Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0yanE5LTZ4eDctM2gyOc4AAt8C

`temporary` makes use of uninitialized memory

Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, tempfile is an alternative for this crate.

Permalink: https://github.com/advisories/GHSA-2jq9-6xx7-3h29
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yanE5LTZ4eDctM2gyOc4AAt8C
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 2 years ago
Updated: over 1 year ago

Identifiers: GHSA-2jq9-6xx7-3h29
References:

• https://github.com/stainless-steel/temporary/issues/2
• https://rustsec.org/advisories/RUSTSEC-2018-0022.html
• https://github.com/advisories/GHSA-2jq9-6xx7-3h29

Repository: https://github.com/stainless-steel/temporary
Blast Radius: 0.0

Affected Packages