From dbcc83ef292a282842ba30cefd70240fda8b0a55 Mon Sep 17 00:00:00 2001 From: Matthias Beyer Date: Tue, 19 Oct 2021 09:18:47 +0200 Subject: Ignore advisory from "ptree" dependencies Because we cannot release with "git" dependencies in Cargo.toml, we ignore the advisory for the v0.3.0 release. Signed-off-by: Matthias Beyer --- deny.toml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/deny.toml b/deny.toml index 95aaf3c..5a8daf1 100644 --- a/deny.toml +++ b/deny.toml @@ -64,6 +64,13 @@ skip-tree = [ [advisories] ignore = [ + # "linked-hash-map creates uninitialized NonNull pointer" + # + # This occours because our dependency "ptree" has old dependencies itself + # Patches to update its dependencies were submitted, but are not released + # yet. + "RUSTSEC-2020-0026", + # "Potential segfault in the time crate" # # Patches available, but as "time-rs" is not a direct dependency, we cannot -- cgit v1.2.3