Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Vulnerability Issue of [email protected] #5

Open
QiliangFan opened this issue Oct 10, 2022 · 0 comments
Open

Security Vulnerability Issue of [email protected] #5

QiliangFan opened this issue Oct 10, 2022 · 0 comments

Comments

@QiliangFan
Copy link
Contributor

The error message of CI Deny(advisories):

error[A001]: Potential segfault in the time crate
    ┌─ /github/workspace/Cargo.lock:193:1
    │
1[9](https:/openanolis/dbs-cli/actions/runs/3216745152/jobs/5258994310#step:4:10)3 │ time 0.1.43 registry+https:/rust-lang/crates.io-index
    │ ----------------------------------------------------------------- security vulnerability detected
    │
    = ID: RUSTSEC-2020-0071
    = Advisory: https://rustsec.org/advisories/RUSTSEC-2020-0071
    = ### Impact

The crate chrono relies on [email protected]. Besides, kata-sys-util relies on chrono. Till now, the chrono decided not to update the version of [email protected], which led to a security vulnerability. Fortunately, they will soon remove this crate, namely [email protected]. See PR:bump time

Currently, there is no way to resolve the security vulnerability, which requires the skip of the CI Deny(advisories).

wllenyj added a commit to wllenyj/dbs-cli that referenced this issue Oct 10, 2022
See openanolis#5 issue for details.

Signed-off-by: wanglei01 <[email protected]>
wllenyj added a commit that referenced this issue Oct 10, 2022
See #5 issue for details.

Signed-off-by: wanglei01 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant