From 6f3502cf6d2dda7bfa0c4f81c97b67f41aedadbf Mon Sep 17 00:00:00 2001 From: Tony Arcieri Date: Thu, 4 Aug 2022 10:20:07 -0600 Subject: [PATCH] RUSTSEC-2020-0159 (chrono): add patched version (#1306) The 0.4.20 release of `chrono` includes a pure-Rust replacement for `localtime_r` which eliminates this issue. --- crates/chrono/RUSTSEC-2020-0159.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/chrono/RUSTSEC-2020-0159.md b/crates/chrono/RUSTSEC-2020-0159.md index 7ef2787..4e14e71 100644 --- a/crates/chrono/RUSTSEC-2020-0159.md +++ b/crates/chrono/RUSTSEC-2020-0159.md @@ -11,7 +11,7 @@ withdrawn = "2022-05-12" # see rustsec/advisory-db#1190 yanked = true [versions] -patched = [] +patched = [">=0.4.20"] ``` # Potential segfault in `localtime_r` invocations