tocsin

CVE-2020-36465

2 advisories.

crates.io/generic-array CVE-2020-36465: high 7.5

Use after free in generic-array

Action: Upgrade generic-array to 0.9.1 or later.

cargo update -p generic-array --precise 0.13.3
cargo update -p generic-array --precise 0.12.4
cargo update -p generic-array --precise 0.11.2
cargo update -p generic-array --precise 0.10.1
cargo update -p generic-array --precise 0.9.1

Affected

introducedfixedlast affected
0.13.00.13.3-
0.12.00.12.4-
0.11.00.11.2-
0.10.00.10.1-
0.8.00.9.1-

Fixed versions

0.13.30.12.40.11.20.10.10.9.1

Sources

CVE-2020-36465 · published · modified · JSON

crates.io/generic-array CVE-2020-36465: high 7.5

arr! macro erases lifetimes

Action: Upgrade generic-array to 0.8.4 or later.

cargo update -p generic-array --precise 0.8.4
cargo update -p generic-array --precise 0.9.1
cargo update -p generic-array --precise 0.10.1
cargo update -p generic-array --precise 0.11.2
cargo update -p generic-array --precise 0.12.4
cargo update -p generic-array --precise 0.13.3

Affected

introducedfixedlast affected
0.8.00.8.4-
0.9.00.9.1-
0.10.00.10.1-
0.11.00.11.2-
0.12.00.12.4-
0.13.00.13.3-

Fixed versions

0.8.40.9.10.10.10.11.20.12.40.13.3

Sources

CVE-2020-36465 · published · modified · JSON