RUSTSEC-2020-0147
(unmaintained)
on 2020-02-11: rulinalg is unmaintained, use nalgebra instead
The rulinalg
crate is no longer maintained, use nalgebra
instead.
This crate has no reviews yet. To add a review, set up your cargo-crev
.
Crates in the crates.io registry are tarball snapshots uploaded by crates' publishers. The registry is not using crates' git repositories. There is absolutely no guarantee that the repository URL declared by the crate belongs to the crate, or that the code in the repository is the code inside the published tarball.
To review the actual code of the crate, it's best to use cargo crev open rulinalg
. Alternatively, you can download the tarball of rulinalg v0.4.2 or view the source online.
The affected version of
rulinalg
has incorrect lifetime boundary definitions forRowMut::raw_slice
andRowMut::raw_slice_mut
. They do not conform with Rust's borrowing rule and allows the user to create multiple mutable references to the same location. This may result in unexpected calculation result and data race if both references are used at the same time.CVE-2020-35879
GHSA-q2gj-9r85-p832