deps: update openssl for RUSTSEC-2024-0357

pelikan-io / pelikan

Pelikan is a framework for building local or distributed caches. It comes with a highly extensible architecture, best-in-class performance, and superb operational ergonomics. You can use it to replace most of Memcached or a subset of Redis features.

https://pelikan.io

Apache License 2.0

232 stars 19 forks source link

deps: update openssl for RUSTSEC-2024-0357 #132

Closed mihirn closed 3 months ago

swlynch99 commented 3 months ago

Looks like you've got two issues that you need to address:

You've updated the lockfile into a state where it needs some additional updates. Running cargo build and then committing the changes it makes to the lockfile should fix this.
Due to the update to rust 1.80 it looks like we've also hit https://github.com/rust-lang/rust/issues/125319. You'll need to update the time crate to the latest patch release to fix this.

mihirn commented 3 months ago

Ugh, thanks. time is pulled in from clocksource so I'm guessing the better fix is to fix it upstream rather than having an explicit dependency here?

swlynch99 commented 3 months ago

No. All you need to do is run cargo update --precise time. This is not an issue with clocksource (although clocksource will probably run into a similar issue).

mihirn commented 3 months ago

Ok, that worked, thanks!