[GH-ISSUE #963] spin transitive dependency is no longer maintained #577

New issue

Closed

opened 2026-03-15 23:15:33 +03:00 by kerem · 5 comments

kerem commented

2026-03-15 23:15:33 +03:00

Owner

Originally created by @bluejekyll on GitHub (Dec 18, 2019).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/963

This is currently causing cargo audit to fail.

See: https://github.com/briansmith/ring/issues/921

And the advisory: https://rustsec.org/advisories/RUSTSEC-2019-0031

Originally created by @bluejekyll on GitHub (Dec 18, 2019). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/963 This is currently causing `cargo audit` to fail. See: https://github.com/briansmith/ring/issues/921 And the advisory: https://rustsec.org/advisories/RUSTSEC-2019-0031

kerem

2026-03-15 23:15:33 +03:00

closed this issue
added the
trust

cleanup

feature:dns-over-https

feature:dnsssec

feature:dns-over-tls
labels

kerem commented

2026-03-15 23:15:49 +03:00

Author

Owner

@djc commented on GitHub (Oct 17, 2020):

Note that there's a new (semver-incompatible) spin release, from a new maintainer. So that maybe picked up by ring.

@djc commented on GitHub (Oct 17, 2020): Note that there's a new (semver-incompatible) spin release, from a new maintainer. So that maybe picked up by *ring*.

kerem commented

2026-03-15 23:15:54 +03:00

Author

Owner

@bluejekyll commented on GitHub (Oct 17, 2020):

If that’s the case, then we can remove the explicit allow here: https://github.com/bluejekyll/trust-dns/blob/main/Makefile.toml#L271

@bluejekyll commented on GitHub (Oct 17, 2020): If that’s the case, then we can remove the explicit allow here: https://github.com/bluejekyll/trust-dns/blob/main/Makefile.toml#L271

kerem commented

2026-03-15 23:15:59 +03:00

Author

Owner

@djc commented on GitHub (Oct 17, 2020):

@djc commented on GitHub (Oct 17, 2020): See also https://github.com/briansmith/ring/pull/1053, https://github.com/mvdnes/spin-rs/issues/79, https://github.com/RustSec/advisory-db/pull/424.

kerem commented

2026-03-15 23:16:04 +03:00

Author

Owner

@trinity-1686a commented on GitHub (May 30, 2021):

--ignore=RUSTSEC-2019-0031 was removed from Makefile.toml when treating unrelated audit issue in 6cbc7f5886

@trinity-1686a commented on GitHub (May 30, 2021): `--ignore=RUSTSEC-2019-0031` was removed from Makefile.toml when treating unrelated audit issue in 6cbc7f588641816cb82307e5e37947ba3aa2b8c7

kerem commented

2026-03-15 23:16:09 +03:00

Author

Owner

@bluejekyll commented on GitHub (May 31, 2021):

Thanks for following up!

@bluejekyll commented on GitHub (May 31, 2021): Thanks for following up!

kerem referenced this issue

2026-03-16 02:11:06 +03:00

[PR #577] [MERGED] add new ksk for rollover 2018 #1525