diff --git a/crates/rand/RUSTSEC-0000-0000.toml b/crates/rand/RUSTSEC-0000-0000.toml deleted file mode 100644 index c583932f2..000000000 --- a/crates/rand/RUSTSEC-0000-0000.toml +++ /dev/null @@ -1,15 +0,0 @@ -[advisory] -id = "RUSTSEC-0000-0000" -package = "rand" -date = "2019-04-19" -informational = "unsound" -title = "Invalid pointer usage" -description = """ -Affected versions of this crate violated pointer provenance rules, resulting in -undefined behavior. - -The flaw was corrected by Ralf Jung. -""" -patched_versions = [">= 0.7.0"] -unaffected_versions = ["< 0.5.0"] -url = "https://github.com/rust-random/rand/blob/master/CHANGELOG.md#070---2019-06-28" diff --git a/crates/rand_core/RUSTSEC-0000-0000.toml b/crates/rand_core/RUSTSEC-0000-0000.toml index a0168622c..554f93d5c 100644 --- a/crates/rand_core/RUSTSEC-0000-0000.toml +++ b/crates/rand_core/RUSTSEC-0000-0000.toml @@ -3,12 +3,11 @@ id = "RUSTSEC-0000-0000" package = "rand_core" date = "2019-04-19" informational = "unsound" -title = "Unaligned memory access and invalid pointer usage" +title = "Unaligned memory access" description = """ Affected versions of this crate violated alignment when casting byte slices to -integer slices and violated pointer provenance rules, resulting in undefined -behavior. - +integer slices, resulting in undefined behavior. + The flaws were corrected by Ralf Jung and Diggory Hardy. """ patched_versions = [">= 0.4.2"]