Skip to content

Conversation

@michel-slm
Copy link

rand_xoshiro 0.6.0 was released a year ago, switch to it to make it possible to package im in Fedora, which only carries a single version of each crate.

Need to use `rand_xoshiro::rand_core` instead of
`rand_core`.

Signed-off-by: Michel Alexandre Salim <[email protected]>
Signed-off-by: Michel Alexandre Salim <[email protected]>
@NickHu
Copy link

NickHu commented Apr 27, 2022

This, along with the dependency on rand_core:0.5.1, is a security vulnerability: see GHSA-w7j2-35mf-95p7.

@michel-slm Would you mind updating your PR to bump that dependency too?

@bodil bodil closed this in 546e59b Apr 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants