From bfc6f36d20a7ab36b6c6ecd99b53ca320bd429fb Mon Sep 17 00:00:00 2001 From: Ossi Herrala Date: Mon, 20 May 2019 01:29:27 +0300 Subject: [PATCH] protobuf 2.6.0 and 1.7.5 released with fix to this issue --- crates/protobuf/RUSTSEC-2019-0003.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/protobuf/RUSTSEC-2019-0003.toml b/crates/protobuf/RUSTSEC-2019-0003.toml index dc52330..2565b59 100644 --- a/crates/protobuf/RUSTSEC-2019-0003.toml +++ b/crates/protobuf/RUSTSEC-2019-0003.toml @@ -12,4 +12,4 @@ vulnerable method on untrusted data. url = "https://github.com/stepancheg/rust-protobuf/issues/411" keywords = ["oom", "panic", "dos"] affected_functions = ["stream::read_raw_bytes_into"] -patched_versions = [] +patched_versions = [">= 1.7.5, >= 2.6.0"]