chore: Update message of rsa advisory allowlist

sbernauer · sbernauer · commit 0eb99bab18f7 · 2026-04-13T15:01:51.000+02:00
diff --git a/template/deny.toml b/template/deny.toml
@@ -18,9 +18,9 @@ ignore = [
     # https://rustsec.org/advisories/RUSTSEC-2023-0071
     # "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel
     #
-    # No patch is yet available, however work is underway to migrate to a fully constant-time implementation
-    # So we need to accept this, as of SDP 25.3 we are not using the rsa crate to create certificates used in production
-    # setups.
+    # No patch is yet available, however work is underway to migrate to a fully constant-time implementation.
+    # So we need to accept this, as of SDP 26.3 we are "only" using the crate to create private +
+    # public key pairs used by webhooks, such as conversion or mutating webhooks.
     #
     # https://github.com/RustCrypto/RSA/issues/19 is the tracking issue
     "RUSTSEC-2023-0071",

Original file line number	Diff line number	Diff line change
`@@ -18,9 +18,9 @@ ignore = [`
`18`	`18`	`# https://rustsec.org/advisories/RUSTSEC-2023-0071`
`19`	`19`	`# "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel`
`20`	`20`	`#`
`21`		`- # No patch is yet available, however work is underway to migrate to a fully constant-time implementation`
`22`		`- # So we need to accept this, as of SDP 25.3 we are not using the rsa crate to create certificates used in production`
`23`		`- # setups.`
	`21`	`+ # No patch is yet available, however work is underway to migrate to a fully constant-time implementation.`
	`22`	`+ # So we need to accept this, as of SDP 26.3 we are "only" using the crate to create private +`
	`23`	`+ # public key pairs used by webhooks, such as conversion or mutating webhooks.`
`24`	`24`	`#`
`25`	`25`	`# https://github.com/RustCrypto/RSA/issues/19 is the tracking issue`
`26`	`26`	`"RUSTSEC-2023-0071",`