Skip to content
This repository has been archived by the owner on Nov 15, 2023. It is now read-only.

update memory-lru:0.1.1 in v0.9.26 #6011

Closed
wants to merge 1 commit into from

Conversation

nbaztec
Copy link
Contributor

@nbaztec nbaztec commented Sep 14, 2022

This resolves a critical vulnerability in lru crate and backports #6012 in release v0.9.26 - which we're currently using

@nbaztec nbaztec changed the title update memory-lru:0.1.1 update memory-lru:0.1.1 in v0.9.26 Sep 14, 2022
@ordian
Copy link
Member

ordian commented Sep 14, 2022

How does lru vulnerability affect polkadot? I don't think polkadot is vulnerable since we're not using iterators over LruCache and hence a backport is not warranted.

@bkchr
Copy link
Member

bkchr commented Sep 14, 2022

Yeah, sounds like we can close this

@ordian ordian closed this Sep 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants