github diesel-rs/diesel v0.11.4

latest releases: v2.1.6, v2.1.5, v2.1.4...
7 years ago

This release addresses a memory safety issue in our interaction with libmysqlclient. There was an undocumented assumption made by that library which we were not taking into consideration, resulting in a use-after-free bug. This was resulting in a segmentation fault on some systems.

While this issue is quite serious, we are not issuing a CVE or a security advisory. The bug resulted in 4 bytes being written to a handful of values. It could not be exploited to cause a security issue.

Don't miss a new diesel release

NewReleases is sending notifications on new releases.