From 99bf1f1051c7a7aedc1af2736dda4d7b69f3fc16 Mon Sep 17 00:00:00 2001 From: Svyatoslav Nikolsky Date: Mon, 16 Jan 2023 10:38:07 +0300 Subject: [PATCH 1/2] ignore RUSTSEC-2022-0076 --- deny.toml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deny.toml b/deny.toml index 179470f790..264a37bd98 100644 --- a/deny.toml +++ b/deny.toml @@ -57,6 +57,8 @@ ignore = [ "RUSTSEC-2022-0061", # atty (origin: Substrate, clap) "RUSTSEC-2021-0145", + # wasmtime (origin: Substrate) + "RUSTSEC-2022-0076", ] # Threshold for security vulnerabilities, any vulnerability with a CVSS score # lower than the range specified will be ignored. Note that ignored advisories From fc4a79a6332145ce9abdb852e1decaf7a62897ab Mon Sep 17 00:00:00 2001 From: Svyatoslav Nikolsky Date: Mon, 16 Jan 2023 10:38:23 +0300 Subject: [PATCH 2/2] cargo update -p ed25519 --- Cargo.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 0ef2861817..737e2dc3f0 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2654,9 +2654,9 @@ dependencies = [ [[package]] name = "ed25519" -version = "1.5.2" +version = "1.5.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1e9c280362032ea4203659fc489832d0204ef09f247a0506f170dafcac08c369" +checksum = "91cff35c70bba8a626e3185d8cd48cc11b5437e1a5bcd15b9b5fa3c64b6dfee7" dependencies = [ "signature", ] @@ -13154,7 +13154,7 @@ version = "1.6.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "97fee6b57c6a41524a810daee9286c02d7752c4253064d0b05472833a438f675" dependencies = [ - "cfg-if 1.0.0", + "cfg-if 0.1.10", "digest 0.10.6", "rand 0.8.5", "static_assertions",