From 091e3ff3d25aaac13adc4042c006bc8ef52a5064 Mon Sep 17 00:00:00 2001 From: "Sebastian.Bor" Date: Mon, 24 Jan 2022 17:09:29 +0000 Subject: [PATCH 1/2] fix: temp ingnore thread_local 1.1.3 security warning --- ci/do-audit.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ci/do-audit.sh b/ci/do-audit.sh index 9c2bd39cb3b..18d0290173d 100755 --- a/ci/do-audit.sh +++ b/ci/do-audit.sh @@ -26,5 +26,13 @@ cargo_audit_ignores=( # Blcoked on honggfuzz, fixed in https://github.com/rust-fuzz/honggfuzz-rs/pull/55 # need to update honggfuzz dependency whenever the next version is released --ignore RUSTSEC-2020-0077 + + # Data race in `Iter` and `IterMut` in thread_local 1.1.3 upstream dependecies + # + # Date: 2022-01-23 + # https://rustsec.org/advisories/RUSTSEC-2022-0006 + # Solution: Upgrade to >=1.1.4 + # Ingored untill fixed in solana sdk + --ignore RUSTSEC-2022-0006 ) cargo +"$rust_stable" audit "${cargo_audit_ignores[@]}" From cc6c00436a9f9e08bf256594a80f96218ae8c6bc Mon Sep 17 00:00:00 2001 From: "Sebastian.Bor" Date: Mon, 24 Jan 2022 17:11:34 +0000 Subject: [PATCH 2/2] chore: fix typo --- ci/do-audit.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/do-audit.sh b/ci/do-audit.sh index 18d0290173d..b88ddb055ec 100755 --- a/ci/do-audit.sh +++ b/ci/do-audit.sh @@ -27,7 +27,7 @@ cargo_audit_ignores=( # need to update honggfuzz dependency whenever the next version is released --ignore RUSTSEC-2020-0077 - # Data race in `Iter` and `IterMut` in thread_local 1.1.3 upstream dependecies + # Data race in `Iter` and `IterMut` in thread_local 1.1.3 upstream dependencies # # Date: 2022-01-23 # https://rustsec.org/advisories/RUSTSEC-2022-0006