Skip to content

Commit 143aaca

Browse files
committedMay 13, 2024·
Bump dependencies to address GHSA-q6cp-qfwq-4gcv
This aligns the dependencies to use a single version of rustls (v0.21.12) and tokio-rustls (v0.24.1).
1 parent 856a99c commit 143aaca

File tree

2 files changed

+17
-40
lines changed

2 files changed

+17
-40
lines changed
 

‎enclaver/Cargo.lock

+14-37
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎enclaver/Cargo.toml

+3-3
Original file line numberDiff line numberDiff line change
@@ -25,10 +25,10 @@ regex = "1.6"
2525
tokio = { version = "1.24.1", features = ["full"] }
2626
tokio-pipe = "0.2"
2727
tokio-vsock = { version = "0.4", optional = true }
28-
tokio-rustls = { version = "0.23", features = ["dangerous_configuration"] }
28+
tokio-rustls = { version = "0.24", features = ["dangerous_configuration"] }
2929
tokio-util = { version = "0.7", features = ["codec"] }
3030
tokio-tar = "0.3"
31-
rustls = "0.20"
31+
rustls = "0.21"
3232
rustls-pemfile = "1.0"
3333
log = "0.4"
3434
pretty_env_logger = "0.5"
@@ -75,7 +75,7 @@ console-subscriber = { version = "0.1.10", optional = true }
7575

7676
[dev-dependencies]
7777
assert2 = "0.3"
78-
tls-listener = { version = "0.5", features = ["rustls", "hyper-h1"] }
78+
tls-listener = { version = "0.7", features = ["rustls", "hyper-h1"] }
7979
reqwest = { version = "0.11.8", default-features = false, features = ["rustls-tls-webpki-roots"] }
8080
aws-credential-types = { version = "0.56.1", features = ["hardcoded-credentials"] }
8181

0 commit comments

Comments
 (0)
Please sign in to comment.