From 8e31b766a4c9aecf0a09bcbc10c699bf851b0a45 Mon Sep 17 00:00:00 2001 From: Matt Van Horn Date: Tue, 12 May 2026 20:04:08 -0700 Subject: [PATCH] chore(deps): cargo update lockfiles to patch openssl + rand CVEs (#1581) Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com> Co-authored-by: Steven Enamakel --- Cargo.lock | 30 +++++++++++++++--------------- app/src-tauri/Cargo.lock | 32 ++++++++++++++++---------------- 2 files changed, 31 insertions(+), 31 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index b3d64c37a..6dbb703fc 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1797,7 +1797,7 @@ dependencies = [ "hyper", "hyper-util", "pin-project-lite", - "rand 0.8.5", + "rand 0.8.6", "serde", "serde_json", "smallvec", @@ -3710,7 +3710,7 @@ dependencies = [ "js_option", "matrix-sdk-common", "pbkdf2", - "rand 0.8.5", + "rand 0.8.6", "rmp-serde", "ruma", "serde", @@ -3800,7 +3800,7 @@ dependencies = [ "getrandom 0.2.17", "hmac 0.12.1", "pbkdf2", - "rand 0.8.5", + "rand 0.8.6", "rmp-serde", "serde", "serde_json", @@ -4165,7 +4165,7 @@ dependencies = [ "chrono", "getrandom 0.2.17", "http 1.4.0", - "rand 0.8.5", + "rand 0.8.6", "reqwest 0.12.28", "serde", "serde_json", @@ -4627,9 +4627,9 @@ dependencies = [ [[package]] name = "openssl" -version = "0.10.77" +version = "0.10.78" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "bfe4646e360ec77dff7dde40ed3d6c5fee52d156ef4a62f53973d38294dad87f" +checksum = "f38c4372413cdaaf3cc79dd92d29d7d9f5ab09b51b10dded508fb90bb70b9222" dependencies = [ "bitflags 2.11.1", "cfg-if", @@ -4659,9 +4659,9 @@ checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe" [[package]] name = "openssl-sys" -version = "0.9.113" +version = "0.9.114" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ad2f2c0eba47118757e4c6d2bff2838f3e0523380021356e7875e858372ce644" +checksum = "13ce1245cd07fcc4cfdb438f7507b0c7e4f3849a69fd84d52374c66d83741bb6" dependencies = [ "cc", "libc", @@ -4906,7 +4906,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d" dependencies = [ "phf_shared 0.11.3", - "rand 0.8.5", + "rand 0.8.6", ] [[package]] @@ -5431,9 +5431,9 @@ dependencies = [ [[package]] name = "rand" -version = "0.8.5" +version = "0.8.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404" +checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a" dependencies = [ "libc", "rand_chacha 0.3.1", @@ -5837,7 +5837,7 @@ dependencies = [ "js_int", "konst", "percent-encoding", - "rand 0.8.5", + "rand 0.8.6", "regex", "ruma-identifiers-validation", "ruma-macros", @@ -5948,7 +5948,7 @@ dependencies = [ "base64", "ed25519-dalek", "pkcs8", - "rand 0.8.5", + "rand 0.8.6", "ruma-common", "serde_json", "sha2 0.10.9", @@ -7353,7 +7353,7 @@ dependencies = [ "http 1.4.0", "httparse", "log", - "rand 0.8.5", + "rand 0.8.6", "rustls", "rustls-pki-types", "sha1", @@ -7674,7 +7674,7 @@ dependencies = [ "hmac 0.12.1", "matrix-pickle", "prost 0.13.5", - "rand 0.8.5", + "rand 0.8.6", "serde", "serde_bytes", "serde_json", diff --git a/app/src-tauri/Cargo.lock b/app/src-tauri/Cargo.lock index 5521978e3..c0e40ed1a 100644 --- a/app/src-tauri/Cargo.lock +++ b/app/src-tauri/Cargo.lock @@ -27,7 +27,7 @@ dependencies = [ "objc2-web-kit", "openhuman", "parking_lot", - "rand 0.9.2", + "rand 0.9.4", "reqwest 0.12.28", "resvg", "rusqlite", @@ -1917,7 +1917,7 @@ dependencies = [ "hyper", "hyper-util", "pin-project-lite", - "rand 0.8.5", + "rand 0.8.6", "serde", "serde_json", "smallvec", @@ -4603,7 +4603,7 @@ dependencies = [ "postgres", "prometheus", "prost", - "rand 0.9.2", + "rand 0.9.4", "rdev", "regex", "reqwest 0.12.28", @@ -4758,7 +4758,7 @@ dependencies = [ "futures-util", "opentelemetry", "percent-encoding", - "rand 0.9.2", + "rand 0.9.4", "thiserror 2.0.18", ] @@ -4998,7 +4998,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5d5285893bb5eb82e6aaf5d59ee909a06a16737a8970984dd7746ba9283498d6" dependencies = [ "phf_shared 0.10.0", - "rand 0.8.5", + "rand 0.8.6", ] [[package]] @@ -5008,7 +5008,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d" dependencies = [ "phf_shared 0.11.3", - "rand 0.8.5", + "rand 0.8.6", ] [[package]] @@ -5507,7 +5507,7 @@ dependencies = [ "bytes", "getrandom 0.3.4", "lru-slab", - "rand 0.9.2", + "rand 0.9.4", "ring", "rustc-hash", "rustls", @@ -5576,9 +5576,9 @@ dependencies = [ [[package]] name = "rand" -version = "0.8.5" +version = "0.8.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404" +checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a" dependencies = [ "libc", "rand_chacha 0.3.1", @@ -5587,9 +5587,9 @@ dependencies = [ [[package]] name = "rand" -version = "0.9.2" +version = "0.9.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1" +checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea" dependencies = [ "rand_chacha 0.9.0", "rand_core 0.9.5", @@ -6285,7 +6285,7 @@ version = "0.47.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0ac170a5bba8bec6e3339c90432569d89641fa7a3d3e4f44987d24f0762e6adf" dependencies = [ - "rand 0.9.2", + "rand 0.9.4", "sentry-types", "serde", "serde_json", @@ -6333,7 +6333,7 @@ checksum = "56780cb5597d676bf22e6c11d1f062eb4def46390ea3bfb047bcbcf7dfd19bdb" dependencies = [ "debugid", "hex", - "rand 0.9.2", + "rand 0.9.4", "serde", "serde_json", "thiserror 2.0.18", @@ -7230,7 +7230,7 @@ version = "2.3.3" dependencies = [ "log", "notify-rust", - "rand 0.9.2", + "rand 0.9.4", "serde", "serde_json", "serde_repr", @@ -8074,7 +8074,7 @@ dependencies = [ "http", "httparse", "log", - "rand 0.8.5", + "rand 0.8.6", "rustls", "rustls-pki-types", "sha1", @@ -8093,7 +8093,7 @@ dependencies = [ "http", "httparse", "log", - "rand 0.9.2", + "rand 0.9.4", "sha1", "thiserror 2.0.18", ]