Update stderrlog dependency to v0.5.1
Oxipng has an optional dependency on stderrlog, which itself has a dependency on thread_local. Versions of thread_local < 1.1.4 have a vulnerability caused by a data race in Iter and IterMut. Updating to stderrlog v0.5.1 ensures that Oxipng uses a patched version of thread_local. https://rustsec.org/advisories/RUSTSEC-2022-0006.html
This commit is contained in:
parent
17f5cc36ca
commit
703a25efad
2 changed files with 3 additions and 3 deletions
4
Cargo.lock
generated
4
Cargo.lock
generated
|
|
@ -506,9 +506,9 @@ checksum = "a4a3381e03edd24287172047536f20cabde766e2cd3e65e6b00fb3af51c4f38d"
|
|||
|
||||
[[package]]
|
||||
name = "stderrlog"
|
||||
version = "0.5.1"
|
||||
version = "0.5.2"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "45a53e2eff3e94a019afa6265e8ee04cb05b9d33fe9f5078b14e4e391d155a38"
|
||||
checksum = "5b81364c25bf70a0f9beae4ae704d466bf37e704e887ebac89eb9a28d01d491f"
|
||||
dependencies = [
|
||||
"atty",
|
||||
"chrono",
|
||||
|
|
|
|||
|
|
@ -33,7 +33,7 @@ rgb = "0.8.25"
|
|||
indexmap = "1.6.1"
|
||||
libdeflater = { version = "0.8.0", optional = true }
|
||||
log = "0.4.14"
|
||||
stderrlog = { version = "0.5.1", optional = true }
|
||||
stderrlog = { version = "0.5.2", optional = true }
|
||||
crossbeam-channel = "0.5.0"
|
||||
|
||||
[dependencies.filetime]
|
||||
|
|
|
|||
Loading…
Reference in a new issue