apache / apache/opendal-reqsign
RUSTSEC-2023-0071: Please replace rsa by another crate
Open
- Dominant language
- Rust
- Stars
- 169
- Forks
- 75
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 16
Description
https://rustsec.org/advisories/RUSTSEC-2023-0071.html
it is blocking reqsign to ship in the next Debian release. See:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057096
Contributor guide
Research direction
Start with the RUSTSEC-2023-0071 advisory and the linked Debian bug report to understand the required change and release blocker. The issue does not name files, tests, or a replacement crate; done would require selecting a suitable alternative to rsa and resolving the Debian release concern.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100