Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2021-0003, RUSTSEC-2021-0093, and cargo update #580

Merged
merged 3 commits into from
Sep 18, 2021

Conversation

bowlofeggs
Copy link
Contributor

@bowlofeggs bowlofeggs commented Sep 18, 2021

Description

There are three commits in this PR. The first two address RUSTSEC-2021-0003 and RUSTSEC-2021-0093, and the third runs a general cargo update just to get on the latest compatible versions of all dependencies.

Testing

I ran cargo test, cargo check, and cargo run on Fedora 33 (x86_64).

Furthermore, mark which platforms this change was tested on. All platforms directly affected by the change must be tested

  • Windows
  • macOS
  • Linux

Checklist

If relevant, ensure the following have been met:

  • Areas your change affects have been linted using rustfmt (cargo fmt)
  • The change has been tested and doesn't appear to cause any unintended breakage
  • Documentation has been added/updated if needed (README.md, help menu, etc.)
  • The pull request passes the provided CI pipeline
  • There are no merge conflicts

https://rustsec.org/advisories/RUSTSEC-2021-0093

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
https://rustsec.org/advisories/RUSTSEC-2021-0003

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
bowlofeggs added a commit to bowlofeggs/gentoo that referenced this pull request Sep 18, 2021
I have applied patches here to address two vulnerable dependencies[0]
and a failing test[1].

[0] ClementTsang/bottom#580
[1] ClementTsang/bottom#582

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
bowlofeggs added a commit to bowlofeggs/gentoo that referenced this pull request Sep 18, 2021
I have applied patches here to address two vulnerable dependencies[0]
and a failing test[1].

[0] ClementTsang/bottom#580
[1] ClementTsang/bottom#582

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
bowlofeggs added a commit to bowlofeggs/gentoo that referenced this pull request Sep 18, 2021
I have applied patches here to address two vulnerable dependencies[0]
and a failing test[1].

This fixes RUSTSEC-2021-0003[2] and RUSTSEC-2021-0093[3].

[0] ClementTsang/bottom#580
[1] ClementTsang/bottom#582
[2] https://rustsec.org/advisories/RUSTSEC-2021-0003
[3] https://rustsec.org/advisories/RUSTSEC-2021-0093

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
Copy link
Owner

@ClementTsang ClementTsang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Also tested quickly on macOS and Windows, seems fine.

Thanks!

@ClementTsang ClementTsang merged commit 05e6d3e into ClementTsang:master Sep 18, 2021
@bowlofeggs bowlofeggs deleted the RUSTSEC-2021 branch September 18, 2021 19:33
gentoo-bot pushed a commit to gentoo/gentoo that referenced this pull request Sep 18, 2021
I have applied patches here to address two vulnerable dependencies[0]
and a failing test[1].

This fixes RUSTSEC-2021-0003[2] and RUSTSEC-2021-0093[3].

[0] ClementTsang/bottom#580
[1] ClementTsang/bottom#582
[2] https://rustsec.org/advisories/RUSTSEC-2021-0003
[3] https://rustsec.org/advisories/RUSTSEC-2021-0093

Closes: #22328
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants