You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@fluss.apache.org by "leekeiabstraction (via GitHub)" <gi...@apache.org> on 2026/04/05 21:04:56 UTC
[PR] fix: upgrade testcontainers to 0.27.2 to resolve CVEs [fluss-rust]
leekeiabstraction opened a new pull request, #482:
URL: https://github.com/apache/fluss-rust/pull/482
## Summary
- Upgrades `testcontainers` from 0.25.0 to 0.27.2
- Fixes RUSTSEC-2026-0066 (`astral-tokio-tar` 0.5.6 → 0.6.0: insufficient PAX extension validation)
- Resolves RUSTSEC-2025-0134 (`rustls-pemfile` unmaintained — removed entirely in newer `bollard`)
Both are transitive dependencies only used in integration tests.
closes #480
## Test plan
- [x] `cargo check --workspace --all-targets` passes
- [x] `cargo audit` reports zero vulnerabilities
- [ ] CI passes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: upgrade testcontainers to 0.27.2 to resolve CVEs [fluss-rust]
Posted by "leekeiabstraction (via GitHub)" <gi...@apache.org>.
leekeiabstraction commented on PR #482:
URL: https://github.com/apache/fluss-rust/pull/482#issuecomment-4189531730
@fresh-borzoni 🙏 PTAL
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: upgrade testcontainers to 0.27.2 to resolve CVEs [fluss-rust]
Posted by "leekeiabstraction (via GitHub)" <gi...@apache.org>.
leekeiabstraction merged PR #482:
URL: https://github.com/apache/fluss-rust/pull/482
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: upgrade testcontainers to 0.27.2 to resolve CVEs [fluss-rust]
Posted by "leekeiabstraction (via GitHub)" <gi...@apache.org>.
leekeiabstraction commented on PR #482:
URL: https://github.com/apache/fluss-rust/pull/482#issuecomment-4189538812
Updated description, this doesn't close 480. Only update to resolve known CVEs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org