-
Notifications
You must be signed in to change notification settings - Fork 95
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Replace atty
dependency in slog-term
due to RUSTSEC-2021-0145
#319
Comments
Hi! I fixed this in PR slog-rs/term#45 This doesn't look particularly important, so I'm not going to rush an emergency hotfix. I will release it in the net batch of updates for This will probably come sometime in early December. I have one more week of classes and then finals. |
Looks great, thanks @Techcable! Looks like tests are failing due to:
As far as timeliness, December should be fine, but I will say that projects are having to allowlist this RUSTSEC in cargo-deny/cargo-audit rules until it's fixed. No big deal though, I have a tracking ticket internally to clean up the deny rules once this lands. Our project is not actually vulnerable due to this, it's just making |
I added a comment to that PR explaining the test failures. |
If MSRV is ever raised to 1.70, this dependency can also be dropped in favour for std::io::IsTerminal |
The title says it all, but there is an advisory for
atty
which is unmaintained, and this dependency likely needs to be replaced with something else. Advisory is here: https://rustsec.org/advisories/RUSTSEC-2021-0145.htmlThanks!
The text was updated successfully, but these errors were encountered: