You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "jqnatividad (via GitHub)" <gi...@apache.org> on 2023/09/04 22:24:13 UTC
[GitHub] [arrow-rs] jqnatividad opened a new issue, #4774: Replace lexical
jqnatividad opened a new issue, #4774:
URL: https://github.com/apache/arrow-rs/issues/4774
**Describe the bug**
There are recent advisories for lexical, mainly for soundness and being unmaintained.
https://rustsec.org/advisories/RUSTSEC-2023-0055.html
https://github.com/advisories/GHSA-c2hm-mjxv-89r4
**Expected behavior**
lexical replaced with alternative techniques/crates.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow-rs] tustvold commented on issue #4774: Replace lexical
Posted by "tustvold (via GitHub)" <gi...@apache.org>.
tustvold commented on issue #4774:
URL: https://github.com/apache/arrow-rs/issues/4774#issuecomment-1705757343
Marking this help wanted and good first issue as it should be fairly straightforward to make the changes and check for regressions. Marking this as a feature request not a bug as AFAICT we do not use any of the impacted methods.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Replace lexical [arrow-rs]
Posted by "tustvold (via GitHub)" <gi...@apache.org>.
tustvold commented on issue #4774:
URL: https://github.com/apache/arrow-rs/issues/4774#issuecomment-1768074717
`label_issue.py` automatically added labels {'arrow'} from #4785
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow-rs] tustvold commented on issue #4774: Replace lexical
Posted by "tustvold (via GitHub)" <gi...@apache.org>.
tustvold commented on issue #4774:
URL: https://github.com/apache/arrow-rs/issues/4774#issuecomment-1717207934
Re-reading the advisory it appears to be for lexical, not lexical-core? Additionally I'm not seeing any soundness issues reported against lexical-core?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow-rs] tustvold closed issue #4774: Replace lexical
Posted by "tustvold (via GitHub)" <gi...@apache.org>.
tustvold closed issue #4774: Replace lexical
URL: https://github.com/apache/arrow-rs/issues/4774
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow-rs] tustvold commented on issue #4774: Replace lexical
Posted by "tustvold (via GitHub)" <gi...@apache.org>.
tustvold commented on issue #4774:
URL: https://github.com/apache/arrow-rs/issues/4774#issuecomment-1733448532
Given this regresses performance, and the advisory is for lexical not lexical-core, I am closing this for now. Feel free to reopen if I am mistaken
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org