You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@datafusion.apache.org by "miroim (via GitHub)" <gi...@apache.org> on 2025/08/12 12:15:39 UTC
[I] `security_audit` CI check is failing on main [datafusion]
miroim opened a new issue, #17144:
URL: https://github.com/apache/datafusion/issues/17144
### Describe the bug
security audit failure on PR: #17137.
```
Crate: slab
Version: 0.4.10
Title: Out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
Date: 2025-08-12
ID: RUSTSEC-2025-0047
URL: https://rustsec.org/advisories/RUSTSEC-2025-0047
Solution: Upgrade to >=0.4.11
Dependency tree:
slab 0.4.10
├── tower 0.5.2
│ ├── tower-http 0.6.6
│ │ └── reqwest 0.12.22
│ │ └── object_store 0.12.3
│ │ ├── parquet 56.0.0
│ │ │ ├── datafusion-execution 49.0.0
│ │ │ │ ├── datafusion-wasmtest 49.0.0
│ │ │ │ ├── datafusion-spark 49.0.0
│ │ │ │ │ └── datafusion-sqllogictest 49.0.0
│ │ │ │ ├── datafusion-session 49.0.0
│ │ │ │ │ ├── datafusion-datasource-parquet 49.0.0
│ │ │ │ │ │ └── datafusion 49.0.0
│ │ │ │ │ │ ├── ffi_module_loader 0.1.0
│ │ │ │ │ │ ├── ffi_example_table_provider 0.1.0
│ │ │ │ │ │ ├── datafusion-wasmtest 49.0.0
│ │ │ │ │ │ ├── datafusion-substrait 49.0.0
│ │ │ │ │ │ │ └── datafusion-sqllogictest 49.0.0
│ │ │ │ │ │ ├── datafusion-sqllogictest 49.0.0
│ │ │ │ │ │ ├── datafusion-proto 49.0.0
│ │ │ │ │ │ │ ├── datafusion-ffi 49.0.0
│ │ │ │ │ │ │ │ ├── ffi_module_loader 0.1.0
│ │ │ │ │ │ │ │ ├── ffi_module_interface 0.1.0
│ │ │ │ │ │ │ │ │ ├── ffi_module_loader 0.1.0
│ │ │ │ │ │ │ │ │ └── ffi_example_table_provider 0.1.0
│ │ │ │ │ │ │ │ ├── ffi_example_table_provider 0.1.0
│ │ │ │ │ │ │ │ └── datafusion-examples 49.0.0
error: 1 vulnerability found!
warning: 2 allowed warnings found
```
### To Reproduce
cargo audit
### Expected behavior
_No response_
### Additional context
_No response_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [I] `security_audit` CI check is failing on main [datafusion]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb commented on issue #17144:
URL: https://github.com/apache/datafusion/issues/17144#issuecomment-3181035671
Dependabot to the rescue:
- https://github.com/apache/datafusion/pull/17161
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [I] `security_audit` CI check is failing on main [datafusion]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb closed issue #17144: `security_audit` CI check is failing on main
URL: https://github.com/apache/datafusion/issues/17144
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [I] `security_audit` CI check is failing on main [datafusion]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb commented on issue #17144:
URL: https://github.com/apache/datafusion/issues/17144#issuecomment-3181026960
Example failure: https://github.com/apache/datafusion/actions/runs/16910959426/job/47912188340?pr=17137
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org