Skip to content

rustls-ffi 0.15.2#277735

Merged
BrewTestBot merged 2 commits intomainfrom
bump-rustls-ffi-0.15.2
Apr 15, 2026
Merged

rustls-ffi 0.15.2#277735
BrewTestBot merged 2 commits intomainfrom
bump-rustls-ffi-0.15.2

Conversation

@BrewTestBot
Copy link
Copy Markdown
Contributor

Created by brew bump


Created with brew bump-formula-pr.

Details

release notes
This is a minor release with two security fixes. It also updates rustls to [0.23.38](https://github.com/rustls/rustls/releases/tag/v%2F0.23.38).

Security

This update addresses RUSTSEC-2026-0098 and RUSTSEC-2026-0099; two security issues affecting name constraint checking with the webpki certificate verifiers. Both issues are reachable only after signature verification and require misissuance to exploit.

These low-impact vulnerabilities only affect users of the rustls_web_pki_[server|client]_cert_verifier_builder() APIs.

Added

  • rustls_client_config_builder_set_check_selected_alpn()
    • Allows configuring a to-be-built client config to allow skipping a check that the server's selected ALPN was in the list offered by the client. This defaults to true, matching the behavior before the option to skip the check was available.

What's Changed

Full Changelog: rustls/rustls-ffi@v0.15.1...v0.15.2

View the full release notes at https://github.com/rustls/rustls-ffi/releases/tag/v0.15.2.


@github-actions github-actions Bot added rust Rust use is a significant feature of the PR or issue bump-formula-pr PR was created using `brew bump-formula-pr` labels Apr 15, 2026
@github-actions
Copy link
Copy Markdown
Contributor

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.

@github-actions github-actions Bot added the CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. label Apr 15, 2026
@BrewTestBot BrewTestBot enabled auto-merge April 15, 2026 16:22
@BrewTestBot BrewTestBot added this pull request to the merge queue Apr 15, 2026
Merged via the queue into main with commit 0753061 Apr 15, 2026
22 checks passed
@BrewTestBot BrewTestBot deleted the bump-rustls-ffi-0.15.2 branch April 15, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bump-formula-pr PR was created using `brew bump-formula-pr` CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. rust Rust use is a significant feature of the PR or issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants