Bump ouroboros from 0.9.5 to 0.15.5 in /src/rust

[dependabot]

Bumps ouroboros from 0.9.5 to 0.15.5.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[guardrails]

⚠️ We detected 56 security issues in this pull request:

Mode: paranoid | Total findings: 56 | Considered vulnerability: 56

Insecure Use of Dangerous Function (4)

Docs	Details
💡	Title: Buffer overflow, Severity: Critical cryptography/src/_cffi_src/openssl/src/osrandom_engine.c Line 532 in 3bede62 strcpy((char *)p, name);
💡	Title: Buffer overflow, Severity: Critical cryptography/src/_cffi_src/openssl/src/osrandom_engine.c Line 334 in 3bede62 char dest[1];
💡	Title: Buffer overflow, Severity: Critical cryptography/src/_cffi_src/openssl/src/osrandom_engine.c Line 210 in 3bede62 n = (int)read(fd, buffer, (size_t)size);
💡	Title: Buffer overflow, Severity: Critical cryptography/src/_cffi_src/openssl/src/osrandom_engine.c Line 522 in 3bede62 len = strlen(name);

More info on how to fix Insecure Use of Dangerous Function in C/C++.

---

Insecure Access Control (1)

Docs	Details
💡	Title: Use of dangerous functions, Severity: Critical cryptography/src/_cffi_src/openssl/src/osrandom_engine.c Line 106 in 3bede62 int fd = open(path, open_flags);

More info on how to fix Insecure Access Control in C/C++.

---

Vulnerable Libraries (1)

Severity	Details
N/A	pkg:cargo/[email protected]@0.4.19 (t) - no patch available

More info on how to fix Vulnerable Libraries in Rust.

---

Hard-Coded Secrets (50)

Docs	Details
💡	Title: Twilio API Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/DH/dhkey_rfc5114_2.txt Line 4 in 3bede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
💡	Title: Twilio API Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/DSA/FIPS_186-2/KeyPair.rsp Line 21 in 3bede62 X = AC5862F9B6CD0B2E68B8784199A9883A94C10079
💡	Title: Twilio API Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/DH/RFC5114.txt Line 21 in 3bede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
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/DH/dh_key_256.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/testrsa.pem Line 1 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/withdompar_private.pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Ed448/ed448-pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/ecdsa-nopsw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/ed25519-nopsw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/dsa.3072.pem Line 1 in 3bede62 -----BEGIN DSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/X25519/x25519-pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/testrsa-encrypted.pem Line 1 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/rsa-psw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/dsa-nopsw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PEM_Serialization/ec_private_key.pem Line 1 in 3bede62 -----BEGIN EC PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/key1.pem Line 1 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/ecc_private_with_rfc5915_ext.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/nodompar_private.pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/ec_oid_not_in_reg_private_2.pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Ed25519/ed25519-pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/X448/x448-pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/dsa.1024.pem Line 1 in 3bede62 -----BEGIN DSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PEM_Serialization/ec_private_key_encrypted.pem Line 1 in 3bede62 -----BEGIN EC PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/ed25519-psw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PEM_Serialization/dsa_4096.pem Line 1 in 3bede62 -----BEGIN DSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PEM_Serialization/rsa_private_key.pem Line 1 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/x509/custom/ca/rsa_key.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/bad-oid-dsa-key.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PEM_Serialization/dsa_private_key.pem Line 1 in 3bede62 -----BEGIN DSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/key2.pem Line 1 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/unenc-dsa-pkcs8.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/rsa-nopsw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/x509/custom/ca/ca_key.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/ec_private_key.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/private.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/dsa-psw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/OpenSSH/ecdsa-psw.key Line 1 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/DH/dhkey_rfc5114_2.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/Traditional_OpenSSL_Serialization/dsa.2048.pem Line 1 in 3bede62 -----BEGIN DSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/DH/dhkey.pem Line 1 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/serialization.rst Line 13 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/src/cryptography/hazmat/primitives/serialization/ssh.py Line 53 in 3bede62 _SK_START = b"-----BEGIN OPENSSH PRIVATE KEY-----"
💡	Title: Private Key, Severity: Medium cryptography/vectors/cryptography_vectors/asymmetric/PKCS8/unenc-rsa-pkcs8.pem Line 63 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/rsa.rst Line 114 in 3bede62 b'-----BEGIN RSA PRIVATE KEY-----'
💡	Title: Private Key, Severity: Medium cryptography/docs/x509/ocsp.rst Line 83 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/serialization.rst Line 421 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/serialization.rst Line 599 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/serialization.rst Line 761 in 3bede62 -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/serialization.rst Line 773 in 3bede62 -----BEGIN PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium cryptography/docs/hazmat/primitives/asymmetric/serialization.rst Line 795 in 3bede62 -----BEGIN OPENSSH PRIVATE KEY-----

More info on how to fix Hard-Coded Secrets in General.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.