You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are still many packages that use rand 0.8. Leaf crates that depend on such packages are unable to address RUSTSEC-2026-0097 until their dependencies upgrade to a newer version of rand, which is likely to take a long time, or the fix is backported to 0.8. This PR does the latter.
Details
A request for a backport to 0.8 was raised in #1770 .
I work on Sequoia PGP. In Sequoia, we are currently stuck on an old version of Hickory as the latest version of Hickory dropped support for OpenSSL. We are currently looking for a solution to Hickory, but until then we have to live with Hickory and its dependencies, which include a dependency on rand 0.8.
Summary
This PR backports #1764 to version 0.8.5 of
rand.Motivation
There are still many packages that use
rand0.8. Leaf crates that depend on such packages are unable to address RUSTSEC-2026-0097 until their dependencies upgrade to a newer version ofrand, which is likely to take a long time, or the fix is backported to 0.8. This PR does the latter.Details
A request for a backport to 0.8 was raised in #1770 .
I work on Sequoia PGP. In Sequoia, we are currently stuck on an old version of Hickory as the latest version of Hickory dropped support for OpenSSL. We are currently looking for a solution to Hickory, but until then we have to live with Hickory and its dependencies, which include a dependency on
rand0.8.