Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #31172: Tempfile: 3.3.0 -> 3.4.0

Download Browse

This library is used by cbindgen, which we use in wasmtime-wrapper-lib. Prior tempfile releases depended on remove_dir_all version 0.5.0 which was vulnerable to a TOCTOU. Upgrading it fixes https://rustsec.org/advisories/RUSTSEC-2023-0018.html. Changelog: https://github.com/Stebalien/tempfile/blob/master/NEWS Change-Id: I2c2164629cfab88bf51a2f72c632cc29fbb5cb1a

+4 −21
Thomas Piras (tpiras) 2023-03-20 12:03
Thomas Piras (tpiras) 2023-03-20 12:45
e82dcaed8a898070ab7e879c996b7f9bf205611c
70bfe8b9b743732ff4bdc094127340ae8c7a8368
git #tuleap/stable/e82dcaed8a898070ab7e879c996b7f9bf205611c

Modified Files

Side by side diff
Inline diff
Name
M src/additional-packages/wasmtime-wrapper-lib/Cargo.lock +4 −14 Go to diff View file
M tools/utils/osv-scanner/config.toml +0 −7 Go to diff View file