search

jaemk / self_update

Self updates for rust executables
MIT License
796 stars 69 forks source link

bump zip and quick-xml #83

Closed jqnatividad closed 2 years ago

jqnatividad commented 2 years ago

bumping zip also gets rid of the security advisory below and resolves #82

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 402 security advisories (from C:\Users\joeln\.cargo\advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (138 crate dependencies)
Crate:         time
Version:       0.1.44
Title:         Potential segfault in the time crate
Date:          2020-11-18
ID:            RUSTSEC-2020-0071
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0071
Solution:      Upgrade to >=0.2.23
Dependency tree:
time 0.1.44
└── zip 0.5.13
    └── self_update 0.28.0

error: 1 vulnerability found!
jaemk commented 2 years ago

Nice, thanks!

jaemk commented 2 years ago

released in 0.29.0