v2.21.1 #256
Closed
joseluisq
announced in
Announcements
v2.21.1
#256
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
This new
v2.21.1
release brings several security dependency updates. In particular forserde_derive
andrustls-webpki
dependencies.We encourage users to upgrade as soon as possible.
Fixes
serde_derive
: potential supply chain attack associated with shipping precompiled binaries (silently) using serde_derive without precompiled binary serde-rs/serde#2538rustls-webpki
: potential CPU denial of service in certificate path building GHSA-fh2r-99q2-6mmgThis discussion was created from the release v2.21.1.
Beta Was this translation helpful? Give feedback.
All reactions