RUSTSEC-2022-0012: note that v0.10.0+ is patched (#1220)

As far as I can tell, v0.10.0+ was not affected by this bug [0]. The commit which
fixes the unsoundness landed in main before v0.10.0 was released.

[0]: 9d4342c5ff
This commit is contained in:
Nikhil Benesch
2022-04-05 11:24:42 -04:00
committed by GitHub
parent fdc6858e60
commit ce150ef8cb

View File

@@ -7,7 +7,7 @@ url = "https://github.com/jorgecarleitao/arrow2/issues/880"
categories = ["memory-corruption"]
[versions]
patched = [">= 0.7.1, < 0.8", ">= 0.8.2, < 0.9", ">= 0.9.2, < 0.10"]
patched = [">= 0.7.1, < 0.8", ">= 0.8.2, < 0.9", ">= 0.9.2, < 0.10", ">= 0.10.0"]
```
# Arrow2 allows double free in `safe` code