search

etesync / libetebase

The C client-side library
BSD 3-Clause "New" or "Revised" License
29 stars 9 forks source link

Cargo audit finds security vuln #13

Closed barathrm closed 1 year ago

barathrm commented 1 year ago

Full log attached. Currently, a cargo update is not enough as a work-around since etebase-rs also needs an update.

log.txt

See also https://github.com/etesync/etebase-rs/pull/42

tasn commented 1 year ago

Thanks for the report. I see you had a PR?

barathrm commented 1 year ago

Not for libetebase yet. I was thinking it would make sense to fix the dependencies of etebase-rs first, then run cargo update for libetebase? Not really a cargo pro.

tasn commented 1 year ago

Yeah, 100%. OK. Let me know how I can help.

Skycoder42 commented 1 year ago

So, whats the status on this?

barathrm commented 1 year ago

So, whats the status on this?

Waiting for @tasn to tag a new version of https://github.com/etesync/etebase-rs which contains the fixes of https://github.com/etesync/etebase-rs/pull/42 so this (libetebase) can bump its version of etebase-rs

Guess I should've nagged a bit more :D Thanks for reminding us

tasn commented 1 year ago

Whoops, I thought we already did! Thanks for the bump. :)

tasn commented 1 year ago

Done.