diff --git a/Cargo.lock b/Cargo.lock index e0ec8c85..dc03a60a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1040,9 +1040,9 @@ checksum = "a3f87b73ce11b1619a3c6332f45341e0047173771e8b8b73f87bfeefb7b56244" [[package]] name = "ring" -version = "0.17.6" +version = "0.17.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "684d5e6e18f669ccebf64a92236bb7db9a34f07be010e3627368182027180866" +checksum = "688c63d65483050968b2a8937f7995f443e27041a0f7700aa59b0822aedebb74" dependencies = [ "cc", "getrandom", diff --git a/Cargo.toml b/Cargo.toml index d4bb1c77..ad43f0f4 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -35,7 +35,7 @@ rayon = { version = "1.8.0", optional = true } # dependencies required if feature "prio2" is enabled aes-gcm = { version = "^0.10", optional = true } -ring = { version = "0.17.6", optional = true } +ring = { version = "0.17.7", optional = true } [dev-dependencies] assert_matches = "1.5.0" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index b028a5e0..4269a893 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -70,10 +70,6 @@ criteria = "safe-to-deploy" version = "0.3.0" criteria = "safe-to-run" -[[exemptions.cc]] -version = "1.0.83" -criteria = "safe-to-deploy" - [[exemptions.cipher]] version = "0.4.3" criteria = "safe-to-deploy" @@ -211,7 +207,7 @@ criteria = "safe-to-deploy" notes = "This is only used when the \"test-util\" feature is enabled." [[exemptions.ring]] -version = "0.17.6" +version = "0.17.7" criteria = "safe-to-deploy" [[exemptions.spin]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index f6670c63..d73d7e55 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -299,6 +299,12 @@ criteria = "safe-to-deploy" version = "3.11.1" notes = "I am the author of this crate." +[[audits.bytecode-alliance.audits.cc]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +version = "1.0.73" +notes = "I am the author of this crate." + [[audits.bytecode-alliance.audits.cfg-if]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -650,6 +656,18 @@ criteria = "safe-to-deploy" delta = "0.10.2 -> 0.10.3" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.cc]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "1.0.73 -> 1.0.78" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.cc]] +who = "Jan-Erik Rediger " +criteria = "safe-to-deploy" +delta = "1.0.78 -> 1.0.83" +aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" + [[audits.mozilla.audits.crypto-common]] who = "Mike Hommey " criteria = "safe-to-deploy"