mirror/lnd
1
0 Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

mod: Upgraded xz library to FIX the CVE-2021-29482

Browse Source 
Included a replace directive to avoid using an high severity CVE
https://github.com/advisories/GHSA-25xm-hr59-7c27

This library is indirectly referenced and cannot be upgraded directly.

The https://github.com/fergusstrange/embedded-postgres/pull/42 was
merged to fix the CVE issue.
This commit is contained in:
naveen committed 2021-09-29 15:16:26 +00:00
1 parent 3385d38414
commit 04f57c6f57
5 files changed
+54 -12
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/release-notes/release-notes-0.14.0.md
+2
View File
@@ -285,6 +285,8 @@ you.
* [Replace reference to JWT library with CVE](https://github.com/lightningnetwork/lnd/pull/5737)
* [Replace reference to XZ library with CVE](https://github.com/lightningnetwork/lnd/pull/5789)
* [Fixed restore backup file test flake with bitcoind](https://github.com/lightningnetwork/lnd/pull/5637).
* [Timing fix in AMP itest](https://github.com/lightningnetwork/lnd/pull/5725).