RUSTSEC-2021-0073: Conversion from prost_types::Timestamp to SystemTime can cause an overflow and panic

[github-actions]

Conversion from prost_types::Timestamp to SystemTime can cause an overflow and panic

Details
Package	prost-types
Version	0.7.0
URL	tokio-rs/prost#438
Date	2021-07-08
Patched versions	>=0.8.0

Affected versions of this crate contained a bug in which untrusted input could cause an overflow and panic when converting a Timestamp to SystemTime.

It is recommended to upgrade to prost-types v0.8 and switch the usage of From<Timestamp> for SystemTime to TryFrom<Timestamp> for SystemTime.

See #438 for more information.

See advisory page for additional details.

[rajivshah3]

prost-types v0.7.0
└── prost-build v0.7.0
    [build-dependencies]
    └── libp2p-core v0.28.3
        ├── libp2p v0.37.1
        │   └── bee-network v0.1.0
        │       └── bee-protocol v0.1.0
        │           └── bee-rest-api v0.1.0
        │               └── iota-client v0.5.0-alpha.3 (https://github.com/iotaledger/iota.rs?rev=57c5a33d83be4b8286a54156e9f0d2ac4345e9b9#57c5a33d)
        │                   └── iota-wallet v0.2.0 (/Users/rajiv/wallet.rs)
        └── libp2p-swarm v0.29.0
            └── libp2p v0.37.1 (*)

[jyhi]

f67d498 fixed this by removing the dependency to prost-types; closing.