upgrade tonic
Opened this issue · 3 comments
SWvheerden commented
we need to upgrade tonic 0.6 as it uses webapki 21.0
https://github.com/tari-project/tari/security/dependabot/258
AaronFeickert commented
This appears to be addressed by #6067. Running cargo tree indicates that webpki v0.22.4 is used, which is outside the affected version range.
SWvheerden commented
This is not completely done as we are still behind on the latest releases.
This is partially fixed, and not that high an issue anymore as the webpki security issue is upgraded
AaronFeickert commented
Is this a separate issue? I took this to be specific to the webpki vulnerability.