From 7022e53486c05036585327f12de45056853b7c69 Mon Sep 17 00:00:00 2001 From: Luke Parker Date: Fri, 13 Jan 2023 19:56:30 -0500 Subject: [PATCH] Update RUSTSEC-2022-0075.md (#1522) * Update RUSTSEC-2022-0075.md https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wh6w-3828-g9qf specifies 1.0.2 as patched. * Correct 1.0 range * Adjust SemVer lottery Co-authored-by: pinkforest <36498018+pinkforest@users.noreply.github.com> --- crates/wasmtime/RUSTSEC-2022-0075.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/wasmtime/RUSTSEC-2022-0075.md b/crates/wasmtime/RUSTSEC-2022-0075.md index d1124f9..3e8cb42 100644 --- a/crates/wasmtime/RUSTSEC-2022-0075.md +++ b/crates/wasmtime/RUSTSEC-2022-0075.md @@ -10,7 +10,7 @@ keywords = ["use-after-free", "Wasm", "garbage collection"] aliases = ["CVE-2022-39393", "GHSA-wh6w-3828-g9qf"] [versions] -patched = [">= 2.0.2"] +patched = [">= 1.0.2, < 2.0.0", ">= 2.0.2"] ``` # Bug in pooling instance allocator