Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix cargo audit issue RUSTSEC-2020-0071 #643

Closed
sdlarsen opened this issue Oct 20, 2022 · 1 comment
Closed

Fix cargo audit issue RUSTSEC-2020-0071 #643

sdlarsen opened this issue Oct 20, 2022 · 1 comment
Assignees
@ysaito1001
Labels
bug This issue is a bug. p2 This is a standard priority issue

Comments

@sdlarsen
Copy link

Describe the bug

cargo audit shows:

Version:   0.1.44
Title:     Potential segfault in the time crate
Date:      2020-11-18
ID:        RUSTSEC-2020-0071
URL:       https://rustsec.org/advisories/RUSTSEC-2020-0071
Solution:  Upgrade to >=0.2.23

when using aws-smithy-types-convert-0.49.0

Expected Behavior

No security issues

Current Behavior

Cargo audit shows the issue with the time crate

Reproduction Steps

Run cargo audit

Possible Solution

Use the workaround mentioned in chronotope/chrono#602

Additional Information/Context

No response

Version

aws-smithy-types-convert-0.49.0

Environment details (OS name and version, etc.)

Gentoo Linux 6.0.2, x86_64

Logs

No response
@sdlarsen sdlarsen added bug This issue is a bug. needs-triage This issue or PR still needs to be triaged. labels Oct 20, 2022
@jdisanti jdisanti removed the needs-triage This issue or PR still needs to be triaged. label Oct 20, 2022
@ysaito1001 ysaito1001 self-assigned this Oct 21, 2022
@ysaito1001 ysaito1001 mentioned this issue Oct 28, 2022
Merged
1 task
@jmklix jmklix added p2 This is a standard priority issue pending-release This issue will be fixed by an approved PR that hasn't been released yet. labels Nov 14, 2022
@rcoh rcoh closed this as completed May 24, 2023
@github-actions
Copy link

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.

@rcoh rcoh removed the pending-release This issue will be fixed by an approved PR that hasn't been released yet. label Nov 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ysaito1001 ysaito1001

Labels
bug This issue is a bug. p2 This is a standard priority issue
Projects
AWS Rust SDK Public Roadmap
Archived in project
Milestone
No milestone
Development

No branches or pull requests
5 participants
@jdisanti @rcoh @sdlarsen @jmklix @ysaito1001