Skip to content

Conversation

@tnull
Copy link
Collaborator

@tnull tnull commented Apr 23, 2024

Closes #283.

RUSTSEC-2024-0336 pertains older versions of rustls that were used by our dev depedency electrum-client in v0.15.1.

As we're blocked from upgrading until LDK supports rust-bitcoin 0.31, and we don't use TLS in tests anyways, we just disable the default features for now. We will have to re-enable them once we actually use Electrum syncing though.

RUSTSEC-2024-0336 pertains older versions of `rustls` that were used by
our dev depedency `electrum-client` in v0.15.1.

As we're blocked from upgrading until LDK supports `rust-bitcoin` 0.31,
and we don't use TLS in tests anyways, we just disable the default
features for now. We will have to re-enable them once we actually use
Electrum syncing though.
@tnull tnull added this to the 0.3 milestone Apr 23, 2024
@tnull
Copy link
Collaborator Author

tnull commented Apr 24, 2024

Unfortunately this doesn't work as our tests require electrum_client::Client which is only exposed with default features enabled (cf. bitcoindevkit/rust-electrum-client#91).

@tnull tnull closed this Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2024-0336: rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input

1 participant