-
Notifications
You must be signed in to change notification settings - Fork 21
Open
Description
The error message of CI Deny(advisories):
error[A001]: Potential segfault in the time crate
┌─ /github/workspace/Cargo.lock:193:1
│
1[9](https://github.com/openanolis/dbs-cli/actions/runs/3216745152/jobs/5258994310#step:4:10)3 │ time 0.1.43 registry+https://github.com/rust-lang/crates.io-index
│ ----------------------------------------------------------------- security vulnerability detected
│
= ID: RUSTSEC-2020-0071
= Advisory: https://rustsec.org/advisories/RUSTSEC-2020-0071
= ### Impact
The crate chrono relies on time@0.1.43. Besides, kata-sys-util relies on chrono. Till now, the chrono decided not to update the version of time@0.1.43, which led to a security vulnerability. Fortunately, they will soon remove this crate, namely time@0.1.43. See PR:bump time
Currently, there is no way to resolve the security vulnerability, which requires the skip of the CI Deny(advisories).
Metadata
Metadata
Assignees
Labels
No labels