Project

General

Profile

Actions
Copy link

Task #5928

open

Task #5994: tracking: rust: update dependencies

rust/bendy: update to address RUSTSEC-2020-0036

Added by Jason Ish over 1 year ago. Updated 2 months ago.

Status:
Assigned
Priority:
Low
Assignee:
Jason Ish
Target version:
7.0.8
Effort:
Difficulty:
Label:

Description

Bendy 0.3.3 uses the failure crate which is no longer been maintained and been assigned RUSTSEC-2020-0036. There should be no risk, this is just an advisory that it is unmaintained.

Bendy 0.4 will use a new maintained error crate but is still in beta.

Bendy homepage: https://github.com/P3KI/bendy

Actions
Copy link
 #1

Updated by Victor Julien over 1 year ago

  • Parent task set to #5994
Actions
Copy link
 #2

Updated by Philippe Antoine over 1 year ago

  • Target version changed from 7.0.0-rc2 to 7.0.0
Actions
Copy link
 #3

Updated by Juliana Fajardini Reichow over 1 year ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Jason Ish
Actions
Copy link
 #4

Updated by Jason Ish over 1 year ago

  • Description updated (diff)
Actions
Copy link
 #5

Updated by Victor Julien over 1 year ago

  • Target version changed from 7.0.0 to 7.0.1
Actions
Copy link
 #6

Updated by Jason Ish about 1 year ago

  • Target version changed from 7.0.1 to 7.0.2

Pushing forward to 7.0.2.

Actions
Copy link
 #7

Updated by Jason Ish about 1 year ago

  • Target version changed from 7.0.2 to 7.0.3
Actions
Copy link
 #8

Updated by Philippe Antoine 10 months ago

Bendy 0.4 is still beta2 for one year...

Should we use another crate ?

Actions
Copy link
 #9

Updated by Victor Julien 9 months ago

  • Target version changed from 7.0.3 to 7.0.4
Actions
Copy link
 #10

Updated by Victor Julien 8 months ago

  • Target version changed from 7.0.4 to 7.0.5
Actions
Copy link
 #11

Updated by Jason Ish 7 months ago

  • Target version changed from 7.0.5 to 7.0.6
Actions
Copy link
 #12

Updated by Victor Julien 5 months ago

  • Target version changed from 7.0.6 to 7.0.7
Actions
Copy link
 #13

Updated by Victor Julien 3 months ago

Can we replace the crate by something that is supported in master and then see about a possible backport @Jason Ish?

Actions
Copy link
 #14

Updated by Philippe Antoine 2 months ago

From the dev meeting today : A solution could be to remove usage of bendy, and do our own needed decoding...

Actions
Copy link
 #15

Updated by Jason Ish 2 months ago

Victor Julien wrote in #note-13:

Can we replace the crate by something that is supported in master and then see about a possible backport @Jason Ish?

There is one that appears to more maintained: https://github.com/toby/serde-bencode

Actions
Copy link
 #16

Updated by Jason Ish 2 months ago

  • Target version changed from 7.0.7 to 7.0.8
Actions
Copy link

Also available in: Atom PDF