Tokio vulnerability bump

kata-containers / kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

Apache License 2.0

5.08k stars 1k forks source link

Tokio vulnerability bump #9860

Closed stevenhorsman closed 1 week ago

stevenhorsman commented 1 week ago

Update tokio dependency in various crates to address the high severity security vulnerability https://rustsec.org/advisories/RUSTSEC-2024-0019

wainersm commented 1 week ago

Hi @stevenhorsman !

k8s-confidential-attestation.bats failed on TDX then I re-triggered the job; don't belive it's related with the bump but...let's give it a 2nd chance.