Merge pull request #230 from azriel91/security/upgrade-claxon

Bumped `claxon` to 0.4.2 to avoid uninitialized memory read.
RustAudio · Jun 8, 2019 · 5f644df · 5f644df
2 parents 92a018b + 94230ab
commit 5f644df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Cargo.toml b/Cargo.toml
@@ -9,7 +9,7 @@ repository = "https://github.com/tomaka/rodio"
 documentation = "http://docs.rs/rodio"
 
 [dependencies]
-claxon = { version = "0.3.0", optional = true }
+claxon = { version = "0.4.2", optional = true }
 cpal = "0.8"
 hound = { version = "3.3.1", optional = true }
 lazy_static = "1.0.0"