Assigned RUSTSEC-2020-0136 to toolshed, RUSTSEC-2021-0015 to calamine, RUSTSEC-2020-0137 to lever, RUSTSEC-2020-0138 to lexer

This commit is contained in:
Shnatsel
2021-01-30 18:22:48 +00:00
committed by GitHub
parent c005d5b38a
commit c86c580d8c
5 changed files with 6 additions and 6 deletions

View File

@@ -1,3 +1,3 @@
This file causes merge conflicts if two ID assignment jobs run concurrently. This file causes merge conflicts if two ID assignment jobs run concurrently.
This prevents duplicate ID assignment due to a race between those jobs. This prevents duplicate ID assignment due to a race between those jobs.
de1acbaba29cc19b4f73514fc9a4a35cf8123dba04b1ef9f6e657d8bb4aba9bf - 0843772da74b2bdd501aec16ad17ac2ce903efeea1bfea1833387c3ca5201b68 -

View File

@@ -1,6 +1,6 @@
```toml ```toml
[advisory] [advisory]
id = "RUSTSEC-0000-0000" id = "RUSTSEC-2021-0015"
package = "calamine" package = "calamine"
date = "2021-01-06" date = "2021-01-06"
url = "https://github.com/tafia/calamine/issues/199" url = "https://github.com/tafia/calamine/issues/199"

View File

@@ -1,6 +1,6 @@
```toml ```toml
[advisory] [advisory]
id = "RUSTSEC-0000-0000" id = "RUSTSEC-2020-0137"
package = "lever" package = "lever"
date = "2020-11-10" date = "2020-11-10"
url = "https://github.com/vertexclique/lever/issues/15" url = "https://github.com/vertexclique/lever/issues/15"

View File

@@ -1,6 +1,6 @@
```toml ```toml
[advisory] [advisory]
id = "RUSTSEC-0000-0000" id = "RUSTSEC-2020-0138"
package = "lexer" package = "lexer"
date = "2020-11-10" date = "2020-11-10"
url = "https://gitlab.com/nathanfaucett/rs-lexer/-/issues/2" url = "https://gitlab.com/nathanfaucett/rs-lexer/-/issues/2"
@@ -18,4 +18,4 @@ Since matching on the public enum `ReaderResult<T, E>` provides access to `&T` &
allowing data race to a non-Sync type `T` or `E`. allowing data race to a non-Sync type `T` or `E`.
This can result in a memory corruption when multiple threads concurrently access `&T` or `&E`. This can result in a memory corruption when multiple threads concurrently access `&T` or `&E`.
Suggested fix for the bug is change the trait bounds imposed on `T` & `E` to be `T: Sync, E: Sync`. Suggested fix for the bug is change the trait bounds imposed on `T` & `E` to be `T: Sync, E: Sync`.

View File

@@ -1,6 +1,6 @@
```toml ```toml
[advisory] [advisory]
id = "RUSTSEC-0000-0000" id = "RUSTSEC-2020-0136"
package = "toolshed" package = "toolshed"
date = "2020-11-15" date = "2020-11-15"
url = "https://github.com/ratel-rust/toolshed/issues/12" url = "https://github.com/ratel-rust/toolshed/issues/12"