Skip to content

Update tempfile to version 3.10.1#423

Merged
Manishearth merged 1 commit into
rust-fuzz:mainfrom
smoelius:update-tempfile
Sep 16, 2025
Merged

Update tempfile to version 3.10.1#423
Manishearth merged 1 commit into
rust-fuzz:mainfrom
smoelius:update-tempfile

Conversation

@smoelius

Copy link
Copy Markdown
Member

This PR updates tempfile in the Cargo.lock file to version 3.10.1.

The main purpose of this PR is to silence cargo audit. Right now, if you run cargo audit on cargo-fuzz, you get the following:

Crate:     remove_dir_all
Version:   0.5.3
Title:     Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)
Date:      2023-02-24
ID:        RUSTSEC-2023-0018
URL:       https://rustsec.org/advisories/RUSTSEC-2023-0018
Solution:  Upgrade to >=0.8.0
Dependency tree:
remove_dir_all 0.5.3
└── tempfile 3.3.0
    └── cargo-fuzz 0.13.1

@Manishearth Manishearth merged commit dd1cfed into rust-fuzz:main Sep 16, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants