Skip to content

Commit

Permalink
Merge pull request #276 from FintanH/update-smallvec
Browse files Browse the repository at this point in the history 
Update smallvec to 1.6
  • Loading branch information
@Amanieu
Amanieu authored Jan 27, 2021
2 parents 0551a0e + 9cef1b0 commit 9f9d450
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion core/Cargo.toml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ edition = "2018"

[dependencies]
cfg-if = "1.0.0"
smallvec = "1.0"
smallvec = "1.6.1"
petgraph = { version = "0.5.1", optional = true }
thread-id = { version = "3.3.0", optional = true }
backtrace = { version = "0.3.49", optional = true }
Expand Down

2 comments on commit 9f9d450

@rohitjoshi
Copy link

@rohitjoshi rohitjoshi commented on 9f9d450 Feb 12, 2021 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Amanieu Any plan to release a new version with this fix?

Crate:         smallvec
Version:       1.4.0
Title:         Buffer overflow in SmallVec::insert_many
Date:          2021-01-08
ID:            RUSTSEC-2021-0003
URL:           https://rustsec.org/advisories/RUSTSEC-2021-0003
Solution:      Upgrade to >=0.6.14, <1.0.0 OR >=1.6.1
Dependency tree:
smallvec 1.4.0
└── parking_lot_core 0.7.2
    └── parking_lot 0.10.2

@Amanieu
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've published parking_lot_core 0.8.3. However you seem to have an old version of parking_lot (0.10) and should upgrade to 0.11.

Please sign in to comment.