Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bump zip and quick-xml #83

Merged
merged 1 commit into from
Mar 22, 2022
Merged

Conversation

jqnatividad
Copy link
Contributor

bumping zip also gets rid of the security advisory below and resolves #82

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 402 security advisories (from C:\Users\joeln\.cargo\advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (138 crate dependencies)
Crate:         time
Version:       0.1.44
Title:         Potential segfault in the time crate
Date:          2020-11-18
ID:            RUSTSEC-2020-0071
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0071
Solution:      Upgrade to >=0.2.23
Dependency tree:
time 0.1.44
└── zip 0.5.13
    └── self_update 0.28.0

error: 1 vulnerability found!

bumping zip also gets rid of the security advisory below and resolves jaemk#82

```
$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 402 security advisories (from C:\Users\joeln\.cargo\advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (138 crate dependencies)
Crate:         time
Version:       0.1.44
Title:         Potential segfault in the time crate
Date:          2020-11-18
ID:            RUSTSEC-2020-0071
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0071
Solution:      Upgrade to >=0.2.23
Dependency tree:
time 0.1.44
└── zip 0.5.13
    └── self_update 0.28.0

error: 1 vulnerability found!
```
@jaemk
Copy link
Owner

jaemk commented Mar 22, 2022

Nice, thanks!

@jaemk jaemk merged commit 15d518c into jaemk:master Mar 22, 2022
@jaemk
Copy link
Owner

jaemk commented Mar 22, 2022

released in 0.29.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

archive-zip feature is causing a security advisory
2 participants