Skip to content
This repository has been archived by the owner on Jun 2, 2024. It is now read-only.

bump bzip2 to 0.4.4 to fix RUSTSEC-2023-0004 / CVE-2023-22895 #392

Closed
wants to merge 1 commit into from
Closed

bump bzip2 to 0.4.4 to fix RUSTSEC-2023-0004 / CVE-2023-22895 #392

wants to merge 1 commit into from

Commits on Aug 29, 2023

  1. bump bzip2 to 0.4.4 to fix RUSTSEC-2023-0004 / CVE-2023-22895 

    This vulnerability is also known as GHSA-96jv-r488-c2rj.
Versions of the bzip2 crate before 0.4.4 contain a Denial of
Service vulnerability that could cause the compression and / or
decompression to run into an infinite loop. For more details see
<https://rustsec.org/advisories/RUSTSEC-2023-0004.html> or
<alexcrichton/bzip2-rs#86>.
    @striezel
    striezel committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    0cb6006 View commit details
    Browse the repository at this point in the history