Security issue Segmentation fault in time dependency

[inf17101]

The podman-api-rs uses the time dependency which has a known vulnerability for segmentation fault.

We use podman-api-rs in our project and the github security scan has shown that there is an issue with the time crate.

The time dependency is used by the sub-dependencies containers-api and the podman-api-stubs in podman-api-rs.

It is recommended to upgrade the time dependency to verion 0.2.23. Could you do this for podman-api-rs and release a new version containing the security fix?

• Crate version: 0.10.0
• OS: all
• Output of running podman version on the command line:

Version:      3.4.4
API Version:  3.4.4
Go Version:   go1.18.1
OS/Arch:      linux/amd64

Here you can find details about the security issue and recommendations:
time-rs issue
CVE ID: CVE-2020-26235
Weaknesses: WeaknessCWE-476

It would be great if you can provide a new updated version of podman-api-rs including the patch for time-rs dependency.