Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chrono has a security issue in 0.4.19 and 0.4.20/0.4.21 break misc compatibility #82

Closed
kayabaNerve opened this issue Aug 13, 2022 · 1 comment
Labels
bug Something isn't working

Comments

@kayabaNerve
Copy link
Member

chronotope/chrono#674 for the original security issue, which pinged for us and still does (though it may not apply).

chronotope/chrono#755 and chronotope/chrono#770 for the .20/.21 issues.

Waiting for .22 would likely be optimal to reduce amount of changes, despite .21 seeming fine if we don't use SGX (we do not). Just a minor tracking issue here.

Labelled substrate yet technically applies to ethers as well. cargo update should resolve all when the time comes.

@kayabaNerve kayabaNerve added bug Something isn't working substrate labels Aug 13, 2022
@kayabaNerve
Copy link
Member Author

It looks like this advisory was actually withdrawn, and I do not mean to draw negative attention to chrono, yet solely keep things as pristine as possible over here. If GH didn't ping everyone all the time, I wouldn't have...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant