From ed51438c8bb4421c8bd0e2944589bd3cf51624d9 Mon Sep 17 00:00:00 2001 From: DuckDuckWhale Date: Sun, 26 Nov 2023 01:02:54 -0800 Subject: [PATCH] Dep: fix Tungstenite DoS (RUSTSEC-2023-0065) --- Cargo.lock | 20 +++++++++++++------- Cargo.toml | 2 +- 2 files changed, 14 insertions(+), 8 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 7412d37e..f0d8fb29 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -334,6 +334,12 @@ dependencies = [ "typenum", ] +[[package]] +name = "data-encoding" +version = "2.5.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7e962a19be5cfc3f3bf6dd8f61eb50107f356ad6270fbb3ed41476571db78be5" + [[package]] name = "diff" version = "0.1.13" @@ -1802,9 +1808,9 @@ dependencies = [ [[package]] name = "tokio-tungstenite" -version = "0.18.0" +version = "0.20.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "54319c93411147bced34cb5609a80e0a8e44c5999c93903a81cd866630ec0bfd" +checksum = "212d5dcb2a1ce06d81107c3d0ffa3121fe974b73f068c8282cb1c32328113b6c" dependencies = [ "futures-util", "log", @@ -1876,13 +1882,13 @@ checksum = "3528ecfd12c466c6f163363caf2d02a71161dd5e1cc6ae7b34207ea2d42d81ed" [[package]] name = "tungstenite" -version = "0.18.0" +version = "0.20.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "30ee6ab729cd4cf0fd55218530c4522ed30b7b6081752839b68fcec8d0960788" +checksum = "9e3dac10fd62eaf6617d3a904ae222845979aec67c615d1c842b4002c7666fb9" dependencies = [ - "base64 0.13.1", "byteorder", "bytes", + "data-encoding", "http", "httparse", "log", @@ -1994,9 +2000,9 @@ dependencies = [ [[package]] name = "warp" -version = "0.3.5" +version = "0.3.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ba431ef570df1287f7f8b07e376491ad54f84d26ac473489427231e1718e1f69" +checksum = "c1e92e22e03ff1230c03a1a8ee37d2f89cd489e2e541b7550d6afad96faed169" dependencies = [ "bytes", "futures-channel", diff --git a/Cargo.toml b/Cargo.toml index 7d75e53f..c0790300 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -44,7 +44,7 @@ ignore = { version = "0.4.20", optional = true } # Serve feature futures-util = { version = "0.3.28", optional = true } tokio = { version = "1.28.1", features = ["macros", "rt-multi-thread"], optional = true } -warp = { version = "0.3.5", default-features = false, features = ["websocket"], optional = true } +warp = { version = "0.3.6", default-features = false, features = ["websocket"], optional = true } # Search feature elasticlunr-rs = { version = "3.0.2", optional = true }