Repository navigation
·
4 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
[1.62.4] - 2026-10-17
Monthly update.
Security
- Updated
rustlstov0.23.46to address
RUSTSEC-2026-0349, in which the client recorded the
server-selected key exchange group from an unauthenticated ServerHello, allowing a network attacker to downgrade
later connections to the same server name to classical-only key exchange. The impact is loss of post-quantum
confidentiality for affected connections; there is no key compromise or authentication bypass.
Changed
- aws-sdk-s3
v1.146.1 -> v1.152.0 - Updated other dependencies