OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
ca8a60b7be929f9e549ae280b341a6a91657eee7
advisory-db/crates/abi_stable/RUSTSEC-2020-0105.md
Yechan Bae b724f12a5b Update CVE numbers (#777) 
* Update CVE numbers

* Fix RUSTSEC-2020-0093

* Add another alias for async-h1 crate
2021-02-25 20:00:25 -05:00

629 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0105"
package = "abi_stable"
aliases = ["CVE-2020-36212", "CVE-2020-36213"]
date = "2020-12-21"
url = "https://github.com/rodrimati1992/abi_stable_crates/issues/44"
categories = ["memory-corruption"]

[versions]
patched = [">= 0.9.1"]

Update unsound DrainFilter and RString::retain

Affected versions of this crate contained code from the Rust standard library that contained soundness bugs rust-lang/rust#60977 (double drop) & rust-lang/rust#78498 (create invalid utf-8 string).

The flaw was corrected in v0.9.1 by making a similar fix to the one made in the Rust standard library.