SECURITY Signal 95
Security fix for two-year-old issue lands in Rustls 0.23.45
↗
Illustration only Photo by Michael Chacon on Unsplash
Rustls 0.23.45 has been released to fix a security issue that has been present for two years.
This release underscores that memory-safe languages do not eliminate all security bugs. Engineers should treat security advisories for Rust libraries as seriously as those for C libraries, and update promptly.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Rustls 0.23.45 is a security patch release addressing a two-year-old vulnerability.
The library is written in Rust with a focus on memory safety, yet still had a security bug.
The fix is part of a pattern where new implementations can introduce their own security issues.
THE CLUSTER