diff options
| author | bors <bors@rust-lang.org> | 2018-07-07 22:47:23 +0000 |
|---|---|---|
| committer | bors <bors@rust-lang.org> | 2018-07-07 22:47:23 +0000 |
| commit | 5f2b325f64ed6caa7179f3e04913db437656ec7e (patch) | |
| tree | 3164d0f3404c27934ca8ae261b0c21a52ce10495 /RELEASES.md | |
| parent | 3eda71b00ad48d7bf4eef4c443e7f611fd061418 (diff) | |
| parent | fdbe5b4fa1de5036a45de474f60d417d1f5e4a05 (diff) | |
| download | rust-1.27.1.tar.gz rust-1.27.1.zip | |
Auto merge of #52134 - Mark-Simulacrum:stable-next, r=Mark-Simulacrum 1.27.1
Stable release 1.27.1 r? @alexcrichton
Diffstat (limited to 'RELEASES.md')
| -rw-r--r-- | RELEASES.md | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/RELEASES.md b/RELEASES.md index 64b7cd3e2c4..c2e93a72df0 100644 --- a/RELEASES.md +++ b/RELEASES.md @@ -1,3 +1,26 @@ +Version 1.27.1 (2018-07-10) +=========================== + +Security Notes +-------------- + +- rustdoc would execute plugins in the /tmp/rustdoc/plugins directory + when running, which enabled executing code as some other user on a + given machine. This release fixes that vulnerability; you can read + more about this on the [blog][rustdoc-sec]. + + Thank you to Red Hat for responsibily disclosing this vulnerability to us. + +Compatibility Notes +------------------- + +- The borrow checker was fixed to avoid an additional potential unsoundness when using + match ergonomics: [#51415][51415], [#49534][49534]. + +[51415]: https://github.com/rust-lang/rust/issues/51415 +[49534]: https://github.com/rust-lang/rust/issues/49534 +[rustdoc-sec]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html + Version 1.27.0 (2018-06-21) ========================== |