Skip to content

chore(deps): update rust crate tar to v0.4.45#154396

Open
xtqqczze wants to merge 1 commit intorust-lang:mainfrom
xtqqczze:deps/tar
Open

chore(deps): update rust crate tar to v0.4.45#154396
xtqqczze wants to merge 1 commit intorust-lang:mainfrom
xtqqczze:deps/tar

Conversation

@xtqqczze
Copy link
Contributor

Fix RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero
Fix RUSTSEC-2026-0067: unpack_in can chmod arbitrary directories by following symlinks

@rustbot
Copy link
Collaborator

rustbot commented Mar 26, 2026

Some changes occurred in src/tools/clippy

cc @rust-lang/clippy

Some changes occurred in src/tools/opt-dist

cc @Kobzol

These commits modify the Cargo.lock file. Unintentional changes to Cargo.lock can be introduced when switching branches and rebasing PRs.

If this was unintentional then you should revert the changes before this PR is merged.
Otherwise, you can ignore this comment.

@rustbot rustbot added S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. T-bootstrap Relevant to the bootstrap subteam: Rust's build system (x.py and src/bootstrap) T-clippy Relevant to the Clippy team. labels Mar 26, 2026
@rustbot
Copy link
Collaborator

rustbot commented Mar 26, 2026

r? @clubby789

rustbot has assigned @clubby789.
They will have a look at your PR within the next two weeks and either review your PR or reassign to another reviewer.

Use r? to explicitly pick a reviewer

Why was this reviewer chosen?

The reviewer was selected based on:

  • Owners of files modified in this PR: bootstrap
  • bootstrap expanded to 6 candidates
  • Random selection from Mark-Simulacrum, clubby789, jieyouxu

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. T-bootstrap Relevant to the bootstrap subteam: Rust's build system (x.py and src/bootstrap) T-clippy Relevant to the Clippy team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants