Skip to content

chore(deps): update crossbeam-epoch to 0.9.20 - #17427

Open
gkamathe wants to merge 1 commit into
rust-lang:masterfrom
gkamathe:update-crossbeam-epoch
Open

chore(deps): update crossbeam-epoch to 0.9.20#17427
gkamathe wants to merge 1 commit into
rust-lang:masterfrom
gkamathe:update-crossbeam-epoch

Conversation

@gkamathe

@gkamathe gkamathe commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

What does this PR try to resolve?

cargo audit showed a crossbeam-epoch finding [1]

$ cargo audit 
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1239 security advisories (from /root/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (550 crate dependencies)
Crate:     crossbeam-epoch
Version:   0.9.18
Title:     Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Date:      2026-07-06
ID:        RUSTSEC-2026-0204
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0204
Solution:  Upgrade to >=0.9.20

[1] https://rustsec.org/advisories/RUSTSEC-2026-0204

How to test and review this PR?

Ran cargo build and cargo test post the update, both worked fine, no issues found

@rustbot rustbot added the S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. label Sep 2, 2026
@rustbot

rustbot commented Sep 2, 2026

Copy link
Copy Markdown
Collaborator

r? @epage

rustbot has assigned @epage.
They will have a look at your PR within the next two weeks and either review your PR or reassign to another reviewer.

Use r? to explicitly pick a reviewer

Why was this reviewer chosen?

The reviewer was selected based on:

  • Owners of files modified in this PR: @epage, @weihanglo
  • @epage, @weihanglo expanded to epage, weihanglo
  • Random selection from epage, weihanglo

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

S-waiting-on-review Status: Awaiting review from the assignee but also interested parties.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants