webrtc icon indicating copy to clipboard operation
webrtc copied to clipboard

Published 20 hours ago • verified publisher icon webrtc-rs

[DTLS/WebRTC] update dep rustls to v0.20.0

Open rainliu opened this issue 3 years ago • 2 comments

rainliu avatar Oct 01 '21 20:10 rainliu

Trying to use the webrtc-dtls crate and this is currently a blocker. Has any progress been made on this? I made an attempt but I really don't understand the breaking changes in rustls well enough to get it working.

andreyrd avatar Feb 16 '23 19:02 andreyrd

rustls being stuck on 0.19 means webrtc-rs is now vulnerable to https://rustsec.org/advisories/RUSTSEC-2023-0052.

See:

❯ cargo tree -i -p [email protected]
webpki v0.21.4
├── rustls v0.19.1
│   ├── webrtc v0.8.0
│   └── webrtc-dtls v0.7.1
│       └── webrtc v0.8.0 (*)
└── webrtc-dtls v0.7.1 (*)

thomaseizinger avatar Sep 03 '23 23:09 thomaseizinger