0.23", "license": "MIT OR Apache-2.0" }, { "name": "ryu", "version": "1.0.23", "license": "Apache-2.0 OR BSL-1.0" }, { "name": "scopeguard", "version": "1.2.0", "license": "MIT OR Apache-2.0" }, @@ -1783,7 +1783,7 @@ { "name": "utf8_iter", "version": "1.0.4", "license": "Apache-2.0 OR MIT" }, { "name": "uuid", "version": "1.26.1", "license": "Apache-2.0 OR MIT" }, { "name": "want", "version": "0.3.1", "license": "MIT" }, - { "name": "webpki-roots", "version": "1.0.9", "license": "CDLA-Permissive-2.0" }, + { "name": "webpki-roots", "version": "1.0.10", "license": "CDLA-Permissive-2.0" }, { "name": "whoami", "version": "2.1.3", "license": "Apache-2.0 OR BSL-1.0 OR MIT" }, { "name": "winnow", "version": "0.7.15", "license": "MIT" }, { "name": "winnow", "version": "1.0.4", "license": "MIT" },