Merge pull request #161 from RustSec/RUSTSEC-2019-0021

Assign RUSTSEC-2019-0021 to linea
This commit is contained in:
Tony Arcieri
2019-09-18 11:02:19 -06:00
committed by GitHub

View File

@@ -1,12 +1,8 @@
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2019-0021"
package = "linea"
date = "2019-09-14"
title = "`Matrix::zip_elements` causes double free"
description = """
Affected versions of this crate did not properly implements the `Matrix::zip_elements` method, which causes an double free when the given trait implementation might panic.
@@ -14,12 +10,7 @@ This allows an attacker to corrupt or take control of the memory.
The flaw was corrected by Phosphorus15.
"""
# yet not merged
patched_versions = ["> 0.9.4"]
url = "https://github.com/strake/linea.rs/issues/2"
categories = ["memory-corruption"]
keywords = ["double free"]