about summary refs log tree commit diff
diff options
context:
space:
mode:
authorMark Rousskov <mark.simulacrum@gmail.com>2018-07-03 15:05:35 -0600
committerMark Rousskov <mark.simulacrum@gmail.com>2018-07-07 10:49:26 -0600
commitfdbe5b4fa1de5036a45de474f60d417d1f5e4a05 (patch)
tree3164d0f3404c27934ca8ae261b0c21a52ce10495
parent0d2d842eec9e35dd25bbdd0304ec9e08d320d29d (diff)
Release notes 1.27.1
-rw-r--r--RELEASES.md23
-rw-r--r--src/bootstrap/channel.rs2
2 files changed, 24 insertions, 1 deletions
diff --git a/RELEASES.md b/RELEASES.md
index 64b7cd3e2c4..c2e93a72df0 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -1,3 +1,26 @@
+Version 1.27.1 (2018-07-10)
+===========================
+
+Security Notes
+--------------
+
+- rustdoc would execute plugins in the /tmp/rustdoc/plugins directory
+  when running, which enabled executing code as some other user on a
+  given machine. This release fixes that vulnerability; you can read
+  more about this on the [blog][rustdoc-sec].
+
+  Thank you to Red Hat for responsibily disclosing this vulnerability to us.
+
+Compatibility Notes
+-------------------
+
+- The borrow checker was fixed to avoid an additional potential unsoundness when using
+  match ergonomics: [#51415][51415], [#49534][49534].
+
+[51415]: https://github.com/rust-lang/rust/issues/51415
+[49534]: https://github.com/rust-lang/rust/issues/49534
+[rustdoc-sec]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html
+
 Version 1.27.0 (2018-06-21)
 ==========================
 
diff --git a/src/bootstrap/channel.rs b/src/bootstrap/channel.rs
index 3453933a965..25a709ccbb0 100644
--- a/src/bootstrap/channel.rs
+++ b/src/bootstrap/channel.rs
@@ -24,7 +24,7 @@ use Build;
 use config::Config;
 
 // The version number
-pub const CFG_RELEASE_NUM: &str = "1.27.0";
+pub const CFG_RELEASE_NUM: &str = "1.27.1";
 
 pub struct GitInfo {
     inner: Option<Info>,