Skip to content

security(deps): bump openssl → 0.10.81 across all crates (clears OSV debt) - #1

Merged
proffesor-for-testing merged 1 commit into
mainfrom
security/bump-openssl
Jul 2, 2026
Merged

security(deps): bump openssl → 0.10.81 across all crates (clears OSV debt)#1
proffesor-for-testing merged 1 commit into
mainfrom
security/bump-openssl

Conversation

@proffesor-for-testing

Copy link
Copy Markdown
Contributor

Summary

The new org OSV scan flagged 12 advisories (6 high) in ruOS — all from the openssl crate (0.10.77/0.10.78) across ruos-agent, ruos-backup, ruos-sensors, ruos-voice.

  • openssl0.10.81 (+ anyhow → 1.0.103) in all 4 crate lockfiles
  • Lockfile-only; OSV re-scan: 0 remaining

Same systemic openssl-crate lag already fixed in sdks (#47) and v0-appliance (#256). This is the cleanest of the OSV-debt repos (openssl-only).

🤖 Generated with Ruflo & AQE

… debt)

OSV flagged 12 advisories (6 high) in ruOS, all from the openssl crate
(0.10.77/0.10.78) across ruos-agent/backup/sensors/voice. Bump to 0.10.81
(+ anyhow 1.0.103). Lockfile-only. OSV re-scan: 0 remaining.

Same systemic openssl-crate lag fixed in sdks (#47) and v0-appliance (#256).

Co-Authored-By: Ruflo & AQE
@proffesor-for-testing
proffesor-for-testing merged commit b1762a7 into main Jul 2, 2026
4 of 8 checks passed
@proffesor-for-testing
proffesor-for-testing deleted the security/bump-openssl branch July 2, 2026 11:14
@proffesor-for-testing

Copy link
Copy Markdown
Contributor Author

Merged: the red build-amd64/build-arm64 checks are a pre-existing infra failure (mkdir: cannot create directory '/home/ruvultra': Permission denied at Makefile:13) — unrelated to this lockfile-only openssl bump, and failing identically on main. The security fix itself is verified (OSV re-scan: 0 remaining). The Makefile's hardcoded /home/ruvultra path should be fixed separately.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant