File tree Expand file tree Collapse file tree 1 file changed +0
-25
lines changed
Expand file tree Collapse file tree 1 file changed +0
-25
lines changed Original file line number Diff line number Diff line change @@ -14,31 +14,6 @@ targets = [
1414
1515[advisories ]
1616yanked = " deny"
17- ignore = [
18- # https://rustsec.org/advisories/RUSTSEC-2023-0071
19- # "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel
20- #
21- # No patch is yet available, however work is underway to migrate to a fully constant-time implementation
22- # So we need to accept this, as of SDP 25.3 we are not using the rsa crate to create certificates used in production
23- # setups.
24- #
25- # https://github.com/RustCrypto/RSA/issues/19 is the tracking issue
26- " RUSTSEC-2023-0071" ,
27-
28- # https://rustsec.org/advisories/RUSTSEC-2024-0436
29- # The "paste" crate is no longer maintained because the owner states that the implementation is
30- # finished. There are at least two (forked) alternatives which state to be maintained. They'd
31- # need to be vetted before a potential switch. Additionally, they'd need to be in a maintained
32- # state for a couple of years to provide any benefit over using "paste".
33- #
34- # This crate is only used in a single place in the xtask package inside the declarative
35- # "write_crd" macro. The impact of vulnerabilities, if any, should be fairly minimal.
36- #
37- # See thread: https://users.rust-lang.org/t/paste-alternatives/126787/4
38- #
39- # This can only be removed again if we decide to use a different crate.
40- " RUSTSEC-2024-0436" ,
41- ]
4217
4318[bans ]
4419multiple-versions = " allow"
You can’t perform that action at this time.
0 commit comments