Update dependencies to use nix >= 0.23 due to vulnerability

rust-embedded / linux-embedded-hal

Implementation of the `embedded-hal` traits for Linux devices

Apache License 2.0

232 stars 40 forks source link

Update dependencies to use nix >= 0.23 due to vulnerability #70

Closed eldruin closed 2 years ago

eldruin commented 2 years ago

See: https://rustsec.org/advisories/RUSTSEC-2021-0119.html

https://github.com/rust-embedded/rust-i2cdev/pull/69
https://github.com/rust-embedded/rust-spidev/pull/37
https://github.com/rust-embedded/gpio-cdev/pull/67
https://github.com/rust-embedded/rust-sysfs-gpio/pull/72
https://github.com/milkey-mouse/openpty/pull/7 (dev-dependency, optional)
TODO: linux-embedded-hal

ryankurte commented 2 years ago

all lgtm, though i can't see that the particular security issue has any impact in our crates.

eldruin commented 2 years ago

Thanks! Indeed it does not seem so. However, anything that depends on it starts getting flagged by cargo-audit. Since it is the first time this comes up, I figured we might as well update.

posborne commented 2 years ago

Thanks for picking this one up and running with it @eldruin