@thomas_zahner@mastodon.social
2026-04-27 07:06 UTC
@decathorpe@mastodon.social Hmm I still see them as high severity, but not sure how easy it is to exploit them in the real world.
As far as I understand many of the vulnerabilities are caused by FFI and incorrect pointer logic, after all the library is just bindings for OpenSSL. rustls in contrast is a full Rust implementation reducing the need for unsafe code and raw pointers, which reduces the probability of such bugs greatly.
Replies (1)
-
@decathorpe@mastodon.social 2026-04-29 12:16
@thomas_zahner@mastodon.social by "downgraded from high to medium" I meant that the original screenshot you included from the GitHub UI shows them as "high" but now that same page lists them as "medium": https://github.com/rust-openssl/rust-openssl/security