Skip to content

Remove indirect dependency on net2 #2327

@dv-ds

Description

@dv-ds

With the following setup in Cargo.toml, there is an indirect dependency on net2, which is deprecated as per: https://rustsec.org/advisories/RUSTSEC-2020-0016

[dependencies]
hyper = "0.13.9"

More information:

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 146 security advisories (from [...]/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (58 crate dependencies)
Crate:         net2
Version:       0.2.35
Warning:       unmaintained
Title:         `net2` crate has been deprecated; use `socket2` instead
Date:          2020-05-01
ID:            RUSTSEC-2020-0016
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0016
Dependency tree: 
net2 0.2.35
├── miow 0.2.1
│   └── mio 0.6.22
│       └── tokio 0.2.22
│           ├── tokio-util 0.3.1
│           │   └── h2 0.2.7
│           │       └── hyper 0.13.9
│           ├── hyper 0.13.9
│           └── h2 0.2.7
└── mio 0.6.22

warning: 1 allowed warning found

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions