Skip to content

Update Tokio to patched release for I/O safety advisory - #861

Draft
Anand Krishnamoorthi (anakrish) with Copilot wants to merge 2 commits into
mainfrom
copilot/rustsec-2026-0386-fix-asyncfd-io-safety
Draft

Anand Krishnamoorthi (anakrish) with Copilot wants to merge 2 commits into
mainfrom
copilot/rustsec-2026-0386-fix-asyncfd-io-safety

Conversation

Copilot AI commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Tokio 1.53.2 is affected by an I/O safety issue in AsyncFd constructors. The wasm binding lockfile now resolves Tokio 1.53.3.

  • Dependency update: Updated the Tokio version and checksum in bindings/wasm/Cargo.lock.

Co-authored-by: anakrish <35780660+anakrish@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix AsyncFd constructors to ensure I/O safety Update Tokio to patched release for I/O safety advisory Oct 26, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We'd want to update the toml file as well; not just a lock file.

Anand Krishnamoorthi (anakrish) added a commit that referenced this pull request Oct 27, 2026
Include the targeted WASM lockfile fix from #861.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f0b08440-d26f-4824-baae-9cb7d9ab69e6
Anand Krishnamoorthi (anakrish) added a commit that referenced this pull request Oct 27, 2026
* chore: release

* chore: synchronize binding versions and release lockfiles

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f0b08440-d26f-4824-baae-9cb7d9ab69e6

* fix: update Tokio for RUSTSEC-2026-0386

Include the targeted WASM lockfile fix from #861.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f0b08440-d26f-4824-baae-9cb7d9ab69e6

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f0b08440-d26f-4824-baae-9cb7d9ab69e6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

3 participants