Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2020-26235 vulnerability #307

Conversation

josecelano
Copy link
Member

@josecelano josecelano commented Apr 14, 2023

Fix CVE-2020-26235 vulnerability by removing the chrono package feature that was using the time pacakage version with the vulnerability.

By removing the `chrono` package feature that was using the
`time` pacakage version with the vulnerability.
@josecelano josecelano linked an issue Apr 14, 2023 that may be closed by this pull request
@josecelano josecelano added the Security Publicly Connected to Security label Apr 14, 2023
@josecelano josecelano requested review from da2ce7 and mickvandijke and removed request for da2ce7 April 14, 2023 16:31
@codecov
Copy link

codecov bot commented Apr 14, 2023

Codecov Report

Merging #307 (70a9a9e) into develop (93782b0) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop     #307   +/-   ##
========================================
  Coverage    89.24%   89.24%           
========================================
  Files          119      119           
  Lines         9913     9913           
========================================
  Hits          8847     8847           
  Misses        1066     1066           
Flag Coverage Δ
rust 89.24% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@josecelano josecelano merged commit a1c3535 into torrust:develop Apr 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Security Publicly Connected to Security
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

CVE-2020-26235 advisory for indirect time 0.1 dependency
1 participant