search

sfackler / rust-native-tls

Apache License 2.0
470 stars 195 forks source link

Vuln Patch: Update `tempfile` to `v3.4.0` #249

Closed kevinpark1217 closed 1 year ago

kevinpark1217 commented 1 year ago

There is a security vulnerability in the dependency of the tempfile which was fixed in v3.4.0 by removing the vulnerable dependency.

Related: https://github.com/Stebalien/tempfile/pull/208

kpark-hrp commented 1 year ago

@sfackler Hey, it would be great if this can be prioritized.

And if you can release a patch version after the merge, that would be awesome.

sfackler commented 1 year ago

This is not a necessary change. Just run cargo update.