Skip to content
This repository was archived by the owner on Nov 15, 2023. It is now read-only.

Conversation

@nbaztec
Copy link
Contributor

@nbaztec nbaztec commented Sep 14, 2022

This resolves a critical vulnerability in lru crate and backports #6012 in release v0.9.26 - which we're currently using

@nbaztec nbaztec changed the title update memory-lru:0.1.1 update memory-lru:0.1.1 in v0.9.26 Sep 14, 2022
@ordian
Copy link

ordian commented Sep 14, 2022

How does lru vulnerability affect polkadot? I don't think polkadot is vulnerable since we're not using iterators over LruCache and hence a backport is not warranted.

@bkchr
Copy link
Member

bkchr commented Sep 14, 2022

Yeah, sounds like we can close this

@ordian ordian closed this Sep 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants