Skip to content

Rust 1.27.1

Compare
Choose a tag to compare
@rustbot rustbot released this 10 Sep 05:53
· 195906 commits to master since this release

Security Notes

  • rustdoc would execute plugins in the /tmp/rustdoc/plugins directory when running, which enabled executing code as some other user on a given machine. This release fixes that vulnerability; you can read more about this on the blog. The associated CVE is CVE-2018-1000622.

    Thank you to Red Hat for responsibly disclosing this vulnerability to us.

Compatibility Notes

  • The borrow checker was fixed to avoid an additional potential unsoundness when using match ergonomics: #51415, #49534.