Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.freedesktop.org/gstreamer/gst-plugins-rs.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFrançois Laignel <fengalin@free.fr>2021-12-14 21:52:46 +0300
committerSebastian Dröge <slomo@coaxion.net>2021-12-25 14:25:56 +0300
commit21d41ca244cf17cfd0df6638ccb30960becfce35 (patch)
tree15b3f3bb603d9e03f0f0dabf387d955ef891b8fa /deny.toml
parent6163589ac7f9809903c9d52a3b0591de77e722c8 (diff)
deny.toml: don't ignore RUSTSEC-2021-0124
This advisory was ignored because we couldn't use a version for the tokio fork that reflected that it was not vulnerable. Also remove the tokio fork as an allowed git since we now use our own executor for threadshare.
Diffstat (limited to 'deny.toml')
-rw-r--r--deny.toml9
1 files changed, 0 insertions, 9 deletions
diff --git a/deny.toml b/deny.toml
index 72cc9f06a..cd96015f8 100644
--- a/deny.toml
+++ b/deny.toml
@@ -8,14 +8,6 @@ ignore = [
# Waiting for https://github.com/chronotope/chrono/pull/578
"RUSTSEC-2020-0071",
"RUSTSEC-2020-0159",
- # Temporarily ignore: vulnerability handled as part of
- # https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/602
- # and
- # https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/603
- # but the tokio fork used in threadshare is based on an earlier version
- # which prevents cargo-deny from assuming that the vulnerability is fixed.
- # See https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/604
- "RUSTSEC-2021-0124",
]
[licenses]
@@ -170,7 +162,6 @@ allow-git = [
"https://gitlab.freedesktop.org/gstreamer/gstreamer-rs",
"https://github.com/gtk-rs/gtk-rs-core",
"https://github.com/gtk-rs/gtk4-rs",
- "https://github.com/fengalin/tokio",
"https://github.com/rust-av/ffv1",
"https://github.com/rust-av/flavors",
]