Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #1465

Merged
merged 1 commit into from
Aug 21, 2021
Merged

Update dependencies #1465

merged 1 commit into from
Aug 21, 2021

Conversation

jyn514
Copy link
Member

@jyn514 jyn514 commented Aug 16, 2021

This commit can be replicated with the following commands:

$ cargo update -p tar
    Updating tar v0.4.26 -> v0.4.37
$ cargo update -p tokio
    Updating tokio v1.4.0 -> v1.10.0
$ cargo update -p hyper:0.14.4 --precise 0.14.11
    Updating h2 v0.3.1 -> v0.3.3
    Updating httparse v1.3.4 -> v1.4.1
    Updating httpdate v0.3.2 -> v1.0.1
    Updating hyper v0.14.4 -> v0.14.11
    Removing pin-project v1.0.5
    Removing pin-project-internal v1.0.5
      Adding socket2 v0.4.1
    Updating winapi v0.3.8 -> v0.3.9

Fixes #1461. Helps with #1460 and #1459, but unfortunately doesn't fix them since there's no version of iron that uses hyper 0.14.

This commit can be replicated with the following commands:

```
$ cargo update -p tar
    Updating tar v0.4.26 -> v0.4.37
$ cargo update -p tokio
    Updating tokio v1.4.0 -> v1.10.0
$ cargo update -p hyper:0.14.4 --precise 0.14.11
    Updating h2 v0.3.1 -> v0.3.3
    Updating httparse v1.3.4 -> v1.4.1
    Updating httpdate v0.3.2 -> v1.0.1
    Updating hyper v0.14.4 -> v0.14.11
    Removing pin-project v1.0.5
    Removing pin-project-internal v1.0.5
      Adding socket2 v0.4.1
    Updating winapi v0.3.8 -> v0.3.9
```
@jyn514 jyn514 merged commit 3bfdc65 into rust-lang:master Aug 21, 2021
@jyn514 jyn514 deleted the dependencies branch August 21, 2021 19:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

RUSTSEC-2021-0080: Links in archive can create arbitrary directories
1 participant