plotters v0.3.5 has RUSTSEC-2023-0020 from font-kit v0.11.0 · Issue #569 · plotters-rs/plotters · GitHub
Skip to content

plotters v0.3.5 has RUSTSEC-2023-0020 from font-kit v0.11.0 #569

Closed

Description

@jayvdb

Describe the bug
Using the most recent published crate https://crates.io/crates/plotters v0.3.5 results in
https://rustsec.org/advisories/RUSTSEC-2023-0020 , which comes via

const-cstr v0.3.0
     └── yeslogic-fontconfig-sys v3.2.0
         └── font-kit v0.11.0
             └── plotters v0.3.5

To Reproduce
Build a project using published plotters and run cargo deny v0.14.21 (latest) or osv-scanner

Version Information
v0.3.5

This is fixed in the plotters master but hasnt been released yet.

Activity

  1. jayvdb commented on Apr 13, 2024

    @jayvdb
    ContributorAuthor

    This was fixed upstream at yeslogic/fontconfig-rs#37

  2. jayvdb commented on May 17, 2024

    @jayvdb
    ContributorAuthor

    The problem is fixed in plotters master. Now we just need a new release https://github.com/orgs/plotters-rs/discussions/577

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions